last executing test programs:

11m11.514021144s ago: executing program 0 (id=1):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)

11m9.769941295s ago: executing program 0 (id=13):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0xc)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_clone(0x2000, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)="eeedab2f1b0ff35f3eb9ee3e76632e174dd738265c5ab73ddfc8d10dc874f0abb819ed2110c9fcdf37686d61cec4970a6187112aab12394963b956f77ff6514af602ad1a6e67095680aa51b35dab390d6ac83ea0de88b6b845408de598074b830233f2f87fd6e77d7f27c0bc8759a275b3c37c2570a00796bcca42514fed139eaec4ae02a20159767d5b7166a2daddf8ddbf5c0f0bc6b51658db91771a150fb27c395b5f131514a82b2dffe331a5f0b472bd132f2c19f509a230702eaa0c24c8cc34d7f04c0b2ac233e0cc2d58f7326b63df")
write$P9_RGETLOCK(r1, &(0x7f0000000380)={0x1e, 0x37, 0x1, {0x1, 0x9, 0x3, r3}}, 0x1e)
setreuid(0x0, r2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r4, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)

11m4.306997133s ago: executing program 0 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

10m48.530111023s ago: executing program 32 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

9m22.848849784s ago: executing program 3 (id=166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

9m20.166006119s ago: executing program 3 (id=171):
socket$inet6(0xa, 0x3, 0xff)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, 0x0, &(0x7f0000000040))
sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@ll={0x11, 0x8, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x188}}], 0x2, 0x1)

9m17.706423415s ago: executing program 3 (id=174):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x3, 0x5, "a727cd51d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) (async)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x3, 0x5, "a727cd51d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) (async)

9m13.126063643s ago: executing program 3 (id=182):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18)
r1 = io_uring_setup(0x1787, &(0x7f0000000640)={0x0, 0x631d, 0x80, 0xffffffff, 0x69})
io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="dffd00002d00010000000000000000000400008008001a8004009d80"], 0x1c}], 0x1}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r4, 0xbabc)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4)
close_range(r2, r1, 0x0)
close_range(r2, r2, 0x0)
unshare(0x6020400)

9m12.573971182s ago: executing program 3 (id=186):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x20000007, 0x86, 0x0, 0x0, 0xffffff7f, 0xffffc000, 0x0, 0x7, 0x5, 0x0})
socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

9m11.575077799s ago: executing program 3 (id=187):
creat(&(0x7f00000000c0)='./file0\x00', 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

8m55.560652704s ago: executing program 33 (id=187):
creat(&(0x7f00000000c0)='./file0\x00', 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

7m34.00084729s ago: executing program 2 (id=342):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x143042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x101101, 0x13b)
pwritev2(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x8800000, 0x5, 0x0)

7m33.728035346s ago: executing program 2 (id=345):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x670003, 0xe1)
mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x110)
mount$overlay(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus/file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x143042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x101101, 0x13b)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
pwritev2(r1, &(0x7f0000000540)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x8800000, 0x5, 0x0)
exit(0x0)

7m32.687638254s ago: executing program 2 (id=348):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x7, 0x2, {}, 0x20800})

7m25.599433722s ago: executing program 2 (id=357):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x498}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

7m25.405532272s ago: executing program 2 (id=359):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x20000007, 0x86, 0x0, 0x0, 0xffffff7f, 0xffffc000, 0x0, 0x7, 0x5, 0x0})
socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

7m24.253608502s ago: executing program 2 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0)
timerfd_create(0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = creat(0x0, 0x2)
fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESDEC], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

7m22.223548189s ago: executing program 4 (id=364):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
getpgid(0x0)
fcntl$setsig(r2, 0xa, 0x800020)
keyctl$unlink(0x9, 0x0, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x42474752, 0x140, 0xffff8000, 0x2, @stepwise={{0x1, 0x2}, {0x80, 0x5}, {0x3, 0xc433}}})

7m21.181043513s ago: executing program 4 (id=366):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x7, 0x2, {}, 0x20800})

7m19.838001668s ago: executing program 4 (id=367):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

7m19.736264254s ago: executing program 4 (id=368):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)

7m19.475635191s ago: executing program 4 (id=369):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x20000007, 0x86, 0x0, 0x0, 0xffffff7f, 0xffffc000, 0x0, 0x7, 0x5, 0x0})
socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

7m17.795533315s ago: executing program 4 (id=371):
setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x4, 0x3)
syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[], 0x0)

7m14.136167523s ago: executing program 1 (id=375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x7, 0x2, {}, 0x20800})

7m10.556882299s ago: executing program 1 (id=376):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

7m10.414093859s ago: executing program 1 (id=377):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)

7m10.071216014s ago: executing program 1 (id=378):
r0 = socket$kcm(0x10, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x3, 0x0, &(0x7f0000000480)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000ec0)=[{}, {}, {}], 0xa, 0x0, &(0x7f0000000d00)=[{}, {0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000040), &(0x7f0000000ac0)=[{{}, {<r3=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000680)={0x80000000, &(0x7f0000000240), &(0x7f0000000b40)=[{}, {{}, {0x80000000, <r4=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000001040)={{0x80000000, r2, 0x2, [0x4, 0x9]}, {r3, r4, 0x4, [0x7, 0x9]}, 0x4, [0xe33f, 0x7]})
r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01)
writev(r5, &(0x7f0000002300)=[{&(0x7f0000000080)="011db6ce", 0x4}, {&(0x7f0000002a80)="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", 0x1001}], 0x2)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/286, 0x11e}, {&(0x7f0000002100)=""/4046, 0xfce}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000008c0)=""/194, 0xc2}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000009c0)=""/236, 0xec}], 0x8}, 0x40012100)

7m9.975255085s ago: executing program 1 (id=379):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x20000007, 0x86, 0x0, 0x0, 0xffffff7f, 0xffffc000, 0x0, 0x7, 0x5, 0x0})
socket$rxrpc(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

7m8.964291174s ago: executing program 1 (id=380):
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffc, 0x5, 0x800000047, 0x8, 0x4000000000000000, 0x6, 0x4, 0x6, 0xfefb})
mprotect(&(0x7f0000136000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)='_', 0x1}], 0x1)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x8000, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0xffffffffffffff58, 0x2, r2})
fallocate(r0, 0x1, 0xa, 0x20000)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0)

7m8.891212483s ago: executing program 34 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0)
timerfd_create(0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = creat(0x0, 0x2)
fstat(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x190, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESDEC], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

7m2.120416371s ago: executing program 35 (id=371):
setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x4, 0x3)
syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[], 0x0)

6m53.57843779s ago: executing program 36 (id=380):
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0x0, 0x0, &(0x7f00000003c0)={0xfffffffffffffffc, 0x5, 0x800000047, 0x8, 0x4000000000000000, 0x6, 0x4, 0x6, 0xfefb})
mprotect(&(0x7f0000136000/0x4000)=nil, 0x4000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)='_', 0x1}], 0x1)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x8000, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000010c0)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0xffffffffffffff58, 0x2, r2})
fallocate(r0, 0x1, 0xa, 0x20000)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0)

3m8.546469484s ago: executing program 7 (id=384):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3m7.5807399s ago: executing program 7 (id=385):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

3m7.405947157s ago: executing program 7 (id=386):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00C5'], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)

3m6.907561789s ago: executing program 7 (id=387):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x7, 0x2, {}, 0x20800})

3m6.680823986s ago: executing program 7 (id=388):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x20000007, 0x86, 0x0, 0x0, 0xffffff7f, 0xffffc000, 0x0, 0x7, 0x5, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

3m5.119146662s ago: executing program 7 (id=389):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
r4 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r4, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r7, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004})
r8 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3)
fcntl$addseals(r8, 0x409, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r10, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0)

2m49.101617356s ago: executing program 37 (id=389):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
r4 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r4, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r7, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004})
r8 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3)
fcntl$addseals(r8, 0x409, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r10, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0)

2m26.531374363s ago: executing program 6 (id=460):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r3, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r6, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004})
r7 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3)
fcntl$addseals(r7, 0x409, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0)

2m22.067946064s ago: executing program 6 (id=467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ff1dffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x300}, 0x0)

2m21.673894394s ago: executing program 6 (id=468):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

2m18.833091626s ago: executing program 6 (id=472):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0xfffffffe)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000001c0)={0x2, 0x9, 0x10000, 0xe, 0x1a, "a14b1398935be070ffe74e3d6e0d6379b4d943"})
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x62, 0xe1, 0xba, 0x10, 0x10b9, 0x8000, 0xc0fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc8, 0x58, 0x7e}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x830}, 0x40408c4)
r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe7\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bM-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8000000000000000, 0x200000)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0045543, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETAW(r6, 0x5407, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
ioctl$PPPIOCGFLAGS1(r8, 0x80047458, &(0x7f00000019c0))
copy_file_range(r5, 0x0, r5, &(0x7f0000000080)=0xfffffffffffffffc, 0x1, 0x0)

2m13.708653263s ago: executing program 6 (id=482):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

2m12.362399697s ago: executing program 6 (id=484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

2m11.76124766s ago: executing program 9 (id=486):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x9}, &(0x7f00000000c0)=0x8)

2m11.5618064s ago: executing program 9 (id=487):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = socket(0x2d, 0x2, 0x0)
ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000005d80))
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170928bd7000ffdbdf25010000000500070700000000000000000100000008000a0000000000060002003f00000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0771"], 0x20}, 0x200040c4)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r10, 0x5608)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)

2m10.250398413s ago: executing program 9 (id=490):
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000005100)={'mangle\x00', 0x0, [0x9, 0xa, 0x8, 0x7, 0x8]}, &(0x7f00000005c0)=0x54)

2m10.053818917s ago: executing program 9 (id=491):
prlimit64(0x0, 0x5, 0x0, 0x0)
unshare(0x2040400)
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000000ff7f00000400000021"], 0x50)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
geteuid()
faccessat2(0xffffffffffffffff, 0x0, 0x7d, 0x2100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001600)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9)
read$qrtrtun(r3, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in, 0x4e21, 0x0, 0x1, 0x0, 0xa, 0x0, 0x180}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0xa, 0xfffffffffffffffe}}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}}, 0xe8)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r1, &(0x7f00000000c0), 0x20000000}, 0xc)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

2m8.759125904s ago: executing program 9 (id=493):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

2m6.736169047s ago: executing program 9 (id=495):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r3, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r6, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004})
r7 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3)
fcntl$addseals(r7, 0x409, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0)

1m56.330622654s ago: executing program 38 (id=484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m50.828943166s ago: executing program 39 (id=495):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0)
mq_notify(r3, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, 0x0}})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r6, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004})
r7 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3)
fcntl$addseals(r7, 0x409, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}], 0x6, 0x40010020, 0x0)

9.69863615s ago: executing program 5 (id=735):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100", 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00C5'], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)

7.914963406s ago: executing program 5 (id=737):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x300}, 0x0)

7.605334281s ago: executing program 5 (id=740):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000012c0)=[@in6={0xa, 0x4e24, 0xe, @mcast2, 0x2}], 0xd71ac51343ea870c)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x453, 0x400, 0x70bd2c, 0x25dfdbfd, "a77d5b9ea9a2f889d7b13b82934408acea6479b66c05fbed2472705c2016bd2c69f9c7f19209e8c82391fd4183850256fc934d3d53701fdf5ac2d458e09c0a8c70cc1c5a20ee3557fdfa45a320010a2ef3cb2607fff1c9bf02e476735e883ac7e78fa2dc945c97f1c2c742eca643dc6625fa48ee01", [""]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4054)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000012c0)=[@in6={0xa, 0x4e24, 0xe, @mcast2, 0x2}], 0xd71ac51343ea870c) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x453, 0x400, 0x70bd2c, 0x25dfdbfd, "a77d5b9ea9a2f889d7b13b82934408acea6479b66c05fbed2472705c2016bd2c69f9c7f19209e8c82391fd4183850256fc934d3d53701fdf5ac2d458e09c0a8c70cc1c5a20ee3557fdfa45a320010a2ef3cb2607fff1c9bf02e476735e883ac7e78fa2dc945c97f1c2c742eca643dc6625fa48ee01", [""]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4054) (async)

6.010006193s ago: executing program 8 (id=741):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0))

