last executing test programs: 34m58.279286572s ago: executing program 0 (id=291): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000000)={0x9f, 0x0, 0x1}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) r3 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd\'rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x4, 0x8, 0x7, 0xa, 0x100000fe, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x9) r4 = syz_io_uring_setup(0x254f, &(0x7f0000000280)={0x0, 0x270c, 0x0, 0x2, 0x16f}, &(0x7f0000000180), &(0x7f0000000300)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) r8 = syz_io_uring_setup(0x7fbc, &(0x7f0000000340)={0x0, 0x200, 0x800, 0x1ffffff, 0x18c, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x2000) r12 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x105801, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r12, 0xc01064c1, &(0x7f0000000240)={r13}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r11, 0xc00864c0, &(0x7f00000000c0)={r13}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd(0xc) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x208881, 0x0) 34m56.762466866s ago: executing program 0 (id=295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r1, 0x0, 0x300) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000e80)={0x0, 0x3, 0xc, @string={0xc, 0x3, "f6362299f1a7b77d0100"}}, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000380)=0x3) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000140)=[{0x0, 0x8, 0x0, 0xf2, @time={0x24}, {}, {}, @raw8={"3f5889e5d3adfc62a42c0d93"}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x20, 0x30, 0xfd, {0xfd, 0x11, "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"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5b}}, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main, @global=@item_4={0x3, 0x1, 0x8, "6ba44d27"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x52b}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0x12, 0xa9, "54259ba3bc1a195b7b0c66d32c07f28966fac857634d867112a86eb81f8968884044c44439fd360680891b1649b20851c76d6e84323b1c37635bcf4c83f8fc6ed8e76ffbbceda2f9c2a9535e9738b01bf3e8f5a940d4545941e6b6efa005cec7f18e22d7446278a160c5f86e2f9a00409410c7322e2453780a2b552c84650623d5383ad03ea22a5aa5a05061937bc7b32b5dacbe1fc9716c839ac8460229d3db1017129b6abb0e0b9c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x56}, &(0x7f0000000500)={0x20, 0x1, 0x4c, "b41cf84bcc00b71cae817fa66f9b66c8ad3ef38e31cd9b0419d502c694d335001eef025c6adc5441016f32bf56cb0698eb68c82cf18184447745e08b6c693a97ea326bc9332dbd366c06683b"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000000c0)={0x80042, 0x7, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r10, &(0x7f00000006c0)}, 0x20) 34m53.508836964s ago: executing program 0 (id=303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x40001011, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000200)=0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) getpeername$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r8, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1) close(r6) sendmmsg$unix(r1, 0x0, 0x0, 0x4040045) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7, 0x0, 0x28, 0x6, 0x21, 0x2, 0x7, 0x18}) 34m47.755756795s ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000055e7454b5c6a6751bccad87c7e96b59bfcea729a42324bd90061ee6f6a01550f307e889c464544eebd0a80775dfa"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) chroot(&(0x7f00000007c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) inotify_init() r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x64, 0x61, 0x0, 0x35, 0x35, 0x31, 0x38, 0x66, 0x35, 0x32, 0x37, 0x37, 0x33, 0x62, 0x38]}, &(0x7f0000000380)={0x0, "18860dba2573095e7ceaa4b5c12e6c2287e504f623849c7f5b5e7dddba33a769592a7c40f995382650c05602612959a2b83c889ce1e468607ed92f7f00522251", 0x2a}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0x200002) 34m46.404233647s ago: executing program 0 (id=325): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="a8b8b8b28225cc772f31fe", 0xb}, {&(0x7f0000000300)="ed892ffb", 0x4}], 0x2}, 0x8044000) 34m39.972722434s ago: executing program 0 (id=337): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000000)={0x9f, 0x0, 0x1}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) r3 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd\'rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x4, 0x8, 0x7, 0xa, 0x100000fe, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x9) r4 = syz_io_uring_setup(0x254f, &(0x7f0000000280)={0x0, 0x270c, 0x0, 0x2, 0x16f}, &(0x7f0000000180), &(0x7f0000000300)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) r7 = syz_io_uring_setup(0x7fbc, &(0x7f0000000340)={0x0, 0x200, 0x800, 0x1ffffff, 0x18c, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x2000) r11 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x105801, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r11, 0xc01064c1, &(0x7f0000000240)={r12}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0xc00864c0, &(0x7f00000000c0)={r12}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd(0xc) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x208881, 0x0) 34m37.571449801s ago: executing program 32 (id=337): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000000)={0x9f, 0x0, 0x1}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) r3 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd\'rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x4, 0x8, 0x7, 0xa, 0x100000fe, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) pread64(r1, 0x0, 0x0, 0x9) r4 = syz_io_uring_setup(0x254f, &(0x7f0000000280)={0x0, 0x270c, 0x0, 0x2, 0x16f}, &(0x7f0000000180), &(0x7f0000000300)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) r7 = syz_io_uring_setup(0x7fbc, &(0x7f0000000340)={0x0, 0x200, 0x800, 0x1ffffff, 0x18c, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x2000) r11 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x105801, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r11, 0xc01064c1, &(0x7f0000000240)={r12}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r10, 0xc00864c0, &(0x7f00000000c0)={r12}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x2}}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) eventfd(0xc) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x208881, 0x0) 34m33.52217604s ago: executing program 4 (id=356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = memfd_secret(0x80000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x70}, 0x8) bind$bt_sco(r2, &(0x7f0000000100), 0x8) listen(r2, 0x0) shutdown(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) 34m29.582076971s ago: executing program 4 (id=366): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d34, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4) 34m28.958322573s ago: executing program 4 (id=368): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x26, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r6, 0xc0045878) 34m28.068080489s ago: executing program 4 (id=370): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x3, 0x7}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r2}) 34m26.821271078s ago: executing program 4 (id=373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x3, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r2, 0x9) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 34m19.724085104s ago: executing program 4 (id=390): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x667}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pptp(0x18, 0x1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) 34m18.737887879s ago: executing program 33 (id=390): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x667}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pptp(0x18, 0x1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) 19m43.331660176s ago: executing program 3 (id=2006): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) 19m42.996210766s ago: executing program 3 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) 19m42.933414333s ago: executing program 3 (id=2008): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() pipe2$9p(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pivot_root(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000040), 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 19m40.884798592s ago: executing program 3 (id=2009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="230000000800000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="e907"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ustat(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r5) setresgid(r5, r5, r5) 19m35.615056047s ago: executing program 3 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f00000004c0), 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x4, r0}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 19m32.154483255s ago: executing program 3 (id=2021): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) truncate(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x7) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(0x0, 0x0, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(0x0, 0x8) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0xfffd, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fdf8c820e0a6daf0a7d33817fa1127caee55b0769b9b9ab1", "f80b0495eca862a8f09f1ce628066123b28dd1dc7e2dac79df36ee068de07b1c"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m15.78463523s ago: executing program 34 (id=2021): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) truncate(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x7) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(0x0, 0x0, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(0x0, 0x8) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0xfffd, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "fdf8c820e0a6daf0a7d33817fa1127caee55b0769b9b9ab1", "f80b0495eca862a8f09f1ce628066123b28dd1dc7e2dac79df36ee068de07b1c"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m40.047914733s ago: executing program 1 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 9m38.618073147s ago: executing program 1 (id=3073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x64000) 9m37.472423733s ago: executing program 1 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) wait4(r0, &(0x7f00000000c0), 0x2, &(0x7f0000000c40)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 9m36.336053299s ago: executing program 1 (id=3081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$revoke(0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 9m30.295458827s ago: executing program 1 (id=3090): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x28}, 0x28) 9m29.984294217s ago: executing program 1 (id=3092): mkdirat(0xffffffffffffff9c, 0x0, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a040000001200010000000001"], 0x64}}, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) listen(0xffffffffffffffff, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 9m23.804360875s ago: executing program 5 (id=3107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0xfffffffffffeffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x25d, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x6c}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x48, 0x0, @fd_index=0x7, 0x0, 0x0, 0x5, 0x12, 0x1}) io_uring_enter(r3, 0x291c, 0xfffffffe, 0x0, 0x0, 0x0) 9m19.677379705s ago: executing program 5 (id=3112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}, {0x0, [0x5f, 0x30]}}, 0x0, 0x28}, 0x28) 9m18.733632864s ago: executing program 5 (id=3114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) 9m13.272030034s ago: executing program 5 (id=3123): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000d80)={0x7b1, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000021002b000201feffff00000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0) shutdown(0xffffffffffffffff, 0x1) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x9) 9m11.69779688s ago: executing program 5 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m10.155537994s ago: executing program 5 (id=3130): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100038b61fb10c80a01c37bf3010203010902120001090000000904300300f5eee302"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004080}, 0x20000000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 8m54.068050588s ago: executing program 35 (id=3130): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100038b61fb10c80a01c37bf3010203010902120001090000000904300300f5eee302"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8004080}, 0x20000000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) 8m38.3344664s ago: executing program 7 (id=3179): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r3, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13", 0x2}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r5, 0x0, &(0x7f0000000400)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m37.364254981s ago: executing program 7 (id=3180): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="2030010000087ff3d4b4247772df779e96cd5bc25559f7f3960e93f94fccc8f44b0101562bcc839271e4b20e6303fd4d0cf4f323d1514729711b2a71a22c391a8f31fffd56060a62f3da5201defc"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) gettid() r3 = syz_io_uring_setup(0x1937, &(0x7f0000000040)={0x0, 0x8f819, 0x1000, 0xfffffffd, 0x369}, &(0x7f00000000c0), &(0x7f0000000300)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc8b189549d051d13, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000180)) io_uring_enter(r3, 0x25cf, 0x3a37, 0x4, &(0x7f0000000140)={[0x3]}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100004b42fd080a1a03011dad0104000000f639be00"/36], 0x0) close(r2) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) 8m29.522227612s ago: executing program 7 (id=3187): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000008010", @ANYRES32, @ANYBLOB="00000000000000000000000000b1fc506d000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x1d4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010003306000000000000000000000000000000000000ffffffffffffffffffff0000000000000000000000004e234000000080040a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000032000000fc02000000000000000000000000000027030000000000000104000000000000000000000000000000000000000000000700000000000000fcffffffffffffffffffffffffffffff000000000000000000000000000000000000de077e53000000000000000000000a0000000000000007020000000080000000000025bd7000023500000a0000ff00000000000000004f000200656362286369706800000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800000005b7a279072aa900"], 0xfffffffffffffc43}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1ffffe], [0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x744]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 8m28.176174885s ago: executing program 7 (id=3188): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000002) connect$unix(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) sendfile(r1, r1, 0x0, 0x4) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x7f, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0xe, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x6, 0x2, 0x81}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0x4, [{0x4e, &(0x7f00000002c0)=@string={0x4e, 0x3, "8d6ec5f4c73cecee1031038c2e9fb9761b62f42cbdf9abc660df43a7270a743ba142df5777edc416fdaa13d1376bde34c695b7599dcaacbb66424bb1138cd9f9d4cb40e1f0d9f51366a39931"}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000000801084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004d433000000ac1414bb000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000002000000f50000000000000000000000ffffffff4edc3cd0b73a65bffdcd383715cfd58552ad76b91fee0bb29cfc98330c3fe8ceb306fd83d0593e1c10a6512cba80708c9cae87e42935cb2d4d58ae15032f3c139900"/254], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x4) 8m24.888324505s ago: executing program 7 (id=3193): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0xa, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x44010) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x50) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) 8m24.147571397s ago: executing program 7 (id=3194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m8.683962802s ago: executing program 36 (id=3194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}]}, 0x3c}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.192521097s