last executing test programs: 20m9.474906234s ago: executing program 0 (id=1978): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d"}, 0x60) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) 20m5.620555397s ago: executing program 0 (id=1995): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000000)) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 20m0.507504643s ago: executing program 0 (id=2018): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x25b6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 19m57.811440083s ago: executing program 0 (id=2025): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 19m55.420976413s ago: executing program 0 (id=2038): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 19m46.234887872s ago: executing program 0 (id=2072): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x3}, 0x50) write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 19m31.0129736s ago: executing program 32 (id=2072): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x3}, 0x50) write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 18m26.432740864s ago: executing program 1 (id=2298): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020600) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) 18m25.650916888s ago: executing program 2 (id=2299): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) syz_open_dev$dri(0x0, 0x7, 0x200) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 18m23.288807638s ago: executing program 1 (id=2303): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000000)) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 18m22.754043495s ago: executing program 1 (id=2309): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1c, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x21}, 0x28) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x1, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x70}}}}}]}}]}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000"], 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004680)=@newtaction={0x594, 0x30, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{0x248, 0x1, [@m_tunnel_key={0x144, 0x1b, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x2, 0x409, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffa}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xc1, 0x6, "28551743b54617d7e28d3bc986b2322d356df61d6242dc53b8ad9cb56473b3d8347036b730f986b8222710caeb5a0f50b80b3d30f1ce4e63fa7dd6cbe635cb50f06fe4d01f074d2daca791975f1f870c263c14897fb17abfd047f72493bbdf1803bb7c3fd0a6af3b58e1fd5342c84962b2fd6788129c46418c552db4acc4e33b46b4439f57bfff35850f5904bb5653168eb53cf005f8b6ef68bbcbacdcb3a117e6ca9336bc240077c0fb932f27356f549d8a58e268121de9c4fb403f80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x5, 0x5, 0x8, 0x1}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x54, 0x7, 0x4, 0xf8000000, 0x4}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9260}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x7b, 0xd13b8f40be2faaed, 0x8000, 0x3}, 0x3}}]}, {0x45, 0x6, "bc2d3ac6b266695060105ac6874e27439ef616afea0188cf8295ac720e0ce1ebc74ab8e9af827328c3c1cf1b91e1b6c6ba0caaf96e9811be84d03beaebe700dfdf"}, {0xc}, {0xc}}}]}, {0x334, 0x1, [@m_nat={0x1ec, 0x17, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffc, 0x2, 0x64, 0xa}, @private=0xa010102, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200007, 0xfffffff8, 0x10000000, 0xda, 0xffffffff}, @multicast2, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0xffffffffdffffff6, 0x200, 0x101}, @remote, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7f, 0x1, 0x3, 0x481}, @multicast2, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x8, 0x0, 0x1}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x800, 0x8, 0x3, 0x8}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6800000, 0x8001, 0x0, 0x5, 0xc2}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0x7f000000}}]}, {0xa9, 0x6, "891ccc04c6d2382e12165e8ca668ca8ded75d57ac06584d762b7d0aba129349e64111a1ea26f1bd9d6438e867e5e71dc4cf06dd0646fbef9516a081b43bf777e9a70352dc7e0e0712a283ae0538a925aee16099923abfb25135226879dbf0703356747bdcabf89d79eb5d1915b0000000000000000000000001283495bec6362975af24a60cd6ed566e109709ef227b26467bc5ac14e36ef69f30ae512d241e561e3c76769"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x144, 0x4, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x2, 0x1, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1b}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1fd, 0x10000000, 0xfffffff7, 0x2}}]}, {0xbd, 0x6, "79d6c103b418a86ea8e0a76eafb884d20715c60fd883d613b1a2c45af652d476f3d2673fe5b6634866a871cbc017febb29df8a1ac71b601e78abecf5e8e5c690c556d53b8af2206b6416f339dbcb64dbdaa2cb5db947786fee839341ae0b365563a6272cc90b1d76a73f5eea3d65e5b59332c64b2e9336180127acf4b13b9e5319565ef0c0b748bce5863630b1778fa716f741107a13b4afef82040eb76825c949c2995322f4e966db09d056c5b897e6926de43bc0b3349a40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x4}]}, 0x594}, 0x1, 0x0, 0x0, 0x8080}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0xffffffffffffffff, 0x1c}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x200, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$isdn(0x22, 0x3, 0x22) 18m22.250846989s ago: executing program 2 (id=2310): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x32, 0x18, {0x9dd}}, @wr_drn={0x6e, 0x20, {0x6, 0x2}}, @wrmsr={0x1e, 0x20, {0x9af, 0xffffffffffff4a16}}, @cpuid={0x14, 0x18, {0x386d, 0x6}}, @code={0xa, 0x54, {"8f4878c1b5e2000000ccf6c9092e660f0119362645d0c80f20c035010000000f22c0440f20c03508000000440f22c0f367470f21c1660f3acf4150002e440f01cb0f08"}}, @cpuid={0x14, 0x18, {0x0, 0x7f}}, @cpuid={0x14, 0x18, {0x9, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0x7}}, @wr_crn={0x46, 0x20, {0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}], 0x154}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x4, 0x0, 0xd9e}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m21.212901414s ago: executing program 1 (id=2312): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 18m20.969346478s ago: executing program 1 (id=2315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 18m20.398241138s ago: executing program 2 (id=2317): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fanotify_init(0x16, 0x0) r3 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x40000010, r4, 0x0) execveat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 18m19.988595952s ago: executing program 1 (id=2320): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() 18m18.543500432s ago: executing program 33 (id=2320): socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() 18m17.174941582s ago: executing program 2 (id=2325): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 18m16.962471405s ago: executing program 2 (id=2326): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) epoll_create(0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) 18m16.20305638s ago: executing program 2 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) 18m15.839133016s ago: executing program 34 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) 12m10.742240106s ago: executing program 5 (id=3106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 12m9.341073299s ago: executing program 5 (id=3110): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9084e9c4, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000080000000080a05000000000000000000020000060900020073797a32000000000900020073797a32000000000900010073797a3000"], 0xca}}, 0x0) 12m7.613410699s ago: executing program 5 (id=3111): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xffffffffffffffff, 0x0) tee(r0, r3, 0x60000000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) 12m6.642808353s ago: executing program 5 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) 12m5.144351347s ago: executing program 5 (id=3114): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x50b) 12m2.462697939s ago: executing program 5 (id=3118): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="1f15c2663936d0145be26d7ea8653335edd2c09ae5d13b36b3b2bc2aa842eff83a79fdd5ee1df58091818dbb6626a40810775e9d28a17419d6bd9352db10ad75b1f266d7981e716ed50c327f3f47b39900b4cbf7c9c986326f64e1ae288183b5f805cb2d8ad8c4a5500ecccf633d269f00c8cdfe3e0f667b511e50e4298f7884adc92b88f6a77285de48a88e0a92f57d1868982854595982fa60f18770cf39291bcf95ef86b88afee986d75ae1aebb530030166ea2a20e1133989ff904bd411675d89d9827261ed3044e5d1f0b114a6a434a92dd433ac0e84d55ff09fe13469fbfe12bb093f01635f55d4943abe6e949539a7dc64167b725e4c1b4cd8fcb52b989174ffb58e85ab2af3d46538d616af5adc3f936c5b86b2a0afec1039716c381200e26603dd9844570ab737cfc65bb147eab3863834ee8f971f1d23fde1d8586681f97b9fc715b9b81211ba0a3638565a6e389c01608080909f0b3a7ca675f52922e19cf40b1ef127bc79b0ea80671e74c326fe22e0115d3f3dff88f7ed2c313648d28c6fc8e218b528b56b1af9d2b4a898abf8f5638aedc49b9ccab69fc1d179f22d0b58093e67cddf2af12c8bc3016217ec8de0c2a191bdee789111014395b73a35000de9a4d44e974067e22773d569be4e0731f9347536dcb7a6ac924958cd9b299c67b09b9e0fb8673c596b53ff6b9714d5a86b833176b9b4c57b907a807e2505c73977a16a6f30fb3f821ed46256832c57df3b42e7cbbcf3de0fc09d6eb78d0e1d0afd002940fa0d4aa1e7e11e01b410d9a6f9dbee760f81329772033b1045649907c80d89e86adbd860a5ce55b9ca9a5fbef774be0b084746640a8ada57a684ac3f6e61d64eb766f5c0dfd9c4c2553c8fea17be7a2c438f2445198feab6149085e002482a655809b5fb523dad38bc22a506871a7f749e6dd32c25d12dd3cef6257aec8a684e87c380cf21d961dcc6a19997f07c655e0bfa1d7944b71281becac52b6d1cf6929abb6ed4f36b33a2340a18f1044159e623a592f0d9bfbea1fc66dd71a9118259b155984fdbea2aef572daed20d58cb441ed0ee395cfde5ac54e60d41210b71c9d42f52e05755aa937f8bfff15a68c493e9208b7b66203bcfd06cbeca3128832cb19ee48f246731a350aad250a70b950e90fa9d2bd641dd1c247f1a18a85d2b444a93bbe10616a864b811c8bf733a6bc603a7b4d515c156e73eba4fee34a2afa1df7d802c8ab9d5b68749f0f7c61112862ad790772d07ebd5a4cb305d826c0584e38b5eea90cac7c5799ad8bade81df39827c0797d3baa42f2227c27c2c40c29196586819547c2b9c0c6b07860b7d1af749c240273526f294be6395a4b6e19411d7cce4ade0533bd5b8bcfda54cca4c248223a35bf124a18c74c079e1d31d06729b9eb08cd39e58574de56c40fc96d62df67c0c2811ad641d1c6285b8107516aa6f0ffd69fc5e600d98d2d6dfe2c2b9603275406423fd0ce4c88f99e9962eb75be45102b2ff3b89fa0de79ea80eb65f5fd4583b86d88d34dcdced1282fc451b4d75cd43f88fd5bd74210a2785abd9d3e4f9101f5c6b8684cd7a8f4b4050dd999cc13339c3a98817da0396997b311c7e6c95ad8d40c9f96162b4a444fe07ef620c83757978584b19afe68e623a2960d215062622c0fddbdb0d2a029290b8587a4a155adcbd5629746eb981d6c9f0da4bcad8dcbc72942ec3c220b89a65f7d1bbd25e4f83100109e957c14e5dad53311de7a10c11fe2dcb1940763e9cffed673f943e382f05999e6d5dbf29d6f0fc529194d07ebae66e0172274d736058cb64d56de1774b3df1738a3acea60a763475c322a48c8932111ee01ec85e0e43ecd955541ba14a33cf67af40eee1709e2ae014eb017741ec62bddd8660eb5947c9911000b57ca81760f36c9bfa7bcf2fdbb7992a1e53f690f66582026a3e4b58812d93a8145c0066a20619f4597a70a5a9157182cd4cae9ff3e547f836b260ca93b4493ffb8a3ca1a7fb9cc21d8704fbf99cfdf2f710915fca25673e2f00a71a9754a51cb8c20738d79640932ef2c215cb142e7df1ca2ff27ead10b318f9700b7ca07c2b4858f9472c79d55b1c11a050870a67d6a9fec6b017fcdf9e1301abd00968b5f172ffe6b2c8f58092eb4ef96b71cca0c20045cff2b03dbd9f8571a5f331bee427ed38980f52899d8e8254f96bc5e65c2f2021ae7054f418489e645ab167c897aaef892a69955ce498cbc6035b0e38fdd777bf0d3b6860e4240168c343bb3152a079c204158acb052b7bcd2c55deafbf068cc194b9c4d51078fe7033df94e262082a0bbdf2ff56731ae5311e2e1b4a8dd62d54b02463befae273e35406d4607155d3cfffaddb8ddf55dfc56a6f80e3042d882711052edcd869af2019f13104ea63c04b19112577a98848468642e46b49ae3cc81e72bf5c63cb126a3312f364b0efa12b9dd97a96871459a274a127eb0d11d8c599b3309dec99ff510fb84ff916eb4c23671efb21acb61c853bc540db8dcc17a5b0e48e9402baa58ddfa1c3fc06b61cecf3162c349c77215c3b96dd8d89bd04a9bb2c3e265bbe372ccae14d81b8ba6ea331bf7a4e4bd986ec01adf275b048a6f1874834ae9d6ad768b5f0b24ddd3c1f96b496c9c5ce935de869cf964cd6331f34a86226fcf2529eec25f7baa40da08dd7ff963d4f0fdf2ef8f6685568150684b34ddf01df753b78e3750b07709e998767887f8c02ffd9d3f4817ef6e94b72cd25bc625bb9143031290d23f090f3c99a204e82089b78c2e56e5fe5b8da2ef8b7c6ec1f86b78a03c683af177088135dfa3d3ec078d950bd35930fec3864e77e2c5fcb91beb28ecdd6ba7d0855612af8ac057741becd5ffa10f44d09453dec0e0bed733144526fcbc6c39fc329f5f8368e2ede988adf2721bd67a3aac5e269f8804cdf61c33cf7b5709167b84749b8c215fdf0d7a6137167dfd78d41eba56862b9256359ac59dc6eeb22cc1b16a87733389db4404db53188a9c0d437bd530fed71df9974c487554404f3ebab7e8a64c37bb743fafbb47b74a79847ebde16c32dc22c48549a45879e4379ba5e30fd12f49faf1cd32bf67830f18c3e8334054816588492f0e070370142a7383cb05989c534d14b372d50d4900d5d7eebc3bf97808b3eea035729046743294de4d81ad2590475b9db75f9d26f34e4b1ba61fe6e30a2ba61927f63cbd4a089a9d44ca9cabb4e2bfd971f9e085e933129fdfb698ea32fbd1a962e97370f2a2ae58e0e2fa1bc59250ea8a8edeaa8125d16742e6394350eac919df4ee9a498bf08a970f76d20b241e1659f85a414167e5329fa3445b8197bfb1217582ad60c8ef8fcd4af290b48610445e8b491fe8e416f80cf6a4749ee8f98232e4407fd70689629823c4191cca64f5b5b960fe86a0409ab928f847796d26e372115772b2a16279957d96c131d103dbc292e62f1e8a5527acd3f135b9f616f74181c9514f99b77cf0c1113157ad1d2b6cb6af0384f9ac66de79868ca8f9dd4362342fa3737c2355398fd15015588ac51752670833603991a35ced11671c5254bbbaeb355b52b9efb92af097e5983b29fda57f4d9fc9220890cd982c97d0fa8e595033de3987a0652a9eef2318d36e3f2321976a2c7d7a10ae583d2859733544955032e1b13bb164870c41c19e723d7d1a6745abcfdc9becb30bf6e4fe5affbfd50c8718280bd4ed9800ce3d07870ef17ffed58cbe5505e8d50b27009c91f95188b0eb14d6bc73ea2202feeb02cdb7920d021b623d4eaa34388a8dbc9969a9d6c8e2b1166f1817f8d1f2e1ca5d675e0e898582bf429a2eb4653ad5f97a67346d881c6f450a4146604e555b247e57aa673506c3520b006dff3a53c0fea3373691ffe41bf31888d557e568ee49f8503dd83f16bf945b1bb41f234052ff2241a0df6f5ce9f54bbd2a97c2906fe1a106292580b2332c36d7813d23be7306f07a3b3c1a6ddc809047015eb8ea575d61691c31bbba34c3db97068c38da267fae47bd61964c360ead45cb6ee8b93a963cdf3d10ba9f22922695ed6bc6756a727448e3dffc8e331a4c497670296cc6a2331a5896df6314d5ab6925d2e8f18f615cb4a1a5200735d4a6e94a93f704ace359c1a0920a76ab932723c2f80895a733e9bf6f4586fbac54fe2dc94133bf5c98e0b78ff3df1323f28e545aa79c265e63521d288f741c32f3882229fbff67db8a7f9aab82e8d13c582911395366e2d9ea1d67d9ed4b75869a5894730612fe6cedc9182cec5b50e2929369138e70dda057b71f33bff986997245bd85498cba0184c0262d7372457bf88f90d4d77bc3c619e7c80d7ab75a0372b5ee54820e34efdab41d9597f2c971617a3cadefd84f7700574eac7e75db6da8300efc300c0a2a4bd8291cc4b3fd44797ee6d76ebbd5da91a28f33f8cba5d47de4d0859696c71d400abf72d1857bdbd2e36e52173dc1996e832da8a1e703315e5d4bce4061d824a844caf3c4c6b761525210f9f8fc343d06569f0645f23d586cced89849f44a5735a6272c79bccc977c319a0a7c4d3aa45af3d0675500562b5c0e5341e2a86a6355fa510e987e5998f1589e1b0f071678682c68fc3443d3e60304acfb6b5665cddcb7c4f9e6ff56e7b3e902c8bb80a0bb064762eef5df0c7751baab61f57152a80dcf151dcd458c45dc0c7461fa8462b38bebf483a58fd18a8639d601232cc6f83471822f32817aac1e8323dd8ed5cf339301faaf858c0ebc89ea5f948348b6997f509526eb95257fb8b3f42e2f705ef94c9d79087c219df28026998ea9ff1bb78ba7dbb4b4aafec20b55760da94509de0dba45eb8d4f51fc6c19f4cd1b01852efad7af6f546c1bc71cf553d7f72a9847c2fff23c9a110cb61e981d8fe2b236da79d593afc0e524cf7ef2bc446ecf5ecccb7e8a071907ffe6e3c5b80a33e913dcd7754c7736c8253bd6b524362ae437cbb01a9c063e9fb42e4fda93221203a409d239dd0af6aaff671d36c79503f0fd99b78c171a80d29bbbe5d1a2440c6add499bbdc766ce09030ef5a615430e1bdfc60a1ae7a491e9787fce0e266051525fed232697877c76cc39b3a77329780606b105ac5b7f7ab81814f4a2f629f07d42bcfcab3ee6fae67ea15ff30dde0560e91e509e944510722e97b566494daad981e3c972baec7ab1ad9672210b60fa7db5359f53a5567c0ebe7187f9a9f81bee34e4821b5fedde56b0c376a8c7d4955a88857639842dd53fc9c3f71be193e40144d41ffc1cc6f087558634f57f7c3bb89cc87d09098c7b66b992b44f8842db25ecaed77af16b8c84e3c2da5217cf47f5728260051dfe5e4a09739922737497f308e0108b1e60dce601068060d49c1e4640ba506140130d23f35c35f5cf11895e58334fdeb890d74d7a07ed7fec2e91370f283d7c252c7724345f0d58e7f7fb688f35b05b298022eb7269c85c29256777dac8199c12cbdb406ccf4e50a2de8fddd3d378daa6326ed1afcbfe077ba1aaa12848f46f9a24b6076dd06bfb54f35f6818e6dd75ac618a9cb80aa429c843c21d8d0dcfbe06507c5c4c23c048222e9dc165f9b72182e7d7e6aadcf4abd728dddb11c7e67ccad569dd034aadc63d5b2d5bf3f7e60b506fb30aaf7287eb3a0104430a9161990498e89e79e5acce74296b5770187058cdce277a38c4f82a5d3197e4f3ea691d668ebaee814fdccf1f22d0cd246d5a0f64725a7a012668fcfa7a9f303adbd002b7a871d9ac1fae9de0c74e5510ba9fe41100f821f3725ee23a2dd0e82b13b1d9d5c198c7345", @ANYRESDEC=r0, @ANYBLOB], 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, 0x0, 0x0) 11m47.334137726s ago: executing program 35 (id=3118): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, 0x0, 0x0) 11m15.219491197s ago: executing program 6 (id=3235): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x32, 