last executing test programs:

16m11.110956192s ago: executing program 1 (id=2):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@minixdf}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

16m8.655805342s ago: executing program 1 (id=11):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_io_uring_setup(0x19d2, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x19d2, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_io_uring_setup(0x19d2, &(0x7f0000000100), 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup3(r1, r2, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

16m4.524693142s ago: executing program 1 (id=19):
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x12, &(0x7f0000000000)={[{@nodatacow}, {@datacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX/jei4r/D8W2kmPK2vzwpGkcDoW8vOhWziWFE7EM+3ztfl008L3sZBfYDEfr6BY070kIulxtV+PhcINe5ztHhwAAOCeEsNznmXHepshjbLztUE7rB60w8igHeqDdhhNdkh37Lc9zPYW4vb2mY1Le/7/keHyf3wrVmWLftf/h3j9f/5cw+71/7Ox0EgK87HQSu8Y0IrHyMLux/EYjVbe48r6bgEAAADuavF7gfoKzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+Sq7sOBn32O9+H1QvJTCL8o2SQ1jpt4vbbJQy1V1pSqEWmadUODqiiNjb0mixfs2KbEKETGJqIRgtIGKfmjCKMoqvkDagUikgLCRYojVB4RVVEAgUJriIJIKUlEmiDF1ey9Z/bOuTuPtb3GSz4fyTtn5nuedx6ec++dcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN8Nh79y1d82iz/82wuefu7i8cv2rb/45WsuOPPxECZmHu/Iwh391986/vM7z79r331rb7vn6IXv783L5fEwUP3Tmd+5LtZ6dGkI93aE0J0GVg1mgZ78/mCs7x2DIZwRZgO1EpP9WYm04fD9vhAOhNlArarv9YUwWAhc9MRDD95YTdzSF8LyEEIlbePZStZGXxo4pzcL9KeB7d1Z4FfHMrXAdzuzAJyw+GaovegPTdRnGJ67XIPXX89J69gbKx1eV0wMN873s/UL3KmC3vSBiRN62krVsSBKb4/D3m2L4N1W2s43e9qKX6TybyjHZkOV0LllcuumK6d3x0c6w+hoV6OaFuh5furVL22eT3rRvA5jB4ZPyuvwpseW39m18hOP3rNq+YsHP7D/pRPt5o8Km7SYXmiVkL/mFs3zGI37PFkEb7/St6QRX7pCCFs//3ufbBYvzf+Hm8//48s53nbW5Y61vj6Uzc3jI4Mx8cpQNjcHAACARWMx7DXdPvrAR5rVV5r/j7R3/D8e8s8n89loD4cwPpPYvyyEs2YezwJ3xOYuWRbCu2dSE/WB9UngcAhvn0msrFWVlFgSS4wkgZ8M5YHxJHAkBiaSwLdi4OYkcF0MHEoCm2PgcBI4PwbCVP04fn8oH0fbgb4Y2JhtxEPxLIRfDMXWkm31TK0qAACAkySfHfbU3y2c63CiGeL08lBfqwzxDOyGGSpJDekMtjatalhDd6saOlvVUBv33ubDL9Xc0arm0mkYHfUZbv3l33wqNFGa/481n/9X5uhIR+n4fwgbZv7G3J15ZLoW3zhRlwEAAAA4AQP/+/w3m8VL8//x9s7/j/tEugqZwyNxN8S2ZSGM1Qeyav+wHMiOeg/kAQAAAFgMasfja8fCp/Lb7BTtdD5dzj8xz/zxwP/4nPl7D9+/sVl/S/P/ifbO/++vv806cST24mvLQlhSCPwg9rIamDESAz/+aH0gH/+RuAFuiFXlJybUqrohltgYA2NJ4ECjEj+slTirPpA/WbXG99fGMZWXKAQAAADglIu7A+Jx+Xj+/3t+s/aqZuVK8/+N8zv/f2YeXDq9f3oghNXdIXSlPwx4pD9bGDAGBjvyxAP9WV1daVXX9odwXnVgaVXP5+v/d6drDD7Rl1UVA2e95+Cr51QT3+wLYXUx8ORnbv9gNbE7CdQa/8u+EN5VHW3a+HeWZI33pI1/fUkI7ywEalVdsiSEamO9aVUPVfLrGKRV/XMlhLcUArWqPlQJYU8AYJGK/5VuKT64a8/V2zZNT0/uXMBE3IffF7ZOTU+Obt4+vaXSoE9bkj7XLWN0bXlM7V755pl8iaJP371hsJ107XeCY8W28v34pRMH8/vxu1DPzDjX9tTdXZcO+X3vLTcRCt+kGg25c4GH3F+sZPZJLNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/Y2HmbJttSbdVv1z9a2Nl0fD1bISx7utVhQrWb378h2rd+25etXU5Zsunbx08oo1H1o7du7YurEPn7u6Oqqx7G+Loa6Yq+pkqMdub3NcJ3GoZ3cXKjkVnxoSEhKLLbF9YEXT/5NL8/8dzef/8VMnfvLn6zM0Ov4/HA/zZ4/PHubfGAMHysf/6/6XqB3/H250NL92YsBIEtgbA3sd5gcAAODNIU7y49w57pX+6crvvNisXGn+v7e93/+fpPX/a0vXX9homf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8D6/1fWAskm+YX1/wEAgDeDU7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAAKePL//ZVf+vWbw0/z/Q3vz/1K//Fxqd/z/SKDDRaGFA6/8BAACwSDVa/2/4+v7PNStXmv8fam/+H0+76KzLHWt9fShb0y6ka9q9MlT7yQAAAAAsDp1hdLSnzbx1K6OuP/42n8qXAm2WLnr+T47O7/z/w+3N/+t+l3HTY8vv7Fr5iUdfv2fV8hcPfmD/S7PH/wEAAICF0+5+CQAAAAAAAAAAAAAA4I33/H/sW9csXvr9f9gw83ij3//H6/7F3xe8tS53rLX1+n/5/Ys+fteemSULHxkK4b3FwLZ9284I+bX5VxQDD3525duqiX1pifufO/+FauJzaeBjq858rZo4LwlsjIskvj0NxKsqvrY0CcTlFf89DcTtcSgN9OaBry7NxtGRbqufDmbbqiPdVk8PhrCsEKhtq3sHszY60gHekgRqA/xCGogD/PM80Jn26q6BrFcxMBiL3jaQ9QoAgNNW/BbYE7ZOTU+Oxa/w8fbs7vrbqG7JsmvL1Xa02fwz+dJkn757w2A76a70u+jstcZ7QqU6hDWlr6vFLB0zozw5tbTYdG9tMORWq711NiiXmu+m6208or5sRKObt09v6Wk58HWts6ztbpllTWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rji6/1fN6ivN/4fbm/9XiuN6Lb8YwN54Zb2/W2aZfwAAAFhYX13/62/Ef5+6/uEnm+Utzf9H2pv/xz1Y+aHgbG/H4Xj9//3LQpi5tP5wFrgjNnfJshDePZOaiCWyC+pfGEuMZYE74g6TlbHExon6qpbEwKEk8JOhPHA4CRyJgXwvxcGQ78r5+6EQPjiT2lBfYkcsMZwEPhkDI0lgNAbGksDSGBhPAi8vzQMTSeDfYiBM1W+ru5fm2woAAGA+8nlWT/3dkM7zDnW3ytDRKkN/qwydrTJUWmVoNIp4/9sxQ09y8kpHIVNPWmtfUkspQ7wY/rz7VcoQflifMy1Yajqef1A736CjPsN9H+muhCZK8/+x9ub/2ZN5rL71I3H+P3v9vyzwg9i9r8VTx0di4McfrQ/kOwaOxMnuDbWqJvIS+aT9hlhiPAZGksCOGBhPAhs35IEDb6sP5DPtWuP7a41P5SUKAQAAADjl4g6CuJsmzv9v2/WVgWblSvP/8fbm/7G9gWJj18Vajy4N4d6O2d7UAqsGs0DcjzEYfx7/jsEQzijs4KiVmOzPSvQmDYfv92W/UO9Nq/peX/bjg3j/oiceevDGauKWvhCWF/a+1Np4tpK10ZcGzunNAv1pYHt3Foh7fmqB73ZmAThhtb2C8QWVn+pSMzx3uQavvzfLNUHT4ZX2gc6Rb67fXC2U0g7XfJ9qzfyetqb7bzlpSm+Pw95ti/HdNuzdVvwilX9DOTYbqoTOLZNbN105vTs+Uvwla8kCPc/FX6m2kz4Jr8O9x9/b1ippB8aSj4+xucvN/TrsiNXd9NjyO7tWfuLRe1Ytf/HgB/a/1HY3Gog/FH7omn8d/FFh8y60Sshfc4vu82TC58li/G9gxNMWQtjw8tdvaBYvzf8n2pv/dye3M34dN+auZSG8r7BxH4mb/4+XZZ+DhUD2KfmWciA75P5fQw0/OQEAAOBkq+3uqO0vmMpvsxPC03lyOf/EPPPH/RXjc+Zvt9/9f/3Z5c3ipfn/xubz/yVJNx3/d/yfBeL4/5xO913RS9IH9p7QruhSdSwIx//ndLq/2xz/n5Pj/47/z8Xx/xYc/5/T6f60lb4l7fClK4Tw4h898HSzeGn+v6O9+b/1/+ZetK+2/t/GRuv/7Wi0/t9e6/8BAAALqsFCc+k8r7R6XylDunpfKUPLBQJbLjFo/b95r//3wtnP/iY0UZr/721v/h9fDgPF1hfL+n8jGxpUdXMM7LAwIAAAAKejRjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGPd9w//s6VZ/OHfXvD0cxePX7Zv/cUvX3PBmY+HMDXzeEcW7ui//tbxn995/l377lt72z1HL3x/JS/Xk9/+/7rcsdbXh0I4UHhkMCZeGaremQ1c9PG79nRXE48MhfDeYmDbvm1nVBPfGgphRTHw4GdXvq2a2JeWuP+581+oJj6XBj626szXqonzNnVm3Uy7+49Ls+52pN29cWkIywqBWncvW5q10ZG28ad5oDNt458GszZiYDAW/cZg1kYMTMcSU0tCWN0dQlda1cOVrKqutKp/qWRVdaVVfbkSwnkhhO60qud6s6q605E/3ptVFQNnvefgq+dUEwd6Q1hdDDz5mds/WE18IQnUGv+L3hDeVX3JpI1/uydrvCdt/JaeEN4ZQuhNS/yyOyvRm5Z4vjuEtxQCtcY/3x3CnsCbQvzwqftE27Xn6m2bpqcndy5gojdvqy9snZqeHN28fXpLJelTIx2F9LFrj3/sz7z6pc3V20/fvWGwnXR3Xq5npstre+rurjvdex/71V+sZPb5KNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/e3Ko9m2WtNkW3UV77zR22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOhtWPnjq0b+/C5q6ujGsv+tj/U0HCot5/6oZ7dXajkVHwAzC8RN8/p0h8Jid/FRGfdp9vY6f6fXumL/mxHe0Jl5gO6NK0oZumYGeXJGPT64xzx8XxPaTmiNaWJQynL2tZZ1pUmE7NZ+rIsM9/rSpPDYk2dM5s03u8Mo6NdjbbDcP3d4ub92Qls3qfyTdduGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA///9yyc9")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8, 0x444, 0xa}, 0x25, [0xf5, 0x8, 0xff, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x2, 0xc, 0x0, 0x8, 0x6, 0x84, 0xc, 0x8001, 0x3, 0x1, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x9, 0xf2b, 0x401, 0xa33e, 0xfffffffa, 0x5, 0x8, 0x5, 0x6, 0xffffff80, 0xc, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x7, 0x2, 0xd91, 0x8, 0x401, 0xfffffff8, 0xb4a6, 0x95a6, 0x3, 0xa89, 0x8cbe, 0xffffff4c, 0x1, 0x2, 0x0, 0x0, 0x8, 0x401, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x7, 0x206, 0x8, 0x8, 0x5, 0xfff, 0xb2d1, 0x1, 0x200, 0x10001, 0x9, 0xe22, 0x9, 0xe, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x29e3, 0xf7f, 0xb4e5, 0x0, 0x200, 0x6e99, 0x4, 0x9, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x1, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb03, 0xfffffff9, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x3, 0x8000, 0x6, 0xdf9e, 0x40005, 0x8, 0xfa0, 0x3, 0x7, 0x3fe, 0x5, 0x3, 0x2, 0x3, 0x2, 0x1, 0x0, 0x4, 0x911, 0x6, 0x8000, 0x40, 0x8, 0xb, 0x4, 0x2, 0xc55a, 0x1, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0x89d, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0xb, 0xfffffdad], [0x27b, 0x5, 0xef, 0x10, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe011, 0xfffdfff8, 0x6, 0xffff7bfb, 0x0, 0x401, 0x10401, 0x401, 0x0, 0xa, 0x8, 0x3, 0x1f9, 0xfffffc00, 0x1, 0x9, 0x4, 0x8000002, 0x2, 0x9, 0x27, 0x400, 0x70, 0x2, 0x1000, 0x400002, 0xc, 0x0, 0x9, 0x80088, 0x10, 0x4, 0x9a2, 0x81, 0xf011, 0x1, 0x4, 0x8, 0x400005, 0x4, 0x0, 0xb, 0x1, 0xc3, 0xfffffffa, 0x7ff, 0x1, 0x3, 0xfffffbff, 0x1, 0xe, 0x5, 0x4, 0xa, 0xfffffff7]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

16m3.318794952s ago: executing program 32 (id=19):
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x12, &(0x7f0000000000)={[{@nodatacow}, {@datacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8, 0x444, 0xa}, 0x25, [0xf5, 0x8, 0xff, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x2, 0xc, 0x0, 0x8, 0x6, 0x84, 0xc, 0x8001, 0x3, 0x1, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x9, 0xf2b, 0x401, 0xa33e, 0xfffffffa, 0x5, 0x8, 0x5, 0x6, 0xffffff80, 0xc, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x7, 0x2, 0xd91, 0x8, 0x401, 0xfffffff8, 0xb4a6, 0x95a6, 0x3, 0xa89, 0x8cbe, 0xffffff4c, 0x1, 0x2, 0x0, 0x0, 0x8, 0x401, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x7, 0x206, 0x8, 0x8, 0x5, 0xfff, 0xb2d1, 0x1, 0x200, 0x10001, 0x9, 0xe22, 0x9, 0xe, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x29e3, 0xf7f, 0xb4e5, 0x0, 0x200, 0x6e99, 0x4, 0x9, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x1, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb03, 0xfffffff9, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x3, 0x8000, 0x6, 0xdf9e, 0x40005, 0x8, 0xfa0, 0x3, 0x7, 0x3fe, 0x5, 0x3, 0x2, 0x3, 0x2, 0x1, 0x0, 0x4, 0x911, 0x6, 0x8000, 0x40, 0x8, 0xb, 0x4, 0x2, 0xc55a, 0x1, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0x89d, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0xb, 0xfffffdad], [0x27b, 0x5, 0xef, 0x10, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe011, 0xfffdfff8, 0x6, 0xffff7bfb, 0x0, 0x401, 0x10401, 0x401, 0x0, 0xa, 0x8, 0x3, 0x1f9, 0xfffffc00, 0x1, 0x9, 0x4, 0x8000002, 0x2, 0x9, 0x27, 0x400, 0x70, 0x2, 0x1000, 0x400002, 0xc, 0x0, 0x9, 0x80088, 0x10, 0x4, 0x9a2, 0x81, 0xf011, 0x1, 0x4, 0x8, 0x400005, 0x4, 0x0, 0xb, 0x1, 0xc3, 0xfffffffa, 0x7ff, 0x1, 0x3, 0xfffffbff, 0x1, 0xe, 0x5, 0x4, 0xa, 0xfffffff7]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

8.488593441s ago: executing program 0 (id=3155):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006572726f72733d72656d6f756e742d726f2c75737271756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f72733d636f6e74696e752c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c000000000000000000", @ANYRES16, @ANYRES64=0x0, @ANYRES16], 0x1, 0x61e9, &(0x7f000000cbc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0)
fadvise64(r3, 0x7, 0x4, 0x4)

7.286399101s ago: executing program 0 (id=3234):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1)
connect$pppoe(r1, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f00000002c0)=0xfffffffd)