ago: executing program 6 (id=3761): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/208, 0xd0}], 0x1, 0x1, 0x3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000180001129a002cbd700000008000"], 0x5c}, 0x1, 0x0, 0x0, 0x80040}, 0x4008000) 10.856161386s ago: executing program 6 (id=3763): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) 9.570356858s ago: executing program 6 (id=3765): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(r3, 0x3, 0x0) prlimit64(r3, 0x6, 0x0, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000c00)=[{{&(0x7f0000000580)=@isdn, 0x80, &(0x7f00000008c0), 0x2, &(0x7f0000000240)=""/14, 0xfffffdd1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)}, {&(0x7f0000000c80)=""/178, 0xb2}, {&(0x7f00000009c0)=""/166, 0xa6}, {&(0x7f0000000a80)=""/144, 0x90}], 0x5, &(0x7f0000000100)=""/28, 0x1c}, 0x785a}], 0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x7) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100003b2200020000001800000018000180140002006905365f767469300000000000000000"], 0x2c}}, 0x20008000) dup(r0) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.827750277s ago: executing program 6 (id=3766): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="182093cdbe2e5d02065207bc000200891ff452023360806f01c742ff1663881f3400001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 8.413167131s ago: executing program 2 (id=3767): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e22, 0x3, @mcast1, 0x3}, {0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x0, {[0x1, 0x7, 0x6, 0x0, 0x81, 0x6, 0xfffff34a, 0x2]}}, 0x5c) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.216076693s ago: executing program 2 (id=3768): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() pipe2$9p(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 6.627480663s ago: executing program 2 (id=3769): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x48080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ppoll(&(0x7f0000000140)=[{r2, 0x8400}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="8683cfd2c39b8ae38659af0978ba51d5b8c4700ecb0779f7"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x802, 0x0) ppoll(&(0x7f0000000440)=[{r4, 0x80}, {r4, 0x2084}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000150a0102000000000000000000000000090001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 4.169211157s ago: executing program 6 (id=3770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r13 = socket(0x1e, 0x4, 0x0) waitid(0x2, r10, &(0x7f0000000540), 0x1, &(0x7f00000005c0)) connect$tipc(r13, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r13, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1.948152447s ago: executing program 2 (id=3771): mkdir(&(0x7f0000000000)='./bus\x00', 0x6) r0 = fsopen(&(0x7f0000000300)='aio\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/155, 0x9b}], 0x1, 0x10000, 0x47, 0xe) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x28, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, 0x0, 0x118) 1.244819964s ago: executing program 2 (id=3772): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4], 0x30}}, 0x0) 5.272578ms ago: executing program 2 (id=3773): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300395c8341b97c16245947ef7e50d7"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) msgget$private(0x0, 0x101) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) 0s ago: executing program 6 (id=3774): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) accept4$rose(r4, &(0x7f0000000040)=@full={0xb, @dev, @remote, 0x0, [@netrom, @default, @rose, @remote, @remote, @default]}, &(0x7f0000000080)=0x40, 0x80000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000044d564b00"]) kernel console output (not intermixed with test programs): ed cc 0x0c38 length: 249 > 2 [ 1822.753339][ T990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1822.755262][ T990] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1822.755389][ T990] usb 3-1: can't read configurations, error -71 [ 1823.973054][T18626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.973071][T18626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.973096][T18626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1824.729768][T17008] usb 8-1: USB disconnect, device number 9 [ 1824.739016][ T67] hsr_slave_0: left promiscuous mode [ 1825.586205][ T67] hsr_slave_1: left promiscuous mode [ 1825.587384][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.587421][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.649480][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.649513][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.708506][ T67] batman_adv: batadv0: Interface deactivated: dummy0 [ 1825.708536][ T67] batman_adv: batadv0: Removing interface: dummy0 [ 1825.923344][ T67] veth1_macvtap: left promiscuous mode [ 1825.923456][ T67] veth0_macvtap: left promiscuous mode [ 1825.923804][ T67] veth1_vlan: left promiscuous mode [ 1826.128202][ T5838] Bluetooth: hci3: command tx timeout [ 1828.154772][ T5838] Bluetooth: hci3: command tx timeout [ 1830.486694][ T5838] Bluetooth: hci3: command tx timeout [ 1830.998051][T18856] loop3: detected capacity change from 0 to 1 [ 1831.010265][T18856] Dev loop3: unable to read RDB block 1 [ 1831.010321][T18856] loop3: unable to read partition table [ 1831.010561][T18856] loop3: partition table beyond EOD, truncated [ 1831.010598][T18856] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1831.066453][T18856] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1832.555616][ T5838] Bluetooth: hci3: command tx timeout [ 1832.677558][T18876] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1834.188029][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1834.459674][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1837.942306][T18830] syzkaller0: entered promiscuous mode [ 1837.942335][T18830] syzkaller0: entered allmulticast mode [ 1838.007701][T18877] debugfs: 'ptm0' already exists in 'caif_serial' [ 1838.400073][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1839.704670][T10679] Bluetooth: hci4: command 0x0406 tx timeout [ 1840.204378][T18890] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1841.879168][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1842.845832][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1842.847453][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1842.849302][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1842.850080][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1843.062132][T18904] Bluetooth: MGMT ver 1.23 [ 1843.800449][T18916] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3211'. [ 1844.684702][T18626] hsr_slave_0: entered promiscuous mode [ 1844.686022][T18626] hsr_slave_1: entered promiscuous mode [ 1844.686940][T18626] debugfs: 'hsr0' already exists in 'hsr' [ 1844.686964][T18626] Cannot create hsr debugfs directory [ 1844.812707][T18802] lo speed is unknown, defaulting to 1000 [ 1844.955170][ T5838] Bluetooth: hci0: command tx timeout [ 1847.099213][ T5838] Bluetooth: hci0: command tx timeout [ 1849.238386][ T5838] Bluetooth: hci0: command tx timeout [ 1849.293189][T18897] lo speed is unknown, defaulting to 1000 [ 1849.510493][ T67] IPVS: stop unused estimator thread 0... [ 1851.275348][ T5838] Bluetooth: hci0: command tx timeout [ 1853.268520][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.268606][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.960904][ T67] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.255911][T10679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1858.263348][T10679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1858.631294][T18998] overlayfs: missing 'lowerdir' [ 1858.784816][T10679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1858.819040][T10679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1858.819823][T10679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1859.393099][ T67] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.583203][T19006] syzkaller1: entered promiscuous mode [ 1859.583232][T19006] syzkaller1: entered allmulticast mode [ 1859.618808][T18802] chnl_net:caif_netlink_parms(): no params data found [ 1860.052849][ T67] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.604579][T10679] Bluetooth: hci2: command tx timeout [ 1863.163544][T19024] fuse: Bad value for 'fd' [ 1865.229054][ T5838] Bluetooth: hci2: command tx timeout [ 1865.543658][ T67] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.586898][T18897] chnl_net:caif_netlink_parms(): no params data found [ 1865.599829][T18992] lo speed is unknown, defaulting to 1000 [ 1866.220046][T19041] overlayfs: missing 'lowerdir' [ 1867.276371][ T5838] Bluetooth: hci2: command tx timeout [ 1867.987773][T18802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.987919][T18802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.988180][T18802] bridge_slave_0: entered allmulticast mode [ 1868.018402][T18802] bridge_slave_0: entered promiscuous mode [ 1868.063065][T18802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.063222][T18802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.063417][T18802] bridge_slave_1: entered allmulticast mode [ 1868.100390][T18802] bridge_slave_1: entered promiscuous mode [ 1869.365592][ T5838] Bluetooth: hci2: command tx timeout [ 1870.151153][T18897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.151292][T18897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.151563][T18897] bridge_slave_0: entered allmulticast mode [ 1870.154302][T18897] bridge_slave_0: entered promiscuous mode [ 1870.301890][T18802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.346505][T18897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.346650][T18897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.346929][T18897] bridge_slave_1: entered allmulticast mode [ 1870.367260][T18897] bridge_slave_1: entered promiscuous mode [ 1870.382094][T18802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.694940][T18897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.703264][T18802] team0: Port device team_slave_0 added [ 1871.722265][T18897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.425639][T19093] overlayfs: missing 'lowerdir' [ 1872.432187][T18802] team0: Port device team_slave_1 added [ 1873.545380][T18897] team0: Port device team_slave_0 added [ 1874.250803][T18802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.250821][T18802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.250845][T18802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.278487][T18897] team0: Port device team_slave_1 added [ 1874.334319][T18802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.334336][T18802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.334360][T18802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.627476][T18897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.627494][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.627518][T18897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.764494][T18897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.764511][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.764536][T18897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.217339][T19130] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1877.217958][T19130] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1878.193798][T19133] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1878.246592][T19136] overlayfs: missing 'lowerdir' [ 1879.745333][T18802] hsr_slave_0: entered promiscuous mode [ 1879.746818][T18802] hsr_slave_1: entered promiscuous mode [ 1879.747745][T18802] debugfs: 'hsr0' already exists in 'hsr' [ 1879.747769][T18802] Cannot create hsr debugfs directory [ 1879.756884][T18992] chnl_net:caif_netlink_parms(): no params data found [ 1882.167201][T18897] hsr_slave_0: entered promiscuous mode [ 1882.168650][T18897] hsr_slave_1: entered promiscuous mode [ 1882.169548][T18897] debugfs: 'hsr0' already exists in 'hsr' [ 1882.169572][T18897] Cannot create hsr debugfs directory [ 1882.484229][T10679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1882.527250][T10679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1882.528956][T10679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1882.549523][T10679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1882.568192][T10679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1883.847019][T19171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1883.847581][T19171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1884.634934][ T5838] Bluetooth: hci1: command tx timeout [ 1884.820921][T19173] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3267'. [ 1884.870355][T19176] overlayfs: missing 'lowerdir' [ 1886.176953][T18992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.177101][T18992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.177371][T18992] bridge_slave_0: entered allmulticast mode [ 1886.180089][T18992] bridge_slave_0: entered promiscuous mode [ 1886.635529][T18992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.635638][T18992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.635837][T18992] bridge_slave_1: entered allmulticast mode [ 1886.641166][T18992] bridge_slave_1: entered promiscuous mode [ 1886.729910][ T5838] Bluetooth: hci1: command tx timeout [ 1887.906431][T19156] lo speed is unknown, defaulting to 1000 [ 1888.005689][T18992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1889.034714][ T5838] Bluetooth: hci1: command tx timeout [ 1889.230623][T18992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.916089][ T67] bridge_slave_1: left allmulticast mode [ 1889.916122][ T67] bridge_slave_1: left promiscuous mode [ 1889.916403][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.021045][ T67] bridge_slave_0: left allmulticast mode [ 1890.021078][ T67] bridge_slave_0: left promiscuous mode [ 1890.021448][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.168324][ T67] bridge_slave_1: left allmulticast mode [ 1890.168363][ T67] bridge_slave_1: left promiscuous mode [ 1890.168608][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.259776][ T67] bridge_slave_0: left allmulticast mode [ 1890.259811][ T67] bridge_slave_0: left promiscuous mode [ 1890.260067][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.757979][T19207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1890.758046][T19207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3273'. [ 1891.117815][ T5838] Bluetooth: hci1: command tx timeout [ 1893.001178][T19215] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3276'. [ 1893.055293][T19216] overlayfs: missing 'lowerdir' [ 1895.012002][T19224] fuse: Bad value for 'fd' [ 1898.095284][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1898.145823][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1898.200583][ T67] bond0 (unregistering): Released all slaves [ 1901.777517][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.859483][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.919148][ T67] bond0 (unregistering): Released all slaves [ 1901.978335][T10679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1901.996682][T10679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1902.019105][T18992] team0: Port device team_slave_0 added [ 1902.032800][T10679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1902.052271][T10679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1902.054261][T10679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1902.191068][T19235] netlink: 'syz.6.3281': attribute type 12 has an invalid length. [ 1902.191091][T19235] netlink: 'syz.6.3281': attribute type 29 has an invalid length. [ 1902.191103][T19235] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1902.223945][T18992] team0: Port device team_slave_1 added [ 1902.883853][ T67] tipc: Left network mode [ 1904.244050][ T5838] Bluetooth: hci3: command tx timeout [ 1906.335392][ T5838] Bluetooth: hci3: command tx timeout [ 1908.288753][T18992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.288776][T18992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.288800][T18992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.358749][T18992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.358765][T18992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.358791][T18992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.394575][ T5838] Bluetooth: hci3: command tx timeout [ 1910.229014][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3289'. [ 1911.019716][ T5838] Bluetooth: hci3: command tx timeout [ 1912.497554][T19237] lo speed is unknown, defaulting to 1000 [ 1912.775646][T18992] hsr_slave_0: entered promiscuous mode [ 1912.777315][T18992] hsr_slave_1: entered promiscuous mode [ 1912.778438][T18992] debugfs: 'hsr0' already exists in 'hsr' [ 1912.778462][T18992] Cannot create hsr debugfs directory [ 1913.614958][ T67] hsr_slave_0: left promiscuous mode [ 1913.670344][ T67] hsr_slave_1: left promiscuous mode [ 1913.671290][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1913.671319][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1913.725663][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.725695][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.619541][ T67] hsr_slave_0: left promiscuous mode [ 1915.054679][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.054753][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.091860][ T67] hsr_slave_1: left promiscuous mode [ 1915.107022][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.147921][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1916.474292][ T67] veth1_macvtap: left promiscuous mode [ 1916.484244][ T67] veth0_macvtap: left promiscuous mode [ 1916.490731][ T67] veth1_vlan: left promiscuous mode [ 1916.490955][ T67] veth0_vlan: left promiscuous mode [ 1918.377304][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1918.393988][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1918.404246][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1918.413860][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1918.417660][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1920.185644][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.465496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.471066][T19309] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1920.643371][T19308] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1920.707419][T10679] Bluetooth: hci0: command tx timeout [ 1920.789753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.974051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.854175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1921.901812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.634404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1922.721488][T10679] Bluetooth: hci0: command tx timeout [ 1922.998780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1923.202763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.100027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.184176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.480044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.816906][T10679] Bluetooth: hci0: command tx timeout [ 1924.922916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.131417][T19326] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1925.464679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1927.078611][T10679] Bluetooth: hci0: command tx timeout [ 1930.885529][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1931.437279][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1931.941412][T19361] netlink: 'syz.6.3310': attribute type 1 has an invalid length. [ 1931.941433][T19361] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3310'. [ 1941.498683][T19382] random: crng reseeded on system resumption [ 1943.681946][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1943.707980][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1943.709665][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1943.717479][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1943.718498][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1945.837911][ T5838] Bluetooth: hci6: command tx timeout [ 1947.980589][ T5838] Bluetooth: hci6: command tx timeout [ 1950.036362][ T5838] Bluetooth: hci6: command tx timeout [ 1952.074684][ T5838] Bluetooth: hci6: command tx timeout [ 1952.290952][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1952.703950][T19431] cgroup: fork rejected by pids controller in /syz6 [ 1954.668974][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1960.897226][T19156] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1961.432026][T19394] lo speed is unknown, defaulting to 1000 [ 1962.985258][T19300] lo speed is unknown, defaulting to 1000 [ 1965.197767][T19517] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1966.311416][T10679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1966.328321][T10679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1966.333645][T10679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1966.335102][T10679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1966.336782][T10679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1968.727329][T10679] Bluetooth: hci1: command tx timeout [ 1970.940337][T10679] Bluetooth: hci1: command tx timeout [ 1971.005527][T19519] lo speed is unknown, defaulting to 1000 [ 1971.228497][T19546] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 1971.709379][T19394] chnl_net:caif_netlink_parms(): no params data found [ 1972.107017][T19300] chnl_net:caif_netlink_parms(): no params data found [ 1972.274892][T19519] chnl_net:caif_netlink_parms(): no params data found [ 1972.965035][T10679] Bluetooth: hci1: command tx timeout [ 1973.420102][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.420355][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.420652][T19394] bridge_slave_0: entered allmulticast mode [ 1973.449060][T19394] bridge_slave_0: entered promiscuous mode [ 1973.596265][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.596423][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.596677][T19394] bridge_slave_1: entered allmulticast mode [ 1973.600930][T19394] bridge_slave_1: entered promiscuous mode [ 1974.138087][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1974.437516][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1974.438060][T19300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.438287][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.438497][T19300] bridge_slave_0: entered allmulticast mode [ 1974.442138][T19300] bridge_slave_0: entered promiscuous mode [ 1974.500011][ T67] IPVS: stop unused estimator thread 0... [ 1974.968061][T19300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.968198][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.968438][T19300] bridge_slave_1: entered allmulticast mode [ 1974.970148][T19300] bridge_slave_1: entered promiscuous mode [ 1974.971393][T19519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.971530][T19519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.971743][T19519] bridge_slave_0: entered allmulticast mode [ 1975.021339][T19519] bridge_slave_0: entered promiscuous mode [ 1975.034621][T10679] Bluetooth: hci1: command tx timeout [ 1975.198710][T19519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.198934][T19519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.199192][T19519] bridge_slave_1: entered allmulticast mode [ 1975.202526][T19519] bridge_slave_1: entered promiscuous mode [ 1975.239094][T19394] team0: Port device team_slave_0 added [ 1975.943164][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.943240][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.990773][T16134] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1977.026823][T19394] team0: Port device team_slave_1 added [ 1977.033113][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.154707][T16134] usb 3-1: Using ep0 maxpacket: 32 [ 1977.162430][T16134] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1977.162454][T16134] usb 3-1: config 0 has no interface number 0 [ 1977.162506][T16134] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1977.176628][T16134] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1977.176656][T16134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.176673][T16134] usb 3-1: Product: syz [ 1977.176686][T16134] usb 3-1: Manufacturer: syz [ 1977.176700][T16134] usb 3-1: SerialNumber: syz [ 1977.188802][T16134] usb 3-1: config 0 descriptor?? [ 1977.225774][T16134] smsc75xx v1.0.0 [ 1977.238261][ T37] kauditd_printk_skb: 196 callbacks suppressed [ 1977.238278][ T37] audit: type=1326 audit(2000004720.052:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.241625][ T37] audit: type=1326 audit(2000004720.052:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.243526][ T37] audit: type=1326 audit(2000004720.052:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.265921][ T37] audit: type=1326 audit(2000004720.082:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.268496][ T37] audit: type=1326 audit(2000004720.082:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.271859][ T37] audit: type=1326 audit(2000004720.082:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.398347][ T37] audit: type=1326 audit(2000004720.212:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.398515][ T37] audit: type=1326 audit(2000004720.212:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19591 comm="syz.6.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x7ffc0000 [ 1977.444560][T16134] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1977.444590][T16134] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1977.444609][T16134] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1977.444901][T16134] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 1977.720582][T19519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.903967][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1977.908797][T16134] usb 3-1: USB disconnect, device number 4 [ 1977.932510][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1977.937562][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1977.941062][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1977.950156][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1978.098958][T19519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1978.135541][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.135556][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.135590][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.665652][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.665668][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.665695][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1979.569341][T19519] team0: Port device team_slave_0 added [ 1979.805850][T19610] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1979.967832][T19519] team0: Port device team_slave_1 added [ 1979.997157][ T5838] Bluetooth: hci2: command tx timeout [ 1980.551505][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3361'. [ 1981.668849][ T67] bridge_slave_1: left allmulticast mode [ 1981.668882][ T67] bridge_slave_1: left promiscuous mode [ 1981.669136][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.080303][ T5838] Bluetooth: hci2: command tx timeout [ 1982.310969][ T67] bridge_slave_0: left allmulticast mode [ 1982.311003][ T67] bridge_slave_0: left promiscuous mode [ 1982.312086][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.449394][T19623] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1983.240836][ T67] bridge_slave_1: left allmulticast mode [ 1983.240870][ T67] bridge_slave_1: left promiscuous mode [ 1983.241146][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.597171][ T67] bridge_slave_0: left allmulticast mode [ 1983.597206][ T67] bridge_slave_0: left promiscuous mode [ 1983.597467][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.059715][ T67] bridge_slave_1: left allmulticast mode [ 1984.059749][ T67] bridge_slave_1: left promiscuous mode [ 1984.060009][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.116701][ T67] bridge_slave_0: left allmulticast mode [ 1984.116813][ T67] bridge_slave_0: left promiscuous mode [ 1984.117134][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.154672][ T5838] Bluetooth: hci2: command tx timeout [ 1984.262581][ T67] bridge_slave_1: left allmulticast mode [ 1984.262615][ T67] bridge_slave_1: left promiscuous mode [ 1984.262891][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.727375][ T67] bridge_slave_1: left allmulticast mode [ 1984.727716][ T67] bridge_slave_1: left promiscuous mode [ 1984.737635][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.876270][ T67] bridge_slave_0: left allmulticast mode [ 1984.876308][ T67] bridge_slave_0: left promiscuous mode [ 1984.876586][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.429485][ T67] bond0 (unregistering): Released all slaves [ 1985.805612][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.292532][ T5838] Bluetooth: hci2: command tx timeout [ 1986.476174][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.579610][ T67] bond0 (unregistering): Released all slaves [ 1987.094870][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.175730][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.245381][ T67] bond0 (unregistering): Released all slaves [ 1987.525291][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.655510][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.738844][ T67] bond0 (unregistering): Released all slaves [ 1990.495316][ T67]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1990.588559][ T67]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1990.607248][ T67]  (unregistering): Released all slaves [ 1990.891205][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1990.965427][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1991.029078][ T67] bond0 (unregistering): Released all slaves [ 1991.420054][T19643] netlink: 'syz.6.3368': attribute type 12 has an invalid length. [ 1991.420077][T19643] netlink: 'syz.6.3368': attribute type 29 has an invalid length. [ 1991.420091][T19643] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3368'. [ 1991.442316][T19394] hsr_slave_0: entered promiscuous mode [ 1991.443565][T19394] hsr_slave_1: entered promiscuous mode [ 1991.444721][T19394] debugfs: 'hsr0' already exists in 'hsr' [ 1991.444746][T19394] Cannot create hsr debugfs directory [ 1991.465798][T19519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.465812][T19519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.465837][T19519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1991.475147][T19601] lo speed is unknown, defaulting to 1000 [ 1991.493342][T19519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1991.493357][T19519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.493381][T19519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1992.314925][T12435] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1992.466019][T12435] usb 7-1: Using ep0 maxpacket: 16 [ 1992.491249][T12435] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.491300][T12435] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1992.945634][T12435] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1992.945663][T12435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.945681][T12435] usb 7-1: Product: syz [ 1992.945695][T12435] usb 7-1: Manufacturer: syz [ 1992.945814][T12435] usb 7-1: SerialNumber: syz [ 1996.592436][T12435] usb 7-1: 0:2 : does not exist [ 1996.615154][T12435] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1996.868668][T12435] usb 7-1: USB disconnect, device number 7 [ 1996.972082][T19646] udevd[19646]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1997.078418][ T67] tipc: Left network mode [ 1997.104221][T19519] hsr_slave_0: entered promiscuous mode [ 1997.186316][T19519] hsr_slave_1: entered promiscuous mode [ 1997.187377][T19519] debugfs: 'hsr0' already exists in 'hsr' [ 1997.187403][T19519] Cannot create hsr debugfs directory [ 1999.578088][ T67] IPVS: stopping backup sync thread 8389 ... [ 2001.976165][T19683] netlink: 'syz.2.3377': attribute type 12 has an invalid length. [ 2001.976190][T19683] netlink: 'syz.2.3377': attribute type 29 has an invalid length. [ 2001.976202][T19683] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3377'. [ 2005.219540][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2005.253581][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2005.264005][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2005.286831][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2005.287623][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2007.115439][T19601] chnl_net:caif_netlink_parms(): no params data found [ 2007.516332][ T5838] Bluetooth: hci0: command tx timeout [ 2007.693511][T19697] lo speed is unknown, defaulting to 1000 [ 2007.774867][ T67] hsr_slave_0: left promiscuous mode [ 2007.836831][ T67] hsr_slave_1: left promiscuous mode [ 2007.837835][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.911012][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.940623][T19720] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3386'. [ 2007.993407][T19722] overlayfs: missing 'lowerdir' [ 2008.086337][ T67] hsr_slave_0: left promiscuous mode [ 2008.108611][ T67] hsr_slave_1: left promiscuous mode [ 2008.109730][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.147114][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.204810][ T67] hsr_slave_0: left promiscuous mode [ 2008.226370][ T67] hsr_slave_1: left promiscuous mode [ 2008.229546][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.265835][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.405138][ T67] hsr_slave_0: left promiscuous mode [ 2008.434018][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2008.434050][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.473294][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2008.473325][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.635427][ T67] hsr_slave_0: left promiscuous mode [ 2008.658129][ T67] hsr_slave_1: left promiscuous mode [ 2008.660602][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.698342][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.881053][ T67] veth0_macvtap: left promiscuous mode [ 2008.881364][ T67] veth1_vlan: left promiscuous mode [ 2009.594765][ T5838] Bluetooth: hci0: command tx timeout [ 2009.903770][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2010.092895][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2011.605018][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2011.675373][ T5838] Bluetooth: hci0: command tx timeout [ 2011.806583][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2013.046096][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2013.246305][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2013.764580][ T5838] Bluetooth: hci0: command tx timeout [ 2016.625608][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2016.905789][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2020.975523][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2021.176901][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2022.042916][T16673] lo speed is unknown, defaulting to 1000 [ 2022.042945][T16673] infiniband 3yz0: ib_query_port failed (-19) [ 2023.647433][T19731] netlink: 'syz.2.3387': attribute type 12 has an invalid length. [ 2023.647456][T19731] netlink: 'syz.2.3387': attribute type 29 has an invalid length. [ 2023.647469][T19731] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3387'. [ 2023.693701][T19601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.693866][T19601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.694127][T19601] bridge_slave_0: entered allmulticast mode [ 2023.697446][T19601] bridge_slave_0: entered promiscuous mode [ 2023.813551][T19601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.813700][T19601] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.813957][T19601] bridge_slave_1: entered allmulticast mode [ 2023.824847][T19601] bridge_slave_1: entered promiscuous mode [ 2024.448541][T19601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2024.466216][T19601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2024.868182][T10679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2024.898918][T10679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2024.900625][T10679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2024.928602][T10679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2024.929392][T10679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2026.351477][T19752] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2026.955919][T10679] Bluetooth: hci3: command tx timeout [ 2027.779388][T19601] team0: Port device team_slave_0 added [ 2027.798029][T19601] team0: Port device team_slave_1 added [ 2028.492199][T19601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.492216][T19601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.492242][T19601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.576988][T19601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.577004][T19601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.577027][T19601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.034748][T10679] Bluetooth: hci3: command tx timeout [ 2030.324196][T19772] netlink: 'syz.2.3398': attribute type 12 has an invalid length. [ 2030.324217][T19772] netlink: 'syz.2.3398': attribute type 29 has an invalid length. [ 2030.324229][T19772] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3398'. [ 2030.379107][T19601] hsr_slave_0: entered promiscuous mode [ 2030.380340][T19601] hsr_slave_1: entered promiscuous mode [ 2030.480130][T19697] chnl_net:caif_netlink_parms(): no params data found [ 2031.114705][T10679] Bluetooth: hci3: command tx timeout [ 2033.983624][T10679] Bluetooth: hci3: command tx timeout [ 2034.090450][T19697] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.090593][T19697] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.090837][T19697] bridge_slave_0: entered allmulticast mode [ 2034.093792][T19697] bridge_slave_0: entered promiscuous mode [ 2034.169225][T19697] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.169589][T19697] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.169858][T19697] bridge_slave_1: entered allmulticast mode [ 2034.172703][T19697] bridge_slave_1: entered promiscuous mode [ 2035.398698][T19697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.428906][T19697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.066148][T19697] team0: Port device team_slave_0 added [ 2036.067263][T19743] chnl_net:caif_netlink_parms(): no params data found [ 2036.116089][T19697] team0: Port device team_slave_1 added [ 2037.305145][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.305545][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.891170][T19836] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2039.058456][T19697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2039.058475][T19697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2039.058500][T19697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2039.116638][T19697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2039.116655][T19697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2039.116681][T19697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2039.667936][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3415'. [ 2039.839710][T19743] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.839847][T19743] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.840095][T19743] bridge_slave_0: entered allmulticast mode [ 2039.854581][T19743] bridge_slave_0: entered promiscuous mode [ 2039.945216][T19697] hsr_slave_0: entered promiscuous mode [ 2039.951443][T19697] hsr_slave_1: entered promiscuous mode [ 2039.977104][T19697] debugfs: 'hsr0' already exists in 'hsr' [ 2039.977133][T19697] Cannot create hsr debugfs directory [ 2039.995117][T19743] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.995253][T19743] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.995536][T19743] bridge_slave_1: entered allmulticast mode [ 2039.998265][T19743] bridge_slave_1: entered promiscuous mode [ 2040.166870][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2040.192297][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2040.193877][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2040.200764][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2040.202279][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2042.314762][T10679] Bluetooth: hci1: command tx timeout [ 2043.164206][T19743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2043.252782][T19743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2043.737742][T19743] team0: Port device team_slave_0 added [ 2043.776752][T19743] team0: Port device team_slave_1 added [ 2044.394667][T10679] Bluetooth: hci1: command tx timeout [ 2044.435026][ T990] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2044.460058][T19743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2044.460073][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.460098][T19743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2044.584819][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 2044.587529][ T990] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2044.587553][ T990] usb 3-1: config 0 has no interface number 0 [ 2044.590768][ T990] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2044.590794][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.590814][ T990] usb 3-1: Product: syz [ 2044.590827][ T990] usb 3-1: Manufacturer: syz [ 2044.590840][ T990] usb 3-1: SerialNumber: syz [ 2044.596725][T19743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.596739][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.596764][T19743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.606529][ T990] usb 3-1: config 0 descriptor?? [ 2044.630700][ T990] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2044.860328][ T990] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 2044.992844][T19853] udevd[19853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2045.289741][T19743] hsr_slave_0: entered promiscuous mode [ 2045.290960][T19743] hsr_slave_1: entered promiscuous mode [ 2045.291786][T19743] debugfs: 'hsr0' already exists in 'hsr' [ 2045.291806][T19743] Cannot create hsr debugfs directory [ 2045.409625][ T990] usb 3-1: USB disconnect, device number 5 [ 2046.815087][T10679] Bluetooth: hci1: command tx timeout [ 2048.104992][T19697] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2049.091370][T10679] Bluetooth: hci1: command tx timeout [ 2049.144864][T19697] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2049.692872][T19697] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2049.970304][T19697] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2051.997732][T19851] chnl_net:caif_netlink_parms(): no params data found [ 2054.898811][T19940] netlink: 'syz.6.3436': attribute type 1 has an invalid length. [ 2054.898833][T19940] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3436'. [ 2054.958678][T19851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.958839][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.959117][T19851] bridge_slave_0: entered allmulticast mode [ 2054.962092][T19851] bridge_slave_0: entered promiscuous mode [ 2055.013452][T19851] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.013590][T19851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.013849][T19851] bridge_slave_1: entered allmulticast mode [ 2055.051556][T19851] bridge_slave_1: entered promiscuous mode [ 2055.060410][T19743] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2055.484682][T19743] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2057.056764][T19743] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2057.165122][T19851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2057.177877][T19743] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2057.271320][T19851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2057.663828][T19851] team0: Port device team_slave_0 added [ 2057.915894][T19851] team0: Port device team_slave_1 added [ 2058.061280][ T67] bridge_slave_1: left allmulticast mode [ 2058.061313][ T67] bridge_slave_1: left promiscuous mode [ 2058.061635][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.133198][ T67] bridge_slave_0: left allmulticast mode [ 2058.133230][ T67] bridge_slave_0: left promiscuous mode [ 2058.133492][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.212505][ T67] bridge_slave_1: left allmulticast mode [ 2058.212536][ T67] bridge_slave_1: left promiscuous mode [ 2058.212787][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.316780][ T67] bridge_slave_0: left allmulticast mode [ 2058.316813][ T67] bridge_slave_0: left promiscuous mode [ 2058.317082][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.389834][ T67] bridge_slave_1: left allmulticast mode [ 2058.389872][ T67] bridge_slave_1: left promiscuous mode [ 2058.390118][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.469618][ T67] bridge_slave_0: left allmulticast mode [ 2058.469650][ T67] bridge_slave_0: left promiscuous mode [ 2058.469903][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.536280][ T67] bridge_slave_1: left allmulticast mode [ 2058.536312][ T67] bridge_slave_1: left promiscuous mode [ 2058.536565][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.737764][ T67] bridge_slave_0: left allmulticast mode [ 2058.737799][ T67] bridge_slave_0: left promiscuous mode [ 2058.738055][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.523717][T19967] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2062.383892][T19978] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2063.435831][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2063.539323][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2063.599723][ T67] bond0 (unregistering): Released all slaves [ 2063.955416][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.360825][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2064.859857][ T67] bond0 (unregistering): Released all slaves [ 2065.647315][T10679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2065.667071][T10679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2065.678667][T10679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2065.680745][T10679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2065.681512][T10679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2066.698633][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2066.832444][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2066.917719][ T67] bond0 (unregistering): Released all slaves [ 2067.355616][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2067.425981][ T67] bond0 (unregistering): Released all slaves [ 2067.869848][ T5838] Bluetooth: hci2: command tx timeout [ 2067.933850][T19851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2067.933866][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.933890][T19851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2067.982877][T19851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2067.982893][T19851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.982918][T19851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2068.600991][T19851] hsr_slave_0: entered promiscuous mode [ 2068.602360][T19851] hsr_slave_1: entered promiscuous mode [ 2068.603335][T19851] debugfs: 'hsr0' already exists in 'hsr' [ 2068.603359][T19851] Cannot create hsr debugfs directory [ 2068.624498][ T5968] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 2068.777088][ T5968] usb 7-1: config index 0 descriptor too short (expected 61256, got 72) [ 2068.777116][ T5968] usb 7-1: config 1 has an invalid interface number: 0 but max is -1 [ 2068.777135][ T5968] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.777153][ T5968] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 2068.777219][ T5968] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 2068.778739][ T5968] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2068.778765][ T5968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2068.778888][ T5968] usb 7-1: SerialNumber: syz [ 2068.937769][ T5968] cdc_acm 7-1:1.0: skipping garbage [ 2068.937791][ T5968] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 2068.937817][ T5968] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 2068.937851][ T5968] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 2069.963979][ T5838] Bluetooth: hci2: command tx timeout [ 2070.001848][T20008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.028629][T20008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.795048][T12435] usb 7-1: USB disconnect, device number 8 [ 2071.995417][ T5838] Bluetooth: hci2: command tx timeout [ 2072.434675][ T67] hsr_slave_0: left promiscuous mode [ 2072.704734][ T67] hsr_slave_1: left promiscuous mode [ 2072.705710][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2072.728308][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2074.034692][ T67] hsr_slave_0: left promiscuous mode [ 2074.054956][ T67] hsr_slave_1: left promiscuous mode [ 2074.056059][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2074.074524][ T5838] Bluetooth: hci2: command tx timeout [ 2074.105748][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2074.265531][ T67] hsr_slave_0: left promiscuous mode [ 2074.284709][ T67] hsr_slave_1: left promiscuous mode [ 2074.285744][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2074.350664][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2075.332604][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2075.526798][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2076.963525][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2077.145493][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2078.594366][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2078.759472][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2083.724935][T19991] chnl_net:caif_netlink_parms(): no params data found [ 2085.501172][T20062] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3465'. [ 2086.918793][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2086.942855][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2086.946076][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2086.947994][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2086.948795][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2089.034903][ T5838] Bluetooth: hci0: command tx timeout [ 2090.715965][T19991] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.716107][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.716369][T19991] bridge_slave_0: entered allmulticast mode [ 2090.719127][T19991] bridge_slave_0: entered promiscuous mode [ 2091.217748][ T5838] Bluetooth: hci0: command tx timeout [ 2091.224801][T19991] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.224940][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.225198][T19991] bridge_slave_1: entered allmulticast mode [ 2091.243085][T19991] bridge_slave_1: entered promiscuous mode [ 2092.349213][T19991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.450388][T19991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.712950][T20103] binder: Bad value for 'max' [ 2093.743565][ T5838] Bluetooth: hci0: command tx timeout [ 2093.925865][T19991] team0: Port device team_slave_0 added [ 2093.998035][T19991] team0: Port device team_slave_1 added [ 2094.035138][T19851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2094.467431][T19851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2094.639166][T19851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2094.692355][T19991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2094.692372][T19991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2094.692398][T19991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2094.714467][T19851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2094.792930][T19991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2094.792951][T19991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2094.792981][T19991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2095.448126][T19991] hsr_slave_0: entered promiscuous mode [ 2095.448927][T19991] hsr_slave_1: entered promiscuous mode [ 2096.345959][ T5838] Bluetooth: hci0: command tx timeout [ 2098.138738][T20067] chnl_net:caif_netlink_parms(): no params data found [ 2099.342380][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.342457][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2102.917382][T10679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2102.936828][T10679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2102.938575][T10679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2102.939910][T10679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2102.940781][T10679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2104.624469][ T990] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2104.797327][ T990] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2104.797345][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.802034][ T990] usb 3-1: config 0 descriptor?? [ 2104.810278][ T990] cp210x 3-1:0.0: cp210x converter detected [ 2105.114859][ T5838] Bluetooth: hci1: command tx timeout [ 2105.202333][ T990] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2105.202369][ T990] cp210x 3-1:0.0: querying part number failed [ 2105.234941][ T990] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2105.253214][ T990] usb 3-1: USB disconnect, device number 6 [ 2105.333673][T20067] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.333905][T20067] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.334167][T20067] bridge_slave_0: entered allmulticast mode [ 2105.550475][ T990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2105.551376][ T990] cp210x 3-1:0.0: device disconnected [ 2105.570111][T20067] bridge_slave_0: entered promiscuous mode [ 2106.759154][T20189] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3497'. [ 2107.265914][ T5838] Bluetooth: hci1: command tx timeout [ 2108.256115][T20067] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.256290][T20067] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.256558][T20067] bridge_slave_1: entered allmulticast mode [ 2108.259315][T20067] bridge_slave_1: entered promiscuous mode [ 2109.284937][ T5838] Bluetooth: hci1: command tx timeout [ 2111.103177][T20067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.354498][ T5838] Bluetooth: hci1: command tx timeout [ 2112.152950][T20067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.113524][T20067] team0: Port device team_slave_0 added [ 2113.157144][T20067] team0: Port device team_slave_1 added [ 2114.947263][T20225] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3506'. [ 2115.221271][T20067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.221287][T20067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.221313][T20067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.242387][T20227] netlink: 'syz.6.3505': attribute type 12 has an invalid length. [ 2115.242407][T20227] netlink: 'syz.6.3505': attribute type 29 has an invalid length. [ 2115.242420][T20227] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3505'. [ 2115.257051][T20067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.257068][T20067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2115.257094][T20067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2116.196169][ T67] bridge_slave_1: left allmulticast mode [ 2116.196200][ T67] bridge_slave_1: left promiscuous mode [ 2116.196462][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.444936][ T67] bridge_slave_0: left allmulticast mode [ 2117.444969][ T67] bridge_slave_0: left promiscuous mode [ 2117.445266][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.362224][ T67] bridge_slave_1: left allmulticast mode [ 2119.362264][ T67] bridge_slave_1: left promiscuous mode [ 2119.362533][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.099889][ T67] bridge_slave_0: left allmulticast mode [ 2120.099986][ T67] bridge_slave_0: left promiscuous mode [ 2120.103492][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.972437][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2122.048494][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2122.112241][ T67] bond0 (unregistering): Released all slaves [ 2122.885392][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2122.966618][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2123.039309][ T67] bond0 (unregistering): Released all slaves [ 2123.159023][T20067] hsr_slave_0: entered promiscuous mode [ 2123.160331][T20067] hsr_slave_1: entered promiscuous mode [ 2123.161263][T20067] debugfs: 'hsr0' already exists in 'hsr' [ 2123.161286][T20067] Cannot create hsr debugfs directory [ 2123.203943][T20262] netlink: 'syz.6.3514': attribute type 12 has an invalid length. [ 2123.203964][T20262] netlink: 'syz.6.3514': attribute type 29 has an invalid length. [ 2123.203976][T20262] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3514'. [ 2124.994545][ T67] hsr_slave_0: left promiscuous mode [ 2125.014705][ T67] hsr_slave_1: left promiscuous mode [ 2125.015694][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.057031][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2125.201276][ T67] hsr_slave_0: left promiscuous mode [ 2125.217814][ T67] hsr_slave_1: left promiscuous mode [ 2125.220330][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.271266][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2126.155487][T10679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2126.178240][T10679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2126.181666][T10679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2126.184595][T10679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2126.197582][T10679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2126.905552][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2127.118318][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2128.314590][T10679] Bluetooth: hci3: command tx timeout [ 2130.394445][T10679] Bluetooth: hci3: command tx timeout [ 2131.487005][ T67] team0 (unregistering): Port device team_slave_1 removed [ 2132.492527][T10679] Bluetooth: hci3: command tx timeout [ 2132.737911][T20310] openvswitch: netlink: Message has 8 unknown bytes. [ 2132.815373][ T67] team0 (unregistering): Port device team_slave_0 removed [ 2133.084599][T12435] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2133.234503][T12435] usb 3-1: Using ep0 maxpacket: 8 [ 2133.239356][T12435] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2133.239442][T12435] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 2133.241163][T12435] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2133.241198][T12435] usb 3-1: can't read configurations, error -71 [ 2133.749932][T20299] netlink: 'syz.6.3522': attribute type 12 has an invalid length. [ 2133.749952][T20299] netlink: 'syz.6.3522': attribute type 29 has an invalid length. [ 2133.749965][T20299] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3522'. [ 2133.942542][T20165] chnl_net:caif_netlink_parms(): no params data found [ 2136.253780][T10679] Bluetooth: hci3: command tx timeout [ 2137.680582][T20340] FAULT_INJECTION: forcing a failure. [ 2137.680582][T20340] name failslab, interval 1, probability 0, space 0, times 0 [ 2137.680615][T20340] CPU: 1 UID: 0 PID: 20340 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2137.680636][T20340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2137.680647][T20340] Call Trace: [ 2137.680655][T20340] [ 2137.680663][T20340] dump_stack_lvl+0x189/0x250 [ 2137.680704][T20340] ? __pfx____ratelimit+0x10/0x10 [ 2137.680727][T20340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2137.680751][T20340] ? __pfx__printk+0x10/0x10 [ 2137.680777][T20340] ? __pfx___might_resched+0x10/0x10 [ 2137.680796][T20340] ? fs_reclaim_acquire+0x7d/0x100 [ 2137.680819][T20340] should_fail_ex+0x46c/0x600 [ 2137.680848][T20340] should_failslab+0xa8/0x100 [ 2137.680872][T20340] __kmalloc_noprof+0xcb/0x430 [ 2137.680893][T20340] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2137.680923][T20340] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2137.680946][T20340] ? tomoyo_domain+0xda/0x130 [ 2137.680975][T20340] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2137.680996][T20340] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2137.681019][T20340] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2137.681044][T20340] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2137.681067][T20340] ? lockdep_hardirqs_on+0x9c/0x150 [ 2137.681097][T20340] ? __lock_acquire+0xab9/0xd20 [ 2137.681140][T20340] ? __fget_files+0x2a/0x420 [ 2137.681167][T20340] ? __fget_files+0x2a/0x420 [ 2137.681188][T20340] ? __fget_files+0x3a6/0x420 [ 2137.681209][T20340] ? __fget_files+0x2a/0x420 [ 2137.681236][T20340] security_file_ioctl+0xcb/0x2d0 [ 2137.681260][T20340] __se_sys_ioctl+0x47/0x170 [ 2137.681283][T20340] do_syscall_64+0xfa/0x3b0 [ 2137.681304][T20340] ? lockdep_hardirqs_on+0x9c/0x150 [ 2137.681325][T20340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.681344][T20340] ? clear_bhb_loop+0x60/0xb0 [ 2137.681365][T20340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2137.681383][T20340] RIP: 0033:0x7f2b6c7cebe9 [ 2137.681399][T20340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.681414][T20340] RSP: 002b:00007f2b6aa36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.681434][T20340] RAX: ffffffffffffffda RBX: 00007f2b6ca05fa0 RCX: 00007f2b6c7cebe9 [ 2137.681448][T20340] RDX: 0000200000000000 RSI: 000000004048aecb RDI: 0000000000000005 [ 2137.681460][T20340] RBP: 00007f2b6aa36090 R08: 0000000000000000 R09: 0000000000000000 [ 2137.681472][T20340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2137.681483][T20340] R13: 00007f2b6ca06038 R14: 00007f2b6ca05fa0 R15: 00007ffd74993e88 [ 2137.681514][T20340] [ 2137.681522][T20340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2138.447620][T20165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.447772][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.448063][T20165] bridge_slave_0: entered allmulticast mode [ 2138.452978][T20165] bridge_slave_0: entered promiscuous mode [ 2140.624601][T20165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.624734][T20165] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.624989][T20165] bridge_slave_1: entered allmulticast mode [ 2140.627724][T20165] bridge_slave_1: entered promiscuous mode [ 2141.233726][T20165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2141.253354][T20165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2141.829921][T20165] team0: Port device team_slave_0 added [ 2141.971396][T20165] team0: Port device team_slave_1 added [ 2142.796525][T20165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.796542][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.796567][T20165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2142.968553][T20165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2142.968571][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2142.968593][T20165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2143.164765][T20279] chnl_net:caif_netlink_parms(): no params data found [ 2144.200514][T20165] hsr_slave_0: entered promiscuous mode [ 2144.220724][T20165] hsr_slave_1: entered promiscuous mode [ 2144.221703][T20165] debugfs: 'hsr0' already exists in 'hsr' [ 2144.221728][T20165] Cannot create hsr debugfs directory [ 2145.482340][T20376] netlink: 'syz.6.3543': attribute type 1 has an invalid length. [ 2145.482361][T20376] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3543'. [ 2145.789504][T12435] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 2145.811125][T20279] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.811273][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 2145.811457][T20279] bridge_slave_0: entered allmulticast mode [ 2145.814019][T20279] bridge_slave_0: entered promiscuous mode [ 2145.934457][T12435] usb 7-1: Invalid ep0 maxpacket: 64 [ 2145.989581][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2146.005338][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2146.008052][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2146.009921][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2146.010715][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2146.065652][T12435] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 2146.424777][T12435] usb 7-1: Invalid ep0 maxpacket: 64 [ 2146.437967][T12435] usb usb7-port1: attempt power cycle [ 2147.585343][T12435] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 2148.227347][ T5838] Bluetooth: hci2: command tx timeout [ 2148.421831][T12435] usb 7-1: Invalid ep0 maxpacket: 64 [ 2148.504588][T20279] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.504730][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2148.504997][T20279] bridge_slave_1: entered allmulticast mode [ 2148.507843][T20279] bridge_slave_1: entered promiscuous mode [ 2148.654435][T12435] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 2150.396348][ T5838] Bluetooth: hci2: command tx timeout [ 2150.452321][T12435] usb 7-1: device descriptor read/8, error -71 [ 2150.555070][T12435] usb usb7-port1: unable to enumerate USB device [ 2150.649985][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.349994][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.798080][ T5838] Bluetooth: hci2: command tx