5.876356084s ago: executing program 8 (id=742):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x99e, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$admmidi(&(0x7f0000000300), 0x8000000000006, 0x1a9882)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
recvmmsg$unix(r1, 0x0, 0x0, 0x100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102389, 0x18ff5)
r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='resize', 0x0, r3)
chdir(&(0x7f0000000080)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
sched_setaffinity(0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)

5.1439616s ago: executing program 8 (id=743):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
r5 = gettid()
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=r5)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @null]}, 0x3d)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r10, 0xc0404806, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc0405519, &(0x7f0000001980)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

1.35453053s ago: executing program 8 (id=744):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000840)=[@uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x101, 0x3}}, @wrmsr={0x1e, 0x20, {0xaf7, 0x1000000000000000}}, @code={0xa, 0x5c, {"c7442400d8000000c744240200000000ff2c2466b830000f00d00f3066b81b008ed0c4c11559e5c42191159b53000000f08380000000000b8f4810958a0050000006f26f3e460fbe647948"}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @code={0xa, 0x66, {"3641d30509000000430f01cb0f2099430f08460f01cac462e9ae9e0c0000000f20e035040000000f22e048b8b6ff0000000000000f23d00f21f8350000000b0f23f8b9800000c00f3235000100000f30640f1e5a0d"}}, @code={0xa, 0x4e, {"470f0f99000000009ab8010000000f01c10fc733470f01dff3f226e400430fc72bc403c16cb78000c0fe0065450f2047400f78acf700000000640f01c3"}}, @cpuid={0x14, 0x18, {0x8, 0xfe}}, @code={0xa, 0x63, {"c4a1145ed72e47c174b70e75440f0f46009a3666450f3adf6a00000f71e4f936f2450f1ec6c744240016010000c74424022a3a8694ff2c246666430fd139262e0fc7b10b6ff6b10f20e035800000000f22e0"}}, @wr_crn={0x46, 0x20, {0x3}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x10000}}, @code={0xa, 0x66, {"66baf80cb88b93cd8fef66bafc0cb0e4ee0f01c9470fc779530f18d9c744240023010000c744240200800000ff1c2466ba4100ed410f8c2c7b4d1e3666450f38dc4a006444ed66baf80cb87d130688ef66bafc0cec"}}, @cpuid={0x14, 0x18, {0x7fffffff, 0x9}}, @wr_crn={0x46, 0x20, {0x8, 0x8000000020000000}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0x2}, @rdmsr={0x32, 0x18, {0x9a0}}, @wrmsr={0x1e, 0x20, {0xa74}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0x8}, @rdmsr={0x32, 0x18, {0xc0010918}}, @code={0xa, 0x53, {"646545e10066d9f6b8345e3982ef66bafc0c66edc4a1c1daba009800001cb0b8010000000f01c1440f3264400f0fadd00000008ac4a17d28ac4f0f000000430f01c5"}}, @cpuid={0x14, 0x18, {0x3, 0x8}}, @rdmsr={0x32, 0x18, {0x877}}, @code={0xa, 0x73, {"4d0fc719c74424000f010000c744240241641406ff2c24b9540a00000f32c443fd0174f100190f06dcacb40730000048b8080c0000000000000f23d00f21f835100000040f23f865f30fc7b700000000420fc77f6226266436460faeb436cfe04aea"}}, @wrmsr={0x1e, 0x20, {0x9d2, 0x8e}}, @code={0xa, 0x97, {"66baa100b8d4d10000ef0f20c035200000000f22c0660f3a22a34000000052c7442400f9ae0000c7442402fc6f0000c7442406000000000f011c24b9800000c00f3235000400000f30c7442400a7593256c74424022e680000c7442406000000000f011c240f2315c4c3ad6c30da430f0173ccc7442400b5000000c744240200200000ff2c24"}}, @rdmsr={0x32, 0x18, {0x318}}], 0x59e})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r3 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r3, &(0x7f0000000000)=""/35, 0x23)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3)
setpgid(0x0, 0x0)

640.654596ms ago: executing program 5 (id=745):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100", 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00C5'], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)

350.247474ms ago: executing program 8 (id=746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170928bd70000000000001000000080009001b00000008000a0000000000"], 0x24}, 0x1, 0x620b}, 0x0)

177.392429ms ago: executing program 5 (id=747):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @loopback}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x1, 0x48041)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

61.868742ms ago: executing program 8 (id=748):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109ba1b000007d440000904650001be866d41eb0df294c480393296"], 0x0)
syz_usb_ep_read(r1, 0x1, 0x9a, &(0x7f0000000140)=""/154)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r2, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
creat(&(0x7f0000000100)='./file0\x00', 0x1)
inotify_add_watch(r4, &(0x7f00000003c0)='./file0\x00', 0x84000100)
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x800, 0x201, 0x2, 0x0, 0x4c, 0x8, 0x7}, 0x20)
syz_usb_control_io$printer(r1, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

0s ago: executing program 5 (id=749):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="fad241ac16163e3c374707fd17b5771cb771dc540494d85aac894ae2059958b8d4274e60a71d1cbda77de681f15b98daedf8c8b5eaa33f1da7ae305c4536fc16f348ea54334ab9b6af"]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xce, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x8d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0xc9, 0x90, 0x0, 0x1, [@nested={0x8c, 0x44, 0x0, 0x1, [@nested={0x69, 0x127, 0x0, 0x1, [@nested={0xc, 0xf0, 0x0, 0x1, [@nested={0x4, 0x10a}, @nested={0x4, 0x28}]}, @typed={0x8, 0xfa, 0x0, 0x0, @u32=0x49b}, @generic="79c89f90ef00f2a8d60c43421a588c2b5a1dc7b0ba2c280d0daa756e55b911c420fe6d4dca8c0730bab38a9b0115cba9c09130ba3d124347cd4e753542ea60ad3b2fc789f93f134b27c550e014d570f61a"]}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0x13a}, @nested={0x4, 0xc5}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x532}]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31cfe9abdfc6e08360d8cf57b7256e18c92263487faf40caf4b040e15ceaf45c9fef3a61ad0e2cba61a"]}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x18, 0xde, 0x0, 0x1, [@typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@remote}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f000098c000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000400000002000000a4"], 0x48)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080)="ae73", &(0x7f0000000040)=@udp6=r3, 0x2}, 0x20)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$kcm(0x29, 0x2, 0x0)
r6 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0xe5, 0x10100, 0x0, 0x376}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000300)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000000000008900000004000000010000000000000004000000000000000000000000000000000000000000000000000000000000000300000002000000000000000000000001010000020000000000000000000000000000000000000000000000000000000600000005000000000000000000000001000000000000000000000001000000ca0000000000d18bdd13b5ee72740000080000000200000000000000000000003a000000090000000000000000000000000000000000000000000000000000000600000003000000010000000000000003000000010000000600000009000000000000000000000000000000000000000300000001000000010000000000000005000000000000000500000000000000050000000000000004000000040000cb020000000500000000000000000000000700"/344])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r11, &(0x7f0000000100)={0x1f, @none}, 0x8)

kernel console output (not intermixed with test programs):

