last executing test programs: 4m46.062220871s ago: executing program 2 (id=185): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0xffffffffffffffc7) 4m40.18478351s ago: executing program 2 (id=195): socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x713c02, 0x10, 0x20}, 0x18) 4m39.970197513s ago: executing program 2 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050b2bbd7000fcdbdf254a0000000800020070636900110002"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300001b34ba"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x4000810}, 0x40d3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000301010100001c001080080002402033056affffff03080003001240000200001000058009000100736e6d70000000000600"/74], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="515bc4c4ff1e167a1fcdc8728d8aead572908c4071cc8e8608a7f2eeb2286e072c2bb1adf13fc30325d8199712e14f397fb16e2d5b98d9f06c477d350e117b6fb944116ef61b022b930e5cbba0", @ANYRES16=r7, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 4m38.339527988s ago: executing program 2 (id=199): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 4m37.884881757s ago: executing program 2 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050b2bbd7000fcdbdf254a0000000800020070636900110002"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300001b34ba"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf2514000000080001007063690011000200303030303a30303a3130000008000b000e000000060011000400000008001500130000000e0001006e65746465767369826d0000000f0002006e657464657673696d300000080003000200000008000b000200000006001100090000000800150008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000700000006001100000800000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0007000000060011000100000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000280003000200000008000b000100000006001100060000000800150000000080080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000600000006001100ff03a65d69c6dde782160000080001007063690011000200303030303a30303a31302e3002000000080003000000000008000b0007000000060011000200000008001500020000000e0001006e657464657673696d0000000f0002006e090064657673696d300000080003000100000008000b0000000000060011000b00000008001500020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000a00000006001100860600000800150001000000"], 0x240}, 0x1, 0x0, 0x0, 0x4000810}, 0x40d3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000301010100001c001080080002402033056affffff03080003001240000200001000058009000100736e6d70000000000600"/74], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) 4m36.330142539s ago: executing program 2 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x42002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @remote, @void, {@arp={0x806, @generic={0x1b, 0x1, 0x6, 0x4, 0x9, @multicast, "a959934b", @empty, "f2213f73"}}}}, 0x0) 4m21.121020556s ago: executing program 32 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x42002, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @remote, @void, {@arp={0x806, @generic={0x1b, 0x1, 0x6, 0x4, 0x9, @multicast, "a959934b", @empty, "f2213f73"}}}}, 0x0) 3m9.050830251s ago: executing program 0 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050b2bbd7000fcdbdf254a0000000800020070636900110002"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300001b34ba"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x4000810}, 0x40d3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m7.44349974s ago: executing program 0 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050b2bbd7000fcdbdf254a0000000800020070636900110002"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300001b34ba"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="100025bd7000fbdbdf2514000000080001007063690011000200303030303a30303a3130000008000b000e000000060011000400000008001500130000000e0001006e65746465767369826d0000000f0002006e657464657673696d300000080003000200000008000b000200000006001100090000000800150008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000700000006001100000800000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0007000000060011000100000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000280003000200000008000b000100000006001100060000000800150000000080080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000600000006001100ff03a65d69c6dde782160000080001007063690011000200303030303a30303a31302e3002000000080003000000000008000b0007000000060011000200000008001500020000000e0001006e657464657673696d0000000f0002006e090064657673696d300000080003000100000008000b0000000000060011000b00000008001500020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000a00000006001100860600000800150001000000"], 0x240}, 0x1, 0x0, 0x0, 0x4000810}, 0x40d3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffff85, &(0x7f00000002c0)=0xe1a) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 3m5.710704872s ago: executing program 0 (id=374): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x3) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x22, &(0x7f0000001600)) 3m4.79192031s ago: executing program 0 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 3m1.38732993s ago: executing program 0 (id=383): openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m58.094903921s ago: executing program 0 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) setresuid(0xee01, 0xee00, 0x0) getresuid(&(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f0000000380)) setreuid(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c015}}, 0x20}}, 0x0) 2m57.106607545s ago: executing program 33 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) setresuid(0xee01, 0xee00, 0x0) getresuid(&(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f0000000380)) setreuid(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c015}}, 0x20}}, 0x0) 2m12.868446625s ago: executing program 1 (id=495): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x2000, 0x8) lseek(r0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180600fe8000000000000000000000000000bbfe"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 2m12.698551792s ago: executing program 1 (id=497): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000000)='6', 0x1}], 0x1}}], 0x1, 0x48000) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) read(r3, &(0x7f00000000c0)=""/171, 0xfdef) mkdir(0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') chdir(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2, 0x2}}, 0x20) llistxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=""/153, 0x99) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}}, 0x804) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="0438", 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none, 0x1, 0x1}, 0xe) 2m9.948143579s ago: executing program 1 (id=501): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) 2m9.845356408s ago: executing program 1 (id=502): syz_emit_ethernet(0x0, 0x0, 0x0) 2m9.706447025s ago: executing program 1 (id=503): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x35a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x4, 0x6, 0x3, 0x2, '\x00', 0xfffffffc}, 0x4, 0x200, 0x5, r2, 0x0, 0x9, 'syz0\x00', 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0xd, 0x8000, 0x1, @local, @mcast2, 0x80, 0x40, 0x9, 0x2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x8, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@empty, @empty, 0x0, 0x2, [@multicast2, @empty]}, 0x18) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x6000, 0x4) 2m4.274380225s ago: executing program 1 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6000) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r0 = syz_usb_connect(0x0, 0x81c, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2c, 0x72, 0x4f, 0x20, 0x19d2, 0xff84, 0x876f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80a, 0x4, 0x0, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xba, 0x81, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0xfb}]}, @generic={0xa4, 0x24, "bb1996e42a52005ef543cf25b95744c8b9075f21732cded2f3582202adf91fb56cd390d1854e57f1241cd6c5977d7a79cf65ac8ad6ed298428af86e962d6c0f517cbb640e255ffa45da1d04584c7d179e844183d89de383efc997d36cda8b2b7a0708ef6eb7064000e3d97b0cf0cd20abb40e69834a19b32f53fe2b93833325de3defedf07586f285b3a1193dcc92ed79554c9a022352cd4387bb8e6b74b3ce78000"}], [{{0x9, 0x5, 0x1, 0x3, 0x10, 0x1, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x7, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x7, 0x3, 0x7, [@generic={0x1a, 0x7, "65cc7f0bf096c4038c5522697f4b84d443061b6ca88d9ff0"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xfd, 0x7f, 0xa9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x4f, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0x3, 0x3, [@generic={0x86, 0x22, "e94aad0fa0457ffb15aa41540a6c097c795ddc27c6a69978ebb48fe9e5fb322af2a63c1f77880921be5263698c74eab4b77038bf26d593ea0abddc8b2fe9712d942f2f896e6e002bf809061f28e6f43e2b91d39b094f1c038a7ce4382d0c500a12eda83e1d3de90467ab8c84535eb070f2a9f7afbca9fb707157525328355fe55b29539c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0xc, 0x458, 0x81, 0x1, 0x10, [@generic={0xa6, 0x8, "9fbbe9db8a9cfb28478766729887e4579dfe5e87a23b1679fdc8fba6acc928fc0966daf0585f1da2ee766bf628d0c3993f255adf174984d79b3598c62547bc4a4d4bbb4d37f64f07e8b4fc95f0043e1e1490d267a85fd2ab1e1172c7e3da3a8262ce975a881be6eaed2af9bd56140deae444713adebc4b3547a55d8c62bf191a26ebf868b47aa4a5243c3ad7786f7b388a48afce87362fc921d2c6b19f972946bf769684"}, @generic={0x56, 0xc, "5e9ea2c2e17bbeb94975e52baad2f1fa89e8610be7cfff28216e3d5f0dd847ea788d5350523b27aad69af28d9b833da93ac8a227ac43dfbf4a081eea216f1d2a491bc9f1d08da219be69bbe7a41c29a977c068ea"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xf6, 0x3, 0x8, [@generic={0x5a, 0x21, "3cced869215d4aa927ca16fd1a812499d1f47877f13025cd59736fb96bfdedc5e4dabc64a0568df19190860f0cff92b1e2c25e9ef5a0f9a35a78b755ecad231b4c9ca68ff908fb0e89e4fcffb157b1f26338e36e9f3a8cf7"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xf3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x101}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0xfe, 0xfe}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0xfb, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe6, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0xa, 0x3, 0x8, [@generic={0x48, 0xb, "6e8b9fb5c43686ed62daa2b0101005275ada96625cbaab5b18a20af7cc75e540ffc56463f51987f5ae8383c33437b77803e20d37ac1e13fd6ae619b7b63aac40f5cad39c9c1e"}, @generic={0x5b, 0xe, "5e1d5fccd50430d2fd3a576bdb8150986ac84865c3649a85d1a37c32d9f3e8cef28b83a005799d5bee422ed3bccdadf7a24642398650e1238b9a06666fb38f8bbf1fea1e8122197d7cefefa83994c1fa5a85e42af2cf476a67"}]}}]}}, {{0x9, 0x4, 0xa0, 0x6, 0x7, 0xa4, 0xdf, 0x23, 0x5, [@hid_hid={0x9, 0x21, 0x2435, 0x0, 0x1, {0x22, 0x7da}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x67, 0xde}, {0x6, 0x24, 0x1a, 0x62, 0x10}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4d27, 0x192, 0x9, 0x81, 0xc, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x81, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x5}, @generic={0xe, 0x21, "1320a143e89ad90870c1a378"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb8, 0x8}, @generic={0xca, 0x24, "bce7055e86c5faa275a0aa3d66ac79986d82a00f8073e662c75fa7b4c80a00774ecca9280ff11db762a2f776b18d7cc84c0bc11863b2bbb245a452245db0621c3d3023b7d026fd3fee1970d26c99b03078eeca556ad76e4c38bf4a040e0a33ccb1c4f9867389a2a0f11b51d179100533431b55541fd15bb178784f943823d3238114d3017b72c41731b70f14298531dca7595da5f83eb6e18fea3846e1b0007b5cd4dc5e38453a8d1d5e676866c9ed4fc7d9b38a18ac6e7d2640a7db3ddf9ab2a753fcb586c1a8de"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0xd8, 0xb, 0x33, [@generic={0x7c, 0x2, "c52496968967589327b36bc07285dd215e0c9c6b1833aae7e26c138d1e330ae6c8804ca0e3586877d54f93920b5937fd3872fc3e6b6eb61436842c54ac6b5142b0d51d8b4c9a8c231ed155860170ac66e7cd2eda96e0a2aa5a7e39141fb736474730006b21382b5e7c0132b5049fd932a2a8b88556a9b0887c26"}, @generic={0x93, 0x8, "8e11135b01e479be7d6e84cab54d7982c5fa9ce896b5b786a625e41b6abee83088dd6c7e75e7b00e50761b2eb9ce7950d6ae363c345de0f48164e18cdd3426f9889a02df293ec95a72f39471f8a91c9d22901966307760257c29e1c55bb33da7b7b884b0266ff47740096274bf16b6af20dd8fd9bf3b463491719b8db25dc599c29418dbec6fb7f443f7333fb649cf8a06"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x3}]}}, {{0x9, 0x5, 0x83, 0x10, 0x10, 0x8, 0x49, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa0, 0xe5f0}]}}, {{0x9, 0x5, 0x80, 0x21, 0x200, 0x2, 0xc7, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1}}]}}, {{0x9, 0x4, 0xa1, 0x3, 0x5, 0xa, 0x38, 0xdd, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x961e}]}}, {{0x9, 0x5, 0x80, 0x1, 0x48, 0x6, 0xb4, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0xc, 0x30, 0x6, 0x3, 0x9, [@generic={0xe5, 0xf, "42fc157987e28cda3ba9386056388f543135dcf7369fa7677acf871631094f02f55a921dcabb0b8e80d8ef76099130c83a6534d6e55ce9fe01da75cafceb362d0693ca5a90a3f563856f87319358268af9d9d788b0b6b9e71fbf8a6c8d2af829ce2f96d59ed0b773d10d51ee15b19f317866777aa8984861cbb647c28b5450a29b43a7e35cffffd12f07bb3cfada029132634011f11bb9caac1b44142d8499fc8201b25cafe27f82bba0a66ff01099d0b1d8c055eff1d8cf96d75a3275b4d557aa4531bd879643580f880f5e8b38dab9f850fc3c74482b7d27b6ce90596d554460c198"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0x9, 0x5, 0x9}}]}}, {{0x9, 0x4, 0xd7, 0x5, 0x1, 0xa6, 0xfd, 0x96, 0x5, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "823f8c"}, {0x5, 0x24, 0x0, 0x6e}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x0, 0xcbf2, 0xc}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x2}, @obex={0x5, 0x24, 0x15, 0x7ff}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, '@ZZ'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xbd73, 0xc3, 0xb}, [@mbim={0xc, 0x24, 0x1b, 0x10, 0x1, 0x48, 0x1, 0x401, 0x9}]}], [{{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0x40, 0xc5}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) write$bt_hci(r1, 0x0, 0xb) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0030030000004e21385b8b3ae042cd84db44943ce95b73c0839bb0a899a667a829ba24df60bf5dc88920ba8338fdcd0071ed9bc3eb8a59f8211659c6ac19b0cfcfa613a2c07de47ca0b50a0600"/90], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m49.104084574s ago: executing program 34 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6000) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r0 = syz_usb_connect(0x0, 0x81c, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2c, 0x72, 0x4f, 0x20, 0x19d2, 0xff84, 0x876f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80a, 0x4, 0x0, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xba, 0x81, 0xe, 0xff, 0xff, 0xff, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0xfb}]}, @generic={0xa4, 0x24, "bb1996e42a52005ef543cf25b95744c8b9075f21732cded2f3582202adf91fb56cd390d1854e57f1241cd6c5977d7a79cf65ac8ad6ed298428af86e962d6c0f517cbb640e255ffa45da1d04584c7d179e844183d89de383efc997d36cda8b2b7a0708ef6eb7064000e3d97b0cf0cd20abb40e69834a19b32f53fe2b93833325de3defedf07586f285b3a1193dcc92ed79554c9a022352cd4387bb8e6b74b3ce78000"}], [{{0x9, 0x5, 0x1, 0x3, 0x10, 0x1, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x7, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x7, 0x3, 0x7, [@generic={0x1a, 0x7, "65cc7f0bf096c4038c5522697f4b84d443061b6ca88d9ff0"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xfd, 0x7f, 0xa9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x4f, 0x4}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0x3, 0x3, [@generic={0x86, 0x22, "e94aad0fa0457ffb15aa41540a6c097c795ddc27c6a69978ebb48fe9e5fb322af2a63c1f77880921be5263698c74eab4b77038bf26d593ea0abddc8b2fe9712d942f2f896e6e002bf809061f28e6f43e2b91d39b094f1c038a7ce4382d0c500a12eda83e1d3de90467ab8c84535eb070f2a9f7afbca9fb707157525328355fe55b29539c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0xc, 0x458, 0x81, 0x1, 0x10, [@generic={0xa6, 0x8, "9fbbe9db8a9cfb28478766729887e4579dfe5e87a23b1679fdc8fba6acc928fc0966daf0585f1da2ee766bf628d0c3993f255adf174984d79b3598c62547bc4a4d4bbb4d37f64f07e8b4fc95f0043e1e1490d267a85fd2ab1e1172c7e3da3a8262ce975a881be6eaed2af9bd56140deae444713adebc4b3547a55d8c62bf191a26ebf868b47aa4a5243c3ad7786f7b388a48afce87362fc921d2c6b19f972946bf769684"}, @generic={0x56, 0xc, "5e9ea2c2e17bbeb94975e52baad2f1fa89e8610be7cfff28216e3d5f0dd847ea788d5350523b27aad69af28d9b833da93ac8a227ac43dfbf4a081eea216f1d2a491bc9f1d08da219be69bbe7a41c29a977c068ea"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xf6, 0x3, 0x8, [@generic={0x5a, 0x21, "3cced869215d4aa927ca16fd1a812499d1f47877f13025cd59736fb96bfdedc5e4dabc64a0568df19190860f0cff92b1e2c25e9ef5a0f9a35a78b755ecad231b4c9ca68ff908fb0e89e4fcffb157b1f26338e36e9f3a8cf7"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xf3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x101}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0xfe, 