7.278738731s ago: executing program 4 (id=3235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x200001, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0x490a8000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_rdma(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x80000, 0x0)
syz_clone(0x490a8000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.772834161s ago: executing program 2 (id=3239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='x!\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0xd0f, 0x8070bd28, 0x1000000, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x1, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0xfffffffb, 0x3}}}}]}, 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0xfff, 0x7, 0x4044, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r3})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b732c8a68500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x0)
lseek(r1, 0x7fffffffffffffff, 0x0)

4.942450411s ago: executing program 3 (id=3241):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0xc00c5512, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x28, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@broadcast}}}, 0xb8}}, 0x0)
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x0)
read$FUSE(r2, &(0x7f0000001c40)={0x2020}, 0x2020)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r3, 0x116, 0x70bd25, 0xfffffff7, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1bdc0000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xd0}}, 0x20000040)

4.867907081s ago: executing program 0 (id=3242):
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8)

4.687572981s ago: executing program 2 (id=3244):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x5}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x5c, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0)

4.562976721s ago: executing program 4 (id=3245):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006572726f72733d72656d6f756e742d726f2c75737271756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f72733d636f6e74696e752c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c000000000000000000", @ANYRES16, @ANYRES64=0x0, @ANYRES16], 0x1, 0x61e9, &(0x7f000000cbc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0)
fadvise64(r3, 0x7, 0x4, 0x4)

4.542264021s ago: executing program 5 (id=3246):
socket$kcm(0x10, 0x100000000002, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)

4.402623321s ago: executing program 5 (id=3247):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.40203833s ago: executing program 2 (id=3248):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x30c, &(0x7f0000000100)="$eJzs3T9vE0kYx/HfrO3EuUQ5X5LTSdfcKXeR7proclAgGhByS0+FgNiRIqwgkiABDSaiRLwAet4CL4IGxBsAGio6mnSLZnZ2vbbH6xjF2SR8P1Ki3dmZnWfYf8+sRFYAfljXmh9eXfhsf4xUUUXSZSmSVJeqkn7Vb/UHO/vb+512q2hHFdfC/hglLc1Qnc2ddqipbedaeA27VtVCvgzTEcfx1Y9lB4HSuas/IJJm/XXottdPOK7j4gc3m653pT9KDKcU+QNsDnWoh1osMRwAwCngn/+Rf0wsuCKjKJLW/GP/TD//Bx2WHcDxutgZKooLG+Se/y67i409vj+7Tb35npvC2e1ROks8SjC1gfUZJWdWX4JpwrPKT3HCxxLNbW1Xtb75VK1IB7ri5RqsuN+t5NRNjYl2NTA3HcVmjCP3VtP1n5LR2IxybnBzGtLWdqftMs9A/MuhTif5156UeWPemZumrpdqZflfNf5qD5M7Uo2BIxXVbPz/jd7jvGtla9khm2ScUV+VX1wnv/sevDGjrIdnJPl9pi8IulkEgTgP0gXX95L6Xysko9sIdWB6O18OtWpka8NtXV8rfa0q/kxY37zXKXyVMh3pEM0Lc8Os6oteq5nL/yMb35pyV2bRrd64mv7MSMYzE65ZdTUbQ0+Obrb0ZxaBNzvx2CBN+Lbsue7okhb3Hj2+W+l02rt24XZg4f7CrvEltWdSsM70FyoqqKNur8Q9PJ7E8VH3HE8z+H+/o9XMyE32/pGV2Msn1NxeZVlJdNKH6fwtVBXa1HyrohNyqgtp6jJh83pwk020RrSayj0Kp8yeSQ+6LxhKYnHO2bzLJPM/l8n7rM7dZ+yvRkGeHphkdvvWcnvcyGZw/angUih3GTM3mB89g8v1+P+IOaObc/31j/R3rtCosMeGi/PcME291y3e/wMAAAAAAAAAAAAAAAAAAJw1J/E/FsoeIwAAAAAAAAAAAAAAAAAAAAAAZ93Rv/871/tSU+hvxLvv/zbGfv+37wPA/kNRfP8XKMe3AAAA//92FX0e")
prctl$PR_SET_DUMPABLE(0x4, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @empty}], 0x2c)
socket(0x10, 0x80003, 0x0)
r0 = io_uring_setup(0x207e04, &(0x7f0000000440)={0x0, 0x2d76, 0x10, 0x1, 0x2002})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x3280)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

3.953599541s ago: executing program 5 (id=3249):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
semget$private(0x0, 0x7, 0x8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@remote, 0xe})
semctl$SETALL(0x0, 0x0, 0xe, 0x0)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, 0x0)

3.66488073s ago: executing program 3 (id=3250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

3.184921871s ago: executing program 4 (id=3251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

2.00521622s ago: executing program 5 (id=3252):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f00000002c0)=0xfffffffd)

1.908966561s ago: executing program 3 (id=3253):
r0 = landlock_create_ruleset(&(0x7f0000000100)={0x3002, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.80130009s ago: executing program 3 (id=3254):
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
ptrace(0x10, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902120001000000000904000000855f30"], 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)

1.747709031s ago: executing program 5 (id=3255):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14883ad5c8c82b8af00", "580cbf2649a50f2dbc43efa8698dfa871c51852e4451ca7d037ad3c245942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643700b2c5a57df43d544af6e8dafe09"}}}}}}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f00000017c0)=""/130, 0x82}], 0x2}, 0xa1}], 0x1, 0x0, 0x0)

1.6449231s ago: executing program 0 (id=3256):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb16}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1.55852785s ago: executing program 2 (id=3257):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
r2 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.425027981s ago: executing program 0 (id=3258):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0xe010, 0x10100}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000002, 0x0)

1.340611661s ago: executing program 2 (id=3259):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1)
r0 = socket$inet(0x2, 0x5, 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b0004200000050006000000000008000700"], 0x4c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000414010000000000000000"], 0x24}}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff})
write(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}, {0x0}, {0x0}], 0x3}, 0x0)

1.01065985s ago: executing program 4 (id=3260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

1.00461845s ago: executing program 0 (id=3261):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0)
socket(0x400000000010, 0x3, 0x0)

716.93875ms ago: executing program 5 (id=3262):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f00000002c0)={[&(0x7f0000000180)='9#\x00', &(0x7f0000000240)='9#\x00']}, 0x0)

448.88315ms ago: executing program 2 (id=3264):
pipe2$9p(0x0, 0x0)
dup(0xffffffffffffffff)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
tgkill(r0, r0, 0x12)

448.71956ms ago: executing program 4 (id=3265):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f00000002c0)=0xfffffffd)

208.96887ms ago: executing program 3 (id=3266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5.687111ms ago: executing program 4 (id=3267):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x30c, &(0x7f0000000100)="$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")
prctl$PR_SET_DUMPABLE(0x4, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}, @in6={0xa, 0x4e23, 0x0, @empty}], 0x2c)
socket(0x10, 0x80003, 0x0)
r0 = io_uring_setup(0x207e04, &(0x7f0000000440)={0x0, 0x2d76, 0x10, 0x1, 0x2002})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x3280)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

0s ago: executing program 3 (id=3268):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb16}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800)

kernel console output (not intermixed with test programs):