dv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.813389][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.913524][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.913657][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.188488][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.189306][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.232156][ T8170] hsr_slave_0: entered promiscuous mode
[  549.233804][ T8170] hsr_slave_1: entered promiscuous mode
[  549.246149][ T8170] debugfs: 'hsr0' already exists in 'hsr'
[  549.246176][ T8170] Cannot create hsr debugfs directory
[  549.329866][ T8073] veth0_vlan: entered promiscuous mode
[  549.494247][ T5846] Bluetooth: hci1: command tx timeout
[  549.729192][ T8073] veth1_vlan: entered promiscuous mode
[  550.399641][ T8264] chnl_net:caif_netlink_parms(): no params data found
[  550.700673][ T3556] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.229912][ T3556] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.574248][ T5846] Bluetooth: hci1: command tx timeout
[  551.810117][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  551.825358][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  551.826612][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  551.850277][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  551.851891][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  551.927295][ T8073] veth0_macvtap: entered promiscuous mode
[  552.050279][ T3556] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.271265][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.271483][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.271698][ T8264] bridge_slave_0: entered allmulticast mode
[  552.299705][ T8264] bridge_slave_0: entered promiscuous mode
[  552.473287][ T3556] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.525362][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.525529][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.525767][ T8264] bridge_slave_1: entered allmulticast mode
[  552.528496][ T8264] bridge_slave_1: entered promiscuous mode
[  552.562091][ T8073] veth1_macvtap: entered promiscuous mode
[  553.011018][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.061118][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.155197][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  553.162146][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  553.163339][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  553.187519][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  553.190646][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  553.705058][ T8264] team0: Port device team_slave_0 added
[  553.795641][ T8264] team0: Port device team_slave_1 added
[  553.904205][ T5846] Bluetooth: hci2: command tx timeout
[  553.916814][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.148446][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.148461][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.148485][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.263126][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.263142][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.263166][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.401634][ T8170] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  554.468188][ T8170] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  554.626851][ T3556] bridge_slave_1: left allmulticast mode
[  554.626891][ T3556] bridge_slave_1: left promiscuous mode
[  554.627142][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.696359][ T3556] bridge_slave_0: left allmulticast mode
[  554.696393][ T3556] bridge_slave_0: left promiscuous mode
[  554.696683][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.254393][ T5846] Bluetooth: hci4: command tx timeout
[  555.994210][ T5846] Bluetooth: hci2: command tx timeout
[  556.695274][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.764913][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.809835][ T3556] bond0 (unregistering): Released all slaves
[  556.834928][ T8170] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  557.000953][ T8170] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  557.059102][ T8264] hsr_slave_0: entered promiscuous mode
[  557.060369][ T8264] hsr_slave_1: entered promiscuous mode
[  557.061235][ T8264] debugfs: 'hsr0' already exists in 'hsr'
[  557.061258][ T8264] Cannot create hsr debugfs directory
[  557.204450][ T3556] hsr_slave_0: left promiscuous mode
[  557.228541][ T3556] hsr_slave_1: left promiscuous mode
[  557.229195][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.229213][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.275708][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.275740][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.344292][ T5846] Bluetooth: hci4: command tx timeout
[  557.357346][ T3556] veth1_macvtap: left promiscuous mode
[  557.357425][ T3556] veth0_macvtap: left promiscuous mode
[  557.357623][ T3556] veth1_vlan: left promiscuous mode
[  557.359063][ T3556] veth0_vlan: left promiscuous mode
[  558.054413][ T5846] Bluetooth: hci2: command tx timeout
[  559.414341][ T5846] Bluetooth: hci4: command tx timeout
[  559.675057][ T3556] team0 (unregistering): Port device team_slave_1 removed
[  559.904885][ T3556] team0 (unregistering): Port device team_slave_0 removed
[  560.134291][ T5846] Bluetooth: hci2: command tx timeout
[  560.488269][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  560.491967][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  560.515924][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  560.517066][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  560.517865][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  561.497289][ T5846] Bluetooth: hci4: command tx timeout
[  562.694439][ T5846] Bluetooth: hci5: command tx timeout
[  563.046265][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  563.046344][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  563.504606][ T8294] chnl_net:caif_netlink_parms(): no params data found
[  564.039413][ T8297] chnl_net:caif_netlink_parms(): no params data found
[  564.438779][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.439406][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.439649][ T8294] bridge_slave_0: entered allmulticast mode
[  564.442455][ T8294] bridge_slave_0: entered promiscuous mode
[  564.549003][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.549143][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.549332][ T8294] bridge_slave_1: entered allmulticast mode
[  564.552155][ T8294] bridge_slave_1: entered promiscuous mode
[  564.774411][ T5846] Bluetooth: hci5: command tx timeout
[  565.215131][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.518799][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.526058][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.526198][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.526438][ T8297] bridge_slave_0: entered allmulticast mode
[  565.530754][ T8297] bridge_slave_0: entered promiscuous mode
[  565.736527][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.736683][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.736917][ T8297] bridge_slave_1: entered allmulticast mode
[  565.739769][ T8297] bridge_slave_1: entered promiscuous mode
[  566.410781][ T8294] team0: Port device team_slave_0 added
[  566.436969][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  566.488764][ T8294] team0: Port device team_slave_1 added
[  566.493054][ T8311] chnl_net:caif_netlink_parms(): no params data found
[  566.508109][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.864201][ T5846] Bluetooth: hci5: command tx timeout
[  567.175843][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.175860][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.175885][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.280753][ T8297] team0: Port device team_slave_0 added
[  567.302411][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.302427][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.302452][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.351923][ T8297] team0: Port device team_slave_1 added
[  567.723996][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.724009][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.724439][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.726785][ T8264] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  568.022824][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.022837][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.022851][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.023217][ T8264] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  568.181428][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0
[  568.211394][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.211616][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.211809][ T8311] bridge_slave_0: entered allmulticast mode
[  568.213779][ T8311] bridge_slave_0: entered promiscuous mode
[  568.217509][ T8264] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  568.288826][ T8294] hsr_slave_0: entered promiscuous mode
[  568.290172][ T8294] hsr_slave_1: entered promiscuous mode
[  568.291098][ T8294] debugfs: 'hsr0' already exists in 'hsr'
[  568.291120][ T8294] Cannot create hsr debugfs directory
[  568.336518][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.336669][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.337209][ T8311] bridge_slave_1: entered allmulticast mode
[  568.342524][ T8311] bridge_slave_1: entered promiscuous mode
[  568.349539][ T8264] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  568.923893][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.934530][ T5846] Bluetooth: hci5: command tx timeout
[  568.942476][ T8297] hsr_slave_0: entered promiscuous mode
[  568.943828][ T8297] hsr_slave_1: entered promiscuous mode
[  568.945797][ T8297] debugfs: 'hsr0' already exists in 'hsr'
[  568.945823][ T8297] Cannot create hsr debugfs directory
[  569.104538][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.748015][ T8170] 8021q: adding VLAN 0 to HW filter on device team0
[  569.750789][ T8311] team0: Port device team_slave_0 added
[  569.808550][ T8311] team0: Port device team_slave_1 added
[  570.299569][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.299818][ T7158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.392189][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.392201][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.392215][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.431816][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.431833][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.431856][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.631649][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.631868][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.427108][ T8311] hsr_slave_0: entered promiscuous mode
[  571.428559][ T8311] hsr_slave_1: entered promiscuous mode
[  571.429521][ T8311] debugfs: 'hsr0' already exists in 'hsr'
[  571.429542][ T8311] Cannot create hsr debugfs directory
[  572.952906][ T3556] bridge_slave_1: left allmulticast mode
[  572.952939][ T3556] bridge_slave_1: left promiscuous mode
[  572.953223][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.046148][ T3556] bridge_slave_0: left allmulticast mode
[  573.046182][ T3556] bridge_slave_0: left promiscuous mode
[  573.046428][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.109470][ T3556] bridge_slave_1: left allmulticast mode
[  573.109504][ T3556] bridge_slave_1: left promiscuous mode
[  573.109756][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.175925][ T3556] bridge_slave_0: left allmulticast mode
[  573.175957][ T3556] bridge_slave_0: left promiscuous mode
[  573.176230][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.249735][ T3556] bridge_slave_1: left allmulticast mode
[  573.249758][ T3556] bridge_slave_1: left promiscuous mode
[  573.249911][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.315997][ T3556] bridge_slave_0: left allmulticast mode
[  573.316032][ T3556] bridge_slave_0: left promiscuous mode
[  573.316297][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.335974][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.390002][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.432542][ T3556] bond0 (unregistering): Released all slaves
[  577.035542][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.096425][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.118857][ T3556] bond0 (unregistering): Released all slaves
[  578.648049][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.721157][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.757506][ T3556] bond0 (unregistering): Released all slaves
[  579.010395][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.153082][ T8264] 8021q: adding VLAN 0 to HW filter on device team0
[  579.283424][ T4904] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.283692][ T4904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.293187][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.366654][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.366864][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.714596][ T3556] hsr_slave_0: left promiscuous mode
[  579.743906][ T3556] hsr_slave_1: left promiscuous mode
[  579.746449][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.785170][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.944505][ T3556] hsr_slave_0: left promiscuous mode
[  579.964396][ T3556] hsr_slave_1: left promiscuous mode
[  579.966092][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.015624][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.178593][ T3556] hsr_slave_0: left promiscuous mode
[  580.194605][ T3556] hsr_slave_1: left promiscuous mode
[  580.195651][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  580.255591][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.364707][ T3556] veth1_macvtap: left promiscuous mode
[  580.364848][ T3556] veth0_macvtap: left promiscuous mode
[  580.365144][ T3556] veth1_vlan: left promiscuous mode
[  580.365354][ T3556] veth0_vlan: left promiscuous mode
[  581.745867][ T3556] team0 (unregistering): Port device team_slave_1 removed
[  581.966882][ T3556] team0 (unregistering): Port device team_slave_0 removed
[  585.906919][ T3556] team0 (unregistering): Port device team_slave_1 removed
[  586.215213][ T3556] team0 (unregistering): Port device team_slave_0 removed
[  589.305421][ T3556] team0 (unregistering): Port device team_slave_1 removed
[  589.565322][ T3556] team0 (unregistering): Port device team_slave_0 removed
[  592.489975][ T8170] veth0_vlan: entered promiscuous mode
[  592.642977][ T8170] veth1_vlan: entered promiscuous mode
[  592.809879][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.922211][ T8170] veth0_macvtap: entered promiscuous mode
[  592.952399][ T8170] veth1_macvtap: entered promiscuous mode
[  593.019689][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.095478][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.116934][   T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.118956][   T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.119398][   T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.120815][ T1182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.483076][ T8294] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  593.657078][ T8294] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  593.710274][ T8294] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  593.826729][ T8294] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  594.142649][ T7158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.142670][ T7158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.282993][ T8297] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  594.394980][ T8297] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  594.447340][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.447360][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.448129][ T8297] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  594.513300][ T8264] veth0_vlan: entered promiscuous mode
[  594.520202][ T8297] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  594.729345][ T8264] veth1_vlan: entered promiscuous mode
[  594.784708][ T8311] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  594.830780][ T8311] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  594.922193][ T8311] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  595.046412][ T8311] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  595.272336][ T8394] hub 9-0:1.0: USB hub found