0xfe}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x1, 0xfb, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe6, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0xa, 0x3, 0x8, [@generic={0x48, 0xb, "6e8b9fb5c43686ed62daa2b0101005275ada96625cbaab5b18a20af7cc75e540ffc56463f51987f5ae8383c33437b77803e20d37ac1e13fd6ae619b7b63aac40f5cad39c9c1e"}, @generic={0x5b, 0xe, "5e1d5fccd50430d2fd3a576bdb8150986ac84865c3649a85d1a37c32d9f3e8cef28b83a005799d5bee422ed3bccdadf7a24642398650e1238b9a06666fb38f8bbf1fea1e8122197d7cefefa83994c1fa5a85e42af2cf476a67"}]}}]}}, {{0x9, 0x4, 0xa0, 0x6, 0x7, 0xa4, 0xdf, 0x23, 0x5, [@hid_hid={0x9, 0x21, 0x2435, 0x0, 0x1, {0x22, 0x7da}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x67, 0xde}, {0x6, 0x24, 0x1a, 0x62, 0x10}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4d27, 0x192, 0x9, 0x81, 0xc, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x81, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x5}, @generic={0xe, 0x21, "1320a143e89ad90870c1a378"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb8, 0x8}, @generic={0xca, 0x24, "bce7055e86c5faa275a0aa3d66ac79986d82a00f8073e662c75fa7b4c80a00774ecca9280ff11db762a2f776b18d7cc84c0bc11863b2bbb245a452245db0621c3d3023b7d026fd3fee1970d26c99b03078eeca556ad76e4c38bf4a040e0a33ccb1c4f9867389a2a0f11b51d179100533431b55541fd15bb178784f943823d3238114d3017b72c41731b70f14298531dca7595da5f83eb6e18fea3846e1b0007b5cd4dc5e38453a8d1d5e676866c9ed4fc7d9b38a18ac6e7d2640a7db3ddf9ab2a753fcb586c1a8de"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0xd8, 0xb, 0x33, [@generic={0x7c, 0x2, "c52496968967589327b36bc07285dd215e0c9c6b1833aae7e26c138d1e330ae6c8804ca0e3586877d54f93920b5937fd3872fc3e6b6eb61436842c54ac6b5142b0d51d8b4c9a8c231ed155860170ac66e7cd2eda96e0a2aa5a7e39141fb736474730006b21382b5e7c0132b5049fd932a2a8b88556a9b0887c26"}, @generic={0x93, 0x8, "8e11135b01e479be7d6e84cab54d7982c5fa9ce896b5b786a625e41b6abee83088dd6c7e75e7b00e50761b2eb9ce7950d6ae363c345de0f48164e18cdd3426f9889a02df293ec95a72f39471f8a91c9d22901966307760257c29e1c55bb33da7b7b884b0266ff47740096274bf16b6af20dd8fd9bf3b463491719b8db25dc599c29418dbec6fb7f443f7333fb649cf8a06"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x1, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x3}]}}, {{0x9, 0x5, 0x83, 0x10, 0x10, 0x8, 0x49, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa0, 0xe5f0}]}}, {{0x9, 0x5, 0x80, 0x21, 0x200, 0x2, 0xc7, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x1}}]}}, {{0x9, 0x4, 0xa1, 0x3, 0x5, 0xa, 0x38, 0xdd, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x961e}]}}, {{0x9, 0x5, 0x80, 0x1, 0x48, 0x6, 0xb4, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0xc, 0x30, 0x6, 0x3, 0x9, [@generic={0xe5, 0xf, "42fc157987e28cda3ba9386056388f543135dcf7369fa7677acf871631094f02f55a921dcabb0b8e80d8ef76099130c83a6534d6e55ce9fe01da75cafceb362d0693ca5a90a3f563856f87319358268af9d9d788b0b6b9e71fbf8a6c8d2af829ce2f96d59ed0b773d10d51ee15b19f317866777aa8984861cbb647c28b5450a29b43a7e35cffffd12f07bb3cfada029132634011f11bb9caac1b44142d8499fc8201b25cafe27f82bba0a66ff01099d0b1d8c055eff1d8cf96d75a3275b4d557aa4531bd879643580f880f5e8b38dab9f850fc3c74482b7d27b6ce90596d554460c198"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0x9, 0x5, 0x9}}]}}, {{0x9, 0x4, 0xd7, 0x5, 0x1, 0xa6, 0xfd, 0x96, 0x5, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "823f8c"}, {0x5, 0x24, 0x0, 0x6e}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x0, 0xcbf2, 0xc}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x2}, @obex={0x5, 0x24, 0x15, 0x7ff}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, '@ZZ'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xbd73, 0xc3, 0xb}, [@mbim={0xc, 0x24, 0x1b, 0x10, 0x1, 0x48, 0x1, 0x401, 0x9}]}], [{{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0x40, 0xc5}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) write$bt_hci(r1, 0x0, 0xb) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0030030000004e21385b8b3ae042cd84db44943ce95b73c0839bb0a899a667a829ba24df60bf5dc88920ba8338fdcd0071ed9bc3eb8a59f8211659c6ac19b0cfcfa613a2c07de47ca0b50a0600"/90], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 38.103183678s ago: executing program 3 (id=684): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x45) 38.060552184s ago: executing program 3 (id=685): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 38.059988007s ago: executing program 3 (id=686): socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 37.966270786s ago: executing program 3 (id=688): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}, 0xe000}], 0x1, 0x4000800) 37.897894061s ago: executing program 3 (id=689): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) chdir(0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x245000c, 0x0) 37.715143165s ago: executing program 3 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 22.363861825s ago: executing program 35 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 18.358134166s ago: executing program 4 (id=771): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0xb1, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x16, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x6, 0x8, 0x1}, {0x80a0000, 0x0, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0xeeef0000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0xf}, {0xdddd1000, 0x5}, {0x2000, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x9, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) 18.266792131s ago: executing program 4 (id=772): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 15.940851664s ago: executing program 4 (id=786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x200}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 15.253793526s ago: executing program 4 (id=791): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 12.821205206s ago: executing program 7 (id=799): socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.467832515s ago: executing program 7 (id=800): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x0, 0x460e, 0x3) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000a40)={&(0x7f00000004c0)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x3, 0x48604c48, 0x7, 0x1ff, 0x80000005, 0xa, 0x0, 0x0, 0x100, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.748101397s ago: executing program 7 (id=801): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x20004055) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "7221bfc3a5978c55", "757b14368d1aa866e6087692adcc7cfb", "448843dc", "0b22a66272f4422a"}, 0x28) 11.697466482s ago: executing program 4 (id=802): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) chdir(0x0) setpgid(r0, r0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x245000c, 0x0) 11.504828556s ago: executing program 4 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10.962769791s ago: executing program 7 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) accept4(r4, &(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000140)=0x80, 0x80000) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 8.421340295s ago: executing program 7 (id=812): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) chdir(0x0) setpgid(r0, r0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x245000c, 0x0) 8.268042835s ago: executing program 7 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000001140)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x9d, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.829829365s ago: executing program 5 (id=815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x33, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.476206096s ago: executing program 5 (id=816): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 5.328377006s ago: executing program 6 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0xc0) 5.271382354s ago: executing program 5 (id=818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.146526462s ago: executing program 6 (id=819): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.138802776s ago: executing program 5 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000500)) 4.90677717s ago: executing program 6 (id=821): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 4.906524579s ago: executing program 5 (id=822): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) chdir(0x0) setpgid(r0, r0) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x245000c, 0x0) 4.787979651s ago: executing program 6 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)=0x1) 4.752731267s ago: executing program 5 (id=824): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 670.885968ms ago: executing program 6 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 0s ago: executing program 6 (id=826): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kernel console output (not intermixed with test programs): 5-1: new full-speed USB device number 11 using dummy_hcd [ 309.849897][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.851960][ T5865] usb 5-1: not running at top speed; connect to a high speed hub [ 309.853877][ T5865] usb 5-1: config 129 has an invalid interface number: 252 but max is 0 [ 309.853905][ T5865] usb 5-1: config 129 has no interface number 0 [ 309.853939][ T5865] usb 5-1: config 129 interface 252 has no altsetting 0 [ 310.013801][ T5865] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=1a.8c [ 310.013832][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.013852][ T5865] usb 5-1: Product: syz [ 310.013873][ T5865] usb 5-1: Manufacturer: syz [ 310.013881][ T5865] usb 5-1: SerialNumber: syz [ 310.884295][ T5865] upd78f0730 5-1:129.252: upd78f0730 converter detected [ 310.932544][ T5865] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 310.974328][ T5865] usb 5-1: USB disconnect, device number 11 [ 310.993284][ T5865] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 311.027051][ T5865] upd78f0730 5-1:129.252: device disconnected [ 311.919727][ T7175] team0: Port device team_slave_0 added [ 311.929946][ T7175] team0: Port device team_slave_1 added [ 312.310875][ T7377] FAULT_INJECTION: forcing a failure. [ 312.310875][ T7377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.310905][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.310924][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.310943][ T7377] Call Trace: [ 312.310949][ T7377] [ 312.310957][ T7377] dump_stack_lvl+0x189/0x250 [ 312.310986][ T7377] ? __pfx____ratelimit+0x10/0x10 [ 312.311007][ T7377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.311030][ T7377] ? __pfx__printk+0x10/0x10 [ 312.311049][ T7377] ? __might_fault+0xb0/0x130 [ 312.311082][ T7377] should_fail_ex+0x46c/0x600 [ 312.311109][ T7377] _copy_from_user+0x2d/0xb0 [ 312.311127][ T7377] __sys_bpf+0x1e3/0x860 [ 312.311151][ T7377] ? __pfx___sys_bpf+0x10/0x10 [ 312.311169][ T7377] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 312.311203][ T7377] ? ksys_write+0x230/0x260 [ 312.311225][ T7377] ? __pfx_ksys_write+0x10/0x10 [ 312.311250][ T7377] __x64_sys_bpf+0x7c/0x90 [ 312.311270][ T7377] do_syscall_64+0xfa/0xfa0 [ 312.311291][ T7377] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.311311][ T7377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.311327][ T7377] ? clear_bhb_loop+0x60/0xb0 [ 312.311347][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.311362][ T7377] RIP: 0033:0x7fa33b99f6c9 [ 312.311377][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.311391][ T7377] RSP: 002b:00007fa339bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.311409][ T7377] RAX: ffffffffffffffda RBX: 00007fa33bbf5fa0 RCX: 00007fa33b99f6c9 [ 312.311421][ T7377] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 000000000000001e [ 312.311431][ T7377] RBP: 00007fa339bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 312.311441][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.311450][ T7377] R13: 00007fa33bbf6038 R14: 00007fa33bbf5fa0 R15: 00007fff6f3cc8a8 [ 312.311479][ T7377] [ 312.570110][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.570127][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.570150][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.634821][ T7378] FAULT_INJECTION: forcing a failure. [ 312.634821][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 312.634853][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.634874][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.634885][ T7378] Call Trace: [ 312.634892][ T7378] [ 312.634902][ T7378] dump_stack_lvl+0x189/0x250 [ 312.634933][ T7378] ? __pfx____ratelimit+0x10/0x10 [ 312.634957][ T7378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.634983][ T7378] ? __pfx__printk+0x10/0x10 [ 312.635012][ T7378] ? __pfx___might_resched+0x10/0x10 [ 312.635032][ T7378] ? fs_reclaim_acquire+0x7d/0x100 [ 312.635062][ T7378] should_fail_ex+0x46c/0x600 [ 312.635091][ T7378] ? mas_alloc_nodes+0x291/0x350 [ 312.635113][ T7378] should_failslab+0xa8/0x100 [ 312.635139][ T7378] ? mas_alloc_nodes+0x291/0x350 [ 312.635158][ T7378] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 312.635190][ T7378] mas_alloc_nodes+0x291/0x350 [ 312.635218][ T7378] mas_preallocate+0x2e0/0x670 [ 312.635247][ T7378] ? __pfx_mas_preallocate+0x10/0x10 [ 312.635284][ T7378] ? __mas_set_range+0x12f/0x3c0 [ 312.635310][ T7378] __split_vma+0x2fd/0x9e0 [ 312.635340][ T7378] ? __pfx___split_vma+0x10/0x10 [ 312.635370][ T7378] ? can_vma_merge_left+0x195/0x6b0 [ 312.635397][ T7378] vma_modify+0x1328/0x1880 [ 312.635434][ T7378] vma_modify_flags+0x1e8/0x230 [ 312.635456][ T7378] ? __pfx_vma_modify_flags+0x10/0x10 [ 312.635493][ T7378] ? mas_next_slot+0xc23/0xd00 [ 312.635519][ T7378] mprotect_fixup+0x407/0x9c0 [ 312.635548][ T7378] ? __pfx_mprotect_fixup+0x10/0x10 [ 312.635577][ T7378] do_mprotect_pkey+0x8c5/0xcd0 [ 312.635618][ T7378] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 312.635665][ T7378] ? __pfx_ksys_write+0x10/0x10 [ 312.635695][ T7378] __x64_sys_mprotect+0x80/0x90 [ 312.635714][ T7378] do_syscall_64+0xfa/0xfa0 [ 312.635735][ T7378] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.635758][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.635775][ T7378] ? clear_bhb_loop+0x60/0xb0 [ 312.635796][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.635813][ T7378] RIP: 0033:0x7f7edadef6c9 [ 312.635830][ T7378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.635845][ T7378] RSP: 002b:00007f7ed902d038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 312.635864][ T7378] RAX: ffffffffffffffda RBX: 00007f7edb046090 RCX: 00007f7edadef6c9 [ 312.635877][ T7378] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 312.635888][ T7378] RBP: 00007f7ed902d090 R08: 0000000000000000 R09: 0000000000000000 [ 312.635900][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.635911][ T7378] R13: 00007f7edb046128 R14: 00007f7edb046090 R15: 00007ffefdacf408 [ 312.635945][ T7378] [ 312.641948][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.641964][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.641988][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.265182][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.268336][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.269916][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.278657][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.281302][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.632395][ T7396] overlayfs: overlapping lowerdir path [ 313.662407][ T7175] hsr_slave_0: entered promiscuous mode [ 313.664409][ T7175] hsr_slave_1: entered promiscuous mode [ 313.665416][ T7175] debugfs: 'hsr0' already exists in 'hsr' [ 313.665447][ T7175] Cannot create hsr debugfs directory [ 313.940565][ T37] kauditd_printk_skb: 64 callbacks suppressed [ 313.940584][ T37] audit: type=1326 audit(1762512570.178:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.941038][ T37] audit: type=1326 audit(1762512570.178:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.941351][ T37] audit: type=1326 audit(1762512570.178:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.941628][ T37] audit: type=1326 audit(1762512570.178:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.942079][ T37] audit: type=1326 audit(1762512570.178:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.942347][ T37] audit: type=1326 audit(1762512570.178:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 313.943397][ T37] audit: type=1326 audit(1762512570.178:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 314.007936][ T37] audit: type=1326 