_vmap_area+0xf3/0x100
[  898.529457][T13890]  ? __phys_addr_symbol+0x2b/0x70
[  898.534500][T13890]  ? __check_object_size+0x4dd/0xa30
[  898.539808][T13890]  ? bpf_lsm_netlink_send+0x5/0x10
[  898.544933][T13890]  netlink_sendmsg+0xa26/0xd60
[  898.549726][T13890]  ? netlink_getsockopt+0x580/0x580
[  898.554939][T13890]  ? aa_sock_msg_perm+0x91/0x150
[  898.559922][T13890]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  898.565218][T13890]  ? security_socket_sendmsg+0x7d/0xa0
[  898.570717][T13890]  ? netlink_getsockopt+0x580/0x580
[  898.575922][T13890]  ____sys_sendmsg+0x5d3/0x9a0
[  898.580700][T13890]  ? __sys_sendmsg_sock+0x30/0x30
[  898.585774][T13890]  __sys_sendmsg+0x2a9/0x390
[  898.590371][T13890]  ? ____sys_sendmsg+0x9a0/0x9a0
[  898.595337][T13890]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  898.601341][T13890]  ? syscall_enter_from_user_mode+0x2e/0x230
[  898.607336][T13890]  ? lockdep_hardirqs_on+0x94/0x130
[  898.612544][T13890]  ? syscall_enter_from_user_mode+0x2e/0x230
[  898.618553][T13890]  do_syscall_64+0x3b/0xb0
[  898.622981][T13890]  ? clear_bhb_loop+0x45/0xa0
[  898.627661][T13890]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  898.633580][T13890] RIP: 0033:0x7f2241d8d169
[  898.638006][T13890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  898.657622][T13890] RSP: 002b:00007f2242b8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  898.666048][T13890] RAX: ffffffffffffffda RBX: 00007f2241fa6080 RCX: 00007f2241d8d169
[  898.674022][T13890] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  898.682022][T13890] RBP: 00007f2241e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  898.690015][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  898.697990][T13890] R13: 0000000000000000 R14: 00007f2241fa6080 R15: 00007ffd5bb115f8
[  898.705983][T13890]  </TASK>
[  899.727728][T13919] fuse: Bad value for 'fd'
[  899.823565][T13922] team0: Device gtp0 is of different type
[  899.867184][T13929] __nla_validate_parse: 68 callbacks suppressed
[  899.867205][T13929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2635'.
[  900.232542][T13936] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.2638'.
[  900.245165][T13936] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  900.253492][T13936] CPU: 0 PID: 13936 Comm: syz.5.2638 Not tainted 6.1.129-syzkaller #0
[  900.261682][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  900.271764][T13936] Call Trace:
[  900.275053][T13936]  <TASK>
[  900.277993][T13936]  dump_stack_lvl+0x1e3/0x2cb
[  900.282725][T13936]  ? nf_tcp_handle_invalid+0x647/0x647
[  900.288219][T13936]  ? panic+0x764/0x764
[  900.292343][T13936]  sysfs_warn_dup+0x8a/0xa0
[  900.296871][T13936]  sysfs_do_create_link_sd+0xbe/0x100
[  900.302266][T13936]  device_add+0x7d4/0xfd0
[  900.306648][T13936]  wiphy_register+0x1e91/0x2d10
[  900.311546][T13936]  ? cfg80211_event_work+0x40/0x40
[  900.316692][T13936]  ? minstrel_ht_alloc+0x874/0x9e0
[  900.321850][T13936]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  900.327962][T13936]  ieee80211_register_hw+0x31bd/0x3f10
[  900.333463][T13936]  ? ieee80211_register_hw+0x1161/0x3f10
[  900.339125][T13936]  ? ieee80211_register_hw+0x1161/0x3f10
[  900.344799][T13936]  ? ieee80211_tasklet_handler+0x20/0x20
[  900.350466][T13936]  ? __debug_object_init+0xe9/0x450
[  900.355697][T13936]  ? memset+0x1f/0x40
[  900.359703][T13936]  ? __hrtimer_init+0x181/0x260
[  900.364593][T13936]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  900.370378][T13936]  hwsim_new_radio_nl+0xc54/0x1190
[  900.375537][T13936]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  900.381919][T13936]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  900.388296][T13936]  genl_rcv_msg+0xbfa/0xf50
[  900.392849][T13936]  ? genl_bind+0x400/0x400
[  900.397325][T13936]  ? read_lock_is_recursive+0x10/0x10
[  900.402720][T13936]  ? ref_tracker_free+0x638/0x7d0
[  900.407758][T13936]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  900.414115][T13936]  ? refcount_inc+0x80/0x80
[  900.418649][T13936]  netlink_rcv_skb+0x1cd/0x410
[  900.423448][T13936]  ? genl_bind+0x400/0x400
[  900.427891][T13936]  ? netlink_ack+0x12a0/0x12a0
[  900.432683][T13936]  genl_rcv+0x24/0x40
[  900.436678][T13936]  netlink_unicast+0x7e2/0x970
[  900.441455][T13936]  ? netlink_detachskb+0x90/0x90
[  900.446398][T13936]  ? find_vmap_area+0xf3/0x100
[  900.451258][T13936]  ? __phys_addr_symbol+0x2b/0x70
[  900.456293][T13936]  ? __check_object_size+0x4dd/0xa30
[  900.461591][T13936]  ? bpf_lsm_netlink_send+0x5/0x10
[  900.466715][T13936]  netlink_sendmsg+0xa26/0xd60
[  900.471493][T13936]  ? netlink_getsockopt+0x580/0x580
[  900.476703][T13936]  ? aa_sock_msg_perm+0x91/0x150
[  900.481651][T13936]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  900.486965][T13936]  ? security_socket_sendmsg+0x7d/0xa0
[  900.492456][T13936]  ? netlink_getsockopt+0x580/0x580
[  900.497672][T13936]  ____sys_sendmsg+0x5d3/0x9a0
[  900.502451][T13936]  ? __sys_sendmsg_sock+0x30/0x30
[  900.507516][T13936]  __sys_sendmsg+0x2a9/0x390
[  900.512115][T13936]  ? ____sys_sendmsg+0x9a0/0x9a0
[  900.517082][T13936]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  900.523085][T13936]  ? syscall_enter_from_user_mode+0x2e/0x230
[  900.529075][T13936]  ? lockdep_hardirqs_on+0x94/0x130
[  900.534372][T13936]  ? syscall_enter_from_user_mode+0x2e/0x230
[  900.540375][T13936]  do_syscall_64+0x3b/0xb0
[  900.544806][T13936]  ? clear_bhb_loop+0x45/0xa0
[  900.549499][T13936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  900.555400][T13936] RIP: 0033:0x7fe3d978d169
[  900.559821][T13936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  900.579433][T13936] RSP: 002b:00007fe3da523038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  900.587858][T13936] RAX: ffffffffffffffda RBX: 00007fe3d99a6080 RCX: 00007fe3d978d169
[  900.595836][T13936] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[  900.603810][T13936] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  900.611781][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  900.619755][T13936] R13: 0000000000000000 R14: 00007fe3d99a6080 R15: 00007ffe6e1c6c98
[  900.627743][T13936]  </TASK>
[  900.737791][T13948] binder: 13947:13948 ioctl c0306201 0 returned -14
[  901.620227][T13968] loop0: detected capacity change from 0 to 8
[  901.718226][T13968] SQUASHFS error: Failed to read block 0x4e8: -5
[  901.848577][T13968] SQUASHFS error: Failed to read block 0x4de: -5
[  901.881209][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  901.963701][T13968] SQUASHFS error: Failed to read block 0x4de: -5
[  902.006604][T13968] SQUASHFS error: Failed to read block 0x4de: -5
[  902.059271][   T27] audit: type=1800 audit(1741199422.787:10): pid=13968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2643" name="file1" dev="loop0" ino=5 res=0 errno=0
[  902.346233][T13996] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.2657'.
[  902.357486][T13996] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  902.365392][T13996] CPU: 0 PID: 13996 Comm: syz.5.2657 Not tainted 6.1.129-syzkaller #0
[  902.373567][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  902.383638][T13996] Call Trace:
[  902.386932][T13996]  <TASK>
[  902.389877][T13996]  dump_stack_lvl+0x1e3/0x2cb
[  902.394591][T13996]  ? nf_tcp_handle_invalid+0x647/0x647
[  902.400083][T13996]  ? panic+0x764/0x764
[  902.404186][T13996]  sysfs_warn_dup+0x8a/0xa0
[  902.408718][T13996]  sysfs_do_create_link_sd+0xbe/0x100
[  902.414115][T13996]  device_add+0x7d4/0xfd0
[  902.418480][T13996]  wiphy_register+0x1e91/0x2d10
[  902.423371][T13996]  ? cfg80211_event_work+0x40/0x40
[  902.428501][T13996]  ? minstrel_ht_alloc+0x874/0x9e0
[  902.433649][T13996]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  902.439867][T13996]  ieee80211_register_hw+0x31bd/0x3f10
[  902.445367][T13996]  ? ieee80211_register_hw+0x1161/0x3f10
[  902.451017][T13996]  ? ieee80211_register_hw+0x1161/0x3f10
[  902.456672][T13996]  ? ieee80211_tasklet_handler+0x20/0x20
[  902.462327][T13996]  ? __debug_object_init+0xe9/0x450
[  902.467560][T13996]  ? memset+0x1f/0x40
[  902.471579][T13996]  ? __hrtimer_init+0x181/0x260
[  902.476485][T13996]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  902.482269][T13996]  hwsim_new_radio_nl+0xc54/0x1190
[  902.487428][T13996]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  902.493795][T13996]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  902.500157][T13996]  genl_rcv_msg+0xbfa/0xf50
[  902.504693][T13996]  ? genl_bind+0x400/0x400
[  902.509152][T13996]  ? read_lock_is_recursive+0x10/0x10
[  902.514569][T13996]  ? ref_tracker_free+0x638/0x7d0
[  902.519622][T13996]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  902.526006][T13996]  ? refcount_inc+0x80/0x80
[  902.530560][T13996]  netlink_rcv_skb+0x1cd/0x410
[  902.535352][T13996]  ? genl_bind+0x400/0x400
[  902.539844][T13996]  ? netlink_ack+0x12a0/0x12a0
[  902.544654][T13996]  genl_rcv+0x24/0x40
[  902.548665][T13996]  netlink_unicast+0x7e2/0x970
[  902.553466][T13996]  ? netlink_detachskb+0x90/0x90
[  902.558422][T13996]  ? find_vmap_area+0xf3/0x100
[  902.563217][T13996]  ? __phys_addr_symbol+0x2b/0x70
[  902.568264][T13996]  ? __check_object_size+0x4dd/0xa30
[  902.573586][T13996]  ? bpf_lsm_netlink_send+0x5/0x10
[  902.578724][T13996]  netlink_sendmsg+0xa26/0xd60
[  902.583523][T13996]  ? netlink_getsockopt+0x580/0x580
[  902.589019][T13996]  ? aa_sock_msg_perm+0x91/0x150
[  902.593992][T13996]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  902.599300][T13996]  ? security_socket_sendmsg+0x7d/0xa0
[  902.604794][T13996]  ? netlink_getsockopt+0x580/0x580
[  902.610017][T13996]  ____sys_sendmsg+0x5d3/0x9a0
[  902.614810][T13996]  ? __sys_sendmsg_sock+0x30/0x30
[  902.619868][T13996]  __sys_sendmsg+0x2a9/0x390
[  902.624537][T13996]  ? ____sys_sendmsg+0x9a0/0x9a0
[  902.629538][T13996]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  902.635554][T13996]  ? syscall_enter_from_user_mode+0x2e/0x230
[  902.641553][T13996]  ? lockdep_hardirqs_on+0x94/0x130
[  902.646768][T13996]  ? syscall_enter_from_user_mode+0x2e/0x230
[  902.652755][T13996]  do_syscall_64+0x3b/0xb0
[  902.657358][T13996]  ? clear_bhb_loop+0x45/0xa0
[  902.662056][T13996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  902.668023][T13996] RIP: 0033:0x7fe3d978d169
[  902.672475][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  902.692107][T13996] RSP: 002b:00007fe3d95ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  902.700530][T13996] RAX: ffffffffffffffda RBX: 00007fe3d99a6240 RCX: 00007fe3d978d169
[  902.708500][T13996] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[  902.716488][T13996] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  902.725123][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  902.733296][T13996] R13: 0000000000000000 R14: 00007fe3d99a6240 R15: 00007ffe6e1c6c98
[  902.741293][T13996]  </TASK>
[  903.096147][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2661'.
[  903.130854][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'.
[  903.171476][T14001] bridge0: port 4(syz_tun) entered blocking state
[  903.189668][T14001] bridge0: port 4(syz_tun) entered disabled state
[  903.215728][T14001] device syz_tun entered promiscuous mode
[  903.248284][T14001] bridge0: port 4(syz_tun) entered blocking state
[  903.254860][T14001] bridge0: port 4(syz_tun) entered forwarding state
[  903.641570][T14015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  903.665029][T14015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  903.674262][T14015] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  903.686544][T14015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  903.694685][T14015] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  903.711458][T14015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  903.870109][ T5005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.039032][ T5005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.079479][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'.
[  904.188191][ T5005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.306442][T14033] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.2671'.
[  904.332076][T14033] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  904.339905][T14033] CPU: 1 PID: 14033 Comm: syz.5.2671 Not tainted 6.1.129-syzkaller #0
[  904.348073][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  904.358147][T14033] Call Trace:
[  904.361438][T14033]  <TASK>
[  904.364380][T14033]  dump_stack_lvl+0x1e3/0x2cb
[  904.369092][T14033]  ? nf_tcp_handle_invalid+0x647/0x647
[  904.374579][T14033]  ? panic+0x764/0x764
[  904.378681][T14033]  sysfs_warn_dup+0x8a/0xa0
[  904.383218][T14033]  sysfs_do_create_link_sd+0xbe/0x100
[  904.388613][T14033]  device_add+0x7d4/0xfd0
[  904.392983][T14033]  wiphy_register+0x1e91/0x2d10
[  904.397866][T14033]  ? cfg80211_event_work+0x40/0x40
[  904.402994][T14033]  ? minstrel_ht_alloc+0x874/0x9e0
[  904.408135][T14033]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  904.414235][T14033]  ieee80211_register_hw+0x31bd/0x3f10
[  904.419723][T14033]  ? ieee80211_register_hw+0x1161/0x3f10
[  904.425384][T14033]  ? ieee80211_register_hw+0x1161/0x3f10
[  904.431058][T14033]  ? ieee80211_tasklet_handler+0x20/0x20
[  904.436717][T14033]  ? __debug_object_init+0xe9/0x450
[  904.441999][T14033]  ? memset+0x1f/0x40
[  904.446000][T14033]  ? __hrtimer_init+0x181/0x260
[  904.450870][T14033]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  904.456673][T14033]  hwsim_new_radio_nl+0xc54/0x1190
[  904.461831][T14033]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  904.468283][T14033]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  904.474641][T14033]  genl_rcv_msg+0xbfa/0xf50
[  904.479175][T14033]  ? genl_bind+0x400/0x400
[  904.483636][T14033]  ? read_lock_is_recursive+0x10/0x10
[  904.489404][T14033]  ? ref_tracker_free+0x638/0x7d0
[  904.494469][T14033]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  904.500830][T14033]  ? refcount_inc+0x80/0x80
[  904.505455][T14033]  netlink_rcv_skb+0x1cd/0x410
[  904.510336][T14033]  ? genl_bind+0x400/0x400
[  904.514778][T14033]  ? netlink_ack+0x12a0/0x12a0
[  904.519595][T14033]  genl_rcv+0x24/0x40
[  904.523594][T14033]  netlink_unicast+0x7e2/0x970
[  904.528381][T14033]  ? netlink_detachskb+0x90/0x90
[  904.533335][T14033]  ? find_vmap_area+0xf3/0x100
[  904.538109][T14033]  ? __phys_addr_symbol+0x2b/0x70
[  904.543142][T14033]  ? __check_object_size+0x4dd/0xa30
[  904.548453][T14033]  ? bpf_lsm_netlink_send+0x5/0x10
[  904.553595][T14033]  netlink_sendmsg+0xa26/0xd60
[  904.558382][T14033]  ? netlink_getsockopt+0x580/0x580
[  904.563585][T14033]  ? aa_sock_msg_perm+0x91/0x150
[  904.568523][T14033]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  904.573819][T14033]  ? security_socket_sendmsg+0x7d/0xa0
[  904.579294][T14033]  ? netlink_getsockopt+0x580/0x580
[  904.584499][T14033]  ____sys_sendmsg+0x5d3/0x9a0
[  904.589278][T14033]  ? __sys_sendmsg_sock+0x30/0x30
[  904.594348][T14033]  __sys_sendmsg+0x2a9/0x390
[  904.598946][T14033]  ? ____sys_sendmsg+0x9a0/0x9a0
[  904.603919][T14033]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  904.609948][T14033]  ? syscall_enter_from_user_mode+0x2e/0x230
[  904.615939][T14033]  ? lockdep_hardirqs_on+0x94/0x130
[  904.621145][T14033]  ? syscall_enter_from_user_mode+0x2e/0x230
[  904.627245][T14033]  do_syscall_64+0x3b/0xb0
[  904.631671][T14033]  ? clear_bhb_loop+0x45/0xa0
[  904.636354][T14033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  904.642252][T14033] RIP: 0033:0x7fe3d978d169
[  904.646935][T14033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.667520][T14033] RSP: 002b:00007fe3d95ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.676025][T14033] RAX: ffffffffffffffda RBX: 00007fe3d99a6240 RCX: 00007fe3d978d169
[  904.683996][T14033] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[  904.692577][T14033] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  904.700548][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.708527][T14033] R13: 0000000000000000 R14: 00007fe3d99a6240 R15: 00007ffe6e1c6c98
[  904.716515][T14033]  </TASK>
[  904.813420][ T5005] bridge0: port 3(netdevsim0) entered disabled state
[  904.937080][ T5005] device netdevsim0 left promiscuous mode
[  904.990474][ T5005] bridge0: port 3(netdevsim0) entered disabled state
[  905.031128][ T5005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.064451][T14049] binder: 14048:14049 ioctl c0306201 0 returned -14
[  905.353319][T14013] chnl_net:caif_netlink_parms(): no params data found
[  905.590123][T14067] loop0: detected capacity change from 0 to 8
[  905.658307][T14067] SQUASHFS error: Failed to read block 0x4e8: -5
[  905.708034][T14067] SQUASHFS error: Failed to read block 0x4de: -5
[  905.716306][T14067] SQUASHFS error: Failed to read block 0x4de: -5
[  905.723393][T14067] SQUASHFS error: Failed to read block 0x4de: -5
[  905.759084][   T27] audit: type=1800 audit(1741199426.487:11): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2679" name="file1" dev="loop0" ino=5 res=0 errno=0
[  905.779074][ T4251] Bluetooth: hci0: command 0x0409 tx timeout
[  905.825509][T14013] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.864503][T14013] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.902339][T14013] device bridge_slave_0 entered promiscuous mode
[  906.001015][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2687'.
[  906.060901][T14013] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.101751][T14013] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.147014][T14013] device bridge_slave_1 entered promiscuous mode
[  906.240101][T14091] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.2688'.
[  906.251286][T14091] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  906.259034][T14091] CPU: 1 PID: 14091 Comm: syz.3.2688 Not tainted 6.1.129-syzkaller #0
[  906.267204][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  906.277275][T14091] Call Trace:
[  906.280560][T14091]  <TASK>
[  906.283499][T14091]  dump_stack_lvl+0x1e3/0x2cb
[  906.288207][T14091]  ? nf_tcp_handle_invalid+0x647/0x647
[  906.293692][T14091]  ? panic+0x764/0x764
[  906.297790][T14091]  sysfs_warn_dup+0x8a/0xa0
[  906.302319][T14091]  sysfs_do_create_link_sd+0xbe/0x100
[  906.307715][T14091]  device_add+0x7d4/0xfd0
[  906.312079][T14091]  wiphy_register+0x1e91/0x2d10
[  906.316976][T14091]  ? cfg80211_event_work+0x40/0x40
[  906.322113][T14091]  ? minstrel_ht_alloc+0x874/0x9e0
[  906.327351][T14091]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  906.333468][T14091]  ieee80211_register_hw+0x31bd/0x3f10
[  906.339000][T14091]  ? ieee80211_register_hw+0x1161/0x3f10
[  906.344913][T14091]  ? ieee80211_register_hw+0x1161/0x3f10
[  906.350569][T14091]  ? ieee80211_tasklet_handler+0x20/0x20
[  906.356225][T14091]  ? __debug_object_init+0xe9/0x450
[  906.361454][T14091]  ? memset+0x1f/0x40
[  906.365458][T14091]  ? __hrtimer_init+0x181/0x260
[  906.370338][T14091]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  906.376460][T14091]  hwsim_new_radio_nl+0xc54/0x1190
[  906.381608][T14091]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  906.387984][T14091]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  906.394347][T14091]  genl_rcv_msg+0xbfa/0xf50
[  906.398887][T14091]  ? genl_bind+0x400/0x400
[  906.403344][T14091]  ? read_lock_is_recursive+0x10/0x10
[  906.408771][T14091]  ? ref_tracker_free+0x638/0x7d0
[  906.413839][T14091]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  906.420193][T14091]  ? refcount_inc+0x80/0x80
[  906.424734][T14091]  netlink_rcv_skb+0x1cd/0x410
[  906.429517][T14091]  ? genl_bind+0x400/0x400
[  906.433955][T14091]  ? netlink_ack+0x12a0/0x12a0
[  906.438782][T14091]  genl_rcv+0x24/0x40
[  906.442795][T14091]  netlink_unicast+0x7e2/0x970
[  906.447594][T14091]  ? netlink_detachskb+0x90/0x90
[  906.452541][T14091]  ? find_vmap_area+0xf3/0x100
[  906.457338][T14091]  ? __phys_addr_symbol+0x2b/0x70
[  906.462389][T14091]  ? __check_object_size+0x4dd/0xa30
[  906.467698][T14091]  ? bpf_lsm_netlink_send+0x5/0x10
[  906.472847][T14091]  netlink_sendmsg+0xa26/0xd60
[  906.477645][T14091]  ? netlink_getsockopt+0x580/0x580
[  906.482864][T14091]  ? aa_sock_msg_perm+0x91/0x150
[  906.487825][T14091]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  906.493145][T14091]  ? security_socket_sendmsg+0x7d/0xa0