0x18, {0x9dd}}, @wr_drn={0x6e, 0x20, {0x6, 0x2}}, @wrmsr={0x1e, 0x20, {0x9af, 0xffffffffffff4a16}}, @cpuid={0x14, 0x18, {0x386d, 0x6}}, @code={0xa, 0x54, {"8f4878c1b5e2000000ccf6c9092e660f0119362645d0c80f20c035010000000f22c0440f20c03508000000440f22c0f367470f21c1660f3acf4150002e440f01cb0f08"}}, @cpuid={0x14, 0x18, {0x0, 0x7f}}, @cpuid={0x14, 0x18, {0x9, 0x2}}, @wr_crn={0x46, 0x20, {0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}], 0x134}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x100000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x100, 0x101], 0xffff1001, 0x120182}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x4, 0x0, 0xd9e}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m14.866107181s ago: executing program 6 (id=3236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) epoll_create(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xa, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xfffc, 0x20c, 0x1, 0x1}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000300)) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, 0x0, r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) 11m14.402543174s ago: executing program 6 (id=3237): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r5, 0x0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r6}, 0x4) 11m13.913065743s ago: executing program 6 (id=3238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed152", 0x173}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a3", 0x1a1}], 0x1}}], 0x3, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m13.626936374s ago: executing program 6 (id=3239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 11m13.273111112s ago: executing program 6 (id=3240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) uname(&(0x7f0000000180)=""/93) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 10m56.965807404s ago: executing program 36 (id=3240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) uname(&(0x7f0000000180)=""/93) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 9m25.001832455s ago: executing program 4 (id=3389): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setregid(0x0, 0x0) 9m24.130939268s ago: executing program 4 (id=3390): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x3, '\b.X'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000b00)={0x20, 0x12, 0x2, "d197"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m20.299627926s ago: executing program 4 (id=3395): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000080)) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x64000004) 9m19.501027371s ago: executing program 4 (id=3398): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, 0x0, 0x48051) epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) 9m18.321873457s ago: executing program 4 (id=3400): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 9m17.991136987s ago: executing program 4 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x10}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 9m2.194594431s ago: executing program 37 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x10}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7m29.302156176s ago: executing program 9 (id=3499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) 7m28.190375434s ago: executing program 9 (id=3502): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast1}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xa2b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x5, 0x10}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 7m23.232148505s ago: executing program 9 (id=3511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) unshare(0x22020600) 7m19.412942548s ago: executing program 9 (id=3516): mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0xfffffffa) socket(0xa, 0x80002, 0x10006) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socket$tipc(0x1e, 0x5, 0x0) mlockall(0x2) 7m18.694755689s ago: executing program 9 (id=3518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000060000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0}, {0x0, 0xfffffffffffffcc3}, {&(0x7f0000000500)="a66a2c41a77e88e10e1e7a632c933460e1e39b64f85853a1b50959a19b9bfa4bdb9edf0cb9334de8d0a0d945bc7e806a3684327bb6bfe184ea7471941f81cb2f69a96add23d247cd50a6b72712637144aa37aae1a70d52a9c6ab2ff527023db9ac14ab59baf126dd680c1bb569e2c7b78c8cfbc524364fa83e04c97cef6a83bcb9c1d473011742c33dd48c66e2edbeae2e6312f8b10d2798a8ab9a86254c"}, {&(0x7f0000000880)="341a15565eabc4dfb99fefb14d88d2815b7cae3a45d4ffd2cd441916f3ad08539d460d97ff8981daaf273d7a2f9da1c4719030a5a07ad8a902861407aeefcf2712811d6807c0025ea6fe7831ea280070c996e3ee01f4984c1c111f135ea25f46efd781d3c61f9d8426eb3757be14bac54cc5ed5c08b9106783b28db504483fdd643c3368ae76ebe7608dc031e34e1ade8fecd53bfacfb4a9a8d0672b2271c7ef4075ad9fcd7caf5f4b9ab10a7c3873f9fb69fb611b59b9d97c47d35480570c44183db824023b61ec602752f432a7c2cada8d", 0x0, 0x3}]}, 0x4}, 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r8, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r5, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) 7m17.265074469s ago: executing program 9 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 7m1.449621731s ago: executing program 38 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 7.918890786s ago: executing program 7 (id=3982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) 6.788158737s ago: executing program 7 (id=3983): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000008", @ANYRES32=r1], 0x38}}, 0x10) 6.737766862s ago: executing program 7 (id=3984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 5.203954152s ago: executing program 3 (id=3987): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9084e9c4, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000080000000080a05000000000000000000020000060900020073797a32000000000900020073797a32000000000900010073797a3000"], 0xca}}, 0x0) 4.095279071s ago: executing program 3 (id=3988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 3.90244912s ago: executing program 7 (id=3989): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1c, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x21}, 0x28) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x1, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x70}}}}}]}}]}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000"], 0x310) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004680)=@newtaction={0x15dc, 0x30, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{0x248, 0x1, [@m_tunnel_key={0x144, 0x1b, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x2, 0x409, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffa}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xc1, 0x6, "28551743b54617d7e28d3bc986b2322d356df61d6242dc53b8ad9cb56473b3d8347036b730f986b8222710caeb5a0f50b80b3d30f1ce4e63fa7dd6cbe635cb50f06fe4d01f074d2daca791975f1f870c263c14897fb17abfd047f72493bbdf1803bb7c3fd0a6af3b58e1fd5342c84962b2fd6788129c46418c552db4acc4e33b46b4439f57bfff35850f5904bb5653168eb53cf005f8b6ef68bbcbacdcb3a117e6ca9336bc240077c0fb932f27356f549d8a58e268121de9c4fb403f80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x5, 0x5, 0x8, 0x1}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x54, 0x7, 0x4, 0xf8000000, 0x4}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9260}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x7b, 0xd13b8f40be2faaed, 0x8000, 0x3}, 0x3}}]}, {0x45, 0x6, "bc2d3ac6b266695060105ac6874e27439ef616afea0188cf8295ac720e0ce1ebc74ab8e9af827328c3c1cf1b91e1b6c6ba0caaf96e9811be84d03beaebe700dfdf"}, {0xc}, {0xc}}}]}, {0x334, 0x1, [@m_nat={0x1ec, 0x17, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffc, 0x2, 0x64, 0xa}, @private=0xa010102, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200007, 0xfffffff8, 0x10000000, 0xda, 0xffffffff}, @multicast2, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0xffffffffdffffff6, 0x200, 0x101}, @remote, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7f, 0x1, 0x3, 0x481}, @multicast2, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x8, 0x0, 0x1}, @empty, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x800, 0x8, 0x3, 0x8}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6800000, 0x8001, 0x0, 0x5, 0xc2}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0x7f000000}}]}, {0xa9, 0x6, "891ccc04c6d2382e12165e8ca668ca8ded75d57ac06584d762b7d0aba129349e64111a1ea26f1bd9d6438e867e5e71dc4cf06dd0646fbef9516a081b43bf777e9a70352dc7e0e0712a283ae0538a925aee16099923abfb25135226879dbf0703356747bdcabf89d79eb5d1915b0000000000000000000000001283495bec6362975af24a60cd6ed566e109709ef227b26467bc5ac14e36ef69f30ae512d241e561e3c76769"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x144, 0x4, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x2, 0x1, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1b}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1fd, 0x10000000, 0xfffffff7, 0x2}}]}, {0xbd, 0x6, "79d6c103b418a86ea8e0a76eafb884d20715c60fd883d613b1a2c45af652d476f3d2673fe5b6634866a871cbc017febb29df8a1ac71b601e78abecf5e8e5c690c556d53b8af2206b6416f339dbcb64dbdaa2cb5db947786fee839341ae0b365563a6272cc90b1d76a73f5eea3d65e5b59332c64b2e9336180127acf4b13b9e5319565ef0c0b748bce5863630b1778fa716f741107a13b4afef82040eb76825c949c2995322f4e966db09d056c5b897e6926de43bc0b3349a40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x104c, 0x1, [@m_xt={0xf5c, 0x1b, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xf00, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xac, 0x12, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}]}, {0x73, 0x6, "d95ebcbd51e2f500649337e49d9572fe04b71eecaaa0b8c0d79eb518d9780861d61c2daf8217cf00e754bec6dea64ae5f3d98439621c3527cc31474d32122276dcd296ca993211e4bba8f82827448b63c409ca99a994622f300c1e2dcd054b254bbe386db816037a9c0b92ab23479c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "001379f8c1cee8f5554b23e046"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x15dc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000340)={0x18, r6, 0xffffffffffffffff, 0x1c}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x200, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$isdn(0x22, 0x3, 0x22) 3.786774186s ago: executing program 3 (id=3990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) 2.669506916s ago: executing program 3 (id=3991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$UHID_INPUT(r3, 0x0, 0x0) 1.776288708s ago: executing program 3 (id=3992): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000080800", @ANYRES32=r1], 0x38}}, 0x10) 1.768930278s ago: executing program 7 (id=3993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000060000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x1}, {0x0}, {0x0}, {&(0x7f0000000500)="a66a2c41a77e88e10e1e7a632c933460e1e39b64f85853a1b50959a19b9bfa4bdb9edf0cb9334de8d0a0d945bc7e806a3684327bb6bfe184ea7471941f81cb2f69a96add23d247cd50a6b72712637144aa37aae1a70d52a9c6ab2ff527023db9ac14ab59baf126dd680c1bb569e2c7b78c8cfbc524364fa83e04c97cef6a83bcb9c1d473011742c33dd48c66e2edbeae2e6312f8b10d2798a8ab9a86254c", 0x9e}, {&(0x7f0000000880)="341a15565eabc4dfb99fefb14d88d2815b7cae3a45d4ffd2cd441916f3ad08539d460d97ff8981daaf273d7a2f9da1c4719030a5a07ad8a902861407aeefcf2712811d6807c0025ea6fe7831ea280070c996e3ee01f4984c1c111f135ea25f46efd781d3c61f9d8426", 0x69, 0x3}]}, 0x6}, 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r8, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r5, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) 1.697653004s ago: executing program 3 (id=3994): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 0s ago: executing program 7 (id=3995): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0xa27) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) tkill(0x0, 0x7) request_key(0x0, 0x0, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x23, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) kernel console output (not intermixed with test programs): 70] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.342215][T12708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.354331][T12708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.369780][T12708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.381160][T12708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.877019][T17712] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1399.886608][T17539] veth0_vlan: entered promiscuous mode [ 1400.031358][T17712] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1400.031377][T17712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.031387][T17712] usb 8-1: Product: syz [ 1400.031395][T17712] usb 8-1: Manufacturer: syz [ 1400.031402][T17712] usb 8-1: SerialNumber: syz [ 1400.128760][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.128778][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.198194][T17539] veth1_vlan: entered promiscuous mode [ 1400.215296][T17520] veth0_vlan: entered promiscuous mode [ 1400.441614][T17520] veth1_vlan: entered promiscuous mode [ 1400.472563][T13786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.472584][T13786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.644907][T17539] veth0_macvtap: entered promiscuous mode [ 1400.736571][T17539] veth1_macvtap: entered promiscuous mode [ 1400.850374][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.917080][T17520] veth0_macvtap: entered promiscuous mode [ 1400.937559][T17520] veth1_macvtap: entered promiscuous mode [ 1400.950090][T17712] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1400.950148][T17712] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1400.950923][T17712] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1401.014454][T17712] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1401.181298][T17539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.194835][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.257326][T17539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.272430][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.335176][T16796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1401.361865][T16796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1401.372533][T16796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1401.387618][T16796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1401.391367][T16796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1401.533213][ T1460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.575642][ T1460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.613720][ T1460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.653280][ T1460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.694203][ T1460] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.719954][ T1460] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.773101][ T1460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.843239][ T1460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.543248][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.543267][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.592256][ T1502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.592276][ T1502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.635831][ T44] usb 8-1: USB disconnect, device number 41 [ 1403.462839][T16796] Bluetooth: hci0: command tx timeout [ 1403.726860][ T1460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.784424][T17597] veth0_vlan: entered promiscuous mode [ 1403.794150][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.794169][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.048128][ T1460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.093025][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.093061][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.268181][T17597] veth1_vlan: entered promiscuous mode [ 1404.292270][T17816] chnl_net:caif_netlink_parms(): no params data found [ 1404.647840][T17837] loop6: detected capacity change from 0 to 7 [ 1404.651324][T17837] Dev loop6: unable to read RDB block 7 [ 1404.651354][T17837] loop6: unable to read partition table [ 1404.651489][T17837] loop6: partition table beyond EOD, truncated [ 1404.651514][T17837] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1405.144613][ T1460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.451974][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3449'. [ 1405.451990][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3449'. [ 1405.452007][T17839] netlink: 'syz.7.3449': attribute type 14 has an invalid length. [ 1405.553334][T16796] Bluetooth: hci0: command tx timeout [ 1408.170862][T16796] Bluetooth: hci0: command tx timeout [ 1408.304493][T17871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3456'. [ 1408.304537][T17871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3456'. [ 1409.412911][ T1460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.465480][T17871] ip6gretap0: entered promiscuous mode [ 1409.467946][T17871] syz_tun: entered promiscuous mode [ 1409.469459][T17871] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1409.469482][T17871] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1409.658342][T17883] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1409.658405][T17883] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1410.192842][T16796] Bluetooth: hci0: command tx timeout [ 1410.287584][T17816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.287675][T17816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.287850][T17816] bridge_slave_0: entered allmulticast mode [ 1410.290143][T17816] bridge_slave_0: entered promiscuous mode [ 1410.297817][T17816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.298237][T17816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.298465][T17816] bridge_slave_1: entered allmulticast mode [ 1410.301292][T17816] bridge_slave_1: entered promiscuous mode [ 1410.596826][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.629230][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.462167][T17597] veth0_macvtap: entered promiscuous mode [ 1413.272604][T17816] team0: Port device team_slave_0 added [ 1413.283166][T17816] team0: Port device team_slave_1 added [ 1413.400421][T17597] veth1_macvtap: entered promiscuous mode [ 1415.771401][ T1460] bridge_slave_1: left allmulticast mode [ 1415.771432][ T1460] bridge_slave_1: left promiscuous mode [ 1415.771696][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.844592][T17922] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1415.844653][T17922] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1415.885647][ T1460] bridge_slave_0: left allmulticast mode [ 1415.885680][ T1460] bridge_slave_0: left promiscuous mode [ 1415.885955][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.394668][ T1460] bridge_slave_1: left allmulticast mode [ 1416.394690][ T1460] bridge_slave_1: left promiscuous mode [ 1416.394865][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.500879][ T1460] bridge_slave_0: left allmulticast mode [ 1416.500900][ T1460] bridge_slave_0: left promiscuous mode [ 1416.501061][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.041652][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.059855][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.066583][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.071236][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.079172][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1418.123083][ T5982] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1418.272850][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 1418.276138][ T5982] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1418.276171][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1418.276187][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1418.278403][ T5982] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1418.278424][ T5982] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1418.278435][ T5982] usb 4-1: Product: syz [ 1418.278442][ T5982] usb 4-1: Manufacturer: syz [ 1418.278450][ T5982] usb 4-1: SerialNumber: syz [ 1418.282403][ T5982] usb 4-1: config 0 descriptor?? [ 1418.347959][ T5982] smsusb:smsusb_probe: board id=2, interface number 0 [ 1418.348852][ T5982] smsusb:smsusb_probe: Device initialized with return code -19 [ 1418.864787][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.865439][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.185647][T16796] Bluetooth: hci2: command tx timeout [ 1421.010043][T17710] usb 4-1: USB disconnect, device number 35 [ 1421.683891][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.984081][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.023349][ T1460] bond0 (unregistering): Released all slaves [ 1422.262862][T16796] Bluetooth: hci2: command tx timeout [ 1422.303546][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.399529][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.457412][ T1460] bond0 (unregistering): Released all slaves [ 1422.524917][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.524934][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.524961][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.579418][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.579436][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.579462][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.229604][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.229672][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.276241][ T5982] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1423.290772][ T5982] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1423.856791][T17816] hsr_slave_0: entered promiscuous mode [ 1423.869616][T17816] hsr_slave_1: entered promiscuous mode [ 1424.725043][T16796] Bluetooth: hci2: command tx timeout [ 1425.734771][T17975] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1425.734789][T17975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1425.734857][T17975] vhci_hcd vhci_hcd.0: Device attached [ 1425.738197][T17993] vhci_hcd: connection closed [ 1425.738554][ T43] vhci_hcd: stop threads [ 1425.738565][ T43] vhci_hcd: release socket [ 1425.738590][ T43] vhci_hcd: disconnect device [ 1427.475694][T16796] Bluetooth: hci2: command tx timeout [ 1428.649548][ T1413] kworker/u8:6 (1413) used greatest stack depth: 13064 bytes left [ 1429.803062][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1429.803078][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1429.803093][T18008] netlink: 'syz.9.3490': attribute type 14 has an invalid length. [ 1430.840907][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3493'. [ 1430.840923][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3493'. [ 1430.840938][T18017] netlink: 'syz.3.3493': attribute type 14 has an invalid length. [ 1439.262820][ T1460] hsr_slave_0: left promiscuous mode [ 1439.505027][ T1460] hsr_slave_1: left promiscuous mode [ 1439.722984][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.723014][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.919718][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.919747][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.868256][ T1460] hsr_slave_0: left promiscuous mode [ 1442.421892][ T1460] hsr_slave_1: left promiscuous mode [ 1442.422827][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.864938][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.639471][ T1460] veth1_macvtap: left promiscuous mode [ 1443.639581][ T1460] veth0_macvtap: left promiscuous mode [ 1443.639851][ T1460] veth1_vlan: left promiscuous mode [ 1443.640038][ T1460] veth0_vlan: left promiscuous mode [ 1449.755312][T18134] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3524'. [ 1453.233480][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'. [ 1453.532909][ T44] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1453.653356][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1453.685137][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.685166][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1453.686660][ T44] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1453.686687][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1453.686707][ T44] usb 4-1: SerialNumber: syz [ 1453.923464][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1453.970688][ T44] usb 4-1: 0:2 : does not exist [ 1453.970771][ T44] usb 4-1: unit 5 not found! [ 1454.034991][ T44] usb 4-1: USB disconnect, device number 36 [ 1454.141757][T18151] udevd[18151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.540762][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1461.559224][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1461.562614][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1461.582089][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1461.582578][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1461.940353][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1461.944966][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1461.986440][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1461.998287][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1462.000434][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1462.001195][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1462.113829][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1464.110259][ T61] Bluetooth: hci5: command tx timeout [ 1464.110859][ T61] Bluetooth: hci6: command tx timeout [ 1466.182833][T16796] Bluetooth: hci6: command tx timeout [ 1466.182866][T16796] Bluetooth: hci5: command tx timeout [ 1467.745509][T17935] chnl_net:caif_netlink_parms(): no params data found [ 1468.408020][T16796] Bluetooth: hci6: command tx timeout [ 1468.413849][ T61] Bluetooth: hci5: command tx timeout [ 1469.953855][T17935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.954079][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.954337][T17935] bridge_slave_0: entered allmulticast mode [ 1469.964201][T17935] bridge_slave_0: entered promiscuous mode [ 1470.174459][T17935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.174604][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.174946][T17935] bridge_slave_1: entered allmulticast mode [ 1470.178698][T17935] bridge_slave_1: entered promiscuous mode [ 1470.434130][ T61] Bluetooth: hci5: command tx timeout [ 1470.434166][ T61] Bluetooth: hci6: command tx timeout [ 1472.216685][T17935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.462416][T17935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.472908][T18189] chnl_net:caif_netlink_parms(): no params data found [ 1472.496676][T18186] chnl_net:caif_netlink_parms(): no params data found [ 1473.893689][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3551'. [ 1473.893703][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3551'. [ 1473.893719][T18250] netlink: 'syz.7.3551': attribute type 14 has an invalid length. [ 1474.999186][T17935] team0: Port device team_slave_0 added [ 1477.044152][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1479.153509][T18261] No control pipe specified [ 1479.269458][T17935] team0: Port device team_slave_1 added [ 1480.358742][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3556'. [ 1480.358758][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3556'. [ 1480.358774][T18271] netlink: 'syz.7.3556': attribute type 14 has an invalid length. [ 1480.450972][T12405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1480.469933][T12405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1480.471371][T12405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1480.489323][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1480.489337][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1480.489353][T18268] netlink: 'syz.3.3555': attribute type 14 has an invalid length. [ 1480.490247][T12405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1480.506593][T12405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.582959][T16796] Bluetooth: hci0: command tx timeout [ 1484.690370][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.690446][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.691169][T12405] Bluetooth: hci0: command tx timeout [ 1485.146031][T18306] Illegal XDP return value 3188812219 on prog (id 211) dev N/A, expect packet loss! [ 1486.793236][T16796] Bluetooth: hci0: command tx timeout [ 1487.182840][ T5982] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1487.332964][ T5982] usb 8-1: Using ep0 maxpacket: 8 [ 1487.335708][ T5982] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1487.335739][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1487.335762][ T5982] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1487.339340][ T5982] usb 8-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1487.339366][ T5982] usb 8-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1487.339385][ T5982] usb 8-1: Product: syz [ 1487.339398][ T5982] usb 8-1: Manufacturer: syz [ 1487.339412][ T5982] usb 8-1: SerialNumber: syz [ 1487.352858][ T5982] usb 8-1: config 0 descriptor?? [ 1487.358922][ T5982] smsusb:smsusb_probe: board id=2, interface number 0 [ 1487.362182][ T5982] smsusb:smsusb_probe: Device initialized with return code -19 [ 1488.025902][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1488.025919][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1488.025935][T18316] netlink: 'syz.3.3565': attribute type 14 has an invalid length. [ 1488.068703][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.069290][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.155627][T18189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.156103][T18189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.156912][T18189] bridge_slave_0: entered allmulticast mode [ 1488.160192][T18189] bridge_slave_0: entered promiscuous mode [ 1488.199928][T18186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.200004][T18186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.200123][T18186] bridge_slave_0: entered allmulticast mode [ 1488.201625][T18186] bridge_slave_0: entered promiscuous mode [ 1488.451829][T18189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.451931][T18189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.452110][T18189] bridge_slave_1: entered allmulticast mode [ 1488.476819][T18189] bridge_slave_1: entered promiscuous mode [ 1488.501552][T18186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.501695][T18186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.501949][T18186] bridge_slave_1: entered allmulticast mode [ 1488.564973][T18186] bridge_slave_1: entered promiscuous mode [ 1489.554733][T16796] Bluetooth: hci0: command tx timeout [ 1490.491306][T17710] usb 8-1: USB disconnect, device number 42 [ 1490.605953][ T1460] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.923675][T18189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.668753][ T1460] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.707401][T18186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.710708][T18189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.759286][T18186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.937172][ T1460] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.976734][T18189] team0: Port device team_slave_0 added [ 1495.002363][T18186] team0: Port device team_slave_0 added [ 1495.021820][T18189] team0: Port device team_slave_1 added [ 1495.039436][T18186] team0: Port device team_slave_1 added [ 1495.356491][ T1460] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.762529][T18189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.762547][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.762603][T18189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.385134][T18186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.385184][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.385243][T18186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.505129][T18189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.505180][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.505784][T18189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.685468][T18186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.685516][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.685583][T18186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.686914][T18189] hsr_slave_0: entered promiscuous mode [ 1502.688350][T18189] hsr_slave_1: entered promiscuous mode [ 1502.704246][T18189] debugfs: 'hsr0' already exists in 'hsr' [ 1502.704275][T18189] Cannot create hsr debugfs directory [ 1502.713564][T18186] hsr_slave_0: entered promiscuous mode [ 1502.716402][T18186] hsr_slave_1: entered promiscuous mode [ 1502.717379][T18186] debugfs: 'hsr0' already exists in 'hsr' [ 1502.717404][T18186] Cannot create hsr debugfs directory [ 1506.191944][T18278] chnl_net:caif_netlink_parms(): no params data found [ 1509.327595][T18278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.327741][T18278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.327999][T18278] bridge_slave_0: entered allmulticast mode [ 