audit(1762512570.248:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 314.833684][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 314.986176][ T31] usb 2-1: config index 0 descriptor too short (expected 64051, got 10) [ 314.986206][ T31] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 314.986226][ T31] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 314.986245][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 314.990644][ T31] usb 2-1: New USB device found, idVendor=0456, idProduct=b000, bcdDevice=ab.07 [ 314.990676][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.990696][ T31] usb 2-1: Product: syz [ 314.990711][ T31] usb 2-1: Manufacturer: syz [ 314.990726][ T31] usb 2-1: SerialNumber: syz [ 315.066755][ T31] usb 2-1: config 0 descriptor?? [ 315.137402][ T7428] netlink: 88 bytes leftover after parsing attributes in process `syz.3.404'. [ 315.238980][ T1010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.417837][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.418416][ T5122] Bluetooth: hci0: command tx timeout [ 315.474778][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 315.560386][ T7434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.406'. [ 315.643830][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 315.663388][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.672354][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.681437][ T31] usb 5-1: config 3 has an invalid interface number: 43 but max is 0 [ 315.681455][ T31] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 315.681465][ T31] usb 5-1: config 3 has no interface number 0 [ 315.681488][ T31] usb 5-1: config 3 interface 43 has no altsetting 0 [ 315.700634][ T1010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.723708][ T31] usb 5-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31 [ 315.723738][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.723757][ T31] usb 5-1: Product: syz [ 315.723770][ T31] usb 5-1: Manufacturer: syz [ 315.723785][ T31] usb 5-1: SerialNumber: syz [ 316.080901][ T31] usb 5-1: bad CDC descriptors [ 316.121910][ T31] usb 5-1: USB disconnect, device number 12 [ 317.420012][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.459917][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459989][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.520524][ T1010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.652069][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.653083][ T5122] Bluetooth: hci0: command tx timeout [ 317.878068][ T31] usb 2-1: USB disconnect, device number 6 [ 317.917672][ T7446] overlayfs: overlapping lowerdir path [ 318.588757][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.618405][ T1010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.977586][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.011133][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.198474][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.996712][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.997228][ T5122] Bluetooth: hci0: command tx timeout [ 320.228071][ T7468] ecryptfs: Unknown parameter 'discard' [ 320.708642][ T7175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.783763][ T7175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.003044][ T7175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.118214][ T7175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.211178][ T7391] chnl_net:caif_netlink_parms(): no params data found [ 321.413722][ T5865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 321.565215][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 321.567759][ T5865] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 321.567786][ T5865] usb 5-1: config 0 has no interface number 0 [ 321.608697][ T5865] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 321.608728][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.608747][ T5865] usb 5-1: Product: syz [ 321.608761][ T5865] usb 5-1: Manufacturer: syz [ 321.608776][ T5865] usb 5-1: SerialNumber: syz [ 321.623060][ T5865] usb 5-1: config 0 descriptor?? [ 321.828085][ T1010] bridge_slave_1: left allmulticast mode [ 321.828115][ T1010] bridge_slave_1: left promiscuous mode [ 321.829706][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.860655][ T5865] radio-si470x 5-1:0.35: this is not a si470x device. [ 321.918127][ T1010] bridge_slave_0: left allmulticast mode [ 321.918158][ T1010] bridge_slave_0: left promiscuous mode [ 321.920369][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.043761][ T5122] Bluetooth: hci0: command tx timeout [ 322.068357][ T5865] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 322.100092][ T5865] usb 5-1: USB disconnect, device number 13 [ 322.321662][ T7513] capability: warning: `syz.3.422' uses 32-bit capabilities (legacy support in use) [ 322.502722][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.696736][ T7517] overlayfs: overlapping lowerdir path [ 322.947698][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.427627][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.719095][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.988418][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.441396][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.475317][ T7526] netlink: 48 bytes leftover after parsing attributes in process `syz.4.426'. [ 324.594051][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.374590][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.454239][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.476103][ T1010] bond0 (unregistering): Released all slaves [ 325.800701][ T7535] FAULT_INJECTION: forcing a failure. [ 325.800701][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.800735][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.4.430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.800757][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.800767][ T7535] Call Trace: [ 325.800774][ T7535] [ 325.800783][ T7535] dump_stack_lvl+0x189/0x250 [ 325.800814][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 325.800839][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.800862][ T7535] ? __pfx__printk+0x10/0x10 [ 325.800883][ T7535] ? __might_fault+0xb0/0x130 [ 325.800918][ T7535] should_fail_ex+0x46c/0x600 [ 325.800949][ T7535] _copy_from_user+0x2d/0xb0 [ 325.800970][ T7535] iommufd_vfio_ioctl+0x19e/0x12f0 [ 325.800999][ T7535] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 325.801031][ T7535] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.801061][ T7535] ? do_vfs_ioctl+0xbeb/0x1440 [ 325.801081][ T7535] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.801105][ T7535] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 325.801129][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.801160][ T7535] iommufd_fops_ioctl+0x11c/0x580 [ 325.801181][ T7535] ? __asan_memset+0x22/0x50 [ 325.801200][ T7535] ? smack_file_ioctl+0x24d/0x340 [ 325.801224][ T7535] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 325.801254][ T7535] ? __fget_files+0x3a6/0x420 [ 325.801276][ T7535] ? __fget_files+0x2a/0x420 [ 325.801303][ T7535] ? bpf_lsm_file_ioctl+0x9/0x20 [ 325.801321][ T7535] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 325.801342][ T7535] __se_sys_ioctl+0xff/0x170 [ 325.801365][ T7535] do_syscall_64+0xfa/0xfa0 [ 325.801386][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.801408][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.801426][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 325.801448][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.801465][ T7535] RIP: 0033:0x7f07b6bbf6c9 [ 325.801481][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.801503][ T7535] RSP: 002b:00007f07b4e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.801523][ T7535] RAX: ffffffffffffffda RBX: 00007f07b6e15fa0 RCX: 00007f07b6bbf6c9 [ 325.801537][ T7535] RDX: 0000200000000440 RSI: 0000000000003b72 RDI: 0000000000000003 [ 325.801547][ T7535] RBP: 00007f07b4e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.801557][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.801567][ T7535] R13: 00007f07b6e16038 R14: 00007f07b6e15fa0 R15: 00007ffd21aa7ca8 [ 325.801596][ T7535] [ 325.862543][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.048339][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.089840][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.089970][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.090208][ T7391] bridge_slave_0: entered allmulticast mode [ 326.094412][ T7391] bridge_slave_0: entered promiscuous mode [ 326.102875][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.103073][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.103325][ T7391] bridge_slave_1: entered allmulticast mode [ 326.108960][ T7391] bridge_slave_1: entered promiscuous mode [ 327.027339][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.247755][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.084736][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.257728][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.448791][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.493664][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 329.031991][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.123298][ T31] usb 2-1: config 1 interface 0 altsetting 113 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.123346][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 329.150954][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.150985][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.151006][ T31] usb 2-1: Product: syz [ 329.151021][ T31] usb 2-1: Manufacturer: syz [ 329.151036][ T31] usb 2-1: SerialNumber: syz [ 329.167367][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.386955][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.480991][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.546015][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.573989][ T31] cdc_ether 2-1:1.0: skipping garbage [ 329.574014][ T31] usb 2-1: bad CDC descriptors [ 329.603429][ T31] usb 2-1: USB disconnect, device number 7 [ 329.659169][ T7534] udevd[7534]: setting mode of /dev/bus/usb/002/007 to 020664 failed: No such file or directory [ 329.659415][ T7534] udevd[7534]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory [ 330.318360][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.600324][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.653022][ T7391] team0: Port device team_slave_0 added [ 330.843952][ T1010] hsr_slave_0: left promiscuous mode [ 330.864641][ T1010] hsr_slave_1: left promiscuous mode [ 330.865302][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.865318][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.906893][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.906921][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.084905][ T1010] veth1_macvtap: left promiscuous mode [ 331.084991][ T1010] veth0_macvtap: left promiscuous mode [ 331.086285][ T1010] veth1_vlan: left promiscuous mode [ 331.087418][ T1010] veth0_vlan: left promiscuous mode [ 331.189797][ T7588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.446'. [ 331.357972][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.083722][ T5809] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 332.257560][ T5809] usb 2-1: config index 0 descriptor too short (expected 24868, got 36) [ 332.257589][ T5809] usb 2-1: config 127 has too many interfaces: 186, using maximum allowed: 32 [ 332.257610][ T5809] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 332.257630][ T5809] usb 2-1: config 127 has 0 interfaces, different from the descriptor's value: 186 [ 332.262684][ T5809] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 332.262715][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.262735][ T5809] usb 2-1: Product: syz [ 332.262748][ T5809] usb 2-1: Manufacturer: syz [ 332.262763][ T5809] usb 2-1: SerialNumber: syz [ 334.951999][ T5809] usb 2-1: USB disconnect, device number 8 [ 335.163491][ T7621] FAULT_INJECTION: forcing a failure. [ 335.163491][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 335.163536][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.163554][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.163564][ T7621] Call Trace: [ 335.163570][ T7621] [ 335.163578][ T7621] dump_stack_lvl+0x189/0x250 [ 335.163608][ T7621] ? __pfx____ratelimit+0x10/0x10 [ 335.163632][ T7621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.163657][ T7621] ? __pfx__printk+0x10/0x10 [ 335.163685][ T7621] ? __pfx___might_resched+0x10/0x10 [ 335.163705][ T7621] ? fs_reclaim_acquire+0x7d/0x100 [ 335.163734][ T7621] should_fail_ex+0x46c/0x600 [ 335.163762][ T7621] ? sock_alloc_inode+0x28/0xc0 [ 335.163786][ T7621] should_failslab+0xa8/0x100 [ 335.163810][ T7621] ? sock_alloc_inode+0x28/0xc0 [ 335.163830][ T7621] kmem_cache_alloc_lru_noprof+0x74/0x6b0 [ 335.163849][ T7621] ? __lock_acquire+0xab9/0xd20 [ 335.163876][ T7621] ? __pfx_sock_alloc_inode+0x10/0x10 [ 335.163896][ T7621] sock_alloc_inode+0x28/0xc0 [ 335.163919][ T7621] alloc_inode+0x6a/0x1b0 [ 335.163944][ T7621] do_accept+0x117/0x680 [ 335.163962][ T7621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 335.163988][ T7621] ? __pfx_do_accept+0x10/0x10 [ 335.164030][ T7621] __sys_accept4+0x11c/0x1c0 [ 335.164052][ T7621] ? __pfx___sys_accept4+0x10/0x10 [ 335.164067][ T7621] ? ksys_write+0x230/0x260 [ 335.164092][ T7621] ? __pfx_ksys_write+0x10/0x10 [ 335.164118][ T7621] __x64_sys_accept4+0x9a/0xb0 [ 335.164138][ T7621] do_syscall_64+0xfa/0xfa0 [ 335.164160][ T7621] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.164307][ T7621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.164325][ T7621] ? clear_bhb_loop+0x60/0xb0 [ 335.164348][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.164366][ T7621] RIP: 0033:0x7f07b6bbf6c9 [ 335.164383][ T7621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.164398][ T7621] RSP: 002b:00007f07b4e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 335.164418][ T7621] RAX: ffffffffffffffda RBX: 00007f07b6e15fa0 RCX: 00007f07b6bbf6c9 [ 335.164430][ T7621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 335.164441][ T7621] RBP: 00007f07b4e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.164452][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.164463][ T7621] R13: 00007f07b6e16038 R14: 00007f07b6e15fa0 R15: 00007ffd21aa7ca8 [ 335.164495][ T7621] [ 337.127949][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 337.394718][ T1010] team0 (unregistering): Port device team_slave_0 removed [ 340.407746][ T7391] team0: Port device team_slave_1 added [ 340.869724][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.869740][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.869762][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.876725][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.876742][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.876765][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.015900][ T5966] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 341.033904][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 341.183747][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 341.186129][ T5966] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.186162][ T5966] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.186186][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 341.186220][ T5966] usb 5-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 341.186244][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.191846][ T5966] usb 5-1: config 0 descriptor?? [ 341.227315][ T10] usb 4-1: config index 0 descriptor too short (expected 24868, got 36) [ 341.227344][ T10] usb 4-1: config 127 has too many interfaces: 186, using maximum allowed: 32 [ 341.227363][ T10] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 341.227440][ T10] usb 4-1: config 127 has 0 interfaces, different from the descriptor's value: 186 [ 341.264676][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 341.264769][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.264790][ T10] usb 4-1: Product: syz [ 341.264803][ T10] usb 4-1: Manufacturer: syz [ 341.264817][ T10] usb 4-1: SerialNumber: syz [ 341.696050][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 341.697431][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 341.740501][ T5966] usb 5-1: USB disconnect, device number 14 [ 341.770285][ T7391] hsr_slave_0: entered promiscuous mode [ 341.782183][ T7391] hsr_slave_1: entered promiscuous mode [ 344.285893][ T7682] FAULT_INJECTION: forcing a failure. [ 344.285893][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 