[  595.272721][ T8394] hub 9-0:1.0: 1 port detected
[  595.458571][ T8264] veth0_macvtap: entered promiscuous mode
[  595.510397][ T8264] veth1_macvtap: entered promiscuous mode
[  595.646622][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.724516][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.803713][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.877177][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  595.882739][ T3596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.896718][ T3596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.902281][ T3596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.918750][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.923235][ T3596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.939864][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.940421][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.116215][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.116394][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.423790][ T8297] 8021q: adding VLAN 0 to HW filter on device team0
[  596.499785][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.532295][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.532535][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.652539][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.653697][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.664341][  T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.664359][  T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.882956][ T8311] 8021q: adding VLAN 0 to HW filter on device team0
[  596.919326][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.919347][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.947485][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.954286][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.218558][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.219480][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.845385][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.257456][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.378695][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.008135][ T8297] veth0_vlan: entered promiscuous mode
[  601.138867][ T8297] veth1_vlan: entered promiscuous mode
[  601.220931][ T8294] veth0_vlan: entered promiscuous mode
[  601.263513][ T8294] veth1_vlan: entered promiscuous mode
[  601.361785][ T8297] veth0_macvtap: entered promiscuous mode
[  601.400962][ T8311] veth0_vlan: entered promiscuous mode
[  601.417211][ T8297] veth1_macvtap: entered promiscuous mode
[  601.461835][ T8311] veth1_vlan: entered promiscuous mode
[  601.472558][ T8294] veth0_macvtap: entered promiscuous mode
[  601.510982][ T8294] veth1_macvtap: entered promiscuous mode
[  601.528608][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.566144][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.614660][ T3556] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.634429][ T3556] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.643225][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.643314][ T3556] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.719980][ T3556] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.750362][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.978637][ T8311] veth0_macvtap: entered promiscuous mode
[  601.990569][ T1872] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.986278][ T1872] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.999677][ T8311] veth1_macvtap: entered promiscuous mode
[  603.002178][ T1872] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.008896][ T1872] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.287544][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.287563][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.323059][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.472538][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.521211][ T4904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.521309][ T4904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.521322][ T4904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.522208][ T4904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.554238][ T4904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.589451][ T4904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.688022][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.688042][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.862475][    C0] vkms_vblank_simulate: vblank timer overrun
[  605.065610][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.065631][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.144789][    C0] vkms_vblank_simulate: vblank timer overrun
[  605.459398][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.459419][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.672561][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.672582][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.746163][ T8559] syz.8.397 uses obsolete (PF_INET,SOCK_PACKET)
[  607.229839][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.317090][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.338474][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.384445][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.425164][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.491186][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.546793][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.655023][    C0] vkms_vblank_simulate: vblank timer overrun
[  607.874336][    C0] vkms_vblank_simulate: vblank timer overrun
[  608.389750][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.402'.
[  608.451891][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.402'.
[  608.515586][ T8571] batadv0: entered promiscuous mode
[  608.515782][ T8571] macvtap1: entered promiscuous mode
[  608.515958][ T8571] macvtap1: entered allmulticast mode
[  608.515966][ T8571] batadv0: entered allmulticast mode
[  608.519396][ T8571] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  610.333734][    C0] vkms_vblank_simulate: vblank timer overrun
[  610.825288][ T8591] binder: 8590:8591 ioctl c0306201 200000000080 returned -14
[  610.841428][ T8591] netlink: 'syz.8.407': attribute type 29 has an invalid length.
[  610.855070][ T8593] hub 9-0:1.0: USB hub found
[  610.855885][ T8591] netlink: 'syz.8.407': attribute type 29 has an invalid length.
[  610.863114][ T8593] hub 9-0:1.0: 1 port detected
[  610.876003][ T8591] netlink: 'syz.8.407': attribute type 29 has an invalid length.
[  611.260110][    C0] vkms_vblank_simulate: vblank timer overrun
[  611.319540][ T8600] hub 9-0:1.0: USB hub found
[  611.327132][ T8600] hub 9-0:1.0: 1 port detected
[  612.390585][    C0] vkms_vblank_simulate: vblank timer overrun
[  612.515706][    C0] vkms_vblank_simulate: vblank timer overrun
[  612.836247][ T8610] hub 9-0:1.0: USB hub found
[  612.838730][    C0] vkms_vblank_simulate: vblank timer overrun
[  612.839288][ T8610] hub 9-0:1.0: 1 port detected
[  612.880531][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.005390][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.388084][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.725516][    C0] vkms_vblank_simulate: vblank timer overrun
[  614.268986][    C0] vkms_vblank_simulate: vblank timer overrun
[  616.581029][ T8620] hub 9-0:1.0: USB hub found
[  616.581398][ T8620] hub 9-0:1.0: 1 port detected
[  619.399752][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  619.584832][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  619.590414][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  619.599616][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  619.603213][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  619.899479][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.368110][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.582956][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.609927][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.674857][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.882660][    C1] vkms_vblank_simulate: vblank timer overrun
[  621.369592][    C1] vkms_vblank_simulate: vblank timer overrun
[  621.553911][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.6.420'.
[  621.645366][    C1] vkms_vblank_simulate: vblank timer overrun
[  622.072329][ T5842] Bluetooth: hci0: command tx timeout
[  622.310254][    C1] vkms_vblank_simulate: vblank timer overrun
[  622.574452][ T7944] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  622.744159][ T7944] usb 6-1: Using ep0 maxpacket: 8
[  622.749650][ T7944] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  622.749677][ T7944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.786502][ T7944] usb 6-1: config 0 descriptor??
[  623.062932][ T8678] hub 9-0:1.0: USB hub found
[  623.078264][ T8678] hub 9-0:1.0: 1 port detected
[  624.134220][ T5842] Bluetooth: hci0: command tx timeout
[  624.551316][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  624.552940][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  624.755003][ T8449] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.884761][ T7944] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  624.885363][ T7944] asix 6-1:0.0: probe with driver asix failed with error -71
[  624.934820][ T7944] usb 6-1: USB disconnect, device number 2
[  625.421296][ T8449] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.039775][ T8449] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.214625][ T5842] Bluetooth: hci0: command tx timeout
[  627.028219][ T8639] chnl_net:caif_netlink_parms(): no params data found
[  627.773260][ T8740] hub 9-0:1.0: USB hub found
[  627.776298][ T8740] hub 9-0:1.0: 1 port detected
[  627.925875][ T8742] netlink: 32 bytes leftover after parsing attributes in process `syz.8.438'.
[  628.564079][ T5842] Bluetooth: hci0: command tx timeout
[  628.802049][ T8449] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.545391][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.545542][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.545777][ T8639] bridge_slave_0: entered allmulticast mode
[  632.702146][    C0] vkms_vblank_simulate: vblank timer overrun
[  632.735602][ T8639] bridge_slave_0: entered promiscuous mode
[  632.876592][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.876814][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.877040][ T8639] bridge_slave_1: entered allmulticast mode
[  632.904817][ T8639] bridge_slave_1: entered promiscuous mode
[  633.376606][    C0] vkms_vblank_simulate: vblank timer overrun
[  633.602083][ T8799] netlink: 32 bytes leftover after parsing attributes in process `syz.5.451'.
[  633.622022][    C0] vkms_vblank_simulate: vblank timer overrun
[  634.391493][    C0] vkms_vblank_simulate: vblank timer overrun
[  634.585319][    C0] vkms_vblank_simulate: vblank timer overrun
[  635.408625][    C0] vkms_vblank_simulate: vblank timer overrun
[  636.071238][    C0] vkms_vblank_simulate: vblank timer overrun
[  636.956774][    C0] vkms_vblank_simulate: vblank timer overrun
[  636.998028][ T8639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.002379][ T8639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.142461][    C0] vkms_vblank_simulate: vblank timer overrun
[  637.407449][    C0] vkms_vblank_simulate: vblank timer overrun
[  637.578290][    C0] vkms_vblank_simulate: vblank timer overrun
[  639.400983][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.9.463'.
[  640.575578][ T8639] team0: Port device team_slave_0 added
[  641.338681][ T8639] team0: Port device team_slave_1 added
[  641.714676][    C1] vkms_vblank_simulate: vblank timer overrun
[  641.750900][ T8859] hub 9-0:1.0: USB hub found
[  641.751353][ T8859] hub 9-0:1.0: 1 port detected
[  641.965498][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.157861][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.555110][    C1] vkms_vblank_simulate: vblank timer overrun
[  643.009486][ T8449] bridge_slave_1: left allmulticast mode
[  643.009520][ T8449] bridge_slave_1: left promiscuous mode
[  643.009807][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.285247][    C1] vkms_vblank_simulate: vblank timer overrun
[  643.600190][ T8449] bridge_slave_0: left allmulticast mode
[  643.600222][ T8449] bridge_slave_0: left promiscuous mode
[  643.600474][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.941613][    C1] vkms_vblank_simulate: vblank timer overrun
[  643.945020][ T8876] hub 9-0:1.0: USB hub found
[  643.945496][ T8876] hub 9-0:1.0: 1 port detected
[  644.240517][    C1] vkms_vblank_simulate: vblank timer overrun
[  644.946769][    C1] vkms_vblank_simulate: vblank timer overrun
[  644.978624][ T8880] hub 9-0:1.0: USB hub found
[  644.983136][ T8880] hub 9-0:1.0: 1 port detected
[  644.984719][    C1] vkms_vblank_simulate: vblank timer overrun
[  645.030249][    C1] vkms_vblank_simulate: vblank timer overrun
[  645.835068][    C1] vkms_vblank_simulate: vblank timer overrun
[  646.226953][    C1] vkms_vblank_simulate: vblank timer overrun
[  646.534516][ T8362] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  646.772098][ T8362] usb 7-1: Using ep0 maxpacket: 16
[  646.904361][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.5.475'.
[  647.518743][ T8362] usb 7-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[  647.518772][ T8362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.518791][ T8362] usb 7-1: Product: syz
[  647.518804][ T8362] usb 7-1: Manufacturer: syz
[  647.518816][ T8362] usb 7-1: SerialNumber: syz
[  647.790846][ T8362] usb 7-1: config 0 descriptor??
[  648.444216][ T8484] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  648.596996][ T8484] usb 9-1: config 0 has an invalid interface number: 176 but max is 0
[  648.597024][ T8484] usb 9-1: config 0 has no interface number 0
[  648.597072][ T8484] usb 9-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  648.597098][ T8484] usb 9-1: config 0 interface 176 has no altsetting 0
[  648.600295][ T8484] usb 9-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76
[  648.600321][ T8484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.600340][ T8484] usb 9-1: Product: syz
[  648.600352][ T8484] usb 9-1: Manufacturer: syz
[  648.600364][ T8484] usb 9-1: SerialNumber: syz
[  648.719166][ T8362] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  648.719279][ T8484] usb 9-1: config 0 descriptor??
[  648.720300][ T8902] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  648.723778][ T8362] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  649.489363][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.531385][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.656255][ T8362] usb 7-1: USB disconnect, device number 2
[  650.257352][ T8484] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  650.589614][ T8484] usb 9-1: USB disconnect, device number 2
[  650.753334][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.515163][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  651.575108][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.599030][ T8449] bond0 (unregistering): Released all slaves
[  652.414265][    C0] vkms_vblank_simulate: vblank timer overrun
[  652.606664][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.9.487'.
[  652.789024][    C0] vkms_vblank_simulate: vblank timer overrun
[  653.096305][    C0] vkms_vblank_simulate: vblank timer overrun
[  653.143120][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.143137][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.143163][ T8639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.199168][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.199187][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.199212][ T8639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.403997][    C0] vkms_vblank_simulate: vblank timer overrun
[  654.086729][    C0] vkms_vblank_simulate: vblank timer overrun
[  654.130085][    C0] vkms_vblank_simulate: vblank timer overrun
[  654.280204][    C0] vkms_vblank_simulate: vblank timer overrun
[  654.875358][    C0] vkms_vblank_simulate: vblank timer overrun
[  655.515758][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.424399][  T979] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  656.594417][  T979] usb 6-1: Using ep0 maxpacket: 16
[  656.610544][  T979] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  656.610599][  T979] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  656.610649][  T979] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  656.610780][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.678611][  T979] usb 6-1: config 0 descriptor??