1509.356011][T18278] bridge_slave_0: entered promiscuous mode [ 1509.383241][T18278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.383449][T18278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.383695][T18278] bridge_slave_1: entered allmulticast mode [ 1509.392086][T18278] bridge_slave_1: entered promiscuous mode [ 1511.050494][T18278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.039469][T18278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.456686][T18278] team0: Port device team_slave_0 added [ 1516.496181][T18278] team0: Port device team_slave_1 added [ 1516.855398][ T1460] bridge_slave_1: left allmulticast mode [ 1516.855423][ T1460] bridge_slave_1: left promiscuous mode [ 1516.855595][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.928739][ T1460] bridge_slave_0: left allmulticast mode [ 1516.928768][ T1460] bridge_slave_0: left promiscuous mode [ 1516.929025][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.117564][ T1460] bridge_slave_1: left allmulticast mode [ 1517.117594][ T1460] bridge_slave_1: left promiscuous mode [ 1517.117881][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.458054][ T1460] bridge_slave_0: left allmulticast mode [ 1517.458086][ T1460] bridge_slave_0: left promiscuous mode [ 1517.458337][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.563696][ T1460] bridge_slave_1: left allmulticast mode [ 1517.563727][ T1460] bridge_slave_1: left promiscuous mode [ 1517.563982][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.694641][ T1460] bridge_slave_0: left allmulticast mode [ 1517.694669][ T1460] bridge_slave_0: left promiscuous mode [ 1517.694922][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.474616][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.624810][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.326281][ T1460] bond0 (unregistering): Released all slaves [ 1524.183473][T17262] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1524.274059][T12405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1524.302027][T12405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1524.358018][T12405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1524.785151][T17262] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.785176][T17262] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1524.787983][T17262] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1524.788012][T17262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1524.788031][T17262] usb 4-1: SerialNumber: syz [ 1524.828962][T12405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1524.841180][T12405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1525.021175][T16796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1525.025453][T17262] usb 4-1: 0:2 : does not exist [ 1525.025514][T17262] usb 4-1: unit 5 not found! [ 1525.037700][T17262] usb 4-1: USB disconnect, device number 37 [ 1525.057914][T16796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1525.059400][T16796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1525.061977][T16796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1525.064076][T16796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.124821][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3610'. [ 1525.124836][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3610'. [ 1525.124853][T18542] netlink: 'syz.7.3610': attribute type 14 has an invalid length. [ 1525.279808][T18532] udevd[18532]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.917971][T12405] Bluetooth: hci1: command tx timeout [ 1527.154903][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.213377][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.232790][T16796] Bluetooth: hci2: command tx timeout [ 1527.236035][ T1460] bond0 (unregistering): Released all slaves [ 1529.617339][T16796] Bluetooth: hci1: command tx timeout [ 1530.156322][T16796] Bluetooth: hci2: command tx timeout [ 1531.636759][T16796] Bluetooth: hci1: command tx timeout [ 1532.211065][T16796] Bluetooth: hci2: command tx timeout [ 1532.245220][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.363721][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.390750][ T1460] bond0 (unregistering): Released all slaves [ 1532.971504][T18278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.971571][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.971637][T18278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.712571][T16796] Bluetooth: hci1: command tx timeout [ 1534.262809][T16796] Bluetooth: hci2: command tx timeout [ 1534.453715][T18278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.453733][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.453760][T18278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.330991][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 1537.331009][ T37] audit: type=1326 audit(1760733067.591:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.361680][ T37] audit: type=1326 audit(1760733067.591:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.385649][ T37] audit: type=1326 audit(1760733067.651:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.385929][ T37] audit: type=1326 audit(1760733067.651:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.386178][ T37] audit: type=1326 audit(1760733067.651:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.386668][ T37] audit: type=1326 audit(1760733067.651:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.386937][ T37] audit: type=1326 audit(1760733067.651:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.388209][ T37] audit: type=1326 audit(1760733067.651:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.388482][ T37] audit: type=1326 audit(1760733067.651:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1537.388839][ T37] audit: type=1326 audit(1760733067.651:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18599 comm="syz.3.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1538.221567][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3627'. [ 1538.221583][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3627'. [ 1538.221599][T18611] netlink: 'syz.7.3627': attribute type 14 has an invalid length. [ 1539.355324][T18278] hsr_slave_0: entered promiscuous mode [ 1539.356277][T18278] hsr_slave_1: entered promiscuous mode [ 1539.356855][T18278] debugfs: 'hsr0' already exists in 'hsr' [ 1539.356870][T18278] Cannot create hsr debugfs directory [ 1542.146845][T12405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1542.168924][T12405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1542.173305][T12405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1542.191564][T12405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1542.192388][T12405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1543.034384][ T1460] hsr_slave_0: left promiscuous mode [ 1543.075019][ T1460] hsr_slave_1: left promiscuous mode [ 1543.076021][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.416078][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.262921][T16796] Bluetooth: hci0: command tx timeout [ 1545.286615][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3637'. [ 1545.400380][T18695] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1545.594913][ T1460] hsr_slave_0: left promiscuous mode [ 1545.632930][ T1460] hsr_slave_1: left promiscuous mode [ 1545.633897][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.633921][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.684858][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.684886][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.812788][ T44] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1545.875085][ T1460] hsr_slave_0: left promiscuous mode [ 1545.912870][ T1460] hsr_slave_1: left promiscuous mode [ 1545.913888][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.954571][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.972950][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 1545.975415][ T44] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1545.975448][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1545.975470][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1545.978674][ T44] usb 8-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1545.978700][ T44] usb 8-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1545.978721][ T44] usb 8-1: Product: syz [ 1545.978736][ T44] usb 8-1: Manufacturer: syz [ 1545.978750][ T44] usb 8-1: SerialNumber: syz [ 1545.989135][ T44] usb 8-1: config 0 descriptor?? [ 1546.000976][ T44] smsusb:smsusb_probe: board id=2, interface number 0 [ 1546.003767][ T44] smsusb:smsusb_probe: Device initialized with return code -19 [ 1546.107978][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.108066][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.291684][ T44] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1546.319553][ T1460] veth1_macvtap: left promiscuous mode [ 1546.319637][ T1460] veth0_macvtap: left promiscuous mode [ 1546.319835][ T1460] veth1_vlan: left promiscuous mode [ 1546.319939][ T1460] veth0_vlan: left promiscuous mode [ 1546.320973][ T44] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1546.342829][T16796] Bluetooth: hci0: command tx timeout [ 1546.544938][T18725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.545537][T18725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.916586][ T1460] veth1_macvtap: left promiscuous mode [ 1546.916656][ T1460] veth0_macvtap: left promiscuous mode [ 1546.916845][ T1460] veth1_vlan: left promiscuous mode [ 1546.916985][ T1460] veth0_vlan: left promiscuous mode [ 1547.356408][T18718] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1547.356435][T18718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1547.356529][T18718] vhci_hcd vhci_hcd.0: Device attached [ 1547.367863][T18730] vhci_hcd: connection closed [ 1547.368597][T14970] vhci_hcd: stop threads [ 1547.368615][T14970] vhci_hcd: release socket [ 1547.368649][T14970] vhci_hcd: disconnect device [ 1548.443780][T16796] Bluetooth: hci0: command tx timeout [ 1548.731897][ T5975] usb 8-1: USB disconnect, device number 43 [ 1549.253582][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1549.458358][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1550.505517][T16796] Bluetooth: hci0: command tx timeout [ 1561.861565][T18780] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1566.133717][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1569.743478][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1575.221484][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1579.377766][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1579.377782][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3674'. [ 1579.377799][T18868] netlink: 'syz.7.3674': attribute type 14 has an invalid length. [ 1584.034560][T12405] Bluetooth: hci5: command 0x0406 tx timeout [ 1584.236973][T12405] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1584.292504][T12405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1584.299984][T12405] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1584.301159][T12405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1584.301909][T12405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1584.623521][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1584.857577][T12405] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1584.874040][T12405] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1584.880242][T12405] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1584.882402][T12405] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1584.894455][T12405] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1584.973390][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1586.349029][T16796] Bluetooth: hci7: command tx timeout [ 1587.065618][T16796] Bluetooth: hci8: command tx timeout [ 1588.446601][T12405] Bluetooth: hci7: command tx timeout [ 1589.152835][T12405] Bluetooth: hci6: command 0x0406 tx timeout [ 1589.153106][T12405] Bluetooth: hci8: command tx timeout [ 1590.503052][T16796] Bluetooth: hci7: command tx timeout [ 1591.707524][T16796] Bluetooth: hci8: command tx timeout [ 1592.152762][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3686'. [ 1592.152783][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3686'. [ 1592.152807][T18919] netlink: 'syz.7.3686': attribute type 14 has an invalid length. [ 1592.582711][T16796] Bluetooth: hci7: command tx timeout [ 1593.782816][T16796] Bluetooth: hci8: command tx timeout [ 1603.591654][T18907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1603.615230][T18907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1603.617782][T18907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1603.721341][T18907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1603.741336][T18907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1605.915734][T18907] Bluetooth: hci5: command tx timeout [ 1607.803463][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.803537][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.962657][T18907] Bluetooth: hci5: command tx timeout [ 1609.342286][T18894] chnl_net:caif_netlink_parms(): no params data found [ 1609.523174][T18887] chnl_net:caif_netlink_parms(): no params data found [ 1610.025379][T18907] Bluetooth: hci5: command tx timeout [ 1611.458333][T18894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.458420][T18894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.458580][T18894] bridge_slave_0: entered allmulticast mode [ 1611.460389][T18894] bridge_slave_0: entered promiscuous mode [ 1611.469527][T18887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.469678][T18887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.469909][T18887] bridge_slave_0: entered allmulticast mode [ 1611.477793][T18887] bridge_slave_0: entered promiscuous mode [ 1611.484944][T18894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.485073][T18894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.485430][T18894] bridge_slave_1: entered allmulticast mode [ 1611.488410][T18894] bridge_slave_1: entered promiscuous mode [ 1611.527509][T18887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.527780][T18887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.528008][T18887] bridge_slave_1: entered allmulticast mode [ 1611.544733][T18887] bridge_slave_1: entered promiscuous mode [ 1612.963244][T18907] Bluetooth: hci5: command tx timeout [ 1613.071816][T19091] overlayfs: failed to resolve './file1': -2 [ 1615.153605][T18894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.234632][T18887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1615.287738][T18894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.674390][T18887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.567210][T18894] team0: Port device team_slave_0 added [ 1619.569754][T18887] team0: Port device team_slave_0 added [ 1619.570272][T19005] chnl_net:caif_netlink_parms(): no params data found [ 1619.676194][T18887] team0: Port device team_slave_1 added [ 1619.710657][T18894] team0: Port device team_slave_1 added [ 1620.408325][T17712] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1621.686604][T17712] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.686654][T17712] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1621.686678][T17712] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.704322][T17712] usb 8-1: config 0 descriptor?? [ 1621.976022][T18887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.976039][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.976064][T18887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.977970][T19135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.978441][T19135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.062473][T18894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.062535][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.077282][T18894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.085832][T18887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.085847][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.085873][T18887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.102206][T18894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.102223][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.102249][T18894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.198839][T17712] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 1622.217374][T17712] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.002F/input/input73 [ 