344.285926][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.4.469 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.285947][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.285957][ T7682] Call Trace: [ 344.285965][ T7682] [ 344.285972][ T7682] dump_stack_lvl+0x189/0x250 [ 344.286003][ T7682] ? __pfx____ratelimit+0x10/0x10 [ 344.286027][ T7682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.286053][ T7682] ? __pfx__printk+0x10/0x10 [ 344.286081][ T7682] ? __pfx___might_resched+0x10/0x10 [ 344.286100][ T7682] ? fs_reclaim_acquire+0x7d/0x100 [ 344.286128][ T7682] should_fail_ex+0x46c/0x600 [ 344.286158][ T7682] ? __d_alloc+0x36/0x7b0 [ 344.286174][ T7682] should_failslab+0xa8/0x100 [ 344.286199][ T7682] ? __d_alloc+0x36/0x7b0 [ 344.286213][ T7682] kmem_cache_alloc_lru_noprof+0x74/0x6b0 [ 344.286247][ T7682] __d_alloc+0x36/0x7b0 [ 344.286270][ T7682] d_alloc+0x4b/0x190 [ 344.286284][ T7682] ? lookup_one_qstr_excl+0xc8/0x360 [ 344.286304][ T7682] lookup_one_qstr_excl+0xdc/0x360 [ 344.286329][ T7682] do_renameat2+0x40e/0xa50 [ 344.286374][ T7682] ? __pfx_do_renameat2+0x10/0x10 [ 344.286407][ T7682] ? strncpy_from_user+0x150/0x290 [ 344.286434][ T7682] ? getname_flags+0x1e5/0x540 [ 344.286464][ T7682] __x64_sys_renameat2+0xce/0xe0 [ 344.286491][ T7682] do_syscall_64+0xfa/0xfa0 [ 344.286514][ T7682] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.286535][ T7682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.286558][ T7682] ? clear_bhb_loop+0x60/0xb0 [ 344.286579][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.286597][ T7682] RIP: 0033:0x7f07b6bbf6c9 [ 344.286614][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.286629][ T7682] RSP: 002b:00007f07b4e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 344.286648][ T7682] RAX: ffffffffffffffda RBX: 00007f07b6e15fa0 RCX: 00007f07b6bbf6c9 [ 344.286662][ T7682] RDX: ffffffffffffff9c RSI: 0000200000000400 RDI: ffffffffffffff9c [ 344.286675][ T7682] RBP: 00007f07b4e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 344.286686][ T7682] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 344.286699][ T7682] R13: 00007f07b6e16038 R14: 00007f07b6e15fa0 R15: 00007ffd21aa7ca8 [ 344.286731][ T7682] [ 344.393460][ T7686] 9pnet_virtio: no channels available for device 127.0.0.1 [ 345.641626][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.960107][ T10] usb 4-1: USB disconnect, device number 5 [ 345.988309][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 346.027108][ T7697] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 346.539174][ T7175] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.633246][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.633481][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.661158][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.661362][ T7068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.264642][ T7727] ecryptfs: Unknown parameter 'discard' [ 349.408733][ T7391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.465397][ T7391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.533053][ T7391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.561977][ T7391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.833776][ T5961] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 351.074501][ T5961] usb 2-1: config index 0 descriptor too short (expected 24868, got 36) [ 351.074530][ T5961] usb 2-1: config 127 has too many interfaces: 186, using maximum allowed: 32 [ 351.074552][ T5961] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 351.074572][ T5961] usb 2-1: config 127 has 0 interfaces, different from the descriptor's value: 186 [ 351.135341][ T5961] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 351.135372][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.135392][ T5961] usb 2-1: Product: syz [ 351.135407][ T5961] usb 2-1: Manufacturer: syz [ 351.135421][ T5961] usb 2-1: SerialNumber: syz [ 351.355785][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.362908][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.378181][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.381539][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.382886][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.788798][ T5961] usb 2-1: USB disconnect, device number 9 [ 352.927572][ T7772] block nbd1: shutting down sockets [ 353.176755][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.196906][ T7776] Bluetooth: MGMT ver 1.23 [ 353.198552][ T7776] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 353.451844][ T7780] fuse: Bad value for 'fd' [ 353.588929][ T5122] Bluetooth: hci5: command tx timeout [ 354.510867][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.511301][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 354.677175][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 354.679594][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 3 [ 354.679624][ T9] usb 5-1: config 0 has an invalid interface number: 160 but max is 3 [ 354.679643][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 354.679661][ T9] usb 5-1: config 0 has an invalid interface number: 161 but max is 3 [ 354.679681][ T9] usb 5-1: config 0 has an invalid interface number: 215 but max is 3 [ 354.679702][ T9] usb 5-1: config 0 has no interface number 0 [ 354.679718][ T9] usb 5-1: config 0 has no interface number 1 [ 354.679733][ T9] usb 5-1: config 0 has no interface number 2 [ 354.679749][ T9] usb 5-1: config 0 has no interface number 3 [ 354.679843][ T9] usb 5-1: config 0 interface 186 altsetting 129 bulk endpoint 0xE has invalid maxpacket 16 [ 354.679872][ T9] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 354.679896][ T9] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 354.679923][ T9] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 354.679947][ T9] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 354.679974][ T9] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 354.679997][ T9] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 354.680037][ T9] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 354.680062][ T9] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 354.680084][ T9] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 354.680108][ T9] usb 5-1: config 0 interface 160 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 354.680129][ T9] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 354.680169][ T9] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 354.680203][ T9] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 354.680224][ T9] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 354.680247][ T9] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 354.680269][ T9] usb 5-1: config 0 interface 161 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.680306][ T9] usb 5-1: config 0 interface 215 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 354.680328][ T9] usb 5-1: config 0 interface 186 has no altsetting 0 [ 354.680347][ T9] usb 5-1: config 0 interface 160 has no altsetting 0 [ 354.680427][ T9] usb 5-1: config 0 interface 161 has no altsetting 0 [ 354.680445][ T9] usb 5-1: config 0 interface 215 has no altsetting 0 [ 354.682924][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff84, bcdDevice=87.6f [ 354.682953][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.682971][ T9] usb 5-1: Product: syz [ 354.682986][ T9] usb 5-1: Manufacturer: syz [ 354.683001][ T9] usb 5-1: SerialNumber: syz [ 355.073722][ T9] usb 5-1: config 0 descriptor?? [ 355.077026][ T7780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 355.341964][ T9] option 5-1:0.186: GSM modem (1-port) converter detected [ 355.433820][ T9] usb 5-1: USB disconnect, device number 15 [ 355.497669][ T9] option 5-1:0.186: device disconnected [ 355.643817][ T5122] Bluetooth: hci5: command tx timeout [ 355.715028][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.338917][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.349631][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.713447][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.863830][ T5961] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 356.897390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.897615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.016233][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 357.016269][ T5961] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 357.016311][ T5961] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 357.016335][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.077080][ T5961] usb 2-1: config 0 descriptor?? [ 357.078552][ T7804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.482348][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.566893][ T7817] netlink: 'syz.1.497': attribute type 11 has an invalid length. [ 357.723793][ T5122] Bluetooth: hci5: command tx timeout [ 357.860159][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.983243][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.986361][ T7749] chnl_net:caif_netlink_parms(): no params data found [ 358.541946][ T5961] ath6kl: Failed to submit usb control message: -110 [ 358.542278][ T5961] ath6kl: unable to send the bmi data to the device: -110 [ 358.542297][ T5961] ath6kl: Unable to send get target info: -110 [ 358.633653][ T5961] ath6kl: Failed to init ath6kl core: -110 [ 358.635682][ T5961] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 358.718381][ T31] usb 2-1: USB disconnect, device number 10 [ 359.155760][ T3606] bridge_slave_1: left allmulticast mode [ 359.155789][ T3606] bridge_slave_1: left promiscuous mode [ 359.156656][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.245525][ T3606] bridge_slave_0: left allmulticast mode [ 359.245557][ T3606] bridge_slave_0: left promiscuous mode [ 359.245836][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.815005][ T5122] Bluetooth: hci5: command tx timeout [ 360.035351][ T5961] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 360.430666][ T5961] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 360.430916][ T5961] usb 2-1: config 0 has no interface number 0 [ 360.432235][ T5961] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 360.432410][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.489848][ T5961] usb 2-1: config 0 descriptor?? [ 360.702041][ T5122] Bluetooth: hci1: Malformed LE Event: 0x0d [ 364.584560][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.644397][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.687214][ T3606] bond0 (unregistering): Released all slaves [ 364.947604][ T5961] usb 2-1: string descriptor 0 read error: -71 [ 364.971875][ T5961] usb-storage 2-1:0.168: USB Mass Storage device detected [ 365.088671][ T5961] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 365.238215][ T5961] usb 2-1: USB disconnect, device number 11 [ 365.503877][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 365.743693][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 365.749561][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 365.749594][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 365.749619][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 365.749641][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 365.749667][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 365.760539][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.760666][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.760906][ T7749] bridge_slave_0: entered allmulticast mode [ 365.761642][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 365.761668][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.761688][ T10] usb 4-1: Product: syz [ 365.761703][ T10] usb 4-1: Manufacturer: syz [ 365.761717][ T10] usb 4-1: SerialNumber: syz [ 365.778018][ T10] usb 4-1: config 0 descriptor?? [ 365.833815][ T7749] bridge_slave_0: entered promiscuous mode [ 366.033796][ T3606] hsr_slave_0: left promiscuous mode [ 366.084367][ T3606] hsr_slave_1: left promiscuous mode [ 366.085542][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.134605][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.417606][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.417671][ T10] input input5: Device does not respond to id packet M [ 366.420028][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.420073][ T10] input input5: Device does not respond to id packet P [ 366.420492][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.420534][ T10] input input5: Device does not respond to id packet B [ 366.421696][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.421734][ T10] input input5: Device does not respond to id packet N [ 366.423835][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.424259][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.424679][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.426944][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 366.470790][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 366.845193][ T10] usb 4-1: USB disconnect, device number 6 [ 367.755745][ T7899] overlayfs: overlapping lowerdir path [ 368.019042][ T7903] fuse: Bad value for 'fd' [ 368.646554][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 369.286923][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 369.289390][ T5886] usb 5-1: config 0 has an invalid interface number: 186 but max is 3 [ 369.289418][ T5886] usb 5-1: config 0 has an invalid interface number: 160 but max is 3 [ 369.289439][ T5886] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 369.289458][ T5886] usb 5-1: config 0 has an invalid interface number: 161 but max is 3 [ 369.289479][ T5886] usb 5-1: config 0 has an invalid interface number: 215 but max is 3 [ 369.289500][ T5886] usb 5-1: config 0 has no interface number 0 [ 369.289516][ T5886] usb 5-1: config 0 has no interface number 1 [ 369.289532][ T5886] usb 5-1: config 0 has no interface number 2 [ 369.289548][ T5886] usb 5-1: config 0 has no interface number 3 [ 369.289651][ T5886] usb 5-1: config 0 interface 186 altsetting 129 bulk endpoint 0xE has invalid maxpacket 16 [ 369.289680][ T5886] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 369.289705][ T5886] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 369.289732][ T5886] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 369.289756][ T5886] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 369.289783][ T5886] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 369.289807][ T5886] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 369.289847][ T5886] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 369.289872][ T5886] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 369.289895][ T5886] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 369.289919][ T5886] usb 5-1: config 0 interface 160 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 369.289940][ T5886] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 369.289977][ T5886] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 369.290000][ T5886] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 369.290021][ T5886] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 369.290044][ T5886] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 369.290066][ T5886] usb 5-1: config 0 interface 161 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 369.290104][ T5886] usb 5-1: config 0 interface 215 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 369.290128][ T5886] usb 5-1: config 0 interface 186 has no altsetting 0 [ 369.290147][ T5886] usb 5-1: config 0 interface 160 has no altsetting 0 [ 369.290167][ T5886] usb 5-1: config 0 interface 161 has no altsetting 0 [ 369.290185][ T5886] usb 5-1: config 0 interface 215 has no altsetting 0 [ 369.295322][ T5886] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff84, bcdDevice=87.6f [ 369.295354][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.295376][ T5886] usb 5-1: Product: syz [ 369.295390][ T5886] usb 5-1: Manufacturer: syz [ 369.295405][ T5886] usb 5-1: SerialNumber: syz [ 370.737857][ T5886] usb 5-1: config 0 descriptor?? [ 370.774120][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.135726][ T5886] option 5-1:0.186: GSM modem (1-port) converter detected [ 371.309428][ T5886] usb 5-1: USB disconnect, device number 16 [ 371.349652][ T5886] option 5-1:0.186: device disconnected [ 373.115453][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 373.493261][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.512692][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.523414][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.556359][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.558919][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.649225][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 