[  656.702432][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.728940][  T979] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  656.996410][ T8639] hsr_slave_0: entered promiscuous mode
[  656.997761][ T8639] hsr_slave_1: entered promiscuous mode
[  658.437364][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.497'.
[  658.457458][ T8449] hsr_slave_0: left promiscuous mode
[  658.495824][ T8449] hsr_slave_1: left promiscuous mode
[  658.496688][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.496717][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.555652][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.555684][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.701450][ T8449] veth1_macvtap: left promiscuous mode
[  658.701584][ T8449] veth0_macvtap: left promiscuous mode
[  658.702969][ T8449] veth1_vlan: left promiscuous mode
[  658.703195][ T8449] veth0_vlan: left promiscuous mode
[  658.769047][   T49] usb 6-1: USB disconnect, device number 3
[  658.785530][ T8963] delete_channel: no stack
[  659.399775][    C0] vkms_vblank_simulate: vblank timer overrun
[  659.595214][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.8.500'.
[  659.626202][    C0] vkms_vblank_simulate: vblank timer overrun
[  660.376989][    C0] vkms_vblank_simulate: vblank timer overrun
[  664.735053][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  664.959148][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  665.421739][ T8362] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  665.622786][ T8362] usb 9-1: Using ep0 maxpacket: 32
[  665.627201][ T8362] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  665.635870][ T8362] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  665.635897][ T8362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.635915][ T8362] usb 9-1: Product: syz
[  665.635927][ T8362] usb 9-1: Manufacturer: syz
[  665.635940][ T8362] usb 9-1: SerialNumber: syz
[  665.646374][ T8362] usb 9-1: config 0 descriptor??
[  665.665869][ T8362] cdc_ether 9-1:0.0: skipping garbage
[  665.665894][ T8362] usb 9-1: bad CDC descriptors
[  665.667320][ T8362] usb 9-1: unsupported MDLM descriptors
[  665.917961][ T8362] usb 9-1: USB disconnect, device number 3
[  666.704450][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.8.510'.
[  667.494233][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  668.261668][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  668.287541][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  668.290251][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  668.292541][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  668.315695][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  669.124277][ T8362] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  669.306477][ T8362] usb 9-1: config 0 has an invalid interface number: 235 but max is 0
[  669.306505][ T8362] usb 9-1: config 0 has no interface number 0
[  669.306575][ T8362] usb 9-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  669.309699][ T8362] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6
[  669.309732][ T8362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.309750][ T8362] usb 9-1: Product: syz
[  669.309762][ T8362] usb 9-1: Manufacturer: syz
[  669.309775][ T8362] usb 9-1: SerialNumber: syz
[  669.372269][ T8362] usb 9-1: config 0 descriptor??
[  669.373307][ T9048] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  669.582624][ T8362] usb 9-1: USB disconnect, device number 4
[  670.458278][ T5846] Bluetooth: hci3: command tx timeout
[  671.657861][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.518'.
[  672.284257][ T8362] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  672.456620][ T8362] usb 9-1: Using ep0 maxpacket: 8
[  672.459266][ T8362] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  672.459293][ T8362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.466399][ T8362] usb 9-1: config 0 descriptor??
[  672.534202][ T5846] Bluetooth: hci3: command tx timeout
[  672.918181][ T8362] magicmouse 0003:05AC:0269.0002: reserved main item tag 0xd
[  672.918221][ T8362] magicmouse 0003:05AC:0269.0002: item fetching failed at offset 4/5
[  672.934420][ T8362] magicmouse 0003:05AC:0269.0002: magicmouse hid parse failed
[  672.934530][ T8362] magicmouse 0003:05AC:0269.0002: probe with driver magicmouse failed with error -22
[  673.212217][ T8362] usb 9-1: USB disconnect, device number 5
[  673.939503][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  673.955605][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  673.960402][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  674.000440][ T9043] chnl_net:caif_netlink_parms(): no params data found
[  674.011277][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  674.029702][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  674.414780][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.8.525'.
[  674.623323][    C1] vkms_vblank_simulate: vblank timer overrun
[  674.624298][ T5842] Bluetooth: hci3: command tx timeout
[  675.060062][    C1] vkms_vblank_simulate: vblank timer overrun
[  675.980644][ T8449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.116096][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  676.123407][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  676.134272][ T5846] Bluetooth: hci2: command tx timeout
[  676.152960][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  676.172369][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  676.181793][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  676.547710][ T8362] kernel write not supported for file /136/net/psched (pid: 8362 comm: kworker/1:6)
[  676.694289][ T5846] Bluetooth: hci3: command tx timeout
[  677.319085][    C1] vkms_vblank_simulate: vblank timer overrun
[  677.938814][ T8449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.214287][ T5846] Bluetooth: hci2: command tx timeout
[  678.224584][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  678.294231][ T5846] Bluetooth: hci4: command tx timeout
[  678.374350][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  678.376765][ T5926] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  678.376791][ T5926] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  678.376809][ T5926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  678.376859][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  678.376880][ T5926] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  678.376901][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  678.376942][ T5926] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  678.376962][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.393682][ T5926] usb 6-1: config 0 descriptor??
[  678.533450][ T8449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.620090][ T5926] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  678.766252][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.770190][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.770449][ T9043] bridge_slave_0: entered allmulticast mode
[  678.773390][ T9043] bridge_slave_0: entered promiscuous mode
[  678.879824][   T10] usb 6-1: USB disconnect, device number 4
[  678.923653][   T10] usblp0: removed
[  679.129350][ T8449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.187786][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.187945][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.188193][ T9043] bridge_slave_1: entered allmulticast mode
[  679.206932][ T9043] bridge_slave_1: entered promiscuous mode
[  679.930107][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.092892][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.255337][ T9198] netlink: 'syz.8.541': attribute type 7 has an invalid length.
[  680.255361][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.541'.
[  680.296317][ T5846] Bluetooth: hci2: command tx timeout
[  680.321195][ T9201] netlink: 'syz.5.542': attribute type 7 has an invalid length.
[  680.321215][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'.
[  680.384251][ T5846] Bluetooth: hci4: command tx timeout
[  680.516558][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1
[  680.517154][ T9196] bridge1: port 1(bond1) entered blocking state
[  680.517344][ T9196] bridge1: port 1(bond1) entered disabled state
[  680.517471][ T9196] bond1: entered allmulticast mode
[  680.526012][ T9196] bridge1: port 1(bond1) entered blocking state
[  680.526171][ T9196] bridge1: port 1(bond1) entered forwarding state
[  680.747431][ T1182] bridge1: port 1(bond1) entered disabled state
[  680.768539][ T9043] team0: Port device team_slave_0 added
[  680.812583][ T9043] team0: Port device team_slave_1 added
[  681.216574][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.216591][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.216615][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.272480][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.272497][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.272521][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.597072][ T8449] bridge_slave_1: left allmulticast mode
[  681.597104][ T8449] bridge_slave_1: left promiscuous mode
[  681.597368][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.639418][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.551'.
[  681.709133][ T8449] bridge_slave_0: left allmulticast mode
[  681.709154][ T8449] bridge_slave_0: left promiscuous mode
[  681.709365][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.822550][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.551'.
[  682.014202][    C1] vkms_vblank_simulate: vblank timer overrun
[  682.380222][ T5846] Bluetooth: hci2: command tx timeout
[  682.479269][ T5846] Bluetooth: hci4: command tx timeout
[  682.854248][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  683.557034][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.615085][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  683.649068][ T8449] bond0 (unregistering): Released all slaves
[  683.910449][ T9043] hsr_slave_0: entered promiscuous mode
[  683.911812][ T9043] hsr_slave_1: entered promiscuous mode
[  683.912695][ T9043] debugfs: 'hsr0' already exists in 'hsr'
[  683.912719][ T9043] Cannot create hsr debugfs directory
[  684.543241][ T5842] Bluetooth: hci4: command tx timeout
[  685.253306][ T9249] FAULT_INJECTION: forcing a failure.
[  685.253306][ T9249] name failslab, interval 1, probability 0, space 0, times 0
[  685.253493][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.8.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  685.253515][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  685.253531][ T9249] Call Trace:
[  685.253539][ T9249]  <TASK>
[  685.253547][ T9249]  dump_stack_lvl+0x189/0x250
[  685.253574][ T9249]  ? irqentry_exit+0x74/0x90
[  685.253598][ T9249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.253640][ T9249]  should_fail_ex+0x46c/0x600
[  685.253668][ T9249]  should_failslab+0xa8/0x100
[  685.253693][ T9249]  __kmalloc_noprof+0xcb/0x430
[  685.253713][ T9249]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  685.253741][ T9249]  tomoyo_realpath_from_path+0xe3/0x5d0
[  685.253775][ T9249]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  685.253795][ T9249]  tomoyo_path_number_perm+0x1e8/0x5a0
[  685.253818][ T9249]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  685.253836][ T9249]  ? lockdep_hardirqs_on+0x9c/0x150
[  685.253869][ T9249]  ? trace_irq_disable+0x37/0x110
[  685.253914][ T9249]  ? tomoyo_file_ioctl+0x11/0x30
[  685.253942][ T9249]  security_file_ioctl+0xcb/0x2d0
[  685.253965][ T9249]  __se_sys_ioctl+0x47/0x170
[  685.253987][ T9249]  do_syscall_64+0xfa/0x3b0
[  685.254013][ T9249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.254027][ T9249]  ? asm_sysvec_call_function_single+0x1a/0x20
[  685.254042][ T9249]  ? clear_bhb_loop+0x60/0xb0
[  685.254061][ T9249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.254082][ T9249] RIP: 0033:0x7fb211e5ebe9
[  685.254097][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  685.254112][ T9249] RSP: 002b:00007fb2100a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  685.254130][ T9249] RAX: ffffffffffffffda RBX: 00007fb212086090 RCX: 00007fb211e5ebe9
[  685.254143][ T9249] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003
[  685.254154][ T9249] RBP: 00007fb2100a5090 R08: 0000000000000000 R09: 0000000000000000
[  685.254165][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.254175][ T9249] R13: 00007fb212086128 R14: 00007fb212086090 R15: 00007fff18974088
[  685.254205][ T9249]  </TASK>
[  685.254624][ T9249] ERROR: Out of memory at tomoyo_realpath_from_path.
[  685.821459][ T9252] FAULT_INJECTION: forcing a failure.
[  685.821459][ T9252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.821491][ T9252] CPU: 1 UID: 0 PID: 9252 Comm: syz.8.557 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  685.821511][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  685.821522][ T9252] Call Trace:
[  685.821529][ T9252]  <TASK>
[  685.821537][ T9252]  dump_stack_lvl+0x189/0x250
[  685.821565][ T9252]  ? __pfx____ratelimit+0x10/0x10
[  685.821587][ T9252]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.821609][ T9252]  ? __pfx__printk+0x10/0x10
[  685.821628][ T9252]  ? __might_fault+0xb0/0x130
[  685.821662][ T9252]  should_fail_ex+0x46c/0x600
[  685.821689][ T9252]  _copy_from_user+0x2d/0xb0
[  685.821708][ T9252]  sk_getsockopt+0x1ac/0x2460
[  685.821739][ T9252]  ? __pfx_sk_getsockopt+0x10/0x10
[  685.821760][ T9252]  ? do_syscall_64+0x40/0x3b0
[  685.821792][ T9252]  ? __lock_acquire+0xab9/0xd20
[  685.821825][ T9252]  ? __might_fault+0xb0/0x130
[  685.821867][ T9252]  do_sock_getsockopt+0x237/0x450
[  685.821888][ T9252]  ? do_syscall_64+0x40/0x3b0
[  685.821911][ T9252]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  685.821932][ T9252]  ? do_syscall_64+0x40/0x3b0
[  685.821951][ T9252]  ? __fget_files+0x3a6/0x420
[  685.821974][ T9252]  ? __fget_files+0x2a/0x420
[  685.822003][ T9252]  __x64_sys_getsockopt+0x1ab/0x250
[  685.822024][ T9252]  ? do_syscall_64+0x40/0x3b0
[  685.822045][ T9252]  ? do_syscall_64+0x40/0x3b0
[  685.822069][ T9252]  do_syscall_64+0xfa/0x3b0
[  685.822088][ T9252]  ? lockdep_hardirqs_on+0x9c/0x150
[  685.822109][ T9252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.822127][ T9252]  ? clear_bhb_loop+0x60/0xb0
[  685.822147][ T9252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.822163][ T9252] RIP: 0033:0x7fb211e5ebe9
[  685.822198][ T9252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  685.822212][ T9252] RSP: 002b:00007fb2100c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  685.822231][ T9252] RAX: ffffffffffffffda RBX: 00007fb212085fa0 RCX: 00007fb211e5ebe9
[  685.822245][ T9252] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003
[  685.822255][ T9252] RBP: 00007fb2100c6090 R08: 0000200000000280 R09: 0000000000000000
[  685.822268][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.822278][ T9252] R13: 00007fb212086038 R14: 00007fb212085fa0 R15: 00007fff18974088
[  685.822309][ T9252]  </TASK>
[  685.902440][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  685.902514][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  686.109745][   T37] audit: type=1326 audit(1756304403.086:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.109868][   T37] audit: type=1326 audit(1756304403.086:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.110693][   T37] audit: type=1326 audit(1756304403.086:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.110737][   T37] audit: type=1326 audit(1756304403.086:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.113820][   T37] audit: type=1326 audit(1756304403.086:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.120511][   T37] audit: type=1326 audit(1756304403.096:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.120561][   T37] audit: type=1326 audit(1756304403.096:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.120601][   T37] audit: type=1326 audit(1756304403.096:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.120640][   T37] audit: type=1326 audit(1756304403.096:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.120679][   T37] audit: type=1326 audit(1756304403.096:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9255 comm="syz.5.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  686.320450][    C1] vkms_vblank_simulate: vblank timer overrun
[  687.064291][ T9275] macvlan0: entered promiscuous mode
[  687.078144][ T9275] netlink: 'syz.8.566': attribute type 2 has an invalid length.
[  687.236596][ T9113] chnl_net:caif_netlink_parms(): no params data found