1623.695587][T17712] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1624.044649][T17712] usb 8-1: USB disconnect, device number 44 [ 1624.340935][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1624.340960][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1624.340986][T19179] netlink: 'syz.3.3714': attribute type 14 has an invalid length. [ 1624.498521][T19170] fido_id[19170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1625.843155][T19005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.843262][T19005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.843435][T19005] bridge_slave_0: entered allmulticast mode [ 1625.847446][T19005] bridge_slave_0: entered promiscuous mode [ 1626.510089][T19005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.510236][T19005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.510475][T19005] bridge_slave_1: entered allmulticast mode [ 1626.514734][T19005] bridge_slave_1: entered promiscuous mode [ 1626.538020][T18887] hsr_slave_0: entered promiscuous mode [ 1626.540799][T18887] hsr_slave_1: entered promiscuous mode [ 1627.021986][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 1627.022004][ T37] audit: type=1326 audit(1760733157.281:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.025615][ T37] audit: type=1326 audit(1760733157.291:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.028286][ T37] audit: type=1326 audit(1760733157.291:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.028533][ T37] audit: type=1326 audit(1760733157.291:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.028814][ T37] audit: type=1326 audit(1760733157.291:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.029265][ T37] audit: type=1326 audit(1760733157.291:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.029559][ T37] audit: type=1326 audit(1760733157.291:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.029894][ T37] audit: type=1326 audit(1760733157.291:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.030201][ T37] audit: type=1326 audit(1760733157.291:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.030507][ T37] audit: type=1326 audit(1760733157.291:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1627.110882][T18894] hsr_slave_0: entered promiscuous mode [ 1627.112175][T18894] hsr_slave_1: entered promiscuous mode [ 1627.131475][T18894] debugfs: 'hsr0' already exists in 'hsr' [ 1627.131504][T18894] Cannot create hsr debugfs directory [ 1627.744943][T19005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.027182][T19005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.782742][ T5975] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1628.973411][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.973534][ T5975] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1628.973655][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.996894][ T5975] usb 4-1: config 0 descriptor?? [ 1629.235847][T19222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.245924][T19222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.394915][T19005] team0: Port device team_slave_0 added [ 1629.457687][T19005] team0: Port device team_slave_1 added [ 1629.486621][ T5975] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 1629.522132][ T5975] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input74 [ 1629.828194][ T5975] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1630.403507][T17262] usb 4-1: USB disconnect, device number 38 [ 1630.701966][T19005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.701983][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.702009][T19005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.733162][T19005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.733179][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.733205][T19005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.580879][T19005] hsr_slave_0: entered promiscuous mode [ 1631.582293][T19005] hsr_slave_1: entered promiscuous mode [ 1631.585841][T19005] debugfs: 'hsr0' already exists in 'hsr' [ 1631.585869][T19005] Cannot create hsr debugfs directory [ 1633.088914][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1633.088933][ T37] audit: type=1326 audit(1760733163.351:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.088989][ T37] audit: type=1326 audit(1760733163.351:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114307][ T37] audit: type=1326 audit(1760733163.381:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114359][ T37] audit: type=1326 audit(1760733163.381:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114401][ T37] audit: type=1326 audit(1760733163.381:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114441][ T37] audit: type=1326 audit(1760733163.381:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114482][ T37] audit: type=1326 audit(1760733163.381:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114523][ T37] audit: type=1326 audit(1760733163.381:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.114564][ T37] audit: type=1326 audit(1760733163.381:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.120315][ T37] audit: type=1326 audit(1760733163.381:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19250 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1633.227638][T18887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1633.557127][ T1460] bridge_slave_1: left allmulticast mode [ 1633.557154][ T1460] bridge_slave_1: left promiscuous mode [ 1633.557391][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.494670][ T1460] bridge_slave_0: left allmulticast mode [ 1634.494700][ T1460] bridge_slave_0: left promiscuous mode [ 1634.494975][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.726627][ T1460] bridge_slave_1: left allmulticast mode [ 1634.726656][ T1460] bridge_slave_1: left promiscuous mode [ 1634.726910][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.803649][ T1460] bridge_slave_0: left allmulticast mode [ 1634.803670][ T1460] bridge_slave_0: left promiscuous mode [ 1634.803842][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.866096][ T1460] bridge_slave_1: left allmulticast mode [ 1634.866116][ T1460] bridge_slave_1: left promiscuous mode [ 1634.866274][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.943618][ T1460] bridge_slave_0: left allmulticast mode [ 1634.943638][ T1460] bridge_slave_0: left promiscuous mode [ 1634.943789][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.022759][T17710] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1635.048613][ T1460] bridge_slave_1: left allmulticast mode [ 1635.048644][ T1460] bridge_slave_1: left promiscuous mode [ 1635.048895][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.177058][T17710] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1635.177096][T17710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.204239][T17710] usb 8-1: config 0 descriptor?? [ 1635.210071][T17710] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1635.304166][ T1460] bridge_slave_0: left allmulticast mode [ 1635.304219][ T1460] bridge_slave_0: left promiscuous mode [ 1635.304417][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.294488][T17710] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 1636.495832][T17710] gspca_cpia1: usb_control_msg 01, error -32 [ 1636.496957][T17710] gspca_cpia1: usb_control_msg 01, error -71 [ 1636.496976][T17710] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1636.535896][T17710] usb 8-1: USB disconnect, device number 45 [ 1638.592804][ T44] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1638.789430][ T44] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1638.789460][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.789479][ T44] usb 8-1: Product: syz [ 1638.789494][ T44] usb 8-1: Manufacturer: syz [ 1638.789509][ T44] usb 8-1: SerialNumber: syz [ 1638.883725][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.883439][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.400640][ T1460] bond0 (unregistering): Released all slaves [ 1640.515582][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1640.515654][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1640.515680][T19283] netlink: 'syz.3.3738': attribute type 14 has an invalid length. [ 1640.703769][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.813577][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.886077][ T1460] bond0 (unregistering): Released all slaves [ 1641.149374][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.243664][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.309420][ T1460] bond0 (unregistering): Released all slaves [ 1641.464349][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.543361][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.619750][ T1460] bond0 (unregistering): Released all slaves [ 1641.675960][T18887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1641.959675][T18887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1642.240251][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1642.241065][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1642.242532][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 1642.252785][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1642.252812][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1642.253638][ T44] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1642.417686][ T44] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1642.441562][ T44] usb 8-1: USB disconnect, device number 46 [ 1642.459520][T18887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1646.226832][T16796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1646.236043][T16796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1646.246334][T16796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1646.249325][T16796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1646.250074][T16796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1647.456099][ T1460] hsr_slave_0: left promiscuous mode [ 1647.553010][ T1460] hsr_slave_1: left promiscuous mode [ 1647.553956][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.581253][T18907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1647.596888][T18907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1647.598937][T18907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1647.600714][T18907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1647.601603][T18907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1647.613729][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.010791][ T1460] hsr_slave_0: left promiscuous mode [ 1648.062904][ T1460] hsr_slave_1: left promiscuous mode [ 1648.063605][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.753924][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.755275][T18907] Bluetooth: hci0: command tx timeout [ 1650.526730][T16796] Bluetooth: hci1: command tx timeout [ 1651.361131][T16796] Bluetooth: hci0: command tx timeout [ 1652.926679][T16796] Bluetooth: hci1: command tx timeout [ 1653.064797][ T1460] hsr_slave_0: left promiscuous mode [ 1653.821579][T16796] Bluetooth: hci0: command tx timeout [ 1654.313565][T19343] overlayfs: failed to resolve './file0': -2 [ 1654.317733][ T1460] hsr_slave_1: left promiscuous mode [ 1654.318726][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.366854][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.802131][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1654.802148][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 1654.802164][T19342] netlink: 'syz.3.3750': attribute type 14 has an invalid length. [ 1654.991202][T16796] Bluetooth: hci1: command tx timeout [ 1655.872807][T16796] Bluetooth: hci0: command tx timeout [ 1657.353298][T16796] Bluetooth: hci1: command tx timeout [ 1657.823451][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1658.044904][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1658.564498][T19360] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1658.802689][ T5892] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1658.952859][ T5892] usb 8-1: Using ep0 maxpacket: 16 [ 1658.954813][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1658.954855][ T5892] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1658.954868][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.958525][ T5892] usb 8-1: config 0 descriptor?? [ 1659.211007][ T5892] usb 8-1: string descriptor 0 read error: -71 [ 1659.217245][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input75 [ 1659.230731][ T5152] bcm5974 8-1:0.0: could not read from device [ 1659.231166][ T5892] usb 8-1: USB disconnect, device number 47 [ 1659.613454][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1659.773292][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1660.613410][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1660.773289][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1661.553725][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1661.733384][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1662.083876][T18907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1662.087691][T18907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1662.088967][T18907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1662.090040][T18907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1662.091134][T18907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1664.202872][T18907] Bluetooth: hci2: command tx timeout [ 1666.272658][T18907] Bluetooth: hci2: command tx timeout [ 1670.473638][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.473707][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.510439][T16796] Bluetooth: hci2: command tx timeout [ 1671.691543][T19315] chnl_net:caif_netlink_parms(): no params data found [ 1671.771109][T19372] chnl_net:caif_netlink_parms(): no params data found [ 1672.097098][T19299] chnl_net:caif_netlink_parms(): no params data found [ 1672.601609][T18907] Bluetooth: hci2: command tx timeout [ 1676.164167][T19315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.164302][T19315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.164550][T19315] bridge_slave_0: entered allmulticast mode [ 1676.167680][T19315] bridge_slave_0: entered promiscuous mode [ 1676.215525][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3770'. [ 1676.215542][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3770'. [ 1676.215558][T19449] netlink: 'syz.7.3770': attribute type 14 has an invalid length. [ 1676.391776][T19315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.391965][T19315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.392178][T19315] bridge_slave_1: entered allmulticast mode [ 1676.436529][T19315] bridge_slave_1: entered promiscuous mode [ 1679.662097][T19372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.662188][T19372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.662534][T19372] bridge_slave_0: entered allmulticast mode [ 1679.666646][T19372] bridge_slave_0: entered promiscuous mode [ 1681.397879][T19372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.398480][T19372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.402891][T19372] bridge_slave_1: entered allmulticast mode [ 1681.411714][T19372] bridge_slave_1: entered promiscuous mode [ 1683.073872][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.080914][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.099410][T19299] bridge_slave_0: entered allmulticast mode [ 1683.102303][T19299] bridge_slave_0: entered promiscuous mode [ 1683.160697][T19315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.616801][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.616935][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.617185][T19299] bridge_slave_1: entered allmulticast mode [ 1683.620873][T19299] bridge_slave_1: entered promiscuous mode [ 1683.656720][T19315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.661302][T19372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.038582][T19372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.499779][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1684.499936][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1684.500284][T19489] netlink: 'syz.3.3779': attribute type 14 has an invalid length. [ 1685.141081][T19299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.159138][T19315] team0: Port device team_slave_0 added [ 1685.473508][T19299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.481280][T19315] team0: Port