373.768526][ T7934] 9pnet_virtio: no channels available for device 127.0.0.1 [ 375.082088][ T7940] overlayfs: overlapping lowerdir path [ 375.643775][ T5122] Bluetooth: hci3: command tx timeout [ 375.873719][ T5966] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 376.046453][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 376.046491][ T5966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 376.046534][ T5966] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 376.046558][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.052953][ T5966] usb 4-1: config 0 descriptor?? [ 376.089620][ T7947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 376.325163][ T5966] ath6kl: Failed to submit usb control message: -71 [ 376.325217][ T5966] ath6kl: unable to send the bmi data to the device: -71 [ 376.325232][ T5966] ath6kl: Unable to send get target info: -71 [ 376.328064][ T5966] ath6kl: Failed to init ath6kl core: -71 [ 376.329598][ T5966] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 376.434633][ T5966] usb 4-1: USB disconnect, device number 7 [ 376.503311][ T7950] fuse: Bad value for 'fd' [ 376.793704][ T5865] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 376.953878][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 376.956166][ T5865] usb 5-1: config 0 has an invalid interface number: 186 but max is 3 [ 376.956197][ T5865] usb 5-1: config 0 has an invalid interface number: 160 but max is 3 [ 376.956217][ T5865] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 376.956237][ T5865] usb 5-1: config 0 has an invalid interface number: 161 but max is 3 [ 376.956258][ T5865] usb 5-1: config 0 has an invalid interface number: 215 but max is 3 [ 376.956279][ T5865] usb 5-1: config 0 has no interface number 0 [ 376.956295][ T5865] usb 5-1: config 0 has no interface number 1 [ 376.956311][ T5865] usb 5-1: config 0 has no interface number 2 [ 376.956326][ T5865] usb 5-1: config 0 has no interface number 3 [ 376.956427][ T5865] usb 5-1: config 0 interface 186 altsetting 129 bulk endpoint 0xE has invalid maxpacket 16 [ 376.956457][ T5865] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 376.956483][ T5865] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 376.956510][ T5865] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 376.956534][ T5865] usb 5-1: config 0 interface 186 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 376.956561][ T5865] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 376.956583][ T5865] usb 5-1: config 0 interface 186 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 376.956624][ T5865] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 376.956649][ T5865] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 376.956672][ T5865] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 376.956695][ T5865] usb 5-1: config 0 interface 160 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 376.956715][ T5865] usb 5-1: config 0 interface 160 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 376.956746][ T5865] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 376.956767][ T5865] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 376.956788][ T5865] usb 5-1: config 0 interface 161 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 376.956809][ T5865] usb 5-1: config 0 interface 161 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 376.956831][ T5865] usb 5-1: config 0 interface 161 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 376.956880][ T5865] usb 5-1: config 0 interface 215 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 376.956900][ T5865] usb 5-1: config 0 interface 186 has no altsetting 0 [ 376.956918][ T5865] usb 5-1: config 0 interface 160 has no altsetting 0 [ 376.956936][ T5865] usb 5-1: config 0 interface 161 has no altsetting 0 [ 376.956965][ T5865] usb 5-1: config 0 interface 215 has no altsetting 0 [ 376.966490][ T5865] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff84, bcdDevice=87.6f [ 376.966519][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.966539][ T5865] usb 5-1: Product: syz [ 376.966553][ T5865] usb 5-1: Manufacturer: syz [ 376.966568][ T5865] usb 5-1: SerialNumber: syz [ 376.994934][ T5865] usb 5-1: config 0 descriptor?? [ 377.044614][ T7950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.267571][ T5865] option 5-1:0.186: GSM modem (1-port) converter detected [ 377.396678][ T5865] usb 5-1: USB disconnect, device number 17 [ 377.519944][ T5865] option 5-1:0.186: device disconnected [ 377.968800][ T5122] Bluetooth: hci3: command tx timeout [ 378.847130][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847204][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.052720][ T5122] Bluetooth: hci3: command tx timeout [ 381.542378][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.577262][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.578591][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.580251][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.581014][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.798209][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.799105][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.799359][ T7749] bridge_slave_1: entered allmulticast mode [ 381.806531][ T7749] bridge_slave_1: entered promiscuous mode [ 382.126620][ T5122] Bluetooth: hci3: command tx timeout [ 382.133782][ T5966] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 382.295712][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 382.295742][ T5966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 382.295777][ T5966] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 382.295796][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.344744][ T5966] usb 4-1: config 0 descriptor?? [ 382.345739][ T7978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 382.653876][ T5966] ath6kl: Failed to submit usb control message: -71 [ 382.653930][ T5966] ath6kl: unable to send the bmi data to the device: -71 [ 382.653945][ T5966] ath6kl: Unable to send get target info: -71 [ 382.657113][ T5966] ath6kl: Failed to init ath6kl core: -71 [ 382.658518][ T5966] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 383.465842][ T5966] usb 4-1: USB disconnect, device number 8 [ 383.723791][ T5122] Bluetooth: hci6: command tx timeout [ 383.728230][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.034212][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 384.052660][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.134127][ T7992] FAULT_INJECTION: forcing a failure. [ 384.134127][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 384.134181][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.3.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.134203][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.134218][ T7992] Call Trace: [ 384.134228][ T7992] [ 384.134237][ T7992] dump_stack_lvl+0x189/0x250 [ 384.134266][ T7992] ? __pfx____ratelimit+0x10/0x10 [ 384.134287][ T7992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.134308][ T7992] ? __pfx__printk+0x10/0x10 [ 384.134331][ T7992] ? __pfx___might_resched+0x10/0x10 [ 384.134351][ T7992] should_fail_ex+0x46c/0x600 [ 384.134376][ T7992] should_failslab+0xa8/0x100 [ 384.134398][ T7992] __kmalloc_noprof+0xcc/0x7d0 [ 384.134417][ T7992] ? kfree+0x51/0x950 [ 384.134432][ T7992] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.134455][ T7992] tomoyo_realpath_from_path+0xe3/0x5d0 [ 384.134474][ T7992] ? tomoyo_domain+0xda/0x130 [ 384.134496][ T7992] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 384.134518][ T7992] tomoyo_path_number_perm+0x1e8/0x5a0 [ 384.134542][ T7992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.134567][ T7992] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 384.134588][ T7992] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.134632][ T7992] ? __fget_files+0x2a/0x420 [ 384.134656][ T7992] ? __fget_files+0x3a6/0x420 [ 384.134673][ T7992] ? __fget_files+0x2a/0x420 [ 384.134696][ T7992] security_file_ioctl+0xcb/0x2d0 [ 384.134714][ T7992] __se_sys_ioctl+0x47/0x170 [ 384.134733][ T7992] do_syscall_64+0xfa/0xfa0 [ 384.134752][ T7992] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.134770][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.134785][ T7992] ? clear_bhb_loop+0x60/0xb0 [ 384.134804][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.134818][ T7992] RIP: 0033:0x7fa33b99f6c9 [ 384.134833][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.134846][ T7992] RSP: 002b:00007fa339bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.134864][ T7992] RAX: ffffffffffffffda RBX: 00007fa33bbf5fa0 RCX: 00007fa33b99f6c9 [ 384.134875][ T7992] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 384.134883][ T7992] RBP: 00007fa339bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 384.134893][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.134902][ T7992] R13: 00007fa33bbf6038 R14: 00007fa33bbf5fa0 R15: 00007fff6f3cc8a8 [ 384.134927][ T7992] [ 384.134939][ T7992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.786349][ T7749] team0: Port device team_slave_0 added [ 385.804396][ T5122] Bluetooth: hci6: command tx timeout [ 385.818839][ T7749] team0: Port device team_slave_1 added [ 386.188677][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.188694][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.188719][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.229994][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.230011][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.230037][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.889829][ T7749] hsr_slave_0: entered promiscuous mode [ 386.891357][ T7749] hsr_slave_1: entered promiscuous mode [ 386.892322][ T7749] debugfs: 'hsr0' already exists in 'hsr' [ 386.892347][ T7749] Cannot create hsr debugfs directory [ 387.004230][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 387.163995][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 387.166524][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.166550][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.166564][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.166585][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 387.166598][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.169948][ T9] usb 5-1: config 0 descriptor?? [ 387.377367][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 387.377498][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 387.381917][ T9] usb 5-1: USB disconnect, device number 18 [ 387.894295][ T5122] Bluetooth: hci6: command tx timeout [ 389.970354][ T5122] Bluetooth: hci6: command tx timeout [ 390.749887][ T7929] chnl_net:caif_netlink_parms(): no params data found [ 391.295674][ T7974] chnl_net:caif_netlink_parms(): no params data found [ 393.329379][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.329561][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.329827][ T7929] bridge_slave_0: entered allmulticast mode [ 393.332824][ T7929] bridge_slave_0: entered promiscuous mode [ 393.505224][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.505307][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.505477][ T7929] bridge_slave_1: entered allmulticast mode [ 393.507240][ T7929] bridge_slave_1: entered promiscuous mode [ 394.053800][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 394.233741][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 394.238988][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.239008][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.239021][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.239041][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 394.239053][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.295307][ T9] usb 4-1: config 0 descriptor?? [ 394.505299][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 394.505379][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.543354][ T9] usb 4-1: USB disconnect, device number 9 [ 394.590763][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.611216][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.611347][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.611579][ T7974] bridge_slave_0: entered allmulticast mode [ 394.619377][ T7974] bridge_slave_0: entered promiscuous mode [ 394.856163][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.859533][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.859673][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.859913][ T7974] bridge_slave_1: entered allmulticast mode [ 394.866959][ T7974] bridge_slave_1: entered promiscuous mode [ 397.106530][ T7929] team0: Port device team_slave_0 added [ 397.148187][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.150295][ T7929] team0: Port device team_slave_1 added [ 397.170882][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.998622][ T3606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.428556][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.428573][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.428600][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.659741][ T7974] team0: Port device team_slave_0 added [ 398.660912][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.660927][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.660951][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.239172][ T3606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.300249][ T7974] team0: Port device team_slave_1 added [ 401.575857][ T3606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.613888][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 401.620868][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.620885][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.620910][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.747476][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.747492][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.747515][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.765181][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 401.771981][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 401.772012][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.779849][ T9] usb 5-1: config 0 descriptor?? [ 401.795516][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 401.907256][ T8145] FAULT_INJECTION: forcing a failure. [ 401.907256][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 401.907280][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.907293][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.907299][ T8145] Call Trace: [ 401.907304][ T8145] [ 401.907312][ T8145] dump_stack_lvl+0x189/0x250 [ 401.907344][ T8145] ? __pfx____ratelimit+0x10/0x10 [ 401.907367][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.907393][ T8145] ? __pfx__printk+0x10/0x10 [ 401.907421][ T8145] ? __pfx___might_resched+0x10/0x10 [ 401.907441][ T8145] should_fail_ex+0x46c/0x600 [ 401.907458][ T8145] should_failslab+0xa8/0x100 [ 401.907475][ T8145] __kmalloc_noprof+0xcc/0x7d0 [ 401.907498][ T8145] ? kfree+0x51/0x950 [ 401.907515][ T8145] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 401.907544][ T8145] tomoyo_realpath_from_path+0xe3/0x5d0 [ 401.907567][ T8145] ? tomoyo_domain+0xda/0x130 [ 401.907595][ T8145] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 401.907614][ T8145] tomoyo_path_number_perm+0x1e8/0x5a0 [ 401.907632][ T8145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.907654][ T8145] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 401.907679][ T8145] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.907737][ T8145] ? __fget_files+0x2a/0x420 [ 401.907766][ T8145] ? __fget_files+0x3a6/0x420 [ 401.907781][ T8145] ? __fget_files+0x2a/0x420 [ 401.907797][ T8145] security_file_ioctl+0xcb/0x2d0 [ 401.907809][ T8145] __se_sys_ioctl+0x47/0x170 [ 401.907831][ T8145] do_syscall_64+0xfa/0xfa0 [ 401.907854][ T8145] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.907876][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.907895][ T8145] ? clear_bhb_loop+0x60/0xb0 [ 401.907918][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.907936][ T8145] RIP: 0033:0x7fa33b99f6c9 [ 401.907947][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.907957][ T8145] RSP: 002b:00007fa339bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.907968][ T8145] RAX: ffffffffffffffda RBX: 00007fa33bbf5fa0 RCX: 00007fa33b99f6c9 [ 401.907976][ T8145] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 401.907984][ T8145] RBP: 00007fa339bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 