[  906.498634][T14091]  ? netlink_getsockopt+0x580/0x580
[  906.504041][T14091]  ____sys_sendmsg+0x5d3/0x9a0
[  906.508849][T14091]  ? __sys_sendmsg_sock+0x30/0x30
[  906.513911][T14091]  __sys_sendmsg+0x2a9/0x390
[  906.518517][T14091]  ? ____sys_sendmsg+0x9a0/0x9a0
[  906.523503][T14091]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  906.529537][T14091]  ? syscall_enter_from_user_mode+0x2e/0x230
[  906.535554][T14091]  ? lockdep_hardirqs_on+0x94/0x130
[  906.540815][T14091]  ? syscall_enter_from_user_mode+0x2e/0x230
[  906.546848][T14091]  do_syscall_64+0x3b/0xb0
[  906.551310][T14091]  ? clear_bhb_loop+0x45/0xa0
[  906.556018][T14091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  906.561981][T14091] RIP: 0033:0x7f04dfd8d169
[  906.566423][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  906.586060][T14091] RSP: 002b:00007f04e0c3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  906.594768][T14091] RAX: ffffffffffffffda RBX: 00007f04dffa6160 RCX: 00007f04dfd8d169
[  906.602770][T14091] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  906.610751][T14091] RBP: 00007f04dfe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  906.618740][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.626714][T14091] R13: 0000000000000000 R14: 00007f04dffa6160 R15: 00007ffc23179c78
[  906.634710][T14091]  </TASK>
[  907.427120][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.613169][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.850829][ T4251] Bluetooth: hci0: command 0x041b tx timeout
[  907.878769][T14013] team0: Port device team_slave_0 added
[  907.931498][T14013] team0: Port device team_slave_1 added
[  908.112661][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  908.127151][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  908.176535][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  908.190912][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  908.198181][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  908.227472][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.403942][T14013] device hsr_slave_0 entered promiscuous mode
[  908.432594][T14013] device hsr_slave_1 entered promiscuous mode
[  908.457498][T14013] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  908.499777][T14013] Cannot create hsr debugfs directory
[  908.630179][T14132] device batadv_slave_1 entered promiscuous mode
[  908.751582][ T5005] bond0: (slave wlan1): Releasing backup interface
[  908.856989][T14139] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.2701'.
[  908.944533][T14139] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  908.953246][T14139] CPU: 0 PID: 14139 Comm: syz.0.2701 Not tainted 6.1.129-syzkaller #0
[  908.961431][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  908.971513][T14139] Call Trace:
[  908.974806][T14139]  <TASK>
[  908.977762][T14139]  dump_stack_lvl+0x1e3/0x2cb
[  908.982476][T14139]  ? nf_tcp_handle_invalid+0x647/0x647
[  908.987976][T14139]  ? panic+0x764/0x764
[  908.992088][T14139]  sysfs_warn_dup+0x8a/0xa0
[  908.996620][T14139]  sysfs_do_create_link_sd+0xbe/0x100
[  909.002026][T14139]  device_add+0x7d4/0xfd0
[  909.006406][T14139]  wiphy_register+0x1e91/0x2d10
[  909.011297][T14139]  ? cfg80211_event_work+0x40/0x40
[  909.016439][T14139]  ? minstrel_ht_alloc+0x874/0x9e0
[  909.021596][T14139]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  909.027710][T14139]  ieee80211_register_hw+0x31bd/0x3f10
[  909.033216][T14139]  ? ieee80211_register_hw+0x1161/0x3f10
[  909.039079][T14139]  ? ieee80211_register_hw+0x1161/0x3f10
[  909.044856][T14139]  ? ieee80211_tasklet_handler+0x20/0x20
[  909.050622][T14139]  ? __debug_object_init+0xe9/0x450
[  909.055953][T14139]  ? memset+0x1f/0x40
[  909.059998][T14139]  ? __hrtimer_init+0x181/0x260
[  909.064898][T14139]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  909.070687][T14139]  hwsim_new_radio_nl+0xc54/0x1190
[  909.076111][T14139]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  909.082490][T14139]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  909.088880][T14139]  genl_rcv_msg+0xbfa/0xf50
[  909.093430][T14139]  ? genl_bind+0x400/0x400
[  909.097895][T14139]  ? read_lock_is_recursive+0x10/0x10
[  909.103318][T14139]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  909.109791][T14139]  netlink_rcv_skb+0x1cd/0x410
[  909.114679][T14139]  ? genl_bind+0x400/0x400
[  909.119125][T14139]  ? netlink_ack+0x12a0/0x12a0
[  909.123933][T14139]  genl_rcv+0x24/0x40
[  909.127944][T14139]  netlink_unicast+0x7e2/0x970
[  909.132761][T14139]  ? netlink_detachskb+0x90/0x90
[  909.137725][T14139]  ? find_vmap_area+0xf3/0x100
[  909.142527][T14139]  ? __phys_addr_symbol+0x2b/0x70
[  909.147674][T14139]  ? __check_object_size+0x4dd/0xa30
[  909.152995][T14139]  ? bpf_lsm_netlink_send+0x5/0x10
[  909.158151][T14139]  netlink_sendmsg+0xa26/0xd60
[  909.163134][T14139]  ? netlink_getsockopt+0x580/0x580
[  909.168369][T14139]  ? aa_sock_msg_perm+0x91/0x150
[  909.173340][T14139]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  909.178662][T14139]  ? security_socket_sendmsg+0x7d/0xa0
[  909.184158][T14139]  ? netlink_getsockopt+0x580/0x580
[  909.189395][T14139]  ____sys_sendmsg+0x5d3/0x9a0
[  909.194290][T14139]  ? __sys_sendmsg_sock+0x30/0x30
[  909.199359][T14139]  __sys_sendmsg+0x2a9/0x390
[  909.204077][T14139]  ? ____sys_sendmsg+0x9a0/0x9a0
[  909.209089][T14139]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  909.215131][T14139]  ? syscall_enter_from_user_mode+0x2e/0x230
[  909.221145][T14139]  ? lockdep_hardirqs_on+0x94/0x130
[  909.226379][T14139]  ? syscall_enter_from_user_mode+0x2e/0x230
[  909.232425][T14139]  do_syscall_64+0x3b/0xb0
[  909.236885][T14139]  ? clear_bhb_loop+0x45/0xa0
[  909.241612][T14139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  909.247543][T14139] RIP: 0033:0x7f0273b8d169
[  909.251994][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.271635][T14139] RSP: 002b:00007f02749e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.280089][T14139] RAX: ffffffffffffffda RBX: 00007f0273da6080 RCX: 00007f0273b8d169
[  909.288092][T14139] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  909.296093][T14139] RBP: 00007f0273c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  909.304130][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.312138][T14139] R13: 0000000000000000 R14: 00007f0273da6080 R15: 00007ffed0636978
[  909.320242][T14139]  </TASK>
[  910.025166][T14129] device batadv_slave_1 left promiscuous mode
[  910.062516][ T4251] Bluetooth: hci0: command 0x040f tx timeout
[  910.620373][ T5005] device hsr_slave_0 left promiscuous mode
[  910.627155][ T5005] device hsr_slave_1 left promiscuous mode
[  910.634806][ T5005] device bridge_slave_1 left promiscuous mode
[  910.645904][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.672565][ T5005] device bridge_slave_0 left promiscuous mode
[  910.678849][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.937224][ T5005] device veth1_macvtap left promiscuous mode
[  910.957925][ T5005] device veth0_macvtap left promiscuous mode
[  910.964308][ T5005] device veth1_vlan left promiscuous mode
[  910.970250][ T5005] device veth0_vlan left promiscuous mode
[  910.971691][T14187] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.2716'.
[  911.919744][T14198] netlink: set zone limit has 8 unknown bytes
[  912.102254][ T4252] Bluetooth: hci0: command 0x0419 tx timeout
[  912.477086][ T5005] team0 (unregistering): Port device team_slave_1 removed
[  912.534568][ T5005] team0 (unregistering): Port device team_slave_0 removed
[  912.597816][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.672231][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.685289][T14217] fuse: Unknown parameter '0x0000000000000003'
[  913.483555][ T5005] bond0 (unregistering): Released all slaves
[  913.699003][T14187] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  913.708327][T14187] CPU: 0 PID: 14187 Comm: syz.3.2716 Not tainted 6.1.129-syzkaller #0
[  913.716510][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  913.726595][T14187] Call Trace:
[  913.729892][T14187]  <TASK>
[  913.732842][T14187]  dump_stack_lvl+0x1e3/0x2cb
[  913.737551][T14187]  ? nf_tcp_handle_invalid+0x647/0x647
[  913.743046][T14187]  ? panic+0x764/0x764
[  913.747148][T14187]  sysfs_warn_dup+0x8a/0xa0
[  913.751670][T14187]  sysfs_do_create_link_sd+0xbe/0x100
[  913.757105][T14187]  device_add+0x7d4/0xfd0
[  913.761476][T14187]  wiphy_register+0x1e91/0x2d10
[  913.766417][T14187]  ? cfg80211_event_work+0x40/0x40
[  913.771584][T14187]  ? minstrel_ht_alloc+0x874/0x9e0
[  913.776734][T14187]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  913.782864][T14187]  ieee80211_register_hw+0x31bd/0x3f10
[  913.788458][T14187]  ? ieee80211_register_hw+0x1161/0x3f10
[  913.794132][T14187]  ? ieee80211_register_hw+0x1161/0x3f10
[  913.799964][T14187]  ? ieee80211_tasklet_handler+0x20/0x20
[  913.805628][T14187]  ? __debug_object_init+0xe9/0x450
[  913.810872][T14187]  ? memset+0x1f/0x40
[  913.814982][T14187]  ? __hrtimer_init+0x181/0x260
[  913.819873][T14187]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  913.825676][T14187]  hwsim_new_radio_nl+0xc54/0x1190
[  913.830813][T14187]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  913.837245][T14187]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  913.843590][T14187]  genl_rcv_msg+0xbfa/0xf50
[  913.848107][T14187]  ? genl_bind+0x400/0x400
[  913.852630][T14187]  ? read_lock_is_recursive+0x10/0x10
[  913.858023][T14187]  ? ref_tracker_free+0x638/0x7d0
[  913.863123][T14187]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  913.869474][T14187]  ? refcount_inc+0x80/0x80
[  913.874082][T14187]  netlink_rcv_skb+0x1cd/0x410
[  913.878878][T14187]  ? genl_bind+0x400/0x400
[  913.883301][T14187]  ? netlink_ack+0x12a0/0x12a0
[  913.888086][T14187]  genl_rcv+0x24/0x40
[  913.892092][T14187]  netlink_unicast+0x7e2/0x970
[  913.896885][T14187]  ? netlink_detachskb+0x90/0x90
[  913.901828][T14187]  ? find_vmap_area+0xf3/0x100
[  913.906608][T14187]  ? __phys_addr_symbol+0x2b/0x70
[  913.911656][T14187]  ? __check_object_size+0x4dd/0xa30
[  913.916953][T14187]  ? bpf_lsm_netlink_send+0x5/0x10
[  913.922078][T14187]  netlink_sendmsg+0xa26/0xd60
[  913.926856][T14187]  ? netlink_getsockopt+0x580/0x580
[  913.932059][T14187]  ? aa_sock_msg_perm+0x91/0x150
[  913.937001][T14187]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  913.942293][T14187]  ? security_socket_sendmsg+0x7d/0xa0
[  913.947761][T14187]  ? netlink_getsockopt+0x580/0x580
[  913.952974][T14187]  ____sys_sendmsg+0x5d3/0x9a0
[  913.957751][T14187]  ? __sys_sendmsg_sock+0x30/0x30
[  913.962791][T14187]  __sys_sendmsg+0x2a9/0x390
[  913.967388][T14187]  ? ____sys_sendmsg+0x9a0/0x9a0
[  913.972349][T14187]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  913.978349][T14187]  ? syscall_enter_from_user_mode+0x2e/0x230
[  913.984336][T14187]  ? lockdep_hardirqs_on+0x94/0x130
[  913.989654][T14187]  ? syscall_enter_from_user_mode+0x2e/0x230
[  913.995643][T14187]  do_syscall_64+0x3b/0xb0
[  914.000066][T14187]  ? clear_bhb_loop+0x45/0xa0
[  914.004748][T14187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  914.010646][T14187] RIP: 0033:0x7f04dfd8d169
[  914.015067][T14187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  914.034685][T14187] RSP: 002b:00007f04e0c7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  914.043103][T14187] RAX: ffffffffffffffda RBX: 00007f04dffa5fa0 RCX: 00007f04dfd8d169
[  914.051182][T14187] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003
[  914.059180][T14187] RBP: 00007f04dfe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  914.067159][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  914.075131][T14187] R13: 0000000000000000 R14: 00007f04dffa5fa0 R15: 00007ffc23179c78
[  914.083227][T14187]  </TASK>
[  914.086307][    C0] vkms_vblank_simulate: vblank timer overrun
[  915.263749][T14249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2738'.
[  915.722206][T14013] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  916.247210][T14013] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  916.287354][T14013] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  916.405327][T14013] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  916.694624][T14269] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.2743'.
[  916.710179][T14269] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  916.718143][T14269] CPU: 1 PID: 14269 Comm: syz.5.2743 Not tainted 6.1.129-syzkaller #0
[  916.726461][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  916.736542][T14269] Call Trace:
[  916.740368][T14269]  <TASK>
[  916.743323][T14269]  dump_stack_lvl+0x1e3/0x2cb
[  916.748057][T14269]  ? nf_tcp_handle_invalid+0x647/0x647
[  916.753544][T14269]  ? panic+0x764/0x764
[  916.757635][T14269]  sysfs_warn_dup+0x8a/0xa0
[  916.762167][T14269]  sysfs_do_create_link_sd+0xbe/0x100
[  916.767560][T14269]  device_add+0x7d4/0xfd0
[  916.771998][T14269]  wiphy_register+0x1e91/0x2d10
[  916.776875][T14269]  ? cfg80211_event_work+0x40/0x40
[  916.782000][T14269]  ? minstrel_ht_alloc+0x874/0x9e0
[  916.787139][T14269]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  916.793231][T14269]  ieee80211_register_hw+0x31bd/0x3f10
[  916.798707][T14269]  ? ieee80211_register_hw+0x1161/0x3f10
[  916.804348][T14269]  ? ieee80211_register_hw+0x1161/0x3f10
[  916.809995][T14269]  ? ieee80211_tasklet_handler+0x20/0x20
[  916.815636][T14269]  ? __debug_object_init+0xe9/0x450
[  916.820845][T14269]  ? memset+0x1f/0x40
[  916.824831][T14269]  ? __hrtimer_init+0x181/0x260
[  916.829706][T14269]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  916.835459][T14269]  hwsim_new_radio_nl+0xc54/0x1190
[  916.840593][T14269]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  916.846939][T14269]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  916.853284][T14269]  genl_rcv_msg+0xbfa/0xf50
[  916.857800][T14269]  ? genl_bind+0x400/0x400
[  916.862234][T14269]  ? read_lock_is_recursive+0x10/0x10
[  916.867627][T14269]  ? ref_tracker_free+0x638/0x7d0
[  916.872698][T14269]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  916.879036][T14269]  ? refcount_inc+0x80/0x80
[  916.883558][T14269]  netlink_rcv_skb+0x1cd/0x410
[  916.888328][T14269]  ? genl_bind+0x400/0x400
[  916.892755][T14269]  ? netlink_ack+0x12a0/0x12a0
[  916.897534][T14269]  genl_rcv+0x24/0x40
[  916.901541][T14269]  netlink_unicast+0x7e2/0x970
[  916.906315][T14269]  ? netlink_detachskb+0x90/0x90
[  916.911256][T14269]  ? find_vmap_area+0xf3/0x100
[  916.916031][T14269]  ? __phys_addr_symbol+0x2b/0x70
[  916.921061][T14269]  ? __check_object_size+0x4dd/0xa30
[  916.926358][T14269]  ? bpf_lsm_netlink_send+0x5/0x10
[  916.931477][T14269]  netlink_sendmsg+0xa26/0xd60
[  916.936256][T14269]  ? netlink_getsockopt+0x580/0x580
[  916.941457][T14269]  ? aa_sock_msg_perm+0x91/0x150
[  916.946407][T14269]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  916.951698][T14269]  ? security_socket_sendmsg+0x7d/0xa0
[  916.957263][T14269]  ? netlink_getsockopt+0x580/0x580
[  916.962467][T14269]  ____sys_sendmsg+0x5d3/0x9a0
[  916.967240][T14269]  ? __sys_sendmsg_sock+0x30/0x30
[  916.972282][T14269]  __sys_sendmsg+0x2a9/0x390
[  916.976888][T14269]  ? ____sys_sendmsg+0x9a0/0x9a0
[  916.981856][T14269]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  916.987863][T14269]  ? syscall_enter_from_user_mode+0x2e/0x230
[  916.993869][T14269]  ? lockdep_hardirqs_on+0x94/0x130
[  916.999078][T14269]  ? syscall_enter_from_user_mode+0x2e/0x230
[  917.005080][T14269]  do_syscall_64+0x3b/0xb0
[  917.009531][T14269]  ? clear_bhb_loop+0x45/0xa0
[  917.014230][T14269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  917.020151][T14269] RIP: 0033:0x7fe3d978d169
[  917.024572][T14269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  917.044191][T14269] RSP: 002b:00007fe3da544038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  917.052616][T14269] RAX: ffffffffffffffda RBX: 00007fe3d99a5fa0 RCX: 00007fe3d978d169
[  917.060590][T14269] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  917.068567][T14269] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  917.076628][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  917.084686][T14269] R13: 0000000000000000 R14: 00007fe3d99a5fa0 R15: 00007ffe6e1c6c98
[  917.092676][T14269]  </TASK>
[  917.312169][T14013] 8021q: adding VLAN 0 to HW filter on device bond0
[  917.379081][T14013] 8021q: adding VLAN 0 to HW filter on device team0
[  917.470946][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  917.479131][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  917.529939][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  917.558498][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  917.584494][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.591688][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  918.398765][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  918.431974][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  918.474192][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.481373][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  918.505819][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  918.528082][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  918.537181][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  918.632134][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  918.689998][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  918.718485][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2751'.
[  918.738393][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  918.764190][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  918.781310][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  918.799777][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  918.808409][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  918.832728][T14013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  918.863410][T14013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  918.888655][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  918.907657][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  920.137534][T14321] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.2756'.
[  920.148756][T14321] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  920.157010][T14321] CPU: 0 PID: 14321 Comm: syz.4.2756 Not tainted 6.1.129-syzkaller #0
[  920.165202][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  920.175283][T14321] Call Trace:
[  920.178573][T14321]  <TASK>
[  920.181506][T14321]  dump_stack_lvl+0x1e3/0x2cb
[  920.186203][T14321]  ? nf_tcp_handle_invalid+0x647/0x647
[  920.191678][T14321]  ? panic+0x764/0x764
[  920.195766][T14321]  sysfs_warn_dup+0x8a/0xa0
[  920.200278][T14321]  sysfs_do_create_link_sd+0xbe/0x100
[  920.205664][T14321]  device_add+0x7d4/0xfd0
[  920.210010][T14321]  wiphy_register+0x1e91/0x2d10
[  920.214889][T14321]  ? cfg80211_event_work+0x40/0x40
[  920.220012][T14321]  ? minstrel_ht_alloc+0x874/0x9e0
[  920.225142][T14321]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  920.231221][T14321]  ieee80211_register_hw+0x31bd/0x3f10
[  920.236697][T14321]  ? ieee80211_register_hw+0x1161/0x3f10
[  920.242331][T14321]  ? ieee80211_register_hw+0x1161/0x3f10
[  920.248000][T14321]  ? ieee80211_tasklet_handler+0x20/0x20
[  920.253659][T14321]  ? __debug_object_init+0xe9/0x450
[  920.258886][T14321]  ? memset+0x1f/0x40
[  920.263027][T14321]  ? __hrtimer_init+0x181/0x260
[  920.267904][T14321]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  920.273676][T14321]  hwsim_new_radio_nl+0xc54/0x1190
[  920.278828][T14321]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  920.285172][T14321]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  920.291532][T14321]  genl_rcv_msg+0xbfa/0xf50
[  920.296050][T14321]  ? genl_bind+0x400/0x400
[  920.300485][T14321]  ? read_lock_is_recursive+0x10/0x10
[  920.305879][T14321]  ? ref_tracker_free+0x638/0x7d0
[  920.310926][T14321]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  920.317271][T14321]  ? refcount_inc+0x80/0x80
[  920.321800][T14321]  netlink_rcv_skb+0x1cd/0x410
[  920.326575][T14321]  ? genl_bind+0x400/0x400
[  920.330999][T14321]  ? netlink_ack+0x12a0/0x12a0
[  920.335786][T14321]  genl_rcv+0x24/0x40