[  687.272650][ T5926] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  687.372615][ T9155] chnl_net:caif_netlink_parms(): no params data found
[  687.434238][ T5926] usb 6-1: Using ep0 maxpacket: 8
[  687.443336][ T5926] usb 6-1: config 2 has an invalid interface number: 169 but max is 0
[  687.443363][ T5926] usb 6-1: config 2 has no interface number 0
[  687.463694][ T5926] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  687.463720][ T5926] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  687.463738][ T5926] usb 6-1: Manufacturer: syz
[  687.564427][ T8449] hsr_slave_0: left promiscuous mode
[  687.594290][ T8449] hsr_slave_1: left promiscuous mode
[  687.595125][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  687.595152][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  687.666233][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.666257][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.717586][ T5926] gspca_main: spca501-2.14.0 probing 0000:0000
[  687.718118][ T5926] gspca_spca501: reg write: error -71
[  687.718130][ T5926] spca501 6-1:2.169: Reg write failed for 0x02,0x0f,0x05
[  687.718213][ T5926] spca501 6-1:2.169: probe with driver spca501 failed with error -22
[  687.753179][ T5926] usb 6-1: USB disconnect, device number 5
[  687.831068][ T8449] veth1_macvtap: left promiscuous mode
[  687.831191][ T8449] veth0_macvtap: left promiscuous mode
[  687.831487][ T8449] veth1_vlan: left promiscuous mode
[  687.833573][ T8449] veth0_vlan: left promiscuous mode
[  688.439276][ T9290] netlink: 84 bytes leftover after parsing attributes in process `syz.5.572'.
[  688.629716][ T9290] fuse: root generation should be zero
[  688.769990][    C1] vkms_vblank_simulate: vblank timer overrun
[  688.866531][ T5909] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  689.024290][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  689.031607][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.031640][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.031660][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  689.031702][ T5909] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  689.031723][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.095483][ T5909] usb 6-1: config 0 descriptor??
[  690.643937][ T5909] usbhid 6-1:0.0: can't add hid device: -71
[  690.645939][ T5909] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  690.650916][ T5909] usb 6-1: USB disconnect, device number 6
[  690.703878][    C1] vkms_vblank_simulate: vblank timer overrun
[  690.965276][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  691.227897][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  691.666105][ T9298] netlink: 'syz.5.574': attribute type 7 has an invalid length.
[  691.666128][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'.
[  693.985224][ T9299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  694.358129][ T9310] genirq: Flags mismatch irq 5. 00202000 (pcl812) vs. 00202000 (pcl812)
[  696.121750][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.121976][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.122200][ T9113] bridge_slave_0: entered allmulticast mode
[  696.126915][ T9113] bridge_slave_0: entered promiscuous mode
[  697.151204][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.151353][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.151603][ T9113] bridge_slave_1: entered allmulticast mode
[  697.164788][ T9113] bridge_slave_1: entered promiscuous mode
[  697.290537][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.290696][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.291312][ T9155] bridge_slave_0: entered allmulticast mode
[  697.348580][ T9155] bridge_slave_0: entered promiscuous mode
[  698.544351][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.547304][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.547566][ T9155] bridge_slave_1: entered allmulticast mode
[  698.577463][ T9155] bridge_slave_1: entered promiscuous mode
[  698.894607][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  699.025028][ T5910] usb 9-1: device descriptor read/64, error -71
[  699.187984][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.206099][   T37] kauditd_printk_skb: 1 callbacks suppressed
[  699.206115][   T37] audit: type=1326 audit(1756304416.186:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  699.206497][   T37] audit: type=1326 audit(1756304416.186:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  699.206884][   T37] audit: type=1326 audit(1756304416.186:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  699.207969][   T37] audit: type=1326 audit(1756304416.186:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9355 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5601a8ebe9 code=0x7ffc0000
[  699.264284][ T5910] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  699.394258][ T5910] usb 9-1: device descriptor read/64, error -71
[  699.413135][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.504763][ T5910] usb usb9-port1: attempt power cycle
[  699.631090][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.723911][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.844291][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  699.865338][ T5910] usb 9-1: device descriptor read/8, error -71
[  700.124622][ T5910] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  700.152768][ T5910] usb 9-1: device descriptor read/8, error -71
[  700.199950][ T9113] team0: Port device team_slave_0 added
[  700.257408][ T5910] usb usb9-port1: unable to enumerate USB device
[  700.288555][ T9113] team0: Port device team_slave_1 added
[  700.296748][ T9155] team0: Port device team_slave_0 added
[  700.560958][ T9155] team0: Port device team_slave_1 added
[  700.865012][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.865030][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  700.865055][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  701.327136][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.327148][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  701.327163][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.337253][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  701.337266][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  701.337290][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  701.548648][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.548665][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  701.548690][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  702.017450][ T9113] hsr_slave_0: entered promiscuous mode
[  702.019123][ T9113] hsr_slave_1: entered promiscuous mode
[  702.022839][ T9113] debugfs: 'hsr0' already exists in 'hsr'
[  702.022865][ T9113] Cannot create hsr debugfs directory
[  702.172407][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.593'.
[  702.172451][ T9366] FAULT_INJECTION: forcing a failure.
[  702.172451][ T9366] name failslab, interval 1, probability 0, space 0, times 0
[  702.172476][ T9366] CPU: 0 UID: 0 PID: 9366 Comm: syz.8.593 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  702.172496][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  702.172506][ T9366] Call Trace:
[  702.172513][ T9366]  <TASK>
[  702.172521][ T9366]  dump_stack_lvl+0x189/0x250
[  702.172548][ T9366]  ? __pfx____ratelimit+0x10/0x10
[  702.172569][ T9366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  702.172592][ T9366]  ? __pfx__printk+0x10/0x10
[  702.172614][ T9366]  ? __pfx___might_resched+0x10/0x10
[  702.172633][ T9366]  ? fs_reclaim_acquire+0x7d/0x100
[  702.172654][ T9366]  should_fail_ex+0x46c/0x600
[  702.172680][ T9366]  ? __alloc_skb+0x112/0x2d0
[  702.172699][ T9366]  should_failslab+0xa8/0x100
[  702.172722][ T9366]  ? __alloc_skb+0x112/0x2d0
[  702.172739][ T9366]  kmem_cache_alloc_node_noprof+0x77/0x330
[  702.172766][ T9366]  __alloc_skb+0x112/0x2d0
[  702.172788][ T9366]  netlink_ack+0x146/0xa50
[  702.172804][ T9366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  702.172826][ T9366]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  702.172848][ T9366]  ? __pfx_nl80211_post_doit+0x10/0x10
[  702.172871][ T9366]  ? __lock_acquire+0xab9/0xd20
[  702.172900][ T9366]  netlink_rcv_skb+0x28c/0x470
[  702.172917][ T9366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  702.172937][ T9366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  702.172963][ T9366]  ? netlink_deliver_tap+0x2e/0x1b0
[  702.172978][ T9366]  ? netlink_deliver_tap+0x2e/0x1b0
[  702.173001][ T9366]  genl_rcv+0x28/0x40
[  702.173019][ T9366]  netlink_unicast+0x846/0xa10
[  702.173047][ T9366]  ? __pfx_netlink_unicast+0x10/0x10
[  702.173067][ T9366]  ? netlink_sendmsg+0x642/0xb30
[  702.173084][ T9366]  ? skb_put+0x11b/0x210
[  702.173110][ T9366]  netlink_sendmsg+0x805/0xb30
[  702.173137][ T9366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  702.173165][ T9366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  702.173182][ T9366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  702.173201][ T9366]  __sock_sendmsg+0x21c/0x270
[  702.173304][ T9366]  ____sys_sendmsg+0x508/0x820
[  702.173334][ T9366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  702.173364][ T9366]  ? import_iovec+0x74/0xa0
[  702.173385][ T9366]  ___sys_sendmsg+0x21f/0x2a0
[  702.173410][ T9366]  ? __pfx____sys_sendmsg+0x10/0x10
[  702.173467][ T9366]  ? __fget_files+0x2a/0x420
[  702.173488][ T9366]  ? __fget_files+0x3a6/0x420
[  702.173521][ T9366]  __x64_sys_sendmsg+0x1a1/0x260
[  702.173547][ T9366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  702.173580][ T9366]  ? __pfx_ksys_write+0x10/0x10
[  702.173596][ T9366]  ? rcu_is_watching+0x15/0xb0
[  702.173623][ T9366]  ? do_syscall_64+0xbe/0x3b0
[  702.173643][ T9366]  do_syscall_64+0xfa/0x3b0
[  702.173661][ T9366]  ? lockdep_hardirqs_on+0x9c/0x150
[  702.173680][ T9366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.173697][ T9366]  ? clear_bhb_loop+0x60/0xb0
[  702.173716][ T9366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.173732][ T9366] RIP: 0033:0x7fb211e5ebe9
[  702.173748][ T9366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  702.173762][ T9366] RSP: 002b:00007fb2100c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  702.173780][ T9366] RAX: ffffffffffffffda RBX: 00007fb212085fa0 RCX: 00007fb211e5ebe9
[  702.173793][ T9366] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  702.173804][ T9366] RBP: 00007fb2100c6090 R08: 0000000000000000 R09: 0000000000000000
[  702.173813][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.173823][ T9366] R13: 00007fb212086038 R14: 00007fb212085fa0 R15: 00007fff18974088
[  702.173851][ T9366]  </TASK>
[  702.624310][ T5909] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  702.693508][ T9155] hsr_slave_0: entered promiscuous mode
[  702.706656][ T9155] hsr_slave_1: entered promiscuous mode
[  702.707757][ T9155] debugfs: 'hsr0' already exists in 'hsr'
[  702.707780][ T9155] Cannot create hsr debugfs directory
[  702.784195][ T5909] usb 9-1: Using ep0 maxpacket: 32
[  702.786332][ T5909] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  702.786347][ T5909] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  702.786365][ T5909] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  702.786394][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  702.786405][ T5909] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  702.786417][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  702.786439][ T5909] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  702.786450][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.793026][ T5909] usb 9-1: config 0 descriptor??
[  703.032344][ T5909] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  703.225669][ T8362] usb 9-1: USB disconnect, device number 10
[  703.251568][ T8362] usblp0: removed
[  703.396050][ T9043] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  703.454170][ T5909] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  703.518971][ T9043] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  703.573850][ T9043] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  703.610243][ T5909] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  703.610299][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  703.610323][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  703.610346][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  703.610370][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  703.610409][ T5909] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  703.610429][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.625548][ T5909] usb 6-1: config 0 descriptor??
[  703.629374][ T9379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  703.829317][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.8.599'.
[  703.864627][ T9043] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  704.174782][ T7944] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  704.209291][ T5909] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[  704.263055][ T5909] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  704.338590][ T7944] usb 9-1: unable to get BOS descriptor or descriptor too short
[  704.340157][ T7944] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.362057][ T7944] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  704.362084][ T7944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.362102][ T7944] usb 9-1: Product: syz
[  704.362114][ T7944] usb 9-1: Manufacturer: syz
[  704.362126][ T7944] usb 9-1: SerialNumber: syz
[  704.749595][ T7944] usb 9-1: USB disconnect, device number 11
[  705.173290][ T8449] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.443009][   T37] audit: type=1326 audit(1756304422.416:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9393 comm="syz.8.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  705.443400][   T37] audit: type=1326 audit(1756304422.416:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9393 comm="syz.8.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  705.443640][   T37] audit: type=1326 audit(1756304422.416:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9393 comm="syz.8.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  705.443872][   T37] audit: type=1326 audit(1756304422.416:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9393 comm="syz.8.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  705.445311][   T37] audit: type=1326 audit(1756304422.426:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9393 comm="syz.8.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  705.674751][ T5909] usb 6-1: reset high-speed USB device number 7 using dummy_hcd
[  705.941962][ T8449] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.738602][ T9404] FAULT_INJECTION: forcing a failure.
[  706.738602][ T9404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.738661][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.5.603 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  706.738681][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  706.738692][ T9404] Call Trace:
[  706.738700][ T9404]  <TASK>
[  706.738709][ T9404]  dump_stack_lvl+0x189/0x250
[  706.738736][ T9404]  ? __pfx____ratelimit+0x10/0x10
[  706.738758][ T9404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.738781][ T9404]  ? __pfx__printk+0x10/0x10
[  706.738816][ T9404]  should_fail_ex+0x46c/0x600
[  706.738842][ T9404]  _copy_to_user+0x31/0xb0
[  706.738865][ T9404]  simple_read_from_buffer+0xe1/0x170
[  706.738893][ T9404]  proc_fail_nth_read+0x1b6/0x220
[  706.738915][ T9404]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.738937][ T9404]  ? rw_verify_area+0x2ac/0x4e0
[  706.738957][ T9404]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  706.738977][ T9404]  vfs_read+0x203/0xa30
[  706.739006][ T9404]  ? __pfx_vfs_read+0x10/0x10
[  706.739023][ T9404]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  706.739058][ T9404]  ? mutex_lock_nested+0x154/0x1d0
[  706.739074][ T9404]  ? fdget_pos+0x253/0x320
[  706.739112][ T9404]  ksys_read+0x14b/0x260
[  706.739135][ T9404]  ? __pfx_ksys_read+0x10/0x10
[  706.739168][ T9404]  do_syscall_64+0xfa/0x3b0
[  706.739191][ T9404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.739208][ T9404]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  706.739224][ T9404]  ? clear_bhb_loop+0x60/0xb0
[  706.739246][ T9404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.739262][ T9404] RIP: 0033:0x7f5601a8d5fc
[  706.739278][ T9404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  706.739292][ T9404] RSP: 002b:00007f55ffcb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  706.739311][ T9404] RAX: ffffffffffffffda RBX: 00007f5601cb6180 RCX: 00007f5601a8d5fc