401.907995][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.908006][ T8145] R13: 00007fa33bbf6038 R14: 00007fa33bbf5fa0 R15: 00007fff6f3cc8a8 [ 401.908039][ T8145] [ 401.908047][ T8145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.992719][ T9] usb 5-1: Detected FT232B [ 402.185688][ T3606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.317495][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.318020][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.319317][ T7929] hsr_slave_0: entered promiscuous mode [ 402.320889][ T7929] hsr_slave_1: entered promiscuous mode [ 402.321887][ T7929] debugfs: 'hsr0' already exists in 'hsr' [ 402.321908][ T7929] Cannot create hsr debugfs directory [ 402.505051][ T7749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.709273][ T7749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.772399][ T7974] hsr_slave_0: entered promiscuous mode [ 402.780133][ T7974] hsr_slave_1: entered promiscuous mode [ 402.781795][ T7974] debugfs: 'hsr0' already exists in 'hsr' [ 402.781821][ T7974] Cannot create hsr debugfs directory [ 402.804956][ T7749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.913955][ T7749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 403.791452][ T3606] bridge_slave_1: left allmulticast mode [ 403.791480][ T3606] bridge_slave_1: left promiscuous mode [ 403.792468][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.878383][ T3606] bridge_slave_0: left allmulticast mode [ 403.878474][ T3606] bridge_slave_0: left promiscuous mode [ 403.878849][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.972516][ T3606] bridge_slave_1: left allmulticast mode [ 403.972596][ T3606] bridge_slave_1: left promiscuous mode [ 403.979998][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.057097][ T3606] bridge_slave_0: left allmulticast mode [ 404.057128][ T3606] bridge_slave_0: left promiscuous mode [ 404.057623][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.378470][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 404.379002][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 404.381527][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 404.393136][ T9] usb 5-1: USB disconnect, device number 19 [ 404.413767][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 404.414505][ T9] ftdi_sio 5-1:0.0: device disconnected [ 404.430408][ T5865] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.577965][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 404.578002][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 404.578042][ T5865] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 404.578073][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.630618][ T5865] usb 4-1: config 0 descriptor?? [ 404.631769][ T8170] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 404.952453][ T8170] netlink: 'syz.3.581': attribute type 11 has an invalid length. [ 404.973799][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 405.013266][ T5865] ath6kl: Failed to submit usb control message: -71 [ 405.013317][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 405.013333][ T5865] ath6kl: Unable to send get target info: -71 [ 405.045287][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 405.046620][ T5865] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 405.069245][ T5865] usb 4-1: USB disconnect, device number 10 [ 405.136266][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 405.136302][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 405.136342][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 405.136365][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.150571][ T9] usb 5-1: config 0 descriptor?? [ 405.151900][ T8176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.467827][ T8176] netlink: 'syz.4.583': attribute type 11 has an invalid length. [ 405.492280][ T9] ath6kl: Failed to submit usb control message: -71 [ 405.492332][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 405.492348][ T9] ath6kl: Unable to send get target info: -71 [ 405.530329][ T9] ath6kl: Failed to init ath6kl core: -71 [ 405.531865][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 405.594176][ T9] usb 5-1: USB disconnect, device number 20 [ 407.323986][ T5961] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 407.520402][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 407.520437][ T5961] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 407.520479][ T5961] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 407.520503][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.596010][ T5961] usb 5-1: config 0 descriptor?? [ 407.603462][ T8185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.855354][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.937418][ T8185] netlink: 'syz.4.585': attribute type 11 has an invalid length. [ 407.951689][ T5961] ath6kl: Failed to submit usb control message: -71 [ 407.951739][ T5961] ath6kl: unable to send the bmi data to the device: -71 [ 407.951755][ T5961] ath6kl: Unable to send get target info: -71 [ 407.956836][ T5961] ath6kl: Failed to init ath6kl core: -71 [ 407.958351][ T5961] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 407.994634][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.997242][ T5961] usb 5-1: USB disconnect, device number 21 [ 408.038358][ T3606] bond0 (unregistering): Released all slaves [ 408.417947][ T8194] futex_wake_op: syz.3.588 tries to shift op by -1; fix this program [ 410.320703][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.343332][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.351773][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.361004][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.362567][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.454921][ T5816] Bluetooth: hci0: command tx timeout [ 414.057244][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.118804][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.176580][ T3606] bond0 (unregistering): Released all slaves [ 414.524482][ T5816] Bluetooth: hci0: command tx timeout [ 415.134848][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 415.626799][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 415.627008][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 415.627834][ T5865] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 415.628294][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.669327][ T5865] usb 4-1: config 0 descriptor?? [ 415.687305][ T8234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.973322][ T8234] netlink: 'syz.3.598': attribute type 11 has an invalid length. [ 416.019472][ T5865] ath6kl: Failed to submit usb control message: -71 [ 416.019519][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 416.019534][ T5865] ath6kl: Unable to send get target info: -71 [ 416.020477][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 416.021915][ T5865] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 416.046764][ T5865] usb 4-1: USB disconnect, device number 11 [ 416.673337][ T5816] Bluetooth: hci0: command tx timeout [ 418.765884][ T5816] Bluetooth: hci0: command tx timeout [ 421.833881][ T3606] hsr_slave_0: left promiscuous mode [ 421.874834][ T3606] hsr_slave_1: left promiscuous mode [ 421.875880][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.915103][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.114013][ T3606] hsr_slave_0: left promiscuous mode [ 422.153726][ T3606] hsr_slave_1: left promiscuous mode [ 422.154418][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.154436][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.177834][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.177862][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.281675][ T3606] veth1_macvtap: left promiscuous mode [ 422.281741][ T3606] veth0_macvtap: left promiscuous mode [ 422.281909][ T3606] veth1_vlan: left promiscuous mode [ 422.282011][ T3606] veth0_vlan: left promiscuous mode [ 423.474922][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 423.690145][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 423.726348][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 423.785139][ T37] audit: type=1326 audit(1762512680.028:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.785904][ T37] audit: type=1326 audit(1762512680.028:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.788007][ T37] audit: type=1326 audit(1762512680.028:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.788301][ T37] audit: type=1326 audit(1762512680.028:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.788550][ T37] audit: type=1326 audit(1762512680.028:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.788858][ T37] audit: type=1326 audit(1762512680.028:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.789095][ T37] audit: type=1326 audit(1762512680.028:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.789320][ T37] audit: type=1326 audit(1762512680.028:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.789534][ T37] audit: type=1326 audit(1762512680.028:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 423.789917][ T37] audit: type=1326 audit(1762512680.028:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33b99f6c9 code=0x7ffc0000 [ 424.454001][ T5816] Bluetooth: hci2: unexpected event 0x32 length: 13 > 9 [ 424.580553][ T8293] Bluetooth: MGMT ver 1.23 [ 428.204680][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 428.425153][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 430.807517][ T8285] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 431.162802][ T8307] netlink: 'syz.3.623': attribute type 12 has an invalid length. [ 431.162828][ T8307] netlink: 248 bytes leftover after parsing attributes in process `syz.3.623'. [ 431.602944][ T7929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.645618][ T7929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.655550][ T5809] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 431.747154][ T7929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.797269][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 431.812151][ T7929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 431.824797][ T5809] usb 4-1: too many configurations: 202, using maximum allowed: 8 [ 431.850550][ T5809] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.850575][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.850586][ T5809] usb 4-1: Product: syz [ 431.850594][ T5809] usb 4-1: Manufacturer: syz [ 431.850601][ T5809] usb 4-1: SerialNumber: syz [ 431.886577][ T5809] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.051655][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.116099][ T7974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 433.164060][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 433.167160][ T9] ath9k_htc: Failed to initialize the device [ 433.282462][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 433.312277][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.312413][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.312609][ T8206] bridge_slave_0: entered allmulticast mode [ 433.315594][ T8206] bridge_slave_0: entered promiscuous mode [ 433.346722][ T7974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 433.407961][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.408111][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.408316][ T8206] bridge_slave_1: entered allmulticast mode [ 433.443730][ T8206] bridge_slave_1: entered promiscuous mode [ 433.447756][ T7974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.657260][ T7974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.704962][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.708650][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.736944][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.740530][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.741329][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.883732][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 434.060447][ T31] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.060476][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.060497][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.060551][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.062568][ T31] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.062596][ T31] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.062617][ T31] usb 5-1: Product: syz [ 434.062632][ T31] usb 5-1: Manufacturer: syz [ 434.140380][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 434.140401][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 434.171602][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 434.171640][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 434.252585][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.315300][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.453052][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.453171][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.453411][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.453432][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.453900][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.453921][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.454161][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.454181][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.454427][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.454447][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.454714][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.454735][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.455092][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.455113][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.455718][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.455740][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.458738][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.458762][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.459006][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 434.459025][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 434.468617][ T5809] usb 5-1: USB disconnect, device number 22 [ 434.468702][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 434.835733][ T31] usb 4-1: USB disconnect, device number 12 [ 434.929201][ T8206] team0: Port device team_slave_0 added [ 434.971499][ T8206] team0: Port device team_slave_1 added [ 434.992843][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 434.992861][ T37] audit: type=1804 audit(1762512691.228:158): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.631" name="file0" dev="ramfs" ino=23176 res=1 errno=0 [ 435.298704][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.298721][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.298746][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.320895][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.320913][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.320939][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.805450][ T5816] Bluetooth: hci1: command tx timeout [ 435.827722][ T8206] hsr_slave_0: entered promiscuous mode [ 435.829200][ T8206] hsr_slave_1: entered promiscuous mode [ 436.248479][ T37] audit: type=1804 audit(1762512692.488:159): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.635" name="/newroot/199/file0" dev="tmpfs" ino=1096 res=1 errno=0 [ 436.820730][ T8404] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.636'. [ 436.820768][ T8404] ksmbd: Unknown IPC event: 3, ignore. [ 437.406192][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 437.492701][ T5816] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 437.495241][ T5816] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 437.732336][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 437.912247][ T5816] Bluetooth: hci1: command tx timeout [ 438.198756][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.406719][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.642'. [ 439.120031][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.120240][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.120490][ T8353] bridge_slave_0: entered allmulticast mode [ 439.159969][ T8353] bridge_slave_0: entered promiscuous mode [ 439.174312][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.174492][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.174875][ T8353] bridge_slave_1: entered allmulticast mode [ 439.177623][ T8353] bridge_slave_1: entered promiscuous mode [ 439.204884][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.362141][ T3606] bridge_slave_1: left allmulticast mode [ 439.362169][ T3606] bridge_slave_1: left promiscuous mode [ 