timeout [ 2154.708797][T20416] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2154.874414][ T5838] Bluetooth: hci2: command tx timeout [ 2155.493705][T20279] team0: Port device team_slave_0 added [ 2155.536942][T20279] team0: Port device team_slave_1 added [ 2155.794474][T20428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3557'. [ 2158.615467][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2158.615484][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2158.615509][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2158.855346][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2158.855363][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2158.855386][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.071049][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.113121][T20462] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3568'. [ 2159.354709][ T5968] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2159.402068][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.431209][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.616256][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.733736][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.784899][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.864492][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 2159.868956][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.868987][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2159.869034][ T5968] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 2159.869055][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.874976][ T5968] usb 3-1: config 0 descriptor?? [ 2160.305520][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.333007][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.341095][ T5968] smartjoyplus 0003:0925:0005.0011: item fetching failed at offset 3/5 [ 2160.341898][ T5968] smartjoyplus 0003:0925:0005.0011: parse failed [ 2160.341971][ T5968] smartjoyplus 0003:0925:0005.0011: probe with driver smartjoyplus failed with error -22 [ 2161.287795][ C0] vkms_vblank_simulate: vblank timer overrun [ 2161.316690][ T5968] usb 3-1: USB disconnect, device number 9 [ 2161.466270][ C0] vkms_vblank_simulate: vblank timer overrun [ 2161.629569][T20279] hsr_slave_0: entered promiscuous mode [ 2161.630906][T20279] hsr_slave_1: entered promiscuous mode [ 2161.631829][T20279] debugfs: 'hsr0' already exists in 'hsr' [ 2161.631853][T20279] Cannot create hsr debugfs directory [ 2163.326961][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.335676][T20477] netlink: 'syz.6.3572': attribute type 12 has an invalid length. [ 2163.335707][T20477] netlink: 'syz.6.3572': attribute type 29 has an invalid length. [ 2163.335720][T20477] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3572'. [ 2163.603490][T10679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2163.681582][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.869190][T10679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2163.894722][T10679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2163.898514][T10679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2163.899320][T10679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2165.495293][T17069] bridge_slave_1: left allmulticast mode [ 2165.495326][T17069] bridge_slave_1: left promiscuous mode [ 2165.495571][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.566556][T17069] bridge_slave_0: left allmulticast mode [ 2165.566588][T17069] bridge_slave_0: left promiscuous mode [ 2165.566905][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.676709][T17069] bridge_slave_1: left allmulticast mode [ 2165.676743][T17069] bridge_slave_1: left promiscuous mode [ 2165.679347][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.737626][T20496] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3575'. [ 2165.738755][T20496] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2165.800716][T17069] bridge_slave_0: left allmulticast mode [ 2165.800747][T17069] bridge_slave_0: left promiscuous mode [ 2165.801005][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.399848][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2166.535438][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2166.598551][T17069] bond0 (unregistering): Released all slaves [ 2166.926415][T20500] Bluetooth: MGMT ver 1.23 [ 2167.347148][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2167.438905][T10679] Bluetooth: hci0: command tx timeout [ 2167.676863][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2167.771379][T17069] bond0 (unregistering): Released all slaves [ 2168.195684][T20509] netlink: 'syz.6.3579': attribute type 12 has an invalid length. [ 2168.256400][T16737] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2168.444461][T16737] usb 3-1: Using ep0 maxpacket: 16 [ 2168.446860][T16737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2168.446889][T16737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.446926][T16737] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2168.446946][T16737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.536521][T16737] usb 3-1: config 0 descriptor?? [ 2168.827738][T17069] hsr_slave_0: left promiscuous mode [ 2168.864588][T17069] hsr_slave_1: left promiscuous mode [ 2168.866277][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2170.955555][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2171.149459][T10679] Bluetooth: hci0: command tx timeout [ 2172.392758][T16737] usbhid 3-1:0.0: can't add hid device: -71 [ 2172.444491][T17069] hsr_slave_0: left promiscuous mode [ 2172.534099][T16737] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2172.545085][T16737] usb 3-1: USB disconnect, device number 10 [ 2172.564539][T17069] hsr_slave_1: left promiscuous mode [ 2172.565500][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2172.615341][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2173.194689][T10679] Bluetooth: hci0: command tx timeout [ 2174.125554][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2174.293044][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2175.274759][T10679] Bluetooth: hci0: command tx timeout [ 2176.299760][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2176.525548][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2177.445107][T20383] chnl_net:caif_netlink_parms(): no params data found [ 2181.254578][T18539] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2181.454862][T18539] usb 7-1: Using ep0 maxpacket: 32 [ 2181.467432][T18539] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 2181.467457][T18539] usb 7-1: config 0 has no interface number 0 [ 2181.492878][T18539] usb 7-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=27.80 [ 2181.492907][T18539] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.492926][T18539] usb 7-1: Product: syz [ 2181.492939][T18539] usb 7-1: Manufacturer: syz [ 2181.492952][T18539] usb 7-1: SerialNumber: syz [ 2181.586197][T18539] usb 7-1: config 0 descriptor?? [ 2181.592866][T20383] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.593007][T20383] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.593262][T20383] bridge_slave_0: entered allmulticast mode [ 2181.607661][T20383] bridge_slave_0: entered promiscuous mode [ 2181.629429][T18539] pl2303 7-1:0.98: required interrupt-in endpoint missing [ 2181.689097][T20383] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.689241][T20383] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.689434][T20383] bridge_slave_1: entered allmulticast mode [ 2181.692372][T20383] bridge_slave_1: entered promiscuous mode [ 2181.842404][T10679] Bluetooth: hci5: unexpected event for opcode 0x203b [ 2181.845877][ T5909] usb 7-1: USB disconnect, device number 13 [ 2182.288368][T20383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2182.340280][T20383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2184.072388][T20383] team0: Port device team_slave_0 added [ 2184.196420][T20383] team0: Port device team_slave_1 added [ 2185.598210][T20383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2185.598227][T20383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2185.598251][T20383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2185.601967][T20383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2185.601982][T20383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2185.602007][T20383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2185.781902][T20482] chnl_net:caif_netlink_parms(): no params data found [ 2186.204141][T20383] hsr_slave_0: entered promiscuous mode [ 2186.220813][T20383] hsr_slave_1: entered promiscuous mode [ 2186.608472][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3600'. [ 2186.608648][T20607] IPv6: NLM_F_CREATE should be specified when creating new route [ 2187.256804][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2187.282393][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2187.296141][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2187.297529][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2187.298526][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2188.563109][T20633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2189.354635][T10679] Bluetooth: hci1: command tx timeout [ 2190.779965][T20625] syzkaller1: entered promiscuous mode [ 2190.779998][T20625] syzkaller1: entered allmulticast mode [ 2191.444713][T10679] Bluetooth: hci1: command tx timeout [ 2192.846394][T20482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.846670][T20482] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.846937][T20482] bridge_slave_0: entered allmulticast mode [ 2192.850412][T20482] bridge_slave_0: entered promiscuous mode [ 2193.119303][T20482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.119581][T20482] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.119787][T20482] bridge_slave_1: entered allmulticast mode [ 2193.123300][T20482] bridge_slave_1: entered promiscuous mode [ 2193.415777][T20482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.452932][T20482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2193.524632][T10679] Bluetooth: hci1: command tx timeout [ 2193.844795][T20482] team0: Port device team_slave_0 added [ 2193.883595][T20482] team0: Port device team_slave_1 added [ 2195.594645][T10679] Bluetooth: hci1: command tx timeout [ 2196.558953][T20672] loop9: detected capacity change from 0 to 7 [ 2196.581426][T20672] buffer_io_error: 138 callbacks suppressed [ 2196.581446][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.583284][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.583672][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.584344][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.585199][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.586644][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.587412][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.587765][T20672] ldm_validate_partition_table(): Disk read failed. [ 2196.588089][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.588648][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.589075][T20672] Buffer I/O error on dev loop9, logical block 0, async page read [ 2196.594398][T20672] Dev loop9: unable to read RDB block 0 [ 2196.596171][T20672] loop9: unable to read partition table [ 2196.597014][T20672] loop9: partition table beyond EOD, truncated [ 2196.597032][T20672] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2196.597032][T20672] ) failed (rc=-5) [ 2197.406454][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 2197.592988][T20482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2197.593005][T20482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2197.593029][T20482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2198.597323][T20482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2198.597339][T20482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2198.597363][T20482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2199.074207][T20482] hsr_slave_0: entered promiscuous mode [ 2199.081754][T20482] hsr_slave_1: entered promiscuous mode [ 2199.082727][T20482] debugfs: 'hsr0' already exists in 'hsr' [ 2199.082750][T20482] Cannot create hsr debugfs directory [ 2199.513485][ C0] vkms_vblank_simulate: vblank timer overrun [ 2199.583435][T17069] bridge_slave_1: left allmulticast mode [ 2199.583468][T17069] bridge_slave_1: left promiscuous mode [ 2199.583637][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.881715][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.223213][ C0] vkms_vblank_simulate: vblank timer overrun [ 2200.497199][T17069] bridge_slave_0: left allmulticast mode [ 2200.497231][T17069] bridge_slave_0: left promiscuous mode [ 2200.498995][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.589948][T17069] bridge_slave_1: left allmulticast mode [ 2200.589970][T17069] bridge_slave_1: left promiscuous mode [ 2200.590129][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.667552][T17069] bridge_slave_0: left allmulticast mode [ 2200.667586][T17069] bridge_slave_0: left promiscuous mode [ 2200.667846][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.914698][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.941110][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.125256][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.205818][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.282327][T17069] bond0 (unregistering): Released all slaves [ 2202.382150][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.556230][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.648834][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.710697][T17069] bond0 (unregistering): Released all slaves [ 2202.828526][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.891955][ C0] vkms_vblank_simulate: vblank timer overrun [ 2202.987324][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.017320][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 2203.017349][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 2203.095233][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.333239][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.393651][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.475081][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.528858][T20706] : entered promiscuous mode [ 2203.670837][T20618] chnl_net:caif_netlink_parms(): no params data found [ 2205.950114][T17069] hsr_slave_0: left promiscuous mode [ 2206.234765][T17069] hsr_slave_1: left promiscuous mode [ 2206.237838][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2206.288827][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2208.744930][T17069] hsr_slave_0: left promiscuous mode [ 2208.844899][T17069] hsr_slave_1: left promiscuous mode [ 2208.845873][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2208.904207][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2208.916040][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2208.931898][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2208.945024][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2208.945807][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2208.949751][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2210.515509][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2210.679736][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2211.038740][ T5838] Bluetooth: hci3: command tx timeout [ 2212.085152][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2212.245194][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2213.115028][ T5838] Bluetooth: hci3: command tx timeout [ 2215.194466][ T5838] Bluetooth: hci3: command tx timeout [ 2216.884699][T20618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.884838][T20618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.885040][T20618] bridge_slave_0: entered allmulticast mode [ 2216.893372][T20618] bridge_slave_0: entered promiscuous mode [ 2217.020828][ T37] audit: type=1326 audit(2000005471.778:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20772 comm="syz.6.3637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc2176ebe9 code=0x0 [ 2217.048983][T20618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.049121][T20618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.049377][T20618] bridge_slave_1: entered allmulticast mode [ 2217.052125][T20618] bridge_slave_1: entered promiscuous mode [ 2217.122386][T20775] FAULT_INJECTION: forcing a failure. [ 2217.122386][T20775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2217.122421][T20775] CPU: 0 UID: 0 PID: 20775 Comm: syz.6.3637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2217.122443][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2217.122454][T20775] Call Trace: [ 2217.122462][T20775] [ 2217.122471][T20775] dump_stack_lvl+0x189/0x250 [ 2217.122503][T20775] ? __pfx____ratelimit+0x10/0x10 [ 2217.122526][T20775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2217.122550][T20775] ? __pfx__printk+0x10/0x10 [ 2217.122570][T20775] ? __might_fault+0xb0/0x130 [ 2217.122607][T20775] should_fail_ex+0x46c/0x600 [ 2217.122637][T20775] _copy_to_iter+0x1de/0x1790 [ 2217.122680][T20775] ? __pfx__copy_to_iter+0x10/0x10 [ 2217.122705][T20775] ? __pfx_woken_wake_function+0x10/0x10 [ 2217.122752][T20775] tty_read+0x29e/0x690 [ 2217.122778][T20775] ? __pfx_tty_read+0x10/0x10 [ 2217.122817][T20775] vfs_read+0x563/0xa30 [ 2217.122845][T20775] ? __pfx_vfs_read+0x10/0x10 [ 2217.122873][T20775] ? __fget_files+0x2a/0x420 [ 2217.122905][T20775] ksys_read+0x14b/0x260 [ 2217.122928][T20775] ? __pfx_ksys_read+0x10/0x10 [ 2217.122951][T20775] ? do_syscall_64+0xbe/0x3b0 [ 2217.122977][T20775] do_syscall_64+0xfa/0x3b0 [ 2217.122997][T20775] ? lockdep_hardirqs_on+0x9c/0x150 [ 2217.123018][T20775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.123035][T20775] ? clear_bhb_loop+0x60/0xb0 [ 2217.123057][T20775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.123074][T20775] RIP: 0033:0x7fcc2176ebe9 [ 2217.123090][T20775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2217.123103][T20775] RSP: 002b:00007fcc1f994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2217.123121][T20775] RAX: ffffffffffffffda RBX: 00007fcc219a6180 RCX: 00007fcc2176ebe9 [ 2217.123134][T20775] RDX: 0000000000002020 RSI: 0000200000003f80 RDI: 0000000000000003 [ 2217.123144][T20775] RBP: 00007fcc1f994090 R08: 0000000000000000 R09: 0000000000000000 [ 2217.123155][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2217.123166][T20775] R13: 00007fcc219a6218 R14: 00007fcc219a6180 R15: 00007ffd08067228 [ 2217.123196][T20775] [ 2217.274357][ T5838] Bluetooth: hci3: command tx timeout [ 2217.998470][T20618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.744118][T20618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.645086][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.245952][T20618] team0: Port device team_slave_0 added [ 2224.251817][T20618] team0: Port device team_slave_1 added [ 2225.416398][T10679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2225.453032][T10679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2225.456202][T10679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2225.467526][T10679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2225.474772][T10679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2225.834626][T16673] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 2225.911705][T20618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2225.911723][T20618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.911747][T20618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2225.985444][T20618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2225.985460][T20618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.985484][T20618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2226.003540][T16673] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 2226.003566][T16673] usb 3-1: config 0 has no interface number 0 [ 2226.003610][T16673] usb 3-1: config 0 interface 198 altsetting 8 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 2226.003636][T16673] usb 3-1: config 0 interface 198 altsetting 8 endpoint 0x86 is Bulk; changing to Interrupt [ 2226.003657][T16673] usb 3-1: config 0 interface 198 has no altsetting 0 [ 2226.003688][T16673] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0138, bcdDevice=74.e6 [ 2226.003708][T16673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.016578][T16673] usb 3-1: config 0 descriptor?? [ 2226.030814][T20818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2226.030995][T20818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2226.353692][T20825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.354484][T20825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.357238][T20825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.358150][T20825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.451809][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 2226.452550][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 2226.457823][T16673] usb 3-1: string descriptor 0 read error: -71 [ 2226.459326][T16673] ftdi_sio 3-1:0.198: FTDI USB Serial Device converter detected [ 2226.462493][T16673] ftdi_sio ttyUSB0: unknown device type: 0x74e6 [ 2226.537544][T16673] usb 3-1: USB disconnect, device number 11 [ 2226.542267][T16673] ftdi_sio 3-1:0.198: device disconnected [ 2228.164039][T10679] Bluetooth: hci2: command tx timeout [ 2230.048962][T20849] vivid-003: kernel_thread() failed [ 2230.234519][T10679] Bluetooth: hci2: command tx timeout [ 2230.352525][T20490] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2230.581123][T20618] hsr_slave_0: entered promiscuous mode [ 2230.586154][T20618] hsr_slave_1: entered promiscuous mode [ 2230.587619][T20618] debugfs: 'hsr0' already exists in 'hsr' [ 2230.587642][T20618] Cannot create hsr debugfs directory [ 2230.606832][T20731] chnl_net:caif_netlink_parms(): no params data found [ 2232.314610][T10679] Bluetooth: hci2: command tx timeout [ 2233.727962][T20731] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.728177][T20731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.728438][T20731] bridge_slave_0: entered allmulticast mode [ 2233.737357][T20731] bridge_slave_0: entered promiscuous mode [ 2233.778385][T20731] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.778548][T20731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.779301][T20731] bridge_slave_1: entered allmulticast mode [ 2233.788688][T20731] bridge_slave_1: entered promiscuous mode [ 2234.394920][T10679] Bluetooth: hci2: command tx timeout [ 2234.637624][T20731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2234.794922][T20731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2235.407270][T20731] team0: Port device team_slave_0 added [ 2235.489189][T20731] team0: Port device team_slave_1 added [ 2235.539006][T20893] netlink: 452 bytes leftover after parsing attributes in process `syz.6.3668'. [ 2237.041475][T20731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2237.041491][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.041517][T20731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2237.159316][T20731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2237.159333][T20731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.159358][T20731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2237.161059][T20814] chnl_net:caif_netlink_parms(): no params data found [ 2240.142883][T20731] hsr_slave_0: entered promiscuous mode [ 2240.149714][T20731] hsr_slave_1: entered promiscuous mode [ 2240.151376][T20731] debugfs: 'hsr0' already exists in 'hsr' [ 2240.151402][T20731] Cannot create hsr debugfs directory [ 2240.521282][T17069] bridge_slave_1: left allmulticast mode [ 2240.521318][T17069] bridge_slave_1: left promiscuous mode [ 2240.521636][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.695971][T17069] bridge_slave_0: left allmulticast mode [ 2240.696007][T17069] bridge_slave_0: left promiscuous mode [ 2240.701835][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.629482][T17069] bridge_slave_1: left allmulticast mode [ 2241.629514][T17069] bridge_slave_1: left promiscuous mode [ 2241.629784][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.689647][T17069] bridge_slave_0: left allmulticast mode [ 2241.689681][T17069] bridge_slave_0: left promiscuous mode [ 2241.691036][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.135119][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2244.791680][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2246.648540][T17069] bond0 (unregistering): Released all slaves [ 2246.984916][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2247.065407][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2247.129985][T17069] bond0 (unregistering): Released all slaves [ 2247.607619][T20952] IPVS: set_ctl: invalid protocol: 25544 0.0.0.0:20001 [ 2248.463774][T20962] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2248.473513][T20962] cramfs: wrong magic [ 2250.513551][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2250.551327][T20814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.551447][T20814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.551637][T20814] bridge_slave_0: entered allmulticast mode [ 2250.553019][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2250.553957][T20814] bridge_slave_0: entered promiscuous mode [ 2250.569223][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2250.683166][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2250.692996][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2250.922555][T20814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.922699][T20814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.922959][T20814] bridge_slave_1: entered allmulticast mode [ 2250.928210][T20814] bridge_slave_1: entered promiscuous mode [ 2251.254415][T17069] hsr_slave_0: left promiscuous mode [ 2251.294410][T17069] hsr_slave_1: left promiscuous mode [ 2251.295345][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2251.326709][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2251.635133][T17069] hsr_slave_0: left promiscuous mode [ 2251.679000][T17069] hsr_slave_1: left promiscuous mode [ 2251.905567][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2252.162844][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2252.828589][T10679] Bluetooth: hci0: command tx timeout [ 2254.887056][T10679] Bluetooth: hci0: command tx timeout [ 2257.153484][T10679] Bluetooth: hci0: command tx timeout [ 2257.768027][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2258.785602][T21021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3697'. [ 2258.852627][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2259.195112][T10679] Bluetooth: hci0: command tx timeout [ 2261.508387][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2263.286136][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2267.973349][T20814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2267.997949][T20814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2270.233436][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2270.295956][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2270.304762][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2270.323169][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2270.332545][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2270.483688][T20814] team0: Port device team_slave_0 added [ 2270.523433][T20814] team0: Port device team_slave_1 added [ 2271.004671][T20814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.004689][T20814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2271.004714][T20814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.085668][T20814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2271.085685][T20814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2271.085711][T20814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2272.115991][T20814] hsr_slave_0: entered promiscuous mode [ 2272.117300][T20814] hsr_slave_1: entered promiscuous mode [ 2272.547540][T10679] Bluetooth: hci3: command tx timeout [ 2274.554367][T10679] Bluetooth: hci3: command tx timeout [ 2275.908066][T20970] chnl_net:caif_netlink_parms(): no params data found [ 2276.634586][T10679] Bluetooth: hci3: command tx timeout [ 2277.172069][T21063] chnl_net:caif_netlink_parms(): no params data found [ 2277.913768][T17069] bridge_slave_1: left allmulticast mode [ 2277.913802][T17069] bridge_slave_1: left promiscuous mode [ 2277.914049][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.996160][T17069] bridge_slave_0: left allmulticast mode [ 2277.996213][T17069] bridge_slave_0: left promiscuous mode [ 2277.996499][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.089043][T17069] bridge_slave_1: left allmulticast mode [ 2278.089075][T17069] bridge_slave_1: left promiscuous mode [ 2278.091180][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.176033][T17069] bridge_slave_0: left allmulticast mode [ 2278.176066][T17069] bridge_slave_0: left promiscuous mode [ 2278.176361][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.449142][T17069] bridge_slave_1: left allmulticast mode [ 2278.449176][T17069] bridge_slave_1: left promiscuous mode [ 2278.449429][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.625861][T17069] bridge_slave_0: left allmulticast mode [ 2278.625894][T17069] bridge_slave_0: left promiscuous mode [ 2278.626164][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.673019][T21118] netlink: 'syz.6.3720': attribute type 1 has an invalid length. [ 2278.714644][T10679] Bluetooth: hci3: command tx timeout [ 2279.314898][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2279.395854][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2279.461664][T17069] bond0 (unregistering): Released all slaves [ 2279.691606][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2279.750152][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2279.815460][T17069] bond0 (unregistering): Released all slaves [ 2280.075652][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2280.162927][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2280.218765][T17069] bond0 (unregistering): Released all slaves [ 2280.401992][T20970] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.402135][T20970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.402396][T20970] bridge_slave_0: entered allmulticast mode [ 2280.435399][T20970] bridge_slave_0: entered promiscuous mode [ 2280.560734][T21119] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2280.618459][T21120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2280.723788][ T6084] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2281.058677][ T6084] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2281.648985][T20970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.649130][T20970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.649384][T20970] bridge_slave_1: entered allmulticast mode [ 2281.652543][T20970] bridge_slave_1: entered promiscuous mode [ 2282.851875][T20970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2282.865138][T21063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.865220][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.865408][T21063] bridge_slave_0: entered allmulticast mode [ 2282.866933][T21063] bridge_slave_0: entered promiscuous mode [ 2282.915705][T21063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.915870][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.916138][T21063] bridge_slave_1: entered allmulticast mode [ 2282.919087][T21063] bridge_slave_1: entered promiscuous mode [ 2282.923936][T20970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2283.054967][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.714602][ T9724] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2283.788607][T20970] team0: Port device team_slave_0 added [ 2283.811405][T21063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.813874][T20970] team0: Port device team_slave_1 added [ 2283.884894][ T9724] usb 7-1: Using ep0 maxpacket: 32 [ 2283.900031][ T9724] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2283.900058][ T9724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.900077][ T9724] usb 7-1: Product: syz [ 2283.900090][ T9724] usb 7-1: Manufacturer: syz [ 2283.900103][ T9724] usb 7-1: SerialNumber: syz [ 2283.937997][ T9724] usb 7-1: config 0 descriptor?? [ 2283.956055][ T9724] rtl8150 7-1:0.0: couldn't find required endpoints [ 2283.956340][ T9724] rtl8150 7-1:0.0: probe with driver rtl8150 failed with error -5 [ 2284.010093][T17069] hsr_slave_0: left promiscuous mode [ 2284.055782][T17069] hsr_slave_1: left promiscuous mode [ 2284.056856][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.106414][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.188421][T17069] hsr_slave_0: left promiscuous mode [ 2284.205915][T17069] hsr_slave_1: left promiscuous mode [ 2284.206851][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.259430][T21148] Invalid logical block size (511) [ 2284.271565][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.439440][T17069] hsr_slave_0: left promiscuous mode [ 2284.476702][T17069] hsr_slave_1: left promiscuous mode [ 2284.477656][T17069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.525686][T17069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2286.388574][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2286.627320][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2286.627573][T16134] usb 7-1: USB disconnect, device number 14 [ 2286.637250][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2286.639964][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2286.648204][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2286.649987][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2286.788786][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2288.817709][T10679] Bluetooth: hci1: command tx timeout [ 2290.876560][T10679] Bluetooth: hci1: command tx timeout [ 2292.435562][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2292.614428][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2292.979384][T10679] Bluetooth: hci1: command tx timeout [ 2295.066144][T10679] Bluetooth: hci1: command tx timeout [ 2296.305399][T17069] team0 (unregistering): Port device team_slave_1 removed [ 2296.455746][T17069] team0 (unregistering): Port device team_slave_0 removed [ 2297.189753][T21063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2301.237356][T20970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2301.237381][T20970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2301.237406][T20970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2302.153116][T21063] team0: Port device team_slave_0 added [ 2302.162745][T20970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2302.162760][T20970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2302.162786][T20970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2302.632865][T21063] team0: Port device team_slave_1 added [ 2304.117375][T21063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2304.117392][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.117418][T21063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.135743][T20970] hsr_slave_0: entered promiscuous mode [ 2304.142757][T20970] hsr_slave_1: entered promiscuous mode [ 2304.171294][T20970] debugfs: 'hsr0' already exists in 'hsr' [ 2304.171328][T20970] Cannot create hsr debugfs directory [ 2304.181225][T21063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.181241][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2304.181267][T21063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2308.191489][T21063] hsr_slave_0: entered promiscuous mode [ 2308.192825][T21063] hsr_slave_1: entered promiscuous mode [ 2308.193793][T21063] debugfs: 'hsr0' already exists in 'hsr' [ 2308.193818][T21063] Cannot create hsr debugfs directory [ 2308.310799][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e98f000: rx timeout, send abort [ 2308.813474][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e98c400: rx timeout, send abort [ 2308.814152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e98f000: abort rx timeout. Force session deactivation [ 2309.425574][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e98c400: abort rx timeout. Force session deactivation [ 2310.126389][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2310.133133][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2310.146746][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2310.147950][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2310.149645][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2312.285841][T10679] Bluetooth: hci0: command tx timeout [ 2313.947534][T21154] chnl_net:caif_netlink_parms(): no params data found [ 2314.398693][T10679] Bluetooth: hci0: command tx timeout [ 2315.743662][T21154] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.743870][T21154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.744132][T21154] bridge_slave_0: entered allmulticast mode [ 2315.770017][T21154] bridge_slave_0: entered promiscuous mode [ 2315.887601][T21154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.887746][T21154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2315.887975][T21154] bridge_slave_1: entered allmulticast mode [ 2315.891441][T21154] bridge_slave_1: entered promiscuous mode [ 2316.053258][T21063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2316.307122][T21063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2316.422214][T21154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2316.423983][T21063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2316.449751][T21289] kvm: user requested TSC rate below hardware speed [ 2316.474451][T10679] Bluetooth: hci0: command tx timeout [ 2316.508347][T21154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2316.511537][T21063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2316.996034][T21154] team0: Port device team_slave_0 added [ 2317.042494][T21154] team0: Port device team_slave_1 added [ 2318.532925][T21303] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3761'. [ 2318.661524][T10679] Bluetooth: hci0: command tx timeout [ 2319.000936][T21154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.000954][T21154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.000979][T21154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.001982][T21266] chnl_net:caif_netlink_parms(): no params data found [ 2320.371355][T21154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2320.371373][T21154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.371397][T21154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2321.658153][T21154] hsr_slave_0: entered promiscuous mode [ 2321.676072][T21154] hsr_slave_1: entered promiscuous mode [ 2321.677024][T21154] debugfs: 'hsr0' already exists in 'hsr' [ 2321.677050][T21154] Cannot create hsr debugfs directory [ 2322.989039][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3769'. [ 2323.149504][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 2323.611149][T21266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2323.611368][T21266] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.611631][T21266] bridge_slave_0: entered allmulticast mode [ 2323.643206][T21266] bridge_slave_0: entered promiscuous mode [ 2323.742018][T21266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2323.742178][T21266] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.742448][T21266] bridge_slave_1: entered allmulticast mode [ 2323.769821][T21266] bridge_slave_1: entered promiscuous mode [ 2324.287417][T21266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2324.354426][T21266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2325.058891][T21266] team0: Port device team_slave_0 added [ 2325.146781][T21266] team0: Port device team_slave_1 added [ 2325.376063][T17069] bridge_slave_1: left allmulticast mode [ 2325.376097][T17069] bridge_slave_1: left promiscuous mode [ 2325.376410][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.413084][T21338] netlink: 'syz.6.3770': attribute type 1 has an invalid length. [ 2325.466130][T17069] bridge_slave_0: left allmulticast mode [ 2325.466162][T17069] bridge_slave_0: left promiscuous mode [ 2325.466381][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2325.533405][T17069] bridge_slave_1: left allmulticast mode [ 2325.533441][T17069] bridge_slave_1: left promiscuous mode [ 2325.533720][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.816336][T17069] bridge_slave_0: left allmulticast mode [ 2325.816358][T17069] bridge_slave_0: left promiscuous mode [ 2325.816529][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.135933][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.205293][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2327.268914][T17069] bond0 (unregistering): Released all slaves [ 2327.578380][T17069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.648950][T21345] overlayfs: failed to resolve './file0': -2 [ 2327.703283][T17069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2327.779873][T17069] bond0 (unregistering): Released all slaves [ 2328.000483][T21338] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2328.147783][T21266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2328.147802][T21266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2328.147828][T21266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2328.196841][T21266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2328.196857][T21266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2328.196882][T21266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2330.228340][T21361] loop9: detected capacity change from 0 to 7 [ 2330.242970][T21361] buffer_io_error: 9 callbacks suppressed [ 2330.242990][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.244676][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.246517][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.250391][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.259372][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.260006][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.260455][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.260915][T21361] ldm_validate_partition_table(): Disk read failed. [ 2330.260971][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.261440][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.262054][T21361] Buffer I/O error on dev loop9, logical block 0, async page read [ 2330.262909][T21361] Dev loop9: unable to read RDB block 0 [ 2330.264365][T21361] loop9: unable to read partition table [ 2330.265333][T21361] loop9: partition table beyond EOD, truncated [ 2330.265355][T21361] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 2330.265355][T21361] ) failed (rc=-5) [ 2330.322339][ C0] ------------[ cut here ]------------ [ 2330.322363][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 2330.322435][ C0] Modules linked in: [ 2330.322458][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2330.322485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2330.322499][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 2330.322525][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 2330.322546][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 2330.322566][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 2330.322584][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2330.322598][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 2330.322614][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000008 [ 2330.322630][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880285a3868 [ 2330.322646][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 2330.322665][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2330.322681][ C0] CR2: 0000001b2fe08ff8 CR3: 000000004a72c000 CR4: 00000000003526f0 [ 2330.322700][ C0] DR0: 0000000000000000 DR1: 000000000000000e DR2: 0000000000000000 [ 2330.322713][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2330.322727][ C0] Call Trace: [ 2330.322737][ C0] [ 2330.322765][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.322803][ C0] call_timer_fn+0x17b/0x5f0 [ 2330.322832][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.322854][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2330.322879][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2330.322907][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2330.322944][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2330.322974][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.323000][ C0] __run_timer_base+0x648/0x970 [ 2330.323054][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2330.323102][ C0] run_timer_softirq+0xb7/0x180 [ 2330.323131][ C0] handle_softirqs+0x22c/0x710 [ 2330.323171][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2330.323212][ C0] run_ktimerd+0xcf/0x190 [ 2330.323241][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2330.323268][ C0] ? schedule+0x91/0x360 [ 2330.323303][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2330.323329][ C0] smpboot_thread_fn+0x542/0xa60 [ 2330.323359][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2330.323407][ C0] kthread+0x711/0x8a0 [ 2330.323443][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2330.323469][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.323507][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.323541][ C0] ret_from_fork+0x3f9/0x770 [ 2330.323573][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2330.323609][ C0] ? __switch_to_asm+0x39/0x70 [ 2330.323628][ C0] ? __switch_to_asm+0x33/0x70 [ 2330.323648][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.323680][ C0] ret_from_fork_asm+0x1a/0x30 [ 2330.323723][ C0] [ 2330.323735][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2330.323751][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2330.323777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2330.323789][ C0] Call Trace: [ 2330.323798][ C0] [ 2330.323807][ C0] dump_stack_lvl+0x99/0x250 [ 2330.323839][ C0] ? __asan_memcpy+0x40/0x70 [ 2330.323862][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2330.323894][ C0] ? __pfx__printk+0x10/0x10 [ 2330.323939][ C0] vpanic+0x281/0x750 [ 2330.323970][ C0] ? __pfx__printk+0x10/0x10 [ 2330.323997][ C0] ? __pfx_vpanic+0x10/0x10 [ 2330.324031][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2330.324082][ C0] panic+0xb9/0xc0 [ 2330.324111][ C0] ? __pfx_panic+0x10/0x10 [ 2330.324161][ C0] __warn+0x31b/0x4b0 [ 2330.324189][ C0] ? est_timer+0x6dc/0x9f0 [ 2330.324210][ C0] ? est_timer+0x6dc/0x9f0 [ 2330.324233][ C0] report_bug+0x2be/0x4f0 [ 2330.324263][ C0] ? est_timer+0x6dc/0x9f0 [ 2330.324283][ C0] ? est_timer+0x6dc/0x9f0 [ 2330.324305][ C0] ? est_timer+0x6de/0x9f0 [ 2330.324328][ C0] handle_bug+0x84/0x160 [ 2330.324361][ C0] exc_invalid_op+0x1a/0x50 [ 2330.324393][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2330.324414][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 2330.324442][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 2330.324462][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 2330.324481][ C0] RAX: ffffffff88dc69fb RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 2330.324498][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2330.324513][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 2330.324528][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000008 [ 2330.324544][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880285a3868 [ 2330.324570][ C0] ? est_timer+0x6db/0x9f0 [ 2330.324620][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.324658][ C0] call_timer_fn+0x17b/0x5f0 [ 2330.324686][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.324707][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2330.324731][ C0] ? call_timer_fn+0xbe/0x5f0 [ 2330.324759][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2330.324795][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2330.324825][ C0] ? __pfx_est_timer+0x10/0x10 [ 2330.324851][ C0] __run_timer_base+0x648/0x970 [ 2330.324897][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2330.324945][ C0] run_timer_softirq+0xb7/0x180 [ 2330.324973][ C0] handle_softirqs+0x22c/0x710 [ 2330.325012][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2330.325059][ C0] run_ktimerd+0xcf/0x190 [ 2330.325087][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 2330.325114][ C0] ? schedule+0x91/0x360 [ 2330.325150][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2330.325180][ C0] smpboot_thread_fn+0x542/0xa60 [ 2330.325208][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2330.325247][ C0] kthread+0x711/0x8a0 [ 2330.325282][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2330.325309][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.325348][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.325380][ C0] ret_from_fork+0x3f9/0x770 [ 2330.325412][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2330.325447][ C0] ? __switch_to_asm+0x39/0x70 [ 2330.325467][ C0] ? __switch_to_asm+0x33/0x70 [ 2330.325487][ C0] ? __pfx_kthread+0x10/0x10 [ 2330.325520][ C0] ret_from_fork_asm+0x1a/0x30 [ 2330.325561][ C0] [ 2330.325893][ C0] Kernel Offset: disabled