[  920.339781][T14321]  netlink_unicast+0x7e2/0x970
[  920.344556][T14321]  ? netlink_detachskb+0x90/0x90
[  920.349495][T14321]  ? find_vmap_area+0xf3/0x100
[  920.354269][T14321]  ? __phys_addr_symbol+0x2b/0x70
[  920.359308][T14321]  ? __check_object_size+0x4dd/0xa30
[  920.364618][T14321]  ? bpf_lsm_netlink_send+0x5/0x10
[  920.369763][T14321]  netlink_sendmsg+0xa26/0xd60
[  920.374591][T14321]  ? netlink_getsockopt+0x580/0x580
[  920.379891][T14321]  ? aa_sock_msg_perm+0x91/0x150
[  920.384838][T14321]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  920.390259][T14321]  ? security_socket_sendmsg+0x7d/0xa0
[  920.395739][T14321]  ? netlink_getsockopt+0x580/0x580
[  920.400943][T14321]  ____sys_sendmsg+0x5d3/0x9a0
[  920.405742][T14321]  ? __sys_sendmsg_sock+0x30/0x30
[  920.410788][T14321]  __sys_sendmsg+0x2a9/0x390
[  920.415393][T14321]  ? ____sys_sendmsg+0x9a0/0x9a0
[  920.420363][T14321]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  920.426426][T14321]  ? syscall_enter_from_user_mode+0x2e/0x230
[  920.432415][T14321]  ? lockdep_hardirqs_on+0x94/0x130
[  920.437618][T14321]  ? syscall_enter_from_user_mode+0x2e/0x230
[  920.443610][T14321]  do_syscall_64+0x3b/0xb0
[  920.448056][T14321]  ? clear_bhb_loop+0x45/0xa0
[  920.452747][T14321]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  920.458664][T14321] RIP: 0033:0x7fb2b938d169
[  920.463099][T14321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  920.482722][T14321] RSP: 002b:00007fb2ba205038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  920.491143][T14321] RAX: ffffffffffffffda RBX: 00007fb2b95a6080 RCX: 00007fb2b938d169
[  920.499129][T14321] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  920.507106][T14321] RBP: 00007fb2b940e2a0 R08: 0000000000000000 R09: 0000000000000000
[  920.515085][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  920.523061][T14321] R13: 0000000000000000 R14: 00007fb2b95a6080 R15: 00007ffd777fcbe8
[  920.531049][T14321]  </TASK>
[  920.534118][    C0] vkms_vblank_simulate: vblank timer overrun
[  920.846810][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  920.864155][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  920.974268][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  921.049674][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  921.067719][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  921.113299][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  921.129849][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  921.147769][T14013] device veth0_vlan entered promiscuous mode
[  921.161670][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  921.170280][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  921.215131][T14013] device veth1_vlan entered promiscuous mode
[  921.430314][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  921.445286][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  921.526115][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  922.016080][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  922.165974][T14013] device veth0_macvtap entered promiscuous mode
[  922.200757][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  922.235499][T14013] device veth1_macvtap entered promiscuous mode
[  922.295614][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  922.307028][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.317196][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  922.327716][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.337702][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  922.348228][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.378327][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  922.423610][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  922.452265][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  922.479399][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  922.518853][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.558346][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  922.562364][T14347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2763'.
[  922.611074][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.641680][T14013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  922.671390][T14013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  922.696460][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  922.730015][T14013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  922.777630][T14013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  922.819889][T14013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.829217][T14013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  922.844154][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  922.965717][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  923.798717][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  923.802163][T14364] netlink: 'syz.3.2767': attribute type 1 has an invalid length.
[  923.830276][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.161398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  924.342668][T14372] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  925.628340][T14364] device veth9 entered promiscuous mode
[  925.649727][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2773'.
[  925.663126][T14364] bond2: (slave veth9): Enslaving as a backup interface with a down link
[  926.103195][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.221376][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.605239][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  930.997750][T14487] vxcan1: tx drop: invalid da for name 0x0000000000000004
[  931.466306][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  931.473504][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  935.099557][T14557] loop5: detected capacity change from 0 to 32768
[  935.558556][T14579] overlayfs: './file1' not a directory
[  936.557679][T14588] netlink: 'syz.3.2831': attribute type 10 has an invalid length.
[  936.590493][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'.
[  937.010114][T14601] binder: 14600:14601 ioctl c0306201 0 returned -14
[  938.395607][T14623] loop0: detected capacity change from 0 to 8
[  938.417767][T14623] SQUASHFS error: Failed to read block 0x4e8: -5
[  938.424327][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.430969][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.437434][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.454290][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.460836][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.467238][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.473828][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.480231][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.486919][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.493471][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.499866][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.506326][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.512773][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.519164][T14623] SQUASHFS error: Failed to read block 0x4de: -5
[  938.527160][   T27] audit: type=1800 audit(1741199459.187:12): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2836" name="file1" dev="loop0" ino=5 res=0 errno=0
[  939.842628][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:17) already exists on: vlan2
[  939.915928][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  939.987638][T14641] device vlan2 entered promiscuous mode
[  940.005401][T14641] device bond0 entered promiscuous mode
[  940.100763][T14641] device bond_slave_0 entered promiscuous mode
[  940.115996][T14641] device bond_slave_1 entered promiscuous mode
[  941.387087][ T4251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  941.399964][ T4251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  941.403782][ T5774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  941.420352][ T4251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  941.438979][ T4251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  941.447585][ T4251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  941.460874][ T4251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  941.663888][ T5774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.038360][ T5774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.230690][ T5774] bridge0: port 3(netdevsim0) entered disabled state
[  942.366318][ T5774] device netdevsim0 left promiscuous mode
[  942.399773][ T5774] bridge0: port 3(netdevsim0) entered disabled state
[  942.456892][ T5774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.815418][T14663] chnl_net:caif_netlink_parms(): no params data found
[  943.580853][ T4252] Bluetooth: hci3: command 0x0409 tx timeout
[  943.907094][T14663] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.930865][T14663] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.955542][T14663] device bridge_slave_0 entered promiscuous mode
[  944.013151][T14663] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.047907][T14663] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.073063][T14663] device bridge_slave_1 entered promiscuous mode
[  944.371691][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  945.300302][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  945.578363][T14663] team0: Port device team_slave_0 added
[  945.610898][ T4252] Bluetooth: hci3: command 0x041b tx timeout
[  945.663682][T14663] team0: Port device team_slave_1 added
[  945.678464][T14719] loop2: detected capacity change from 0 to 32768
[  945.854246][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  945.923076][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  946.135798][T14732] overlayfs: './file1' not a directory
[  946.492776][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  946.619737][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  946.650836][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  946.797380][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  947.690972][ T4252] Bluetooth: hci3: command 0x040f tx timeout
[  947.955071][T14663] device hsr_slave_0 entered promiscuous mode
[  947.983930][T14663] device hsr_slave_1 entered promiscuous mode
[  947.999240][T14663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  948.019352][T14663] Cannot create hsr debugfs directory
[  948.067724][T14748] device vlan2 entered promiscuous mode
[  948.096924][T14748] device bridge0 entered promiscuous mode
[  948.135757][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2885'.
[  948.155636][T14752] netlink: 'syz.5.2885': attribute type 7 has an invalid length.
[  948.227071][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'.
[  948.482119][T14762] loop0: detected capacity change from 0 to 512
[  948.491454][T14762] EXT4-fs: Ignoring removed i_version option
[  948.505242][T14762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  948.781204][T14762] EXT4-fs (loop0): 1 truncate cleaned up
[  948.787005][T14762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  949.197274][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  949.723194][T14786] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2894'.
[  949.770784][ T4252] Bluetooth: hci3: command 0x0419 tx timeout
[  949.919129][T14785] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.2891'.
[  951.091554][T14785] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  951.099340][T14785] CPU: 1 PID: 14785 Comm: syz.5.2891 Not tainted 6.1.129-syzkaller #0
[  951.107603][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  951.117680][T14785] Call Trace:
[  951.120971][T14785]  <TASK>
[  951.123914][T14785]  dump_stack_lvl+0x1e3/0x2cb
[  951.128640][T14785]  ? nf_tcp_handle_invalid+0x647/0x647
[  951.134151][T14785]  ? panic+0x764/0x764
[  951.138247][T14785]  sysfs_warn_dup+0x8a/0xa0
[  951.142778][T14785]  sysfs_do_create_link_sd+0xbe/0x100
[  951.148168][T14785]  device_add+0x7d4/0xfd0
[  951.152514][T14785]  wiphy_register+0x1e91/0x2d10
[  951.157377][T14785]  ? cfg80211_event_work+0x40/0x40
[  951.162508][T14785]  ? minstrel_ht_alloc+0x874/0x9e0
[  951.167672][T14785]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  951.173790][T14785]  ieee80211_register_hw+0x31bd/0x3f10
[  951.179271][T14785]  ? ieee80211_register_hw+0x1161/0x3f10
[  951.184908][T14785]  ? ieee80211_register_hw+0x1161/0x3f10
[  951.190552][T14785]  ? ieee80211_tasklet_handler+0x20/0x20
[  951.196191][T14785]  ? __debug_object_init+0xe9/0x450
[  951.201396][T14785]  ? memset+0x1f/0x40
[  951.205393][T14785]  ? __hrtimer_init+0x181/0x260
[  951.210248][T14785]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  951.215991][T14785]  hwsim_new_radio_nl+0xc54/0x1190
[  951.221114][T14785]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  951.227484][T14785]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  951.233850][T14785]  genl_rcv_msg+0xbfa/0xf50
[  951.238384][T14785]  ? genl_bind+0x400/0x400
[  951.242819][T14785]  ? read_lock_is_recursive+0x10/0x10
[  951.248212][T14785]  ? ref_tracker_free+0x638/0x7d0
[  951.253245][T14785]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  951.259580][T14785]  ? refcount_inc+0x80/0x80
[  951.264099][T14785]  netlink_rcv_skb+0x1cd/0x410
[  951.268866][T14785]  ? genl_bind+0x400/0x400
[  951.273285][T14785]  ? netlink_ack+0x12a0/0x12a0
[  951.278058][T14785]  genl_rcv+0x24/0x40
[  951.282036][T14785]  netlink_unicast+0x7e2/0x970
[  951.286807][T14785]  ? netlink_detachskb+0x90/0x90
[  951.291763][T14785]  ? find_vmap_area+0xf3/0x100
[  951.296542][T14785]  ? __phys_addr_symbol+0x2b/0x70
[  951.301586][T14785]  ? __check_object_size+0x4dd/0xa30
[  951.306920][T14785]  ? bpf_lsm_netlink_send+0x5/0x10
[  951.312047][T14785]  netlink_sendmsg+0xa26/0xd60
[  951.316834][T14785]  ? netlink_getsockopt+0x580/0x580
[  951.322041][T14785]  ? aa_sock_msg_perm+0x91/0x150
[  951.326976][T14785]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  951.332265][T14785]  ? security_socket_sendmsg+0x7d/0xa0
[  951.337732][T14785]  ? netlink_getsockopt+0x580/0x580
[  951.342925][T14785]  ____sys_sendmsg+0x5d3/0x9a0
[  951.347693][T14785]  ? __sys_sendmsg_sock+0x30/0x30
[  951.352727][T14785]  __sys_sendmsg+0x2a9/0x390
[  951.357319][T14785]  ? ____sys_sendmsg+0x9a0/0x9a0
[  951.362280][T14785]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  951.368281][T14785]  ? syscall_enter_from_user_mode+0x2e/0x230
[  951.374266][T14785]  ? lockdep_hardirqs_on+0x94/0x130
[  951.379464][T14785]  ? syscall_enter_from_user_mode+0x2e/0x230
[  951.385449][T14785]  do_syscall_64+0x3b/0xb0
[  951.389869][T14785]  ? clear_bhb_loop+0x45/0xa0
[  951.394545][T14785]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  951.400437][T14785] RIP: 0033:0x7fe3d978d169
[  951.404874][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.424502][T14785] RSP: 002b:00007fe3da502038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  951.432930][T14785] RAX: ffffffffffffffda RBX: 00007fe3d99a6160 RCX: 00007fe3d978d169
[  951.440908][T14785] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[  951.448879][T14785] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[  951.456853][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  951.464821][T14785] R13: 0000000000000000 R14: 00007fe3d99a6160 R15: 00007ffe6e1c6c98
[  951.472802][T14785]  </TASK>
[  951.475883][    C1] vkms_vblank_simulate: vblank timer overrun
[  952.525254][ T5774] device hsr_slave_0 left promiscuous mode
[  952.531875][ T5774] device hsr_slave_1 left promiscuous mode
[  952.538372][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  952.546785][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  952.554999][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  952.564428][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  952.581450][ T5774] device bridge_slave_1 left promiscuous mode
[  952.587731][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.637663][ T5774] device bridge_slave_0 left promiscuous mode
[  952.664549][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.915529][ T5774] device veth1_macvtap left promiscuous mode
[  953.948511][ T5774] device veth0_macvtap left promiscuous mode
[  953.963092][ T5774] device veth1_vlan left promiscuous mode
[  953.979184][ T5774] device veth0_vlan left promiscuous mode
[  955.670933][ T5774] team0 (unregistering): Port device team_slave_1 removed
[  955.730352][ T5774] team0 (unregistering): Port device team_slave_0 removed
[  955.791756][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  955.847199][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.460972][ T5774] bond0 (unregistering): Released all slaves
[  956.965875][T14851] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2911'.
[  957.125831][T14856] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.2910'.
[  957.293121][T14856] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  957.444783][T14858] loop0: detected capacity change from 0 to 32768
[  958.140458][T14856] CPU: 1 PID: 14856 Comm: syz.3.2910 Not tainted 6.1.129-syzkaller #0
[  958.148683][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  958.158774][T14856] Call Trace:
[  958.162066][T14856]  <TASK>
[  958.165007][T14856]  dump_stack_lvl+0x1e3/0x2cb
[  958.169718][T14856]  ? nf_tcp_handle_invalid+0x647/0x647
[  958.175202][T14856]  ? panic+0x764/0x764
[  958.179300][T14856]  sysfs_warn_dup+0x8a/0xa0
[  958.183828][T14856]  sysfs_do_create_link_sd+0xbe/0x100
[  958.189232][T14856]  device_add+0x7d4/0xfd0
[  958.193597][T14856]  wiphy_register+0x1e91/0x2d10
[  958.198483][T14856]  ? cfg80211_event_work+0x40/0x40
[  958.203613][T14856]  ? minstrel_ht_alloc+0x874/0x9e0
[  958.208756][T14856]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  958.214857][T14856]  ieee80211_register_hw+0x31bd/0x3f10
[  958.220352][T14856]  ? ieee80211_register_hw+0x1161/0x3f10
[  958.226002][T14856]  ? ieee80211_register_hw+0x1161/0x3f10
[  958.231659][T14856]  ? ieee80211_tasklet_handler+0x20/0x20
[  958.237319][T14856]  ? __debug_object_init+0xe9/0x450
[  958.242545][T14856]  ? memset+0x1f/0x40
[  958.246550][T14856]  ? __hrtimer_init+0x181/0x260
[  958.251425][T14856]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  958.257187][T14856]  hwsim_new_radio_nl+0xc54/0x1190
[  958.262325][T14856]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  958.268700][T14856]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  958.275074][T14856]  genl_rcv_msg+0xbfa/0xf50
[  958.279605][T14856]  ? genl_bind+0x400/0x400
[  958.284046][T14856]  ? read_lock_is_recursive+0x10/0x10
[  958.289443][T14856]  ? ref_tracker_free+0x638/0x7d0
[  958.294475][T14856]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  958.300814][T14856]  ? refcount_inc+0x80/0x80
[  958.305333][T14856]  netlink_rcv_skb+0x1cd/0x410
[  958.310105][T14856]  ? genl_bind+0x400/0x400
[  958.314524][T14856]  ? netlink_ack+0x12a0/0x12a0
[  958.319318][T14856]  genl_rcv+0x24/0x40
[  958.323307][T14856]  netlink_unicast+0x7e2/0x970
[  958.328097][T14856]  ? netlink_detachskb+0x90/0x90
[  958.333033][T14856]  ? find_vmap_area+0xf3/0x100
[  958.337806][T14856]  ? __phys_addr_symbol+0x2b/0x70
[  958.342835][T14856]  ? __check_object_size+0x4dd/0xa30
[  958.348131][T14856]  ? bpf_lsm_netlink_send+0x5/0x10
[  958.353275][T14856]  netlink_sendmsg+0xa26/0xd60
[  958.358078][T14856]  ? netlink_getsockopt+0x580/0x580
[  958.363283][T14856]  ? aa_sock_msg_perm+0x91/0x150
[  958.368224][T14856]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  958.373519][T14856]  ? security_socket_sendmsg+0x7d/0xa0
[  958.378992][T14856]  ? netlink_getsockopt+0x580/0x580
[  958.384229][T14856]  ____sys_sendmsg+0x5d3/0x9a0
[  958.389006][T14856]  ? __sys_sendmsg_sock+0x30/0x30
[  958.394064][T14856]  __sys_sendmsg+0x2a9/0x390
[  958.398682][T14856]  ? ____sys_sendmsg+0x9a0/0x9a0
[  958.403678][T14856]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  958.409694][T14856]  ? syscall_enter_from_user_mode+0x2e/0x230
[  958.415683][T14856]  ? lockdep_hardirqs_on+0x94/0x130
[  958.420895][T14856]  ? syscall_enter_from_user_mode+0x2e/0x230
[  958.426892][T14856]  do_syscall_64+0x3b/0xb0
[  958.431320][T14856]  ? clear_bhb_loop+0x45/0xa0
[  958.436005][T14856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  958.441901][T14856] RIP: 0033:0x7f04dfd8d169