439.362497][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.445425][ T3606] bridge_slave_0: left allmulticast mode [ 439.445447][ T3606] bridge_slave_0: left promiscuous mode [ 439.445638][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.542502][ T3606] bridge_slave_1: left allmulticast mode [ 439.542531][ T3606] bridge_slave_1: left promiscuous mode [ 439.542753][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.626867][ T3606] bridge_slave_0: left allmulticast mode [ 439.626888][ T3606] bridge_slave_0: left promiscuous mode [ 439.627061][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.777708][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 439.964149][ T5816] Bluetooth: hci1: command tx timeout [ 439.979755][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.055791][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.115886][ T3606] bond0 (unregistering): Released all slaves [ 440.129729][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129799][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.404545][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.484247][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.575820][ T3606] bond0 (unregistering): Released all slaves [ 440.941441][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.083304][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.084428][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.088208][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.328715][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.345031][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.347239][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.377701][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.380155][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.567556][ T5816] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 441.567723][ T5816] Bluetooth: hci4: Injecting HCI hardware error event [ 441.569843][ T5816] Bluetooth: hci4: hardware error 0x00 [ 441.947813][ T8496] capability: warning: `syz.4.652' uses deprecated v2 capabilities in a way that may be insecure [ 442.044638][ T5122] Bluetooth: hci1: command tx timeout [ 442.117006][ T8353] team0: Port device team_slave_0 added [ 442.263990][ T3606] hsr_slave_0: left promiscuous mode [ 442.283940][ T3606] hsr_slave_1: left promiscuous mode [ 442.285729][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.324386][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.463953][ T3606] hsr_slave_0: left promiscuous mode [ 442.483866][ T3606] hsr_slave_1: left promiscuous mode [ 442.484566][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.532819][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.622123][ T8500] binder: 8499:8500 unknown command 0 [ 442.622145][ T8500] binder: 8499:8500 ioctl c0306201 200000000080 returned -22 [ 443.237469][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 443.404661][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 443.484334][ T5122] Bluetooth: hci3: command tx timeout [ 443.723920][ T5816] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 444.714342][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 444.885014][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 445.479097][ T8353] team0: Port device team_slave_1 added [ 445.563685][ T5816] Bluetooth: hci3: command tx timeout [ 445.974711][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.974729][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.974756][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.988961][ T8206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 446.081685][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.081700][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.081726][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.129966][ T8206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 446.216463][ T8206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.277513][ T8206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 446.433108][ T8528] syz_tun: entered allmulticast mode [ 446.550996][ T8527] dvmrp8: entered allmulticast mode [ 446.570625][ T8353] hsr_slave_0: entered promiscuous mode [ 446.571526][ T8353] hsr_slave_1: entered promiscuous mode [ 446.572144][ T8353] debugfs: 'hsr0' already exists in 'hsr' [ 446.572160][ T8353] Cannot create hsr debugfs directory [ 446.598405][ T37] audit: type=1326 audit(1762512702.838:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8524 comm="syz.3.664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa33b99f6c9 code=0x0 [ 447.177753][ T8524] syz_tun: left allmulticast mode [ 447.643694][ T5122] Bluetooth: hci3: command tx timeout [ 448.246056][ T5122] Bluetooth: unknown link type 16 [ 448.246122][ T5122] Bluetooth: hci2: connection err: -111 [ 448.355091][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 448.764289][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 448.923357][ T8575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.141221][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.141711][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.141950][ T8483] bridge_slave_0: entered allmulticast mode [ 449.145283][ T8483] bridge_slave_0: entered promiscuous mode [ 449.479449][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.479604][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.479818][ T8483] bridge_slave_1: entered allmulticast mode [ 449.484572][ T8483] bridge_slave_1: entered promiscuous mode [ 449.721331][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 449.721354][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 449.733869][ T5816] Bluetooth: hci3: command tx timeout [ 449.873093][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.896203][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.919282][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.445684][ T8483] team0: Port device team_slave_0 added [ 450.470157][ T8483] team0: Port device team_slave_1 added [ 451.037569][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'. [ 451.159014][ T8206] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.400327][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.400344][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.400370][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.461762][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.461778][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.461872][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.708883][ T8618] tipc: Started in network mode [ 451.708906][ T8618] tipc: Node identity 4, cluster identity 4711 [ 451.708917][ T8618] tipc: Node number set to 4 [ 451.731840][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.732162][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.810676][ T5816] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 451.812616][ T5816] Bluetooth: hci2: unexpected event for opcode 0x042d [ 451.889126][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.889296][ T7068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.328339][ T8483] hsr_slave_0: entered promiscuous mode [ 452.332243][ T8483] hsr_slave_1: entered promiscuous mode [ 452.333277][ T8483] debugfs: 'hsr0' already exists in 'hsr' [ 452.333300][ T8483] Cannot create hsr debugfs directory [ 452.362440][ T8353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.399864][ T8353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.446202][ T8353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.637515][ T8353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 453.112376][ T3606] bridge_slave_1: left allmulticast mode [ 453.112405][ T3606] bridge_slave_1: left promiscuous mode [ 453.129518][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.184661][ T3606] bridge_slave_0: left allmulticast mode [ 453.184682][ T3606] bridge_slave_0: left promiscuous mode [ 453.184895][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.672427][ T37] audit: type=1800 audit(1762512709.888:161): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.699" name="/" dev="fuse" ino=1 res=0 errno=0 [ 453.811747][ T5816] Bluetooth: hci2: unexpected cc 0x042d length: 63 > 7 [ 453.811785][ T5816] Bluetooth: hci2: unexpected event for opcode 0x042d [ 454.603760][ T5966] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 454.753815][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 454.756892][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.756941][ T5966] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.757049][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.760834][ T5966] usb 5-1: config 0 descriptor?? [ 454.976107][ T5966] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 455.054297][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.144987][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.228130][ T3606] bond0 (unregistering): Released all slaves [ 455.458257][ T5966] usb 5-1: USB disconnect, device number 23 [ 455.703737][ T3606] hsr_slave_0: left promiscuous mode [ 455.744642][ T3606] hsr_slave_1: left promiscuous mode [ 455.746102][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.795554][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.883789][ T5816] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 455.884155][ T5816] Bluetooth: hci2: Injecting HCI hardware error event [ 455.887217][ T5122] Bluetooth: hci2: hardware error 0x00 [ 456.494828][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 456.656250][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 457.963845][ T5122] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 459.020788][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.281042][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.446548][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.488927][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.489124][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.542377][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.542971][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.055398][ T8206] veth0_vlan: entered promiscuous mode [ 460.261305][ T8206] veth1_vlan: entered promiscuous mode [ 460.314914][ T8483] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 460.387602][ T8483] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 460.430222][ T8483] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 460.481224][ T8483] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 460.698883][ T8206] veth0_macvtap: entered promiscuous mode [ 460.720675][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.740081][ T8206] veth1_macvtap: entered promiscuous mode [ 460.853034][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.890188][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.937700][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.940840][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.942122][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.942164][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.317496][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.445354][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.474987][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.475009][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.496888][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.497092][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.535315][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.537568][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.635479][ T8353] veth0_vlan: entered promiscuous mode [ 461.652205][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.652225][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.736104][ T8353] veth1_vlan: entered promiscuous mode [ 461.950674][ T8353] veth0_macvtap: entered promiscuous mode [ 461.981988][ T8353] veth1_macvtap: entered promiscuous mode [ 462.046808][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.082353][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.154916][ T7068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.163065][ T89] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.186970][ T89] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.188627][ T89] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.024099][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.024121][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.250503][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.250517][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.320469][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.948764][ T8810] binder: 8808:8810 ioctl 4018620d 0 returned -22 [ 464.455290][ T8483] veth0_vlan: entered promiscuous mode [ 464.489200][ T8483] veth1_vlan: entered promiscuous mode [ 464.669032][ T8483] veth0_macvtap: entered promiscuous mode [ 465.167808][ T8841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.464244][ T8483] veth1_macvtap: entered promiscuous mode [ 465.545779][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.590733][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.651581][ T1364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.652172][ T1364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.652218][ T1364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.652256][ T1364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.019284][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.019306][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.127546][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.127581][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.610429][ T8874] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 467.757053][ T8874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.930112][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 468.101123][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 468.109660][ T8878] bond1: (slave veth5): Enslaving as an active interface with a down link [ 468.141493][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.141530][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.141555][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 468.141602][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 468.141628][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.166789][ T8881] vlan2: entered allmulticast mode [ 468.166812][ T8881] veth1: entered allmulticast mode [ 468.171195][ T8881] veth1: entered promiscuous mode [ 468.173444][ T8881] veth1: left promiscuous mode [ 468.180624][ T8881] bond1: (slave vlan2): making interface the new active one [ 468.188440][ T8881] veth1: entered promiscuous mode [ 468.190781][ T8881] vlan2: entered promiscuous mode [ 468.191524][ T8881] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 468.254951][ T10] usb 6-1: config 0 descriptor?? [ 468.611075][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.633031][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.641855][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.666703][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.680929][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 468.706459][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 468.822663][ T10] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 468.851730][ T10] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 468.912921][ T10] usb 6-1: USB disconnect, device number 2 [ 468.928720][ T5809] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 468.928912][ T5809] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 468.928992][ T5809] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 468.929064][ T5809] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 469.099557][ T8889] udevd[8889]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 469.420402][ T8901] 9pnet_virtio: no channels available for device syz [ 469.422157][ T37] audit: type=1326 audit(1762512725.658:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.422428][ T37] audit: type=1326 audit(1762512725.658:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.423105][ T37] audit: type=1326 audit(1762512725.658:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.423386][ T37] audit: type=1326 audit(1762512725.658:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.470350][ T37] audit: type=1326 audit(1762512725.708:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.470401][ T37] audit: type=1326 audit(1762512725.708:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.470441][ T37] audit: type=1326 audit(1762512725.708:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.470480][ T37] audit: type=1326 audit(1762512725.708:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.470519][ T37] audit: type=1326 audit(1762512725.708:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 469.471660][ T37] audit: type=1326 audit(1762512725.708:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8900 comm="syz.7.