device team_slave_1 added [ 1685.736602][T19372] team0: Port device team_slave_0 added [ 1686.498328][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1686.498344][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1686.498360][T19499] netlink: 'syz.3.3781': attribute type 14 has an invalid length. [ 1687.204580][T19372] team0: Port device team_slave_1 added [ 1689.075108][T19299] team0: Port device team_slave_0 added [ 1689.076598][T19315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.076613][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.076638][T19315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.289853][T19299] team0: Port device team_slave_1 added [ 1689.297973][T19315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.297990][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.298015][T19315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.367734][T19372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.367751][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.367778][T19372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.535485][T19372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.535504][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.535532][T19372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.674329][T19299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.674349][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.675160][T19299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.799374][T19299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.799391][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.799419][T19299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.051090][T19315] hsr_slave_0: entered promiscuous mode [ 1690.059561][T19315] hsr_slave_1: entered promiscuous mode [ 1690.060748][T19315] debugfs: 'hsr0' already exists in 'hsr' [ 1690.060773][T19315] Cannot create hsr debugfs directory [ 1690.194295][T19372] hsr_slave_0: entered promiscuous mode [ 1690.195892][T19372] hsr_slave_1: entered promiscuous mode [ 1690.196928][T19372] debugfs: 'hsr0' already exists in 'hsr' [ 1690.196952][T19372] Cannot create hsr debugfs directory [ 1691.565123][T19299] hsr_slave_0: entered promiscuous mode [ 1691.566529][T19299] hsr_slave_1: entered promiscuous mode [ 1691.567536][T19299] debugfs: 'hsr0' already exists in 'hsr' [ 1691.567559][T19299] Cannot create hsr debugfs directory [ 1692.259137][T18907] Bluetooth: hci4: unexpected event for opcode 0x004e [ 1699.216671][T18907] Bluetooth: hci4: unexpected event for opcode 0x004e [ 1706.805461][T16796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1706.808919][T16796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1706.810351][T16796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1706.811912][T16796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1706.824208][T16796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1708.790561][T16796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1708.808434][T16796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1708.813265][T16796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1708.823423][T16796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1708.824212][T16796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1710.362562][T16796] Bluetooth: hci5: command tx timeout [ 1712.743205][T18907] Bluetooth: hci5: command tx timeout [ 1713.165529][T18907] Bluetooth: hci6: command tx timeout [ 1714.837636][T18907] Bluetooth: hci5: command tx timeout [ 1715.229314][T18907] Bluetooth: hci6: command tx timeout [ 1717.332640][T18907] Bluetooth: hci5: command tx timeout [ 1717.332680][T18907] Bluetooth: hci6: command tx timeout [ 1719.992664][T16796] Bluetooth: hci6: command tx timeout [ 1726.668566][T19567] chnl_net:caif_netlink_parms(): no params data found [ 1728.384038][T18907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1728.412310][T18907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1728.422880][T18907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1728.431386][T18907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1728.432292][T18907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1728.823368][T19581] chnl_net:caif_netlink_parms(): no params data found [ 1730.691191][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.691264][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.752462][T16796] Bluetooth: hci0: command tx timeout [ 1733.287497][T16796] Bluetooth: hci0: command tx timeout [ 1734.129047][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.129389][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.130640][T19567] bridge_slave_0: entered allmulticast mode [ 1734.208589][T19567] bridge_slave_0: entered promiscuous mode [ 1734.473491][T19567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.474119][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.475010][T19567] bridge_slave_1: entered allmulticast mode [ 1734.600286][T19567] bridge_slave_1: entered promiscuous mode [ 1735.309591][T16796] Bluetooth: hci0: command tx timeout [ 1735.453065][ T994] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1735.633263][ T994] usb 8-1: Using ep0 maxpacket: 8 [ 1735.847062][ T994] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1735.847098][ T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1735.847120][ T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1736.036109][ T994] usb 8-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1736.036151][ T994] usb 8-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1736.036223][ T994] usb 8-1: Product: syz [ 1736.036275][ T994] usb 8-1: Manufacturer: syz [ 1736.036326][ T994] usb 8-1: SerialNumber: syz [ 1736.176482][ T994] usb 8-1: config 0 descriptor?? [ 1736.641170][ T994] smsusb:smsusb_probe: board id=2, interface number 0 [ 1736.641866][ T994] smsusb:smsusb_probe: Device initialized with return code -19 [ 1736.733719][ T1447] bridge_slave_1: left allmulticast mode [ 1736.733748][ T1447] bridge_slave_1: left promiscuous mode [ 1736.733990][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.803511][ T1447] bridge_slave_0: left allmulticast mode [ 1736.803532][ T1447] bridge_slave_0: left promiscuous mode [ 1736.803722][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.887225][ T1447] bridge_slave_1: left allmulticast mode [ 1736.887256][ T1447] bridge_slave_1: left promiscuous mode [ 1736.887496][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.946049][ T1447] bridge_slave_0: left allmulticast mode [ 1736.946079][ T1447] bridge_slave_0: left promiscuous mode [ 1736.946335][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.994235][T19703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.994847][T19703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.045821][ T1447] bridge_slave_1: left allmulticast mode [ 1737.045847][ T1447] bridge_slave_1: left promiscuous mode [ 1737.045994][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.103743][ T1447] bridge_slave_0: left allmulticast mode [ 1737.103762][ T1447] bridge_slave_0: left promiscuous mode [ 1737.104024][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.439315][T16796] Bluetooth: hci0: command tx timeout [ 1739.190225][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.717715][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.879868][ T1447] bond0 (unregistering): Released all slaves [ 1740.193424][ T5863] usb 8-1: USB disconnect, device number 48 [ 1743.374750][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.473433][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.534746][ T1447] bond0 (unregistering): Released all slaves [ 1743.773651][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.853559][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.935920][ T1447] bond0 (unregistering): Released all slaves [ 1743.978703][T19567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.136760][T19567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.137210][T19581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.137354][T19581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.137476][T19581] bridge_slave_0: entered allmulticast mode [ 1744.147514][T19581] bridge_slave_0: entered promiscuous mode [ 1744.784566][T19581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.785133][T19581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.790623][T19581] bridge_slave_1: entered allmulticast mode [ 1744.802837][T19581] bridge_slave_1: entered promiscuous mode [ 1748.601951][T19567] team0: Port device team_slave_0 added [ 1749.143680][T19567] team0: Port device team_slave_1 added [ 1749.368953][T17262] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1750.095238][T19581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.264741][T17262] usb 8-1: Using ep0 maxpacket: 8 [ 1750.278159][T17262] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1750.278191][T17262] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1750.278213][T17262] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1750.280626][T17262] usb 8-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1750.280652][T17262] usb 8-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1750.280672][T17262] usb 8-1: Product: syz [ 1750.280687][T17262] usb 8-1: Manufacturer: syz [ 1750.280701][T17262] usb 8-1: SerialNumber: syz [ 1750.290330][T17262] usb 8-1: config 0 descriptor?? [ 1750.313864][T17262] smsusb:smsusb_probe: board id=2, interface number 0 [ 1750.318832][T17262] smsusb:smsusb_probe: Device initialized with return code -19 [ 1750.378913][T19760] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1750.395395][T19581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1750.579893][T19567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.579909][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.579935][T19567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.622665][T11144] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1750.698341][T19763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.705081][T19763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.802652][T11144] usb 4-1: Using ep0 maxpacket: 16 [ 1750.804547][T11144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1750.804576][T11144] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1750.804588][T11144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.807624][T11144] usb 4-1: config 0 descriptor?? [ 1750.895230][ T1447] hsr_slave_0: left promiscuous mode [ 1750.913149][ T1447] hsr_slave_1: left promiscuous mode [ 1750.914010][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.943515][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.026775][T11144] usb 4-1: string descriptor 0 read error: -71 [ 1751.039762][T11144] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input76 [ 1751.069671][ T5152] bcm5974 4-1:0.0: could not read from device [ 1751.116777][T11144] usb 4-1: USB disconnect, device number 39 [ 1751.186158][ T1447] hsr_slave_0: left promiscuous mode [ 1751.280114][ T1447] hsr_slave_1: left promiscuous mode [ 1751.281110][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.323838][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.486193][ T1447] hsr_slave_0: left promiscuous mode [ 1751.502839][ T1447] hsr_slave_1: left promiscuous mode [ 1751.503570][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.548895][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.168642][T17711] usb 8-1: USB disconnect, device number 49 [ 1757.713552][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 1757.862245][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3847'. [ 1757.862259][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3847'. [ 1757.862276][T19789] netlink: 'syz.7.3847': attribute type 14 has an invalid length. [ 1757.913461][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 1759.073913][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 1759.223405][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 1760.483285][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 1760.621815][T16796] Bluetooth: hci4: unexpected event for opcode 0x004e [ 1761.593438][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 1763.817270][T19567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.817287][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.817312][T19567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.886924][T19581] team0: Port device team_slave_0 added [ 1763.953595][T19581] team0: Port device team_slave_1 added [ 1765.679906][T19581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1765.679923][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.679948][T19581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1765.716040][T19581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1765.716058][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1765.716084][T19581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.930207][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1766.930224][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1766.930240][T19819] netlink: 'syz.7.3856': attribute type 14 has an invalid length. [ 1766.974607][T19581] hsr_slave_0: entered promiscuous mode [ 1767.065524][T19581] hsr_slave_1: entered promiscuous mode [ 1767.423707][T18907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1767.427076][T18907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1767.482837][T18907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1767.499876][T18907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1767.500997][T18907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1767.794407][T19657] chnl_net:caif_netlink_parms(): no params data found [ 1768.126445][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1768.126469][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1768.126496][T19838] netlink: 'syz.3.3860': attribute type 14 has an invalid length. [ 1769.542663][T18907] Bluetooth: hci1: command tx timeout [ 1771.607846][T16796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.620870][T16796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.623872][ T61] Bluetooth: hci1: command tx timeout [ 1771.624484][T16796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.626207][T16796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.626927][T16796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1773.825850][T18907] Bluetooth: hci1: command tx timeout [ 1773.877612][T19657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.877749][T19657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.878000][T19657] bridge_slave_0: entered allmulticast mode [ 1773.907866][T19657] bridge_slave_0: entered promiscuous mode [ 1773.962805][T19657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.962956][T19657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.963201][T19657] bridge_slave_1: entered allmulticast mode [ 1773.966020][T19657] bridge_slave_1: entered promiscuous mode [ 1774.098661][T18907] Bluetooth: hci2: command tx timeout [ 1774.478311][T19657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.629161][T19657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.986995][T18907] Bluetooth: hci1: command tx timeout [ 1777.532138][T16796] Bluetooth: hci2: command tx timeout [ 1777.719403][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3870'. [ 1777.719419][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3870'. [ 1777.719434][T19881] netlink: 'syz.7.3870': attribute type 14 has an invalid length. [ 1778.205650][T19657] team0: Port device team_slave_0 added [ 1778.211359][T19657] team0: Port device team_slave_1 added [ 1778.493126][T19888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1779.470329][ T5892] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1779.655515][T16796] Bluetooth: hci2: command tx timeout [ 1779.683498][T19657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1779.683510][T19657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1779.683524][T19657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.512605][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 1780.515359][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1780.515407][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1780.515430][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.576189][ T5892] usb 4-1: config 0 descriptor?? [ 1780.590136][T19657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.590153][T19657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.590179][T19657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.702917][T18907] Bluetooth: hci2: command tx timeout [ 1781.761970][ T5892] usb 4-1: string descriptor 0 read error: -71 [ 1782.340886][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input77 [ 1782.373053][ T5152] bcm5974 4-1:0.0: could not read from device [ 1782.376227][ T5892] usb 4-1: USB disconnect, device number 40 [ 1785.961984][T19829] chnl_net:caif_netlink_parms(): no params data found [ 1788.305093][T11144] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1788.373149][T19851] chnl_net:caif_netlink_parms(): no params data found [ 1788.390350][T11144] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1789.433351][T18907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1789.465729][T18907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1789.467249][T18907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1789.469452][T18907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1789.470250][T18907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1789.818231][T19943] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1789.818259][T19943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1789.820717][T19943] vhci_hcd vhci_hcd.0: Device attached [ 1789.876825][T19944] vhci_hcd: connection closed [ 1789.877097][ T58] vhci_hcd: stop threads [ 1789.877114][ T58] vhci_hcd: release socket [ 1789.877149][ T58] vhci_hcd: disconnect device [ 1790.674457][T19951] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3884'. [ 1791.795705][T16796] Bluetooth: hci5: command tx timeout [ 1791.840437][ T5863] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1791.923714][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.923787][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.948365][T19829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.949517][T19829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.949735][T19829] bridge_slave_0: entered allmulticast mode [ 1791.954632][T19829] bridge_slave_0: entered promiscuous mode [ 1792.211548][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1792.227715][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 1792.392654][ T5863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1792.392708][ T5863] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1792.392731][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.469414][ T5863] usb 8-1: config 0 descriptor?? [ 1792.478636][T19958] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1792.567833][T19829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.568011][T19829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.568402][T19829] bridge_slave_1: entered allmulticast mode [ 1792.593885][T19829] bridge_slave_1: entered promiscuous mode [ 1792.690225][ T5863] usb 8-1: string descriptor 0 read error: -71 [ 1792.699020][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input78 [ 1792.711196][ T5152] bcm5974 8-1:0.0: could not read from device [ 1792.756915][ T5863] usb 8-1: USB disconnect, device number 50 [ 1793.029525][T19829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.868095][T16796] Bluetooth: hci5: command tx timeout [ 1794.564215][T19829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.991653][T16796] Bluetooth: hci5: command tx timeout [ 1796.169136][T19851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.170280][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.170593][T19851] bridge_slave_0: entered allmulticast mode [ 1796.175605][T19851] bridge_slave_0: entered promiscuous mode [ 1797.551335][T19851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.551475][T19851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.551726][T19851] bridge_slave_1: entered allmulticast mode [ 1797.555717][T19851] bridge_slave_1: entered promiscuous mode [ 1797.572034][T19829] team0: Port device team_slave_0 added [ 1798.263345][T16796] Bluetooth: hci5: command tx timeout [ 1798.851385][T19829] team0: Port device team_slave_1 added [ 1798.909089][T19993] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3894'. [ 1800.469101][T19851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.815817][T19851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.845303][T19829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.845319][T19829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.845346][T19829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.000655][T19829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.000667][T19829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.000682][T19829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.100247][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3900'. [ 1804.100264][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3900'. [ 1804.100280][T20013] netlink: 'syz.7.3900': attribute type 14 has an invalid length. [ 1804.175744][T19851] team0: Port device team_slave_0 added [ 1804.223119][T19851] team0: Port device team_slave_1 added [ 1804.604920][T19851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.604944][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.604969][T19851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.671026][T19829] hsr_slave_0: entered promiscuous mode [ 1804.678728][T19829] hsr_slave_1: entered promiscuous mode [ 1804.680039][T19829] debugfs: 'hsr0' already exists in 'hsr' [ 1804.680065][T19829] Cannot create hsr debugfs directory [ 1804.706479][T19851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.706495][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.706513][T19851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.629828][T11144] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1811.663339][T11144] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1812.358683][ T68] kworker/u8:4 (68) used greatest stack depth: 12664 bytes left [ 1812.517177][T20037] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1812.517205][T20037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1812.520114][T20037] vhci_hcd vhci_hcd.0: Device attached [ 1812.522171][T20055] vhci_hcd: connection closed [ 1812.543942][ T1447] vhci_hcd: stop threads [ 1812.543963][ T1447] vhci_hcd: release socket [ 1812.543999][ T1447] vhci_hcd: disconnect device [ 1812.683675][T19851] hsr_slave_0: entered promiscuous mode [ 1812.685623][T19851] hsr_slave_1: entered promiscuous mode [ 1812.686665][T19851] debugfs: 'hsr0' already exists in 'hsr' [ 1812.686689][T19851] Cannot create hsr debugfs directory [ 1812.996969][ T1502] bridge_slave_1: left allmulticast mode [ 1812.996997][ T1502] bridge_slave_1: left promiscuous mode [ 1812.999771][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.086423][ T1502] bridge_slave_0: left allmulticast mode [ 1813.086452][ T1502] bridge_slave_0: left promiscuous mode [ 1813.086711][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.200637][ T1502] bridge_slave_1: left allmulticast mode [ 1813.200667][ T1502] bridge_slave_1: left promiscuous mode [ 1813.200929][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.285550][ T1502] bridge_slave_0: left allmulticast mode [ 1813.285585][ T1502] bridge_slave_0: left promiscuous mode [ 1813.285836][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.387428][ T1502] bridge_slave_1: left allmulticast mode [ 1813.387457][ T1502] bridge_slave_1: left promiscuous mode [ 1813.387699][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.724294][ T1502] bridge_slave_0: left allmulticast mode [ 1813.724323][ T1502] bridge_slave_0: left promiscuous mode [ 1813.724568][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.075580][ T1502] bridge_slave_1: left allmulticast mode [ 1815.075611][ T1502] bridge_slave_1: left promiscuous mode [ 1815.075841][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.106302][ T1502] bridge_slave_0: left allmulticast mode [ 1816.106333][ T1502] bridge_slave_0: left promiscuous mode [ 1816.106577][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.422670][T17262] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1816.505459][ T1502] bridge_slave_1: left allmulticast mode [ 1816.505490][ T1502] bridge_slave_1: left promiscuous mode [ 1816.505729][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.612947][T17262] usb 4-1: Using ep0 maxpacket: 8 [ 1817.143248][T17262] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1817.143282][T17262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1817.143305][T17262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1817.147631][T17262] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1817.147661][T17262] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1817.147682][T17262] usb 4-1: Product: syz [ 1817.147696][T17262] usb 4-1: Manufacturer: syz [ 1817.147711][T17262] usb 4-1: SerialNumber: syz [ 1817.225016][T17262] usb 4-1: config 0 descriptor?? [ 1817.263868][T17262] smsusb:smsusb_probe: board id=2, interface number 0 [ 1817.268316][T17262] smsusb:smsusb_probe: Device initialized with return code -19 [ 1817.321803][ T1502] bridge_slave_0: left allmulticast mode [ 1817.321833][ T1502] bridge_slave_0: left promiscuous mode [ 1817.322092][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.792333][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.803469][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.106762][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.443406][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.516557][ T1502] bond0 (unregistering): Released all slaves [ 1820.773810][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.859091][T17262] usb 4-1: USB disconnect, device number 41 [ 1820.890107][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.966752][ T1502] bond0 (unregistering): Released all slaves [ 1821.273601][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.393648][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.424212][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 1822.424230][ T37] audit: type=1326 audit(1760733352.691:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428046][ T37] audit: type=1326 audit(1760733352.691:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428099][ T37] audit: type=1326 audit(1760733352.691:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428146][ T37] audit: type=1326 audit(1760733352.691:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428187][ T37] audit: type=1326 audit(1760733352.691:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428578][ T37] audit: type=1326 audit(1760733352.691:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.428853][ T37] audit: type=1326 audit(1760733352.691:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.429114][ T37] audit: type=1326 audit(1760733352.691:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.429728][ T37] audit: type=1326 audit(1760733352.691:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.429774][ T37] audit: type=1326 audit(1760733352.691:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20138 comm="syz.3.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1822.544897][ T1502] bond0 (unregistering): Released all slaves [ 1824.003691][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.363541][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.465955][ T1502] bond0 (unregistering): Released all slaves [ 1825.323484][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1825.425151][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1825.462697][ T5863] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1825.829708][ T1502] bond0 (unregistering): Released all slaves [ 1826.021590][T19938] chnl_net:caif_netlink_parms(): no params data found [ 1826.892850][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 1826.909640][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1826.909673][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1826.909695][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1826.912317][ T5863] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1826.912344][ T5863] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1826.912364][ T5863] usb 4-1: Product: syz [ 1826.912378][ T5863] usb 4-1: Manufacturer: syz [ 1826.912392][ T5863] usb 4-1: SerialNumber: syz [ 1826.921350][ T5863] usb 4-1: config 0 descriptor?? [ 1826.942093][ T5863] smsusb:smsusb_probe: board id=2, interface number 0 [ 1826.952770][ T5863] smsusb:smsusb_probe: Device initialized with return code -19 [ 1827.442308][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.923947][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.296746][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 1828.296759][ T37] audit: type=1326 audit(1760733358.561:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298232][ T37] audit: type=1326 audit(1760733358.561:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298262][ T37] audit: type=1326 audit(1760733358.561:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298287][ T37] audit: type=1326 audit(1760733358.561:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298312][ T37] audit: type=1326 audit(1760733358.561:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298335][ T37] audit: type=1326 audit(1760733358.561:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298359][ T37] audit: type=1326 audit(1760733358.561:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298389][ T37] audit: type=1326 audit(1760733358.561:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298412][ T37] audit: type=1326 audit(1760733358.561:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.298436][ T37] audit: type=1326 audit(1760733358.561:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20186 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09347efc9 code=0x7ffc0000 [ 1828.670594][T18907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1828.683333][T18907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1828.691588][T18907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1828.695131][T18907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1828.695721][T18907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1829.449227][T19298] usb 4-1: USB disconnect, device number 42 [ 1830.006174][T19938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.006303][T19938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.006551][T19938] bridge_slave_0: entered allmulticast mode [ 1830.009333][T19938] bridge_slave_0: entered promiscuous mode [ 1830.040233][T16796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1830.772580][ T61] Bluetooth: hci0: command tx timeout [ 1830.781497][T16796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1830.784433][T16796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1830.786081][T16796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1830.787109][T16796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1831.091102][ T1502] hsr_slave_0: left promiscuous mode [ 1831.302844][ T1502] hsr_slave_1: left promiscuous mode [ 1831.303559][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1831.670321][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1831.744834][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1831.825564][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.852627][T16796] Bluetooth: hci0: command tx timeout [ 1832.852814][ T1502] hsr_slave_0: left promiscuous mode [ 1833.072082][ T1502] hsr_slave_1: left promiscuous mode [ 1833.080938][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.142737][T16796] Bluetooth: hci1: command tx timeout [ 1833.704075][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.896106][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3940'. [ 1833.896131][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3940'. [ 1833.896158][T20256] netlink: 'syz.7.3940': attribute type 14 has an invalid length. [ 1833.896273][ T1502] hsr_slave_0: left promiscuous mode [ 1833.912754][ T5892] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1833.962854][ T1502] hsr_slave_1: left promiscuous mode [ 1833.963477][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.990725][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.072858][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 1834.072900][ T1502] hsr_slave_0: left promiscuous mode [ 1834.075177][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1834.075196][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1834.075208][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1834.077997][ T5892] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1834.078025][ T5892] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1834.078039][ T5892] usb 4-1: Product: syz [ 1834.078047][ T5892] usb 4-1: Manufacturer: syz [ 1834.078054][ T5892] usb 4-1: SerialNumber: syz [ 1834.085362][ T5892] usb 4-1: config 0 descriptor?? [ 1834.114409][ T1502] hsr_slave_1: left promiscuous mode [ 1834.115398][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.142864][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.182876][ T5892] smsusb:smsusb_probe: board id=2, interface number 0 [ 1834.183786][ T5892] smsusb:smsusb_probe: Device initialized with return code -19 [ 1834.438684][T20260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.441406][T20260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.643280][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 1834.773227][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 1834.917415][T16796] Bluetooth: hci0: command tx timeout [ 1835.332631][T16796] Bluetooth: hci1: command tx timeout [ 1835.493932][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 1835.623784][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 1836.793125][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 1836.961185][T17262] usb 4-1: USB disconnect, device number 43 [ 1836.973498][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 1837.021065][T16796] Bluetooth: hci0: command tx timeout [ 1837.392925][T16796] Bluetooth: hci1: command tx timeout [ 1839.463017][T16796] Bluetooth: hci1: command tx timeout [ 1839.576221][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 1839.753378][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 1843.699711][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 1845.283895][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 1847.351270][T19938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.351356][T19938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.351523][T19938] bridge_slave_1: entered allmulticast mode [ 1847.353813][T19938] bridge_slave_1: entered promiscuous mode [ 1849.221753][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 1849.221773][ T37] audit: type=1326 audit(1760733379.481:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.221900][ T37] audit: type=1326 audit(1760733379.481:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.254317][ T37] audit: type=1326 audit(1760733379.521:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.257597][ T37] audit: type=1326 audit(1760733379.521:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.284943][ T37] audit: type=1326 audit(1760733379.521:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.288373][ T37] audit: type=1326 audit(1760733379.551:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.299402][ T37] audit: type=1326 audit(1760733379.561:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.300576][ T37] audit: type=1326 audit(1760733379.561:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.313057][ T37] audit: type=1326 audit(1760733379.561:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1849.316913][ T37] audit: type=1326 audit(1760733379.581:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.3.3951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c6defc9 code=0x7ffc0000 [ 1851.425555][T18907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1851.446692][T18907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1851.474371][T18907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1851.606979][T18907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1851.608667][T18907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1851.810206][T20204] chnl_net:caif_netlink_parms(): no params data found [ 1852.341871][T20185] chnl_net:caif_netlink_parms(): no params data found [ 1852.415269][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1852.415414][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1852.415543][T20351] netlink: 'syz.3.3956': attribute type 14 has an invalid length. [ 1853.319121][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.319188][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.504261][T20204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.504392][T20204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.504622][T20204] bridge_slave_0: entered allmulticast mode [ 1853.508286][T20204] bridge_slave_0: entered promiscuous mode [ 1853.606682][T20204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.606815][T20204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.607071][T20204] bridge_slave_1: entered allmulticast mode [ 1853.610668][T20204] bridge_slave_1: entered promiscuous mode [ 1853.867952][T18907] Bluetooth: hci2: command tx timeout [ 1854.626477][T20185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.626670][T20185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.626912][T20185] bridge_slave_0: entered allmulticast mode [ 1855.511391][T20185] bridge_slave_0: entered promiscuous mode [ 1855.678311][T20204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.278724][T18907] Bluetooth: hci2: command tx timeout [ 1856.670479][T20185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.670555][T20185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.670729][T20185] bridge_slave_1: entered allmulticast mode [ 1856.672302][T20185] bridge_slave_1: entered promiscuous mode [ 1856.711604][T20204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1858.416829][T18907] Bluetooth: hci2: command tx timeout [ 1860.422744][T18907] Bluetooth: hci2: command tx timeout [ 1861.364223][T20185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.367339][T20204] team0: Port device team_slave_0 added [ 1861.459077][T20204] team0: Port device team_slave_1 added [ 1861.460110][T20334] chnl_net:caif_netlink_parms(): no params data found [ 1861.537704][T20185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.703175][T20433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3965'. [ 1865.140651][T20204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1865.140663][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1865.140677][T20204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1865.245642][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3968'. [ 1865.245664][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3968'. [ 1865.245690][T20456] netlink: 'syz.7.3968': attribute type 14 has an invalid length. [ 1865.456235][T20185] team0: Port device team_slave_0 added [ 1865.457514][T20204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1865.457530][T20204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1865.457556][T20204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.523181][T20185] team0: Port device team_slave_1 added [ 1866.000728][T20185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.000746][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.000773][T20185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.594994][T20185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.595666][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.595691][T20185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1866.834854][T20334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.835075][T20334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.835303][T20334] bridge_slave_0: entered allmulticast mode [ 1866.838066][T20334] bridge_slave_0: entered promiscuous mode [ 1867.050877][T20204] hsr_slave_0: entered promiscuous mode [ 1867.574247][T20204] hsr_slave_1: entered promiscuous mode [ 1867.925541][T20334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.925702][T20334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.926286][T20334] bridge_slave_1: entered allmulticast mode [ 1867.929154][T20334] bridge_slave_1: entered promiscuous mode [ 1868.609033][T20334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.733932][T20334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.774455][T20185] hsr_slave_0: entered promiscuous mode [ 1868.776039][T20185] hsr_slave_1: entered promiscuous mode [ 1868.777097][T20185] debugfs: 'hsr0' already exists in 'hsr' [ 1868.777123][T20185] Cannot create hsr debugfs directory [ 1869.126104][T20334] team0: Port device team_slave_0 added [ 1869.510158][T20334] team0: Port device team_slave_1 added [ 1873.102100][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3980'. [ 1873.102122][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3980'. [ 1873.102139][T20502] netlink: 'syz.7.3980': attribute type 14 has an invalid length. [ 1875.479438][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3983'. [ 1875.536782][T20334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1875.536800][T20334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1875.536826][T20334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.131917][T20334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.132344][T20334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.132401][T20334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.494200][T20527] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1878.370645][T20531] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3989'. [ 1878.492737][ T1502] bridge_slave_1: left allmulticast mode [ 1878.492767][ T1502] bridge_slave_1: left promiscuous mode [ 1878.493041][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.683507][ T1502] bridge_slave_0: left allmulticast mode [ 1878.683528][ T1502] bridge_slave_0: left promiscuous mode [ 1878.683794][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.787748][T19298] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1879.592839][T19298] usb 8-1: Using ep0 maxpacket: 16 [ 1879.599743][T19298] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1879.599803][T19298] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1879.599824][T19298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.638382][ T1502] bridge_slave_1: left allmulticast mode [ 1879.638402][ T1502] bridge_slave_1: left promiscuous mode [ 1879.638561][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.640505][T19298] usb 8-1: config 0 descriptor?? [ 1879.724305][ T1502] bridge_slave_0: left allmulticast mode [ 1879.724336][ T1502] bridge_slave_0: left promiscuous mode [ 1879.724543][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.798273][ T1502] bridge_slave_1: left allmulticast mode [ 1879.798304][ T1502] bridge_slave_1: left promiscuous mode [ 1879.798583][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.850595][T19298] usb 8-1: string descriptor 0 read error: -71 [ 1879.858904][T19298] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input79 [ 1879.862204][ T5152] bcm5974 8-1:0.0: could not read from device [ 1879.890316][ T1502] bridge_slave_0: left allmulticast mode [ 1879.890345][ T1502] bridge_slave_0: left promiscuous mode [ 1879.890631][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.921254][T19298] usb 8-1: USB disconnect, device number 51 [ 1879.976867][ T1502] bridge_slave_1: left allmulticast mode [ 1879.976897][ T1502] bridge_slave_1: left promiscuous mode [ 1879.977132][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.063658][ T1502] bridge_slave_0: left allmulticast mode [ 1880.063679][ T1502] bridge_slave_0: left promiscuous mode [ 1880.063837][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.268240][ T1502] bond0 (unregistering): Released all slaves [ 1880.494756][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.803375][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.905788][ T1502] bond0 (unregistering): Released all slaves [ 1882.254414][ T23] ================================================================== [ 1882.254430][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1882.254486][ T23] Read of size 8 at addr ffffc90004261090 by task irq_work/0/23 [ 1882.254501][ T23] [ 1882.254523][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1882.254542][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1882.254562][ T23] Call Trace: [ 1882.254572][ T23] [ 1882.254580][ T23] dump_stack_lvl+0x189/0x250 [ 1882.254615][ T23] ? run_irq_workd+0x116/0x190 [ 1882.254636][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1882.254656][ T23] ? __pfx__printk+0x10/0x10 [ 1882.254679][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1882.254715][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1882.254736][ T23] print_report+0xca/0x240 [ 1882.254761][ T23] ? run_irq_workd+0x116/0x190 [ 1882.254780][ T23] kasan_report+0x118/0x150 [ 1882.254809][ T23] ? run_irq_workd+0x116/0x190 [ 1882.254832][ T23] run_irq_workd+0x116/0x190 [ 1882.254852][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1882.254871][ T23] ? schedule+0x91/0x360 [ 1882.254952][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.254981][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.254997][ T23] smpboot_thread_fn+0x542/0xa60 [ 1882.255016][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.255037][ T23] kthread+0x711/0x8a0 [ 1882.255059][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1882.255077][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.255096][ T23] ? rt_spin_unlock+0x150/0x200 [ 1882.255148][ T23] ? rt_spin_unlock+0x161/0x200 [ 1882.255169][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.255190][ T23] ret_from_fork+0x4bc/0x870 [ 1882.255228][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1882.255257][ T23] ? __switch_to_asm+0x39/0x70 [ 1882.255279][ T23] ? __switch_to_asm+0x33/0x70 [ 1882.255301][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.255323][ T23] ret_from_fork_asm+0x1a/0x30 [ 1882.255353][ T23] [ 1882.255361][ T23] [ 1882.255367][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1882.255386][ T23] Memory state around the buggy address: [ 1882.255403][ T23] ffffc90004260f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1882.255418][ T23] ffffc90004261000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1882.255431][ T23] >ffffc90004261080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1882.255445][ T23] ^ [ 1882.255456][ T23] ffffc90004261100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1882.255470][ T23] ffffc90004261180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1882.255480][ T23] ================================================================== [ 1882.255501][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1882.255516][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1882.255538][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1882.255551][ T23] Call Trace: [ 1882.255558][ T23] [ 1882.255566][ T23] dump_stack_lvl+0x99/0x250 [ 1882.255587][ T23] ? __asan_memcpy+0x40/0x70 [ 1882.255611][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1882.255633][ T23] ? __pfx__printk+0x10/0x10 [ 1882.255660][ T23] vpanic+0x237/0x6d0 [ 1882.255688][ T23] ? __pfx_vpanic+0x10/0x10 [ 1882.255711][ T23] panic+0xb9/0xc0 [ 1882.255727][ T23] ? __pfx_panic+0x10/0x10 [ 1882.255744][ T23] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1882.255773][ T23] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1882.255803][ T23] ? run_irq_workd+0x116/0x190 [ 1882.255823][ T23] check_panic_on_warn+0x89/0xb0 [ 1882.255847][ T23] ? run_irq_workd+0x116/0x190 [ 1882.255866][ T23] end_report+0x78/0x160 [ 1882.255885][ T23] kasan_report+0x129/0x150 [ 1882.255912][ T23] ? run_irq_workd+0x116/0x190 [ 1882.255936][ T23] run_irq_workd+0x116/0x190 [ 1882.255956][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1882.255975][ T23] ? schedule+0x91/0x360 [ 1882.256001][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.256020][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.256037][ T23] smpboot_thread_fn+0x542/0xa60 [ 1882.256055][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1882.256077][ T23] kthread+0x711/0x8a0 [ 1882.256099][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1882.256117][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.256136][ T23] ? rt_spin_unlock+0x150/0x200 [ 1882.256160][ T23] ? rt_spin_unlock+0x161/0x200 [ 1882.256181][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.256202][ T23] ret_from_fork+0x4bc/0x870 [ 1882.256229][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1882.256258][ T23] ? __switch_to_asm+0x39/0x70 [ 1882.256280][ T23] ? __switch_to_asm+0x33/0x70 [ 1882.256303][ T23] ? __pfx_kthread+0x10/0x10 [ 1882.256323][ T23] ret_from_fork_asm+0x1a/0x30 [ 1882.256355][ T23] [ 1882.256642][ T23] Kernel Offset: disabled