[  958.446315][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  958.465955][T14856] RSP: 002b:00007f04e0c3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  958.474397][T14856] RAX: ffffffffffffffda RBX: 00007f04dffa6160 RCX: 00007f04dfd8d169
[  958.482375][T14856] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005
[  958.490344][T14856] RBP: 00007f04dfe0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  958.498317][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.506297][T14856] R13: 0000000000000000 R14: 00007f04dffa6160 R15: 00007ffc23179c78
[  958.514286][T14856]  </TASK>
[  959.382659][T14663] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  959.441503][T14663] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  959.485374][T14663] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  959.559143][T14663] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  960.336043][T14663] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.420450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  960.441170][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  960.473880][T14663] 8021q: adding VLAN 0 to HW filter on device team0
[  960.511980][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  960.542721][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  960.596144][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.603400][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  961.035414][T14897] loop2: detected capacity change from 0 to 32768
[  961.259899][T14897] overlayfs: './file1' not a directory
[  961.383300][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  961.617318][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  961.662707][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  961.691365][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.698552][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  961.784256][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  961.799273][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  961.808995][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  961.829483][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  961.887465][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  961.960998][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  962.022230][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  962.490146][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  962.713334][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  962.766049][T14663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  962.805553][T14663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  962.974861][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  962.991964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  963.110714][T14934] loop0: detected capacity change from 0 to 512
[  963.121363][T14934] EXT4-fs: Ignoring removed i_version option
[  963.218472][T14934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  963.342039][T14934] EXT4-fs (loop0): 1 truncate cleaned up
[  963.347838][T14934] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  963.762160][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  964.827712][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  964.849675][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  964.937998][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.164201][T14965] overlayfs: failed to clone upperpath
[  967.528822][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  967.559999][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  967.609760][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  967.619120][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  967.676857][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  967.699145][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  967.731791][T14663] device veth0_vlan entered promiscuous mode
[  967.773130][T14663] device veth1_vlan entered promiscuous mode
[  967.944092][T14663] device veth0_macvtap entered promiscuous mode
[  967.973274][T15018] loop5: detected capacity change from 0 to 32768
[  968.157707][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  968.166025][T15018] overlayfs: './file1' not a directory
[  968.181914][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  968.243635][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  968.266032][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  968.275353][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  968.294914][T14663] device veth1_macvtap entered promiscuous mode
[  968.521714][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  968.743122][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.195785][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.267839][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.301185][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.312354][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.324246][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  969.334781][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  969.352129][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  969.361433][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  969.408189][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.442402][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.480702][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.508236][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.538690][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  969.575256][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.599833][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  969.619541][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  969.632657][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  969.645338][T15049] loop5: detected capacity change from 0 to 64
[  969.663530][T14663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.700241][T14663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.750806][T14663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.759585][T14663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.072653][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.117512][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.152184][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  970.172562][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.193505][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  970.206620][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  971.794413][ T4252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  971.831014][ T4252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  971.841965][ T4252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  971.861153][ T4252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  971.865455][T15058] netlink: 'syz.2.2961': attribute type 3 has an invalid length.
[  971.880924][ T4252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  971.888324][ T4252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  971.956143][ T5774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.089993][T15080] tun0: tun_chr_ioctl cmd 21731
[  972.173426][ T5774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.362972][ T5774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.493027][ T5774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.859746][T15106] loop4: detected capacity change from 0 to 8
[  972.927098][T15106] SQUASHFS error: Failed to read block 0x4e8: -5
[  972.934790][T15106] SQUASHFS error: Failed to read block 0x4de: -5
[  972.942333][T15106] SQUASHFS error: Failed to read block 0x4de: -5
[  972.949712][T15106] SQUASHFS error: Failed to read block 0x4de: -5
[  974.078685][   T27] audit: type=1800 audit(1741199494.697:13): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2976" name="file1" dev="loop4" ino=5 res=0 errno=0
[  974.252987][ T4251] Bluetooth: hci1: command 0x0409 tx timeout
[  974.427273][T15083] chnl_net:caif_netlink_parms(): no params data found
[  974.906100][T15083] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.928786][T15083] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.959546][T15083] device bridge_slave_0 entered promiscuous mode
[  975.165114][ T5774] bond2: (slave ip6gretap1): Releasing backup interface
[  975.175192][ T5774] bond2: (slave ip6gretap1): the permanent HWaddr of slave - ea:1a:97:17:ed:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  975.204687][T15083] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.215522][T15083] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.250462][T15083] device bridge_slave_1 entered promiscuous mode
[  975.466607][T15083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.504960][T15083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.675325][T15168] loop2: detected capacity change from 0 to 64
[  975.724146][T15083] team0: Port device team_slave_0 added
[  975.764796][T15083] team0: Port device team_slave_1 added
[  975.860967][T15083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  975.870329][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  975.927140][T15083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  976.078456][T15083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  976.101838][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  976.179085][T15083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  976.340719][ T4251] Bluetooth: hci1: command 0x041b tx timeout
[  977.658614][T15083] device hsr_slave_0 entered promiscuous mode
[  977.691648][T15083] device hsr_slave_1 entered promiscuous mode
[  977.711725][T15083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  977.739759][T15083] Cannot create hsr debugfs directory
[  978.410813][ T4251] Bluetooth: hci1: command 0x040f tx timeout
[  978.780074][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3005'.
[  978.934933][ T5774] device hsr_slave_0 left promiscuous mode
[  978.956985][ T5774] device hsr_slave_1 left promiscuous mode
[  978.984015][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.008736][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.057798][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  979.076063][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.102300][ T5774] device bridge_slave_1 left promiscuous mode
[  979.207993][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.289477][ T5774] device bridge_slave_0 left promiscuous mode
[  979.303100][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.487756][ T5774] device bridge0 left promiscuous mode
[  979.636105][ T5774] device veth1_macvtap left promiscuous mode
[  979.674392][ T5774] device veth0_macvtap left promiscuous mode
[  979.689068][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3012'.
[  979.698355][ T5774] device veth1_vlan left promiscuous mode
[  979.704588][ T5774] device veth0_vlan left promiscuous mode
[  979.902013][T15256] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3007'.
[  980.226511][T15262] loop5: detected capacity change from 0 to 64
[  980.271631][T15264] xt_hashlimit: size too large, truncated to 1048576
[  980.313416][ T5774] bond2 (unregistering): (slave veth9): Releasing backup interface
[  980.345745][T15266] xt_hashlimit: size too large, truncated to 1048576
[  980.369508][ T5774] bond2 (unregistering): Released all slaves
[  980.490736][ T4251] Bluetooth: hci1: command 0x0419 tx timeout
[  982.198875][ T5774] bond1 (unregistering): (slave team_slave_1): Releasing backup interface
[  982.233584][ T5774] bond1 (unregistering): Released all slaves
[  984.054807][ T5774] team0 (unregistering): Port device team_slave_0 removed
[  984.149968][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.259132][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.728998][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'.
[  985.110334][ T5774] bond0 (unregistering): Released all slaves
[  985.215300][T15256] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  985.223300][T15256] CPU: 1 PID: 15256 Comm: syz.0.3007 Not tainted 6.1.129-syzkaller #0
[  985.231485][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  985.241561][T15256] Call Trace:
[  985.244855][T15256]  <TASK>
[  985.247800][T15256]  dump_stack_lvl+0x1e3/0x2cb
[  985.252517][T15256]  ? nf_tcp_handle_invalid+0x647/0x647
[  985.258007][T15256]  ? panic+0x764/0x764
[  985.262114][T15256]  sysfs_warn_dup+0x8a/0xa0
[  985.266653][T15256]  sysfs_do_create_link_sd+0xbe/0x100
[  985.272054][T15256]  device_add+0x7d4/0xfd0
[  985.276422][T15256]  wiphy_register+0x1e91/0x2d10
[  985.281326][T15256]  ? cfg80211_event_work+0x40/0x40
[  985.286471][T15256]  ? minstrel_ht_alloc+0x874/0x9e0
[  985.291626][T15256]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[  985.297730][T15256]  ieee80211_register_hw+0x31bd/0x3f10
[  985.303219][T15256]  ? ieee80211_register_hw+0x1161/0x3f10
[  985.308868][T15256]  ? ieee80211_register_hw+0x1161/0x3f10
[  985.314522][T15256]  ? ieee80211_tasklet_handler+0x20/0x20
[  985.320174][T15256]  ? __debug_object_init+0xe9/0x450
[  985.325397][T15256]  ? memset+0x1f/0x40
[  985.329402][T15256]  ? __hrtimer_init+0x181/0x260
[  985.334348][T15256]  mac80211_hwsim_new_radio+0x2355/0x41c0
[  985.340094][T15256]  hwsim_new_radio_nl+0xc54/0x1190
[  985.345228][T15256]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  985.351574][T15256]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  985.357913][T15256]  genl_rcv_msg+0xbfa/0xf50
[  985.362431][T15256]  ? genl_bind+0x400/0x400
[  985.366877][T15256]  ? read_lock_is_recursive+0x10/0x10
[  985.372267][T15256]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[  985.378616][T15256]  netlink_rcv_skb+0x1cd/0x410
[  985.383391][T15256]  ? genl_bind+0x400/0x400
[  985.387815][T15256]  ? netlink_ack+0x12a0/0x12a0
[  985.392598][T15256]  genl_rcv+0x24/0x40
[  985.396587][T15256]  netlink_unicast+0x7e2/0x970
[  985.401361][T15256]  ? netlink_detachskb+0x90/0x90
[  985.406298][T15256]  ? find_vmap_area+0xf3/0x100
[  985.411074][T15256]  ? __phys_addr_symbol+0x2b/0x70
[  985.416101][T15256]  ? __check_object_size+0x4dd/0xa30
[  985.421397][T15256]  ? bpf_lsm_netlink_send+0x5/0x10
[  985.426523][T15256]  netlink_sendmsg+0xa26/0xd60
[  985.431297][T15256]  ? netlink_getsockopt+0x580/0x580
[  985.436519][T15256]  ? aa_sock_msg_perm+0x91/0x150
[  985.441462][T15256]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  985.446754][T15256]  ? security_socket_sendmsg+0x7d/0xa0
[  985.452236][T15256]  ? netlink_getsockopt+0x580/0x580
[  985.457442][T15256]  ____sys_sendmsg+0x5d3/0x9a0
[  985.462217][T15256]  ? __sys_sendmsg_sock+0x30/0x30
[  985.467255][T15256]  __sys_sendmsg+0x2a9/0x390
[  985.471850][T15256]  ? ____sys_sendmsg+0x9a0/0x9a0
[  985.476851][T15256]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  985.482861][T15256]  ? syscall_enter_from_user_mode+0x2e/0x230
[  985.488870][T15256]  ? lockdep_hardirqs_on+0x94/0x130
[  985.494085][T15256]  ? syscall_enter_from_user_mode+0x2e/0x230
[  985.500082][T15256]  do_syscall_64+0x3b/0xb0
[  985.504513][T15256]  ? clear_bhb_loop+0x45/0xa0
[  985.509196][T15256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.515120][T15256] RIP: 0033:0x7f0273b8d169
[  985.519537][T15256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  985.539149][T15256] RSP: 002b:00007f027499f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  985.547571][T15256] RAX: ffffffffffffffda RBX: 00007f0273da6240 RCX: 00007f0273b8d169
[  985.555545][T15256] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[  985.563517][T15256] RBP: 00007f0273c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  985.571487][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  985.579462][T15256] R13: 0000000000000000 R14: 00007f0273da6240 R15: 00007ffed0636978
[  985.587473][T15256]  </TASK>
[  986.693088][T15083] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  986.733939][T15083] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  986.829440][T15083] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  986.955281][T15083] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  987.108781][T15343] device syzkaller0 entered promiscuous mode
[  990.893790][T15366] bridge0: port 3(netdevsim0) entered blocking state
[  990.900592][T15366] bridge0: port 3(netdevsim0) entered disabled state
[  990.908476][T15366] device netdevsim0 entered promiscuous mode
[  990.915708][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  991.013907][T15083] 8021q: adding VLAN 0 to HW filter on device bond0
[  991.195317][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  991.214358][T15385] netlink: 'syz.0.3052': attribute type 1 has an invalid length.
[  991.223338][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'.
[  991.237169][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  991.270960][T15083] 8021q: adding VLAN 0 to HW filter on device team0
[  991.344713][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  991.417350][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  991.461254][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.468406][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  991.514647][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  991.613961][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  991.637932][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  991.668174][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.675415][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.013348][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  992.196571][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  992.359060][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  992.450862][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  992.483204][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  992.501716][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  992.538200][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  992.765998][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  992.807157][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  992.895040][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  992.901420][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  993.150506][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'.
[  993.202443][T15083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  993.223240][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  993.244081][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  993.894492][T15419] bridge0: port 3(netdevsim0) entered blocking state
[  993.950782][T15419] bridge0: port 3(netdevsim0) entered disabled state
[  993.962318][T15419] device netdevsim0 entered promiscuous mode
[  993.978329][T15419] bridge0: port 3(netdevsim0) entered blocking state
[  993.985190][T15419] bridge0: port 3(netdevsim0) entered forwarding state
[  994.014925][T15442] device ip6tnl1 entered promiscuous mode
[  994.117650][T15083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  994.158132][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  994.186867][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  994.323200][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  994.359316][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  994.554205][T15083] device veth0_vlan entered promiscuous mode
[  994.578161][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  994.596873][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  994.631820][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  994.667497][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  994.712276][T15083] device veth1_vlan entered promiscuous mode
[  994.828381][T15471] device vlan2 entered promiscuous mode
[  994.844774][T15471] device batadv0 entered promiscuous mode
[  994.893815][T15471] team0: Port device vlan2 added
[  994.938783][T15083] device veth0_macvtap entered promiscuous mode
[  994.991083][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  995.007053][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  995.042002][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  995.091061][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  995.131351][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  995.174387][T15083] device veth1_macvtap entered promiscuous mode