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe80904f6c9 code=0x7ffc0000 [ 470.426386][ T3606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.763803][ T5816] Bluetooth: hci4: command tx timeout [ 470.996457][ T3606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.073853][ T5809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 471.224304][ T5809] usb 7-1: Using ep0 maxpacket: 16 [ 471.226618][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.226652][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.226675][ T5809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.226725][ T5809] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 471.226749][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.293595][ T5809] usb 7-1: config 0 descriptor?? [ 471.303996][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 471.472742][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.472777][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.472801][ T31] usb 5-1: Product: syz [ 471.472820][ T31] usb 5-1: Manufacturer: syz [ 471.472837][ T31] usb 5-1: SerialNumber: syz [ 471.520714][ T3606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.541422][ T31] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 471.573325][ T5865] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 471.813264][ T5809] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 471.873494][ T5809] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 471.892795][ T5809] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 471.976376][ T5809] usb 7-1: USB disconnect, device number 2 [ 471.989821][ T5966] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 471.989900][ T5966] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 471.989940][ T5966] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 471.990010][ T5966] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.197997][ T3606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.684216][ T5865] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 472.685316][ T5865] ath9k_htc: Failed to initialize the device [ 472.796795][ T8887] chnl_net:caif_netlink_parms(): no params data found [ 472.809178][ T5865] usb 5-1: ath9k_htc: USB layer deinitialized [ 472.850519][ T10] usb 5-1: USB disconnect, device number 24 [ 472.855566][ T5816] Bluetooth: hci4: command tx timeout [ 473.743734][ T5865] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 473.893728][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 473.896301][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.896333][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.896355][ T5865] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.896397][ T5865] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 473.896420][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.972859][ T5865] usb 7-1: config 0 descriptor?? [ 474.163695][ T5966] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 474.282820][ T3606] bridge_slave_1: left allmulticast mode [ 474.282851][ T3606] bridge_slave_1: left promiscuous mode [ 474.283087][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.333618][ T5966] usb 8-1: Using ep0 maxpacket: 8 [ 474.336152][ T5966] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 474.336179][ T5966] usb 8-1: config 179 has no interface number 0 [ 474.336228][ T5966] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 474.336257][ T5966] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 474.336286][ T5966] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 55, changing to 9 [ 474.336313][ T5966] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 474.336341][ T5966] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 474.336368][ T5966] usb 8-1: config 179 interface 65 has no altsetting 0 [ 474.336399][ T5966] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 474.336411][ T5966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.367102][ T8997] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 474.486524][ T5865] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 474.536139][ T3606] bridge_slave_0: left allmulticast mode [ 474.536168][ T3606] bridge_slave_0: left promiscuous mode [ 474.536428][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.652106][ T5865] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 474.652445][ T5865] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 474.709546][ T31] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 474.709871][ T31] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 474.710533][ T31] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 474.710850][ T31] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 474.820540][ T5865] usb 7-1: USB disconnect, device number 3 [ 474.933810][ T5816] Bluetooth: hci4: command tx timeout [ 475.004705][ T5966] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input8 [ 475.193322][ T5158] input input8: unable to receive magic message: -32 [ 475.319254][ T5158] input input8: unable to receive magic message: -71 [ 475.568213][ T5966] usb 8-1: USB disconnect, device number 2 [ 475.568312][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 476.003678][ T5961] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 476.318631][ T5961] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.318663][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.318689][ T5961] usb 7-1: Product: syz [ 476.318703][ T5961] usb 7-1: Manufacturer: syz [ 476.318717][ T5961] usb 7-1: SerialNumber: syz [ 476.378788][ T5961] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.408330][ T5865] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.994983][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.995485][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.011747][ T5816] Bluetooth: hci4: command tx timeout [ 477.271870][ T3606] dvmrp8 (unregistering): left allmulticast mode [ 477.491666][ T5865] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 477.491925][ T5865] ath9k_htc: Failed to initialize the device [ 477.538827][ T5865] usb 7-1: ath9k_htc: USB layer deinitialized [ 477.775188][ T5961] usb 7-1: USB disconnect, device number 4 [ 478.384605][ T9072] netlink: 'syz.7.804': attribute type 1 has an invalid length. [ 478.507795][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.804'. [ 478.643704][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 478.793907][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 478.821304][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.821338][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.821360][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.821403][ T31] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 478.821426][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.833301][ T31] usb 7-1: config 0 descriptor?? [ 479.053171][ T9074] random: crng reseeded on system resumption [ 479.261136][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.296759][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.337330][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 479.337459][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 479.349218][ T3606] bond0 (unregistering): Released all slaves [ 479.365296][ T31] usb 7-1: USB disconnect, device number 5 [ 480.335965][ T3606] bond1 (unregistering): Released all slaves [ 480.378856][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.378957][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.379142][ T8887] bridge_slave_0: entered allmulticast mode [ 480.380680][ T8887] bridge_slave_0: entered promiscuous mode [ 480.594144][ T9078] hsr_slave_0: left promiscuous mode [ 480.644056][ T9078] hsr_slave_1: left promiscuous mode [ 480.784388][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.784533][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.784765][ T8887] bridge_slave_1: entered allmulticast mode [ 480.791715][ T8887] bridge_slave_1: entered promiscuous mode [ 481.364080][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 481.532692][ T5865] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.532718][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.532730][ T5865] usb 6-1: Product: syz [ 481.532738][ T5865] usb 6-1: Manufacturer: syz [ 481.532746][ T5865] usb 6-1: SerialNumber: syz [ 481.578686][ T5865] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.602225][ T31] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.103754][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.116931][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.176629][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.177217][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.421394][ T8887] team0: Port device team_slave_0 added [ 482.583784][ T3606] hsr_slave_0: left promiscuous mode [ 482.624103][ T3606] hsr_slave_1: left promiscuous mode [ 482.625146][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.625163][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.665734][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.665762][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.683732][ T31] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 482.684103][ T31] ath9k_htc: Failed to initialize the device [ 482.710404][ T31] usb 6-1: ath9k_htc: USB layer deinitialized [ 482.783129][ T3606] veth1_macvtap: left promiscuous mode [ 482.783196][ T3606] veth0_macvtap: left promiscuous mode [ 482.783407][ T3606] veth1_vlan: left promiscuous mode [ 482.783519][ T3606] veth0_vlan: left promiscuous mode [ 482.921487][ T5865] usb 6-1: USB disconnect, device number 3 [ 485.425168][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 485.645857][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 488.118086][ T8887] team0: Port device team_slave_1 added [ 488.613844][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.613861][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.613888][ T8887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.623791][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.623807][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.623831][ T8887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.885937][ T9155] syzkaller1: entered promiscuous mode [ 488.885965][ T9155] syzkaller1: entered allmulticast mode [ 489.211143][ T8887] hsr_slave_0: entered promiscuous mode [ 489.211979][ T8887] hsr_slave_1: entered promiscuous mode [ 489.212575][ T8887] debugfs: 'hsr0' already exists in 'hsr' [ 489.212593][ T8887] Cannot create hsr debugfs directory [ 489.675474][ T1364] vlan2: left promiscuous mode [ 490.230233][ T8887] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.258581][ T8887] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.300258][ T8887] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.342770][ T8887] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.563338][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.614954][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.632172][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.632380][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.668289][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.668506][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.154423][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.548040][ T8887] veth0_vlan: entered promiscuous mode [ 491.565250][ T8887] veth1_vlan: entered promiscuous mode [ 491.646311][ T8887] veth0_macvtap: entered promiscuous mode [ 491.663454][ T8887] veth1_macvtap: entered promiscuous mode [ 491.714862][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.743119][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.775275][ T1364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.778996][ T1364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.779234][ T1364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.779274][ T1364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.016234][ T31] ------------[ cut here ]------------ [ 492.016247][ T31] kernel BUG at net/ipv6/route.c:1473! [ 492.016288][ T31] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 492.016310][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 492.016329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.016340][ T31] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 492.016373][ T31] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 492.016401][ T31] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 492.016416][ T31] RSP: 0018:ffffc90000a5f3c0 EFLAGS: 00010293 [ 492.016429][ T31] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88801be9da00 [ 492.016444][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.016456][ T31] RBP: ffffc90000a5f4d0 R08: ffffe8ffffd4f437 R09: 1ffffd1ffffa9e86 [ 492.016470][ T31] R10: dffffc0000000000 R11: fffff91ffffa9e87 R12: ffff8880319a2500 [ 492.016483][ T31] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e56430 [ 492.016498][ T31] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 492.016513][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.016526][ T31] CR2: 00007ffc64159f52 CR3: 00000000396b6000 CR4: 00000000003526f0 [ 492.016543][ T31] Call Trace: [ 492.016549][ T31] [ 492.016557][ T31] ? ip6_pol_route+0x162/0x1180 [ 492.016582][ T31] ? __pfx_ip6_pol_route+0x10/0x10 [ 492.016612][ T31] fib6_rule_lookup+0x1fc/0x6f0 [ 492.016630][ T31] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 492.016646][ T31] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 492.016663][ T31] ? ip6_route_output_flags+0x2e/0x5d0 [ 492.016684][ T31] ip6_route_output_flags+0x364/0x5d0 [ 492.016700][ T31] ? ip6_route_output_flags+0x2e/0x5d0 [ 492.016717][ T31] ip6_dst_lookup_tail+0x299/0x1510 [ 492.016739][ T31] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 492.016757][ T31] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 492.016781][ T31] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 492.016802][ T31] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 492.016834][ T31] ip6_dst_lookup_flow+0x47/0xe0 [ 492.016852][ T31] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 492.016871][ T31] send6+0x4ce/0x8d0 [ 492.016889][ T31] ? rt_read_lock+0x203/0x490 [ 492.016909][ T31] ? send6+0x220/0x8d0 [ 492.016928][ T31] ? __pfx_send6+0x10/0x10 [ 492.016943][ T31] ? rcu_is_watching+0x15/0xb0 [ 492.016964][ T31] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 492.016985][ T31] wg_socket_send_skb_to_peer+0x128/0x200 [ 492.017005][ T31] wg_packet_tx_worker+0x1c8/0x7c0 [ 492.017022][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.017043][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 492.017064][ T31] process_scheduled_works+0xae1/0x17b0 [ 492.017094][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.017120][ T31] worker_thread+0x8a0/0xda0 [ 492.017150][ T31] kthread+0x711/0x8a0 [ 492.017174][ T31] ? __pfx_worker_thread+0x10/0x10 [ 492.017194][ T31] ? __pfx_kthread+0x10/0x10 [ 492.017216][ T31] ? rt_spin_unlock+0x150/0x200 [ 492.017237][ T31] ? rt_spin_unlock+0x161/0x200 [ 492.017254][ T31] ? __pfx_kthread+0x10/0x10 [ 492.017277][ T31] ret_from_fork+0x4bc/0x870 [ 492.017297][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.017320][ T31] ? __switch_to_asm+0x39/0x70 [ 492.017338][ T31] ? __switch_to_asm+0x33/0x70 [ 492.017353][ T31] ? __pfx_kthread+0x10/0x10 [ 492.017375][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.017397][ T31] [ 492.017411][ T31] Modules linked in: [ 492.017432][ T31] ---[ end trace 0000000000000000 ]--- [ 492.017550][ T31] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 492.017577][ T31] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 492.017591][ T31] RSP: 0018:ffffc90000a5f3c0 EFLAGS: 00010293 [ 492.017605][ T31] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88801be9da00 [ 492.017619][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.017630][ T31] RBP: ffffc90000a5f4d0 R08: ffffe8ffffd4f437 R09: 1ffffd1ffffa9e86 [ 492.017644][ T31] R10: dffffc0000000000 R11: fffff91ffffa9e87 R12: ffff8880319a2500 [ 492.017658][ T31] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e56430 [ 492.017671][ T31] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 492.017687][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.017700][ T31] CR2: 00007ffc64159f52 CR3: 00000000396b6000 CR4: 00000000003526f0 [ 492.017725][ T31] Kernel panic - not syncing: Fatal exception in interrupt [ 492.017992][ T31] Kernel Offset: disabled