[  706.739325][ T9404] RDX: 000000000000000f RSI: 00007f55ffcb40a0 RDI: 000000000000000a
[  706.739336][ T9404] RBP: 00007f55ffcb4090 R08: 0000000000000000 R09: 0000000000000000
[  706.739346][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.739356][ T9404] R13: 00007f5601cb6218 R14: 00007f5601cb6180 R15: 00007ffd52477948
[  706.739388][ T9404]  </TASK>
[  707.220260][ T5910] usb 6-1: USB disconnect, device number 7
[  707.712996][ T8449] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.270021][ T5910] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  709.706058][ T5910] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  709.706094][ T5910] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  709.706133][ T5910] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  709.706155][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.770428][ T9423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  709.797239][ T5910] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  710.091244][ T5910] usb 6-1: USB disconnect, device number 8
[  710.109927][ T8449] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.273529][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.333621][ T9043] 8021q: adding VLAN 0 to HW filter on device team0
[  711.620410][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.620658][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.690010][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.690169][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.026268][ T8449] bridge_slave_1: left allmulticast mode
[  712.026303][ T8449] bridge_slave_1: left promiscuous mode
[  712.026584][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.106639][ T8449] bridge_slave_0: left allmulticast mode
[  712.106672][ T8449] bridge_slave_0: left promiscuous mode
[  712.106945][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.187933][ T9449] FAULT_INJECTION: forcing a failure.
[  712.187933][ T9449] name failslab, interval 1, probability 0, space 0, times 0
[  712.187972][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.5.616 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  712.188021][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  712.188044][ T9449] Call Trace:
[  712.188051][ T9449]  <TASK>
[  712.188059][ T9449]  dump_stack_lvl+0x189/0x250
[  712.188088][ T9449]  ? __pfx____ratelimit+0x10/0x10
[  712.188110][ T9449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  712.188134][ T9449]  ? __pfx__printk+0x10/0x10
[  712.188158][ T9449]  ? __pfx___might_resched+0x10/0x10
[  712.188182][ T9449]  should_fail_ex+0x46c/0x600
[  712.188211][ T9449]  should_failslab+0xa8/0x100
[  712.188235][ T9449]  __kmalloc_noprof+0xcb/0x430
[  712.188257][ T9449]  ? tomoyo_encode+0x28b/0x550
[  712.188282][ T9449]  tomoyo_encode+0x28b/0x550
[  712.188310][ T9449]  tomoyo_realpath_from_path+0x58d/0x5d0
[  712.188334][ T9449]  ? tomoyo_domain+0xda/0x130
[  712.188362][ T9449]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  712.188382][ T9449]  tomoyo_path_number_perm+0x1e8/0x5a0
[  712.188405][ T9449]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  712.188429][ T9449]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  712.188450][ T9449]  ? lockdep_hardirqs_on+0x9c/0x150
[  712.188479][ T9449]  ? __lock_acquire+0xab9/0xd20
[  712.188529][ T9449]  ? __fget_files+0x2a/0x420
[  712.188555][ T9449]  ? __fget_files+0x2a/0x420
[  712.188575][ T9449]  ? __fget_files+0x3a6/0x420
[  712.188595][ T9449]  ? __fget_files+0x2a/0x420
[  712.188621][ T9449]  security_file_ioctl+0xcb/0x2d0
[  712.188644][ T9449]  __se_sys_ioctl+0x47/0x170
[  712.188666][ T9449]  do_syscall_64+0xfa/0x3b0
[  712.188686][ T9449]  ? lockdep_hardirqs_on+0x9c/0x150
[  712.188705][ T9449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.188729][ T9449]  ? clear_bhb_loop+0x60/0xb0
[  712.188750][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.188767][ T9449] RIP: 0033:0x7f5601a8ebe9
[  712.188783][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  712.188798][ T9449] RSP: 002b:00007f55ffcf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  712.188818][ T9449] RAX: ffffffffffffffda RBX: 00007f5601cb5fa0 RCX: 00007f5601a8ebe9
[  712.188831][ T9449] RDX: 0000000000000000 RSI: 00000000000089e8 RDI: 0000000000000004
[  712.188842][ T9449] RBP: 00007f55ffcf6090 R08: 0000000000000000 R09: 0000000000000000
[  712.188853][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.188864][ T9449] R13: 00007f5601cb6038 R14: 00007f5601cb5fa0 R15: 00007ffd52477948
[  712.188895][ T9449]  </TASK>
[  712.188913][ T9449] ERROR: Out of memory at tomoyo_realpath_from_path.
[  712.293188][ T8449] bridge_slave_1: left allmulticast mode
[  712.293221][ T8449] bridge_slave_1: left promiscuous mode
[  712.293474][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.541700][ T8449] bridge_slave_0: left allmulticast mode
[  712.541735][ T8449] bridge_slave_0: left promiscuous mode
[  712.542008][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.266464][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.348617][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.408328][ T8449] bond0 (unregistering): Released all slaves
[  714.244281][ T9472] FAULT_INJECTION: forcing a failure.
[  714.244281][ T9472] name failslab, interval 1, probability 0, space 0, times 0
[  714.244313][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.8.625 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  714.244331][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  714.244339][ T9472] Call Trace:
[  714.244346][ T9472]  <TASK>
[  714.244353][ T9472]  dump_stack_lvl+0x189/0x250
[  714.244380][ T9472]  ? __pfx____ratelimit+0x10/0x10
[  714.244400][ T9472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  714.244421][ T9472]  ? __pfx__printk+0x10/0x10
[  714.244444][ T9472]  ? __pfx___might_resched+0x10/0x10
[  714.244463][ T9472]  ? fs_reclaim_acquire+0x7d/0x100
[  714.244484][ T9472]  should_fail_ex+0x46c/0x600
[  714.244512][ T9472]  should_failslab+0xa8/0x100
[  714.244536][ T9472]  __kmalloc_noprof+0xcb/0x430
[  714.244557][ T9472]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  714.244585][ T9472]  tomoyo_realpath_from_path+0xe3/0x5d0
[  714.244616][ T9472]  ? tomoyo_domain+0xda/0x130
[  714.244644][ T9472]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  714.244664][ T9472]  tomoyo_path_number_perm+0x1e8/0x5a0
[  714.244686][ T9472]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  714.244711][ T9472]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  714.244732][ T9472]  ? lockdep_hardirqs_on+0x9c/0x150
[  714.244761][ T9472]  ? __lock_acquire+0xab9/0xd20
[  714.244805][ T9472]  ? __fget_files+0x2a/0x420
[  714.244831][ T9472]  ? __fget_files+0x2a/0x420
[  714.244850][ T9472]  ? __fget_files+0x3a6/0x420
[  714.244871][ T9472]  ? __fget_files+0x2a/0x420
[  714.244897][ T9472]  security_file_ioctl+0xcb/0x2d0
[  714.244920][ T9472]  __se_sys_ioctl+0x47/0x170
[  714.244943][ T9472]  do_syscall_64+0xfa/0x3b0
[  714.244963][ T9472]  ? lockdep_hardirqs_on+0x9c/0x150
[  714.244982][ T9472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.245000][ T9472]  ? clear_bhb_loop+0x60/0xb0
[  714.245021][ T9472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.245037][ T9472] RIP: 0033:0x7fb211e5ebe9
[  714.245053][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  714.245068][ T9472] RSP: 002b:00007fb2100c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  714.245088][ T9472] RAX: ffffffffffffffda RBX: 00007fb212085fa0 RCX: 00007fb211e5ebe9
[  714.245101][ T9472] RDX: 0000200000000240 RSI: 00000000c018643a RDI: 0000000000000003
[  714.245113][ T9472] RBP: 00007fb2100c6090 R08: 0000000000000000 R09: 0000000000000000
[  714.245124][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.245135][ T9472] R13: 00007fb212086038 R14: 00007fb212085fa0 R15: 00007fff18974088
[  714.245166][ T9472]  </TASK>
[  714.245173][ T9472] ERROR: Out of memory at tomoyo_realpath_from_path.
[  715.904788][    C0] vkms_vblank_simulate: vblank timer overrun
[  716.723729][    C0] vkms_vblank_simulate: vblank timer overrun
[  716.784905][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.866401][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.918813][ T8449] bond0 (unregistering): Released all slaves
[  716.932652][ T9488] netlink: 72 bytes leftover after parsing attributes in process `syz.8.631'.
[  717.326898][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.633'.
[  717.384321][ T7944] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  717.560317][ T7944] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  717.560345][ T7944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.588823][ T7944] usb 9-1: config 0 descriptor??
[  717.672196][    C0] vkms_vblank_simulate: vblank timer overrun
[  717.739585][    C0] vkms_vblank_simulate: vblank timer overrun
[  718.020093][ T7944] ath6kl: Unsupported hardware version: 0x0
[  718.044809][ T7944] ath6kl: Failed to init ath6kl core: -22
[  718.045594][ T7944] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -22
[  718.208548][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  718.288340][ T9504] ucma_write: process 359 (syz.8.632) changed security contexts after opening file descriptor, this is not allowed.
[  718.385299][ T7944] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  718.556293][ T7944] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  718.556321][ T7944] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  718.556339][ T7944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  718.556392][ T7944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  718.556415][ T7944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  718.559889][ T7944] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  718.559916][ T7944] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  718.560020][ T7944] usb 6-1: Product: syz
[  718.560033][ T7944] usb 6-1: Manufacturer: syz
[  718.646618][ T7944] cdc_wdm 6-1:1.0: skipping garbage
[  718.646637][ T7944] cdc_wdm 6-1:1.0: skipping garbage
[  718.664848][ T7944] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  718.664879][ T7944] cdc_wdm 6-1:1.0: Unknown control protocol
[  718.911188][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  719.164279][ T8349] usb 6-1: USB disconnect, device number 9
[  719.334365][ T8449] hsr_slave_0: left promiscuous mode
[  719.374293][ T8449] hsr_slave_1: left promiscuous mode
[  719.377475][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.405332][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.566411][ T8449] hsr_slave_0: left promiscuous mode
[  719.584378][ T8449] hsr_slave_1: left promiscuous mode
[  719.585389][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.585417][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.617801][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  719.617834][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.775046][ T8449] veth1_macvtap: left promiscuous mode
[  719.775163][ T8449] veth0_macvtap: left promiscuous mode
[  719.775482][ T8449] veth1_vlan: left promiscuous mode
[  719.775695][ T8449] veth0_vlan: left promiscuous mode
[  720.112927][ T7944] usb 9-1: USB disconnect, device number 12
[  720.577612][ T8349] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  720.777792][ T8349] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  720.777821][ T8349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.777839][ T8349] usb 6-1: Product: syz
[  720.777851][ T8349] usb 6-1: Manufacturer: syz
[  720.777863][ T8349] usb 6-1: SerialNumber: syz
[  720.782865][ T8349] usb 6-1: config 0 descriptor??
[  720.835518][ T8349] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  721.030606][ T8349] sonixb 6-1:0.0: Error reading register 00: -71
[  721.044826][ T8349] usb 6-1: USB disconnect, device number 10
[  721.113896][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  721.275007][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  723.132586][ T9529] sctp: [Deprecated]: syz.5.644 (pid 9529) Use of struct sctp_assoc_value in delayed_ack socket option.
[  723.132586][ T9529] Use struct sctp_sack_info instead
[  723.903221][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.903852][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.436665][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  725.668746][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  728.543185][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  728.566116][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  728.567377][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  728.568992][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  728.570208][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  728.653107][ T9113] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  728.741701][ T9113] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  728.842530][ T9113] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  728.956649][ T9566] [U] Ϧ�:�K�ț.��G����8X�4Q���TZ�.��||
[  729.032451][ T9113] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  729.042172][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.8.656'.
[  730.166684][ T9155] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  730.382481][ T9155] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  730.628651][ T9155] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  730.641945][ T5842] Bluetooth: hci0: command tx timeout
[  730.698260][ T9587] =======================================================
[  730.698260][ T9587] WARNING: The mand mount option has been deprecated and
[  730.698260][ T9587]          and is ignored by this kernel. Remove the mand
[  730.698260][ T9587]          option from the mount to silence this warning.
[  730.698260][ T9587] =======================================================
[  730.702257][ T9587] new mount options do not match the existing superblock, will be ignored
[  730.795933][ T9587] option changes via remount are deprecated (pid=9581 comm=syz.8.659)
[  730.876213][ T8362] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  731.306917][ T8362] usb 6-1: unable to get BOS descriptor or descriptor too short
[  731.307728][ T8362] usb 6-1: not running at top speed; connect to a high speed hub
[  731.309309][ T8362] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  731.309329][ T8362] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  731.309347][ T8362] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  731.309411][ T8362] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64
[  731.315083][ T8362] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  731.315109][ T8362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.315128][ T8362] usb 6-1: Product: syz
[  731.315148][ T8362] usb 6-1: Manufacturer: syz
[  731.315161][ T8362] usb 6-1: SerialNumber: syz
[  731.755291][ T8362] usb 6-1: 0:2 : does not exist
[  731.816675][ T9594] netlink: 48 bytes leftover after parsing attributes in process `syz.8.661'.
[  731.874853][ T8362] usb 6-1: USB disconnect, device number 11
[  731.961686][ T9593] udevd[9593]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  732.065508][ T9155] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  732.715643][ T5842] Bluetooth: hci0: command tx timeout
[  732.952919][ T9559] chnl_net:caif_netlink_parms(): no params data found
[  733.236865][   T37] audit: type=1800 audit(1756304450.196:6286): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.665" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  733.495443][ T9620] loop8: detected capacity change from 0 to 8
[  733.636855][ T9620] Dev loop8: unable to read RDB block 8
[  733.636907][ T9620]  loop8: unable to read partition table
[  733.637128][ T9620] loop8: partition table beyond EOD, truncated
[  733.637184][ T9620] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  733.791914][ T9621] tmpfs: Bad value for 'size'
[  734.054883][   T49] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  734.204249][   T49] usb 6-1: Using ep0 maxpacket: 32
[  734.207442][   T49] usb 6-1: unable to get BOS descriptor or descriptor too short
[  734.209015][   T49] usb 6-1: config 7 has an invalid interface number: 128 but max is 0
[  734.209039][   T49] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  734.209056][   T49] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  734.209073][   T49] usb 6-1: config 7 has no interface number 0
[  734.209122][   T49] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  734.209144][   T49] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  734.209167][   T49] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  734.209189][   T49] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  734.209212][   T49] usb 6-1: config 7 interface 128 has no altsetting 0
[  734.214678][   T49] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  734.214707][   T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.214725][   T49] usb 6-1: Product: syz
[  734.214737][   T49] usb 6-1: Manufacturer: syz
[  734.214751][   T49] usb 6-1: SerialNumber: syz
[  734.277476][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  734.309891][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  734.316649][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  734.324726][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  734.326589][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  734.427238][ T9621] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  734.700173][   T49] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  734.700230][   T49] usb 6-1: MIDIStreaming interface descriptor not found
[  734.774201][ T5846] Bluetooth: hci0: command tx timeout
[  734.810053][   T49] usb 6-1: USB disconnect, device number 12
[  734.962178][ T9586] udevd[9586]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  735.140562][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.140709][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.140959][ T9559] bridge_slave_0: entered allmulticast mode
[  735.143749][ T9559] bridge_slave_0: entered promiscuous mode
[  735.172819][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.172953][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.173207][ T9559] bridge_slave_1: entered allmulticast mode
[  735.223993][ T9559] bridge_slave_1: entered promiscuous mode
[  735.740826][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.746555][ T9637] MTD: Couldn't look up './file1': -15
[  735.822141][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.216744][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  736.221708][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  736.222917][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  736.276430][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  736.277262][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  736.374237][ T5846] Bluetooth: hci3: command tx timeout
[  736.673908][ T9559] team0: Port device team_slave_0 added
[  736.865703][ T5846] Bluetooth: hci0: command tx timeout
[  736.878172][ T9656] netlink: 'syz.5.675': attribute type 1 has an invalid length.
[  736.891911][ T9656] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  738.011991][ T9559] team0: Port device team_slave_1 added
[  738.151615][ T9663] comedi comedi4: comedi_config --init_data is deprecated
[  738.374981][ T5846] Bluetooth: hci2: command tx timeout
[  738.384932][ T5926] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  738.454171][ T5846] Bluetooth: hci3: command tx timeout
[  738.494486][   T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  738.582095][ T5926] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  738.582158][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  738.582180][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  738.582220][ T5926] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  738.582240][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.599742][ T5926] usb 6-1: config 0 descriptor??
[  738.635419][ T5926] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  738.637349][   T10] usb 9-1: device descriptor read/64, error -71
[  738.904300][   T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  738.976564][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.976580][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.976604][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.034256][   T10] usb 9-1: device descriptor read/64, error -71
[  739.040824][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.040840][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.040863][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.144592][   T10] usb usb9-port1: attempt power cycle
[  739.170097][ T9667] netlink: 5 bytes leftover after parsing attributes in process `syz.5.677'.
[  739.170120][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.677'.
[  739.170133][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'.
[  739.496715][   T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  739.517279][   T10] usb 9-1: device descriptor read/8, error -71
[  739.525831][ T9559] hsr_slave_0: entered promiscuous mode
[  739.527116][ T9559] hsr_slave_1: entered promiscuous mode
[  739.577744][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.677'.
[  739.754196][   T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  739.780915][   T10] usb 9-1: device descriptor read/8, error -71
[  739.884808][   T10] usb usb9-port1: unable to enumerate USB device
[  740.260980][ T9623] chnl_net:caif_netlink_parms(): no params data found
[  740.454247][ T5846] Bluetooth: hci2: command tx timeout
[  740.534478][ T5846] Bluetooth: hci3: command tx timeout
[  741.424255][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.424459][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.424703][ T9623] bridge_slave_0: entered allmulticast mode
[  741.444714][ T9623] bridge_slave_0: entered promiscuous mode
[  741.465685][ T8349] usb 6-1: USB disconnect, device number 13
[  741.472753][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.472889][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.473152][ T9623] bridge_slave_1: entered allmulticast mode
[  741.497677][ T9623] bridge_slave_1: entered promiscuous mode
[  741.686032][ T9645] chnl_net:caif_netlink_parms(): no params data found
[  742.279330][ T9623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  742.351968][ T9623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  742.554264][ T5846] Bluetooth: hci2: command tx timeout
[  742.626666][ T5846] Bluetooth: hci3: command tx timeout
[  743.914196][ T5926] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  744.064212][ T5926] usb 9-1: Using ep0 maxpacket: 16
[  744.066188][ T5926] usb 9-1: config 0 has an invalid interface number: 9 but max is 2
[  744.066210][ T5926] usb 9-1: config 0 has an invalid interface number: 9 but max is 2
[  744.066227][ T5926] usb 9-1: config 0 has an invalid interface number: 157 but max is 2
[  744.066243][ T5926] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  744.066260][ T5926] usb 9-1: config 0 has no interface number 0
[  744.066275][ T5926] usb 9-1: config 0 has no interface number 1
[  744.066344][ T5926] usb 9-1: config 0 interface 9 has no altsetting 0
[  744.066358][ T5926] usb 9-1: config 0 interface 9 has no altsetting 1
[  744.066374][ T5926] usb 9-1: config 0 interface 157 has no altsetting 0
[  744.068910][ T5926] usb 9-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0
[  744.068935][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.068953][ T5926] usb 9-1: Product: syz
[  744.068964][ T5926] usb 9-1: Manufacturer: syz
[  744.068976][ T5926] usb 9-1: SerialNumber: syz
[  744.152484][ T9623] team0: Port device team_slave_0 added
[  744.194444][ T5926] usb 9-1: config 0 descriptor??
[  744.632603][    C1] vkms_vblank_simulate: vblank timer overrun
[  744.633414][ T5846] Bluetooth: hci2: command tx timeout
[  744.666545][ T9623] team0: Port device team_slave_1 added
[  745.429400][    C1] vkms_vblank_simulate: vblank timer overrun
[  745.978849][ T9645] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.979055][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.979304][ T9645] bridge_slave_0: entered allmulticast mode
[  745.987675][ T9645] bridge_slave_0: entered promiscuous mode
[  746.009825][ T9645] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.011298][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.011552][ T9645] bridge_slave_1: entered allmulticast mode
[  746.017847][ T9645] bridge_slave_1: entered promiscuous mode
[  746.212361][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  746.212385][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.212407][ T9623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  746.482718][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  746.482737][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  746.482762][ T9623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.483552][ T8449] bridge_slave_1: left allmulticast mode
[  746.483580][ T8449] bridge_slave_1: left promiscuous mode
[  746.483839][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.616134][ T8449] bridge_slave_0: left allmulticast mode
[  746.616171][ T8449] bridge_slave_0: left promiscuous mode
[  746.616440][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.826996][ T5926] usb 9-1: selecting invalid altsetting 1
[  746.827051][ T5926] sierra 9-1:0.9: Sierra USB modem converter detected
[  746.876835][ T5926] usb 9-1: Sierra USB modem converter now attached to ttyUSB0
[  746.889407][ T8449] bridge_slave_1: left allmulticast mode
[  746.889439][ T8449] bridge_slave_1: left promiscuous mode
[  746.957720][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.023206][ T5926] usb 9-1: USB disconnect, device number 17
[  747.055791][ T5926] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  747.056823][ T5926] sierra 9-1:0.9: device disconnected
[  747.112092][ T9725] Bluetooth: MGMT ver 1.23
[  747.159177][ T8449] bridge_slave_0: left allmulticast mode
[  747.159211][ T8449] bridge_slave_0: left promiscuous mode
[  747.159464][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.341304][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  747.341377][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  749.301864][ T9745] FAULT_INJECTION: forcing a failure.
[  749.301864][ T9745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.301894][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: syz.5.694 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  749.301915][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  749.301926][ T9745] Call Trace:
[  749.301934][ T9745]  <TASK>
[  749.301942][ T9745]  dump_stack_lvl+0x189/0x250
[  749.301971][ T9745]  ? __pfx____ratelimit+0x10/0x10
[  749.301994][ T9745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  749.302017][ T9745]  ? __pfx__printk+0x10/0x10
[  749.302042][ T9745]  ? __might_fault+0xb0/0x130
[  749.302074][ T9745]  should_fail_ex+0x46c/0x600
[  749.302103][ T9745]  _copy_to_user+0x31/0xb0
[  749.302133][ T9745]  simple_read_from_buffer+0xe1/0x170
[  749.302161][ T9745]  proc_fail_nth_read+0x1b6/0x220
[  749.302183][ T9745]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  749.302204][ T9745]  ? rw_verify_area+0x2ac/0x4e0
[  749.302225][ T9745]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  749.302245][ T9745]  vfs_read+0x203/0xa30
[  749.302274][ T9745]  ? __pfx_vfs_read+0x10/0x10
[  749.302291][ T9745]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  749.302326][ T9745]  ? mutex_lock_nested+0x154/0x1d0
[  749.302342][ T9745]  ? fdget_pos+0x253/0x320
[  749.302375][ T9745]  ksys_read+0x14b/0x260
[  749.302398][ T9745]  ? __pfx_ksys_read+0x10/0x10
[  749.302424][ T9745]  ? do_syscall_64+0xbe/0x3b0
[  749.302451][ T9745]  do_syscall_64+0xfa/0x3b0
[  749.302474][ T9745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.302491][ T9745]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  749.302507][ T9745]  ? clear_bhb_loop+0x60/0xb0
[  749.302528][ T9745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.302545][ T9745] RIP: 0033:0x7f5601a8d5fc
[  749.302562][ T9745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  749.302577][ T9745] RSP: 002b:00007f55ffcb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  749.302596][ T9745] RAX: ffffffffffffffda RBX: 00007f5601cb6180 RCX: 00007f5601a8d5fc
[  749.302610][ T9745] RDX: 000000000000000f RSI: 00007f55ffcb40a0 RDI: 0000000000000005
[  749.302621][ T9745] RBP: 00007f55ffcb4090 R08: 0000000000000000 R09: 0000000000000000
[  749.302632][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.302643][ T9745] R13: 00007f5601cb6218 R14: 00007f5601cb6180 R15: 00007ffd52477948
[  749.302674][ T9745]  </TASK>
[  751.636703][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  751.785584][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  751.909182][ T8449] bond0 (unregistering): Released all slaves
[  753.535136][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.600301][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.639041][ T8449] bond0 (unregistering): Released all slaves
[  753.698158][ T9645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.820758][ T9645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.018926][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.700'.
[  754.718452][ T9645] team0: Port device team_slave_0 added
[  754.750165][ T9789] netlink: 52 bytes leftover after parsing attributes in process `syz.8.702'.
[  754.847222][ T9792] program syz.8.702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  754.965529][ T9645] team0: Port device team_slave_1 added
[  755.077657][ T9623] hsr_slave_0: entered promiscuous mode
[  755.093472][ T9623] hsr_slave_1: entered promiscuous mode
[  755.104988][ T9623] debugfs: 'hsr0' already exists in 'hsr'
[  755.105016][ T9623] Cannot create hsr debugfs directory
[  755.434726][ T9806] netlink: 44 bytes leftover after parsing attributes in process `syz.8.705'.
[  755.434752][ T9806] netlink: 'syz.8.705': attribute type 6 has an invalid length.
[  755.434765][ T9806] netlink: 'syz.8.705': attribute type 5 has an invalid length.
[  755.434776][ T9806] netlink: 'syz.8.705': attribute type 4 has an invalid length.
[  755.814189][ T8449] hsr_slave_0: left promiscuous mode
[  755.865885][ T8449] hsr_slave_1: left promiscuous mode
[  755.866943][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  755.925304][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  757.568098][ T8449] hsr_slave_0: left promiscuous mode
[  757.630589][ T8449] hsr_slave_1: left promiscuous mode
[  757.631541][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  757.683098][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.365733][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  759.505678][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  761.385018][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  761.635144][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  764.121083][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  764.121098][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  764.121121][ T9645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  764.402514][ T9645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  764.402530][ T9645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  764.402553][ T9645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  764.483055][ T9559] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  764.524332][ T5909] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  764.728352][ T5909] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[  764.728377][ T5909] usb 9-1: config 0 has no interface number 0
[  764.728427][ T5909] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  764.728445][ T5909] usb 9-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  764.728466][ T5909] usb 9-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  764.741236][ T9559] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  764.794566][ T5909] usb 9-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9
[  764.794594][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.794612][ T5909] usb 9-1: Product: syz
[  764.794625][ T5909] usb 9-1: Manufacturer: syz
[  764.794638][ T5909] usb 9-1: SerialNumber: syz
[  764.800997][ T5909] usb 9-1: config 0 descriptor??
[  764.819993][ T9852] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  764.970784][ T9864] FAULT_INJECTION: forcing a failure.
[  764.970784][ T9864] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  764.970816][ T9864] CPU: 0 UID: 0 PID: 9864 Comm: syz.5.713 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  764.970837][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  764.970847][ T9864] Call Trace:
[  764.970854][ T9864]  <TASK>
[  764.970862][ T9864]  dump_stack_lvl+0x189/0x250
[  764.970888][ T9864]  ? __pfx____ratelimit+0x10/0x10
[  764.970910][ T9864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  764.970932][ T9864]  ? __pfx__printk+0x10/0x10
[  764.970971][ T9864]  should_fail_ex+0x46c/0x600
[  764.970998][ T9864]  _copy_from_user+0x2d/0xb0
[  764.971018][ T9864]  bpf_test_init+0xf8/0x170
[  764.971041][ T9864]  bpf_prog_test_run_skb+0x1e9/0x1560
[  764.971059][ T9864]  ? __fget_files+0x2a/0x420
[  764.971083][ T9864]  ? __fget_files+0x2a/0x420