[  995.198039][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  995.271245][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  995.328124][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.347549][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  995.396415][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.425992][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  995.470285][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.486987][T15083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  995.500596][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  995.521503][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  995.538770][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  995.561320][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.590099][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  995.603293][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.628693][T15083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  995.645149][T15083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.663137][T15083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  995.672096][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  995.691898][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  995.746673][T15083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  995.772599][T15083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.801053][T15083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.809799][T15083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.853370][T15507] device syz_tun entered promiscuous mode
[  995.887125][T15506] device syz_tun left promiscuous mode
[  996.200979][ T6140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.275009][ T6140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.307720][T15513] loop4: detected capacity change from 0 to 32768
[  996.389339][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.451167][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  996.491964][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.586616][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  999.270507][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'.
[  999.866165][T15596] netlink: 'syz.3.3102': attribute type 21 has an invalid length.
[  999.922750][T15596] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3102'.
[  999.998293][T15602] loop2: detected capacity change from 0 to 64
[ 1002.838082][T15646] loop5: detected capacity change from 0 to 32768
[ 1004.892334][T15686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3129'.
[ 1007.277065][T15722] bridge0: port 3(netdevsim0) entered blocking state
[ 1007.393140][T15722] bridge0: port 3(netdevsim0) entered disabled state
[ 1007.478183][T15731] loop3: detected capacity change from 0 to 64
[ 1007.577312][T15722] device netdevsim0 entered promiscuous mode
[ 1008.100043][T15722] bridge0: port 3(netdevsim0) entered blocking state
[ 1008.106938][T15722] bridge0: port 3(netdevsim0) entered forwarding state
[ 1008.122682][T15729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3142'.
[ 1008.673992][T15750] loop4: detected capacity change from 0 to 32768
[ 1009.034940][T15752] overlayfs: './file1' not a directory
[ 1011.915145][T15794] netlink: 'syz.4.3159': attribute type 39 has an invalid length.
[ 1012.791686][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1012.803802][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1012.854686][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1012.863136][T15798] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.3154'.
[ 1012.881062][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1012.888646][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1012.896629][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1014.061099][T15798] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1014.080048][T15798] CPU: 1 PID: 15798 Comm: syz.5.3154 Not tainted 6.1.129-syzkaller #0
[ 1014.088296][T15798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1014.098721][T15798] Call Trace:
[ 1014.102006][T15798]  <TASK>
[ 1014.104934][T15798]  dump_stack_lvl+0x1e3/0x2cb
[ 1014.109625][T15798]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1014.115093][T15798]  ? panic+0x764/0x764
[ 1014.119180][T15798]  sysfs_warn_dup+0x8a/0xa0
[ 1014.123686][T15798]  sysfs_do_create_link_sd+0xbe/0x100
[ 1014.129066][T15798]  device_add+0x7d4/0xfd0
[ 1014.133414][T15798]  wiphy_register+0x1e91/0x2d10
[ 1014.138277][T15798]  ? cfg80211_event_work+0x40/0x40
[ 1014.143422][T15798]  ? minstrel_ht_alloc+0x874/0x9e0
[ 1014.148544][T15798]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[ 1014.154620][T15798]  ieee80211_register_hw+0x31bd/0x3f10
[ 1014.160105][T15798]  ? ieee80211_register_hw+0x1161/0x3f10
[ 1014.165741][T15798]  ? ieee80211_register_hw+0x1161/0x3f10
[ 1014.171381][T15798]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1014.177017][T15798]  ? __debug_object_init+0xe9/0x450
[ 1014.182222][T15798]  ? memset+0x1f/0x40
[ 1014.186206][T15798]  ? __hrtimer_init+0x181/0x260
[ 1014.191065][T15798]  mac80211_hwsim_new_radio+0x2355/0x41c0
[ 1014.196815][T15798]  hwsim_new_radio_nl+0xc54/0x1190
[ 1014.201938][T15798]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[ 1014.208276][T15798]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[ 1014.214611][T15798]  genl_rcv_msg+0xbfa/0xf50
[ 1014.219130][T15798]  ? genl_bind+0x400/0x400
[ 1014.223564][T15798]  ? read_lock_is_recursive+0x10/0x10
[ 1014.228977][T15798]  ? ref_tracker_free+0x638/0x7d0
[ 1014.234011][T15798]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[ 1014.240346][T15798]  ? refcount_inc+0x80/0x80
[ 1014.244868][T15798]  netlink_rcv_skb+0x1cd/0x410
[ 1014.249642][T15798]  ? genl_bind+0x400/0x400
[ 1014.254064][T15798]  ? netlink_ack+0x12a0/0x12a0
[ 1014.258845][T15798]  genl_rcv+0x24/0x40
[ 1014.262831][T15798]  netlink_unicast+0x7e2/0x970
[ 1014.267601][T15798]  ? netlink_detachskb+0x90/0x90
[ 1014.272551][T15798]  ? find_vmap_area+0xf3/0x100
[ 1014.277336][T15798]  ? __phys_addr_symbol+0x2b/0x70
[ 1014.282401][T15798]  ? __check_object_size+0x4dd/0xa30
[ 1014.287696][T15798]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1014.292818][T15798]  netlink_sendmsg+0xa26/0xd60
[ 1014.297597][T15798]  ? netlink_getsockopt+0x580/0x580
[ 1014.302798][T15798]  ? aa_sock_msg_perm+0x91/0x150
[ 1014.307741][T15798]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1014.313029][T15798]  ? security_socket_sendmsg+0x7d/0xa0
[ 1014.318499][T15798]  ? netlink_getsockopt+0x580/0x580
[ 1014.323701][T15798]  ____sys_sendmsg+0x5d3/0x9a0
[ 1014.328478][T15798]  ? __sys_sendmsg_sock+0x30/0x30
[ 1014.333515][T15798]  __sys_sendmsg+0x2a9/0x390
[ 1014.338135][T15798]  ? ____sys_sendmsg+0x9a0/0x9a0
[ 1014.343117][T15798]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1014.349145][T15798]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1014.355193][T15798]  ? lockdep_hardirqs_on+0x94/0x130
[ 1014.360407][T15798]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1014.366399][T15798]  do_syscall_64+0x3b/0xb0
[ 1014.370823][T15798]  ? clear_bhb_loop+0x45/0xa0
[ 1014.375505][T15798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1014.381401][T15798] RIP: 0033:0x7fe3d978d169
[ 1014.385815][T15798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1014.405437][T15798] RSP: 002b:00007fe3da502038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1014.413859][T15798] RAX: ffffffffffffffda RBX: 00007fe3d99a6160 RCX: 00007fe3d978d169
[ 1014.421829][T15798] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006
[ 1014.429795][T15798] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1014.437766][T15798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.445735][T15798] R13: 0000000000000000 R14: 00007fe3d99a6160 R15: 00007ffe6e1c6c98
[ 1014.453723][T15798]  </TASK>
[ 1014.760746][ T6707] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1014.827993][ T5774] device netdevsim0 left promiscuous mode
[ 1014.842350][ T5774] bridge0: port 3(netdevsim0) entered disabled state
[ 1015.091218][ T4251] Bluetooth: hci4: command 0x0409 tx timeout
[ 1015.126987][ T6707] usb 4-1: Using ep0 maxpacket: 8
[ 1015.141671][ T6707] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1015.149919][ T6707] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1015.372009][ T6707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1015.499047][ T6707] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1015.585471][ T6707] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1015.835461][ T6707] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1015.883796][T15800] chnl_net:caif_netlink_parms(): no params data found
[ 1015.928749][T15844] netlink: 'syz.5.3171': attribute type 39 has an invalid length.
[ 1015.956034][ T6707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.013335][T15844] bridge0: port 4(syz_tun) entered disabled state
[ 1016.091596][T15844] device syz_tun left promiscuous mode
[ 1016.097449][T15844] bridge0: port 4(syz_tun) entered disabled state
[ 1016.214175][ T6707] usb 4-1: usb_control_msg returned -32
[ 1016.223763][ T6707] usbtmc 4-1:16.0: can't read capabilities
[ 1016.652258][T15865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.705174][T15865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.738219][T15865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.748548][T15865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.770569][T15800] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.779836][T15800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.797229][T15865] usbtmc 4-1:16.0: usb_control_msg returned -32
[ 1016.806482][T15800] device bridge_slave_0 entered promiscuous mode
[ 1016.826580][ T6707] usb 4-1: USB disconnect, device number 2
[ 1016.893780][T15800] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.917818][T15800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.944539][T15800] device bridge_slave_1 entered promiscuous mode
[ 1017.130811][ T4252] Bluetooth: hci4: command 0x041b tx timeout
[ 1017.146784][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1017.251803][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1017.332894][T15800] team0: Port device team_slave_0 added
[ 1017.392285][T15800] team0: Port device team_slave_1 added
[ 1017.504346][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1017.526406][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.588290][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1017.729116][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1017.750853][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.780054][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.950523][T15800] device hsr_slave_0 entered promiscuous mode
[ 1017.977989][T15800] device hsr_slave_1 entered promiscuous mode
[ 1017.998091][T15800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1018.050679][T15800] Cannot create hsr debugfs directory
[ 1018.342473][T15908] netlink: 114704 bytes leftover after parsing attributes in process `syz.5.3180'.
[ 1018.749277][T15908] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1018.784190][T15908] CPU: 1 PID: 15908 Comm: syz.5.3180 Not tainted 6.1.129-syzkaller #0
[ 1018.792415][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1018.802498][T15908] Call Trace:
[ 1018.805778][T15908]  <TASK>
[ 1018.808705][T15908]  dump_stack_lvl+0x1e3/0x2cb
[ 1018.813403][T15908]  ? nf_tcp_handle_invalid+0x647/0x647
[ 1018.818871][T15908]  ? panic+0x764/0x764
[ 1018.822954][T15908]  sysfs_warn_dup+0x8a/0xa0
[ 1018.827469][T15908]  sysfs_do_create_link_sd+0xbe/0x100
[ 1018.832851][T15908]  device_add+0x7d4/0xfd0
[ 1018.837197][T15908]  wiphy_register+0x1e91/0x2d10
[ 1018.842067][T15908]  ? cfg80211_event_work+0x40/0x40
[ 1018.847186][T15908]  ? minstrel_ht_alloc+0x874/0x9e0
[ 1018.852314][T15908]  ? ieee80211_init_rate_ctrl_alg+0x592/0x610
[ 1018.858392][T15908]  ieee80211_register_hw+0x31bd/0x3f10
[ 1018.863863][T15908]  ? ieee80211_register_hw+0x1161/0x3f10
[ 1018.869503][T15908]  ? ieee80211_register_hw+0x1161/0x3f10
[ 1018.875152][T15908]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1018.880789][T15908]  ? __debug_object_init+0xe9/0x450
[ 1018.885998][T15908]  ? memset+0x1f/0x40
[ 1018.890247][T15908]  ? __hrtimer_init+0x181/0x260
[ 1018.895144][T15908]  mac80211_hwsim_new_radio+0x2355/0x41c0
[ 1018.900889][T15908]  hwsim_new_radio_nl+0xc54/0x1190
[ 1018.906037][T15908]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[ 1018.912377][T15908]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[ 1018.918730][T15908]  genl_rcv_msg+0xbfa/0xf50
[ 1018.923265][T15908]  ? genl_bind+0x400/0x400
[ 1018.927695][T15908]  ? read_lock_is_recursive+0x10/0x10
[ 1018.933088][T15908]  ? ref_tracker_free+0x638/0x7d0
[ 1018.938118][T15908]  ? hwsim_tx_info_frame_received_nl+0xde0/0xde0
[ 1018.944454][T15908]  ? refcount_inc+0x80/0x80
[ 1018.948969][T15908]  netlink_rcv_skb+0x1cd/0x410
[ 1018.953738][T15908]  ? genl_bind+0x400/0x400
[ 1018.958186][T15908]  ? netlink_ack+0x12a0/0x12a0
[ 1018.962967][T15908]  genl_rcv+0x24/0x40
[ 1018.966951][T15908]  netlink_unicast+0x7e2/0x970
[ 1018.971729][T15908]  ? netlink_detachskb+0x90/0x90
[ 1018.976665][T15908]  ? find_vmap_area+0xf3/0x100
[ 1018.981442][T15908]  ? __phys_addr_symbol+0x2b/0x70
[ 1018.986468][T15908]  ? __check_object_size+0x4dd/0xa30
[ 1018.991754][T15908]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1018.996895][T15908]  netlink_sendmsg+0xa26/0xd60
[ 1019.001669][T15908]  ? netlink_getsockopt+0x580/0x580
[ 1019.006872][T15908]  ? aa_sock_msg_perm+0x91/0x150
[ 1019.011814][T15908]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1019.017106][T15908]  ? security_socket_sendmsg+0x7d/0xa0
[ 1019.022576][T15908]  ? netlink_getsockopt+0x580/0x580
[ 1019.027803][T15908]  ____sys_sendmsg+0x5d3/0x9a0
[ 1019.032594][T15908]  ? __sys_sendmsg_sock+0x30/0x30
[ 1019.037635][T15908]  __sys_sendmsg+0x2a9/0x390
[ 1019.042230][T15908]  ? ____sys_sendmsg+0x9a0/0x9a0
[ 1019.047191][T15908]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1019.053189][T15908]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1019.059176][T15908]  ? lockdep_hardirqs_on+0x94/0x130
[ 1019.064378][T15908]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1019.070388][T15908]  do_syscall_64+0x3b/0xb0
[ 1019.074813][T15908]  ? clear_bhb_loop+0x45/0xa0
[ 1019.079503][T15908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1019.085401][T15908] RIP: 0033:0x7fe3d978d169
[ 1019.089815][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1019.109424][T15908] RSP: 002b:00007fe3da502038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1019.117844][T15908] RAX: ffffffffffffffda RBX: 00007fe3d99a6160 RCX: 00007fe3d978d169
[ 1019.125820][T15908] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007
[ 1019.133789][T15908] RBP: 00007fe3d980e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1019.141760][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1019.149731][T15908] R13: 0000000000000000 R14: 00007fe3d99a6160 R15: 00007ffe6e1c6c98
[ 1019.157717][T15908]  </TASK>
[ 1019.210899][ T4252] Bluetooth: hci4: command 0x040f tx timeout
[ 1019.443656][ T5774] device hsr_slave_0 left promiscuous mode
[ 1019.459433][ T5774] device hsr_slave_1 left promiscuous mode
[ 1019.487588][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1019.505599][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1019.513821][ T5774] device bridge_slave_1 left promiscuous mode
[ 1019.520071][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.529189][ T5774] device bridge_slave_0 left promiscuous mode
[ 1019.535586][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.287405][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 1020.344779][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 1020.395763][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1020.453980][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1021.120996][ T5774] bond0 (unregistering): Released all slaves
[ 1021.250980][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'.
[ 1021.291185][ T4252] Bluetooth: hci4: command 0x0419 tx timeout
[ 1021.833238][T15960] loop3: detected capacity change from 0 to 32768
[ 1023.345994][T15800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1023.382069][T15800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1023.439297][T15992] loop3: detected capacity change from 0 to 64
[ 1023.729586][T15800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1024.113957][T15800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1024.340748][ T4296] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1024.547498][ T4296] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1024.581782][ T4296] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1024.598461][T16011] loop3: detected capacity change from 0 to 32768
[ 1024.609204][T15800] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1024.670804][ T4296] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1024.720761][ T4296] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1024.793412][ T4296] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1024.849097][ T4296] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1025.475457][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1025.491685][ T4296] usb 6-1: Product: syz
[ 1025.495936][ T4296] usb 6-1: Manufacturer: syz
[ 1025.535013][ T4296] cdc_wdm 6-1:1.0: skipping garbage
[ 1025.540388][ T4296] cdc_wdm 6-1:1.0: skipping garbage
[ 1025.540446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1025.561694][ T4296] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1025.567705][ T4296] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1025.592983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1025.631343][T15800] 8021q: adding VLAN 0 to HW filter on device team0
[ 1025.676688][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1025.707782][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1025.736914][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.744118][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1025.795345][ T4296] usb 6-1: USB disconnect, device number 2
[ 1025.821231][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1025.846263][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1025.881382][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1025.922639][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.929778][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1025.978459][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1026.002800][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1026.039766][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1026.098167][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1026.127825][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1026.156395][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1026.191158][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1026.241436][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1026.262232][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1026.291234][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1026.316530][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1026.355890][T15800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1026.500827][  T126] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1026.703083][  T126] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1026.732352][  T126] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1026.773350][  T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1026.798569][  T126] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1026.827638][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1026.841297][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1026.851435][  T126] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1026.869376][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1026.909169][  T126] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1026.933292][T16062] tmpfs: Unknown parameter 'usrquota'
[ 1026.933825][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1026.953024][  T126] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1026.963005][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1026.973967][  T126] usb 6-1: Product: syz
[ 1026.978220][  T126] usb 6-1: Manufacturer: syz
[ 1027.030498][T15800] device veth0_vlan entered promiscuous mode
[ 1027.049665][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1027.058643][  T126] cdc_wdm 6-1:1.0: skipping garbage
[ 1027.076059][  T126] cdc_wdm 6-1:1.0: skipping garbage
[ 1027.088991][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1027.099948][  T126] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1027.113476][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1027.120998][  T126] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1027.134590][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1027.149603][T16067] loop4: detected capacity change from 0 to 64
[ 1027.172967][T15800] device veth1_vlan entered promiscuous mode
[ 1027.308764][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1027.310777][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.319121][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1027.321936][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.324401][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.340136][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1027.368808][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1027.389361][T15800] device veth0_macvtap entered promiscuous mode
[ 1027.400374][T15800] device veth1_macvtap entered promiscuous mode
[ 1027.482302][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.517559][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.523280][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.531213][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.536338][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.537089][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.586306][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.645080][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.701892][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.779743][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.796211][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.834355][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1027.849801][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1027.891759][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.895498][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.897451][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.920000][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.927240][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.932939][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.939074][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.944750][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.951333][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.957037][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1027.980780][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1027.986497][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.000837][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.006558][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.030976][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.034506][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1028.036671][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.054638][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1028.067753][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1028.111378][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.112845][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1028.117082][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.132411][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.138268][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.172912][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1028.220273][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.232534][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.238234][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.245370][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.253180][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.278901][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.284634][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.309511][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.315257][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.325891][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.338745][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.344467][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.352275][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.357978][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.374642][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.380359][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.392808][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.398532][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.405795][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.411498][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.417838][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.423539][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.429852][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.435562][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.441906][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.447597][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.454178][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.459871][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.480804][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.486526][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.504724][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.510463][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.516977][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.522686][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.551091][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.556806][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.574505][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.591084][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.596800][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.613566][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.622454][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.628145][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.634307][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.640185][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.692020][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.697753][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.745428][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.749519][T16091] loop4: detected capacity change from 0 to 32768
[ 1028.751123][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.751704][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.770856][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.781723][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.793153][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.798848][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.805123][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.810814][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.818116][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.823803][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.830289][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.835983][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.842078][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.847770][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.853701][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.859403][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.870840][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1028.923546][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1028.933820][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.942746][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.948430][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1028.954954][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1028.983839][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.993894][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1029.014447][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1029.014585][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.020139][    C1] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1029.030115][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1029.036828][    C1] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1029.046483][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.238691][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1029.302991][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1029.401507][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1029.449806][T15800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.480392][T15800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.517159][T15800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.545813][T15800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.698301][ T4251] block nbd3: Receive control failed (result -32)
[ 1029.730405][ T6702] usb 6-1: USB disconnect, device number 3
[ 1029.761673][T16092] block nbd3: shutting down sockets
[ 1029.897356][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1029.931343][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.300383][ T7731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1030.343538][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1030.378482][ T7731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1030.629310][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1030.812673][ T4251] Bluetooth: hci0: command 0x0406 tx timeout
[ 1030.885671][T16114] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3226'.
[ 1030.917343][T16114] bridge0: port 3(netdevsim0) entered disabled state
[ 1030.924294][T16114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.933658][T16114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.024198][T16115] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3230'.
[ 1031.191772][T16118] loop0: detected capacity change from 0 to 32768
[ 1031.853968][T16128] loop3: detected capacity change from 0 to 64
[ 1034.347817][T16156] netlink: 20 bytes leftover after parsing attributes in process `x!'.
[ 1034.429144][T16160] netlink: 'syz.2.3239': attribute type 2 has an invalid length.
[ 1034.464283][T16160] netlink: 'syz.2.3239': attribute type 1 has an invalid length.
[ 1034.487143][T16163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3241'.
[ 1035.183478][T16179] loop2: detected capacity change from 0 to 64
[ 1035.249241][T16177] loop4: detected capacity change from 0 to 32768
[ 1037.874012][ T6050] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1038.080838][ T6050] usb 4-1: Using ep0 maxpacket: 16
[ 1038.095552][T16214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3259'.
[ 1038.112287][ T6050] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[ 1038.131566][T16214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'.
[ 1038.154288][ T6050] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[ 1038.174517][ T6050] usb 4-1: Product: syz
[ 1038.178734][ T6050] usb 4-1: Manufacturer: syz
[ 1038.210993][ T6050] usb 4-1: SerialNumber: syz
[ 1038.230121][T16214] netlink: 'syz.2.3259': attribute type 39 has an invalid length.
[ 1038.246806][ T6050] usb 4-1: config 0 descriptor??
[ 1038.268990][ T6050] usb 4-1: selecting invalid altsetting 1
[ 1038.447691][ T6050] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[ 1038.492216][ T6050] usb 4-1: USB disconnect, device number 3
[ 1038.680828][ T6704] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1038.708085][T14685] udevd[14685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1038.880719][ T6704] usb 1-1: Using ep0 maxpacket: 32
[ 1038.888383][ T6704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1038.927346][ T6704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1038.950997][ T6704] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[ 1038.960087][ T6704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.017975][ T6704] usb 1-1: config 0 descriptor??
[ 1039.179619][   T27] audit: type=1326 audit(1741199559.907:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16227 comm="syz.2.3264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faadc58d169 code=0x0
[ 1039.551506][ T6704] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0
[ 1039.559397][T16240] loop4: detected capacity change from 0 to 64
[ 1039.604931][ T6704] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised
[ 1039.651456][ T6704] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN
[ 1039.663222][ T6704] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[ 1039.671652][ T6704] CPU: 0 PID: 6704 Comm: kworker/0:11 Not tainted 6.1.129-syzkaller #0
[ 1039.679943][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1039.690026][ T6704] Workqueue: usb_hub_wq hub_event
[ 1039.695101][ T6704] RIP: 0010:u2fzero_rng_read+0x27d/0x750
[ 1039.700779][ T6704] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c2 cf bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 24 d0 bb f9 48 8d 84 24 80 00 00
[ 1039.720435][ T6704] RSP: 0018:ffffc90005e46720 EFLAGS: 00010202
[ 1039.726530][ T6704] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000
[ 1039.734529][ T6704] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058f09d69
[ 1039.742530][ T6704] RBP: ffffc90005e468d0 R08: dffffc0000000000 R09: ffff888058f09d2e
[ 1039.750531][ T6704] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807b5533e0
[ 1039.758530][ T6704] R13: 1ffff1100f6aa606 R14: ffff88807b553030 R15: dffffc0000000000
[ 1039.766531][ T6704] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1039.775484][ T6704] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1039.782098][ T6704] CR2: 00007f5c921a5f40 CR3: 0000000058bb1000 CR4: 00000000003506f0
[ 1039.790100][ T6704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1039.798096][ T6704] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1039.806093][ T6704] Call Trace:
[ 1039.809389][ T6704]  <TASK>
[ 1039.812334][ T6704]  ? __die_body+0x5e/0xa0
[ 1039.816691][ T6704]  ? die_addr+0x95/0xc0
[ 1039.820875][ T6704]  ? exc_general_protection+0x3ae/0x590
[ 1039.826450][ T6704]  ? asm_exc_general_protection+0x22/0x30
[ 1039.832199][ T6704]  ? u2fzero_rng_read+0x27d/0x750
[ 1039.837260][ T6704]  ? u2fzero_brightness_set+0x2a0/0x2a0
[ 1039.842849][ T6704]  ? mutex_lock_nested+0x10/0x10
[ 1039.847827][ T6704]  ? u2fzero_brightness_set+0x2a0/0x2a0
[ 1039.853413][ T6704]  add_early_randomness+0x78/0x140
[ 1039.858558][ T6704]  hwrng_register+0x3a0/0x440
[ 1039.863268][ T6704]  devm_hwrng_register+0x43/0xb0
[ 1039.868231][ T6704]  u2fzero_probe+0x31a/0x410
[ 1039.872857][ T6704]  ? hid_map_usage_clear+0x180/0x180
[ 1039.878169][ T6704]  hid_device_probe+0x298/0x3a0
[ 1039.883065][ T6704]  ? hid_uevent+0x310/0x310
[ 1039.887594][ T6704]  really_probe+0x2ab/0xcb0
[ 1039.892120][ T6704]  __driver_probe_device+0x1a2/0x3d0
[ 1039.897428][ T6704]  driver_probe_device+0x50/0x420
[ 1039.902474][ T6704]  __device_attach_driver+0x2cf/0x510
[ 1039.907869][ T6704]  ? coredump_store+0x90/0x90
[ 1039.912563][ T6704]  bus_for_each_drv+0x183/0x200
[ 1039.917442][ T6704]  ? subsys_find_device_by_id+0x310/0x310
[ 1039.923204][ T6704]  __device_attach+0x359/0x570
[ 1039.927985][ T6704]  ? device_attach+0x20/0x20
[ 1039.932587][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1039.937807][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1039.943028][ T6704]  bus_probe_device+0xba/0x1e0
[ 1039.947822][ T6704]  ? device_add+0xab9/0xfd0
[ 1039.952347][ T6704]  device_add+0xb48/0xfd0
[ 1039.956696][ T6704]  hid_add_device+0x3a5/0x510
[ 1039.961401][ T6704]  usbhid_probe+0xc09/0xfc0
[ 1039.965934][ T6704]  usb_probe_interface+0x5c0/0xaf0
[ 1039.971085][ T6704]  ? usb_register_driver+0x3d0/0x3d0
[ 1039.976400][ T6704]  really_probe+0x2ab/0xcb0
[ 1039.980928][ T6704]  __driver_probe_device+0x1a2/0x3d0
[ 1039.986236][ T6704]  driver_probe_device+0x50/0x420
[ 1039.991286][ T6704]  __device_attach_driver+0x2cf/0x510
[ 1039.996682][ T6704]  ? coredump_store+0x90/0x90
[ 1040.001387][ T6704]  bus_for_each_drv+0x183/0x200
[ 1040.006266][ T6704]  ? subsys_find_device_by_id+0x310/0x310
[ 1040.012021][ T6704]  __device_attach+0x359/0x570
[ 1040.016818][ T6704]  ? device_attach+0x20/0x20
[ 1040.021431][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1040.026655][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1040.031877][ T6704]  bus_probe_device+0xba/0x1e0
[ 1040.036668][ T6704]  ? device_add+0xab9/0xfd0
[ 1040.041194][ T6704]  device_add+0xb48/0xfd0
[ 1040.045550][ T6704]  usb_set_configuration+0x19dd/0x2020
[ 1040.051047][ T6704]  usb_generic_driver_probe+0x84/0x140
[ 1040.056530][ T6704]  usb_probe_device+0x130/0x260
[ 1040.061409][ T6704]  ? usb_register_device_driver+0x240/0x240
[ 1040.067328][ T6704]  really_probe+0x2ab/0xcb0
[ 1040.071851][ T6704]  __driver_probe_device+0x1a2/0x3d0
[ 1040.077157][ T6704]  driver_probe_device+0x50/0x420
[ 1040.082207][ T6704]  __device_attach_driver+0x2cf/0x510
[ 1040.087607][ T6704]  ? coredump_store+0x90/0x90
[ 1040.092304][ T6704]  bus_for_each_drv+0x183/0x200
[ 1040.097179][ T6704]  ? subsys_find_device_by_id+0x310/0x310
[ 1040.102927][ T6704]  __device_attach+0x359/0x570
[ 1040.107708][ T6704]  ? device_attach+0x20/0x20
[ 1040.112310][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1040.117525][ T6704]  ? kobject_uevent_env+0x54a/0x8c0
[ 1040.122745][ T6704]  bus_probe_device+0xba/0x1e0
[ 1040.127534][ T6704]  ? device_add+0xab9/0xfd0
[ 1040.132067][ T6704]  device_add+0xb48/0xfd0
[ 1040.136426][ T6704]  usb_new_device+0xbdd/0x1900
[ 1040.141212][ T6704]  ? usb_disconnect+0x8c0/0x8c0
[ 1040.146086][ T6704]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1040.151302][ T6704]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1040.156517][ T6704]  ? lockdep_hardirqs_on+0x94/0x130
[ 1040.161728][ T6704]  hub_event+0x2efe/0x5730
[ 1040.166180][ T6704]  ? led_work+0x700/0x700
[ 1040.170522][ T6704]  ? read_lock_is_recursive+0x10/0x10
[ 1040.175914][ T6704]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1040.181921][ T6704]  ? print_irqtrace_events+0x210/0x210
[ 1040.187398][ T6704]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1040.193300][ T6704]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1040.198510][ T6704]  ? process_one_work+0x806/0x1260
[ 1040.203632][ T6704]  process_one_work+0x917/0x1260
[ 1040.208590][ T6704]  ? worker_detach_from_pool+0x260/0x260
[ 1040.214240][ T6704]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1040.219795][ T6704]  ? kthread_data+0x4e/0xc0
[ 1040.224318][ T6704]  ? wq_worker_running+0x97/0x190
[ 1040.229352][ T6704]  worker_thread+0xa47/0x1200
[ 1040.234053][ T6704]  ? release_firmware_map_entry+0x18b/0x18b
[ 1040.239972][ T6704]  kthread+0x28d/0x320
[ 1040.244053][ T6704]  ? worker_clr_flags+0x190/0x190
[ 1040.249091][ T6704]  ? kthread_blkcg+0xd0/0xd0
[ 1040.253689][ T6704]  ret_from_fork+0x1f/0x30
[ 1040.258134][ T6704]  </TASK>
[ 1040.261155][ T6704] Modules linked in:
[ 1040.265131][    C0] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1040.416419][   T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.513605][ T6704] ---[ end trace 0000000000000000 ]---
[ 1040.519203][ T6704] RIP: 0010:u2fzero_rng_read+0x27d/0x750
[ 1040.750049][ T6704] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c2 cf bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 24 d0 bb f9 48 8d 84 24 80 00 00
[ 1040.883022][ T6704] RSP: 0018:ffffc90005e46720 EFLAGS: 00010202
[ 1040.902201][ T6704] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000
[ 1040.910234][ T6704] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058f09d69
[ 1040.940794][ T6704] RBP: ffffc90005e468d0 R08: dffffc0000000000 R09: ffff888058f09d2e
[ 1040.948856][ T6704] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807b5533e0
[ 1040.984894][ T6704] R13: 1ffff1100f6aa606 R14: ffff88807b553030 R15: dffffc0000000000
[ 1041.010698][ T6704] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1041.019740][ T6704] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.050707][ T6704] CR2: 00007ff516ab0440 CR3: 000000007f8a9000 CR4: 00000000003506f0
[ 1041.058739][ T6704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1041.086519][ T6704] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1041.110655][ T6704] Kernel panic - not syncing: Fatal exception
[ 1041.117016][ T6704] Kernel Offset: disabled
[ 1041.121333][ T6704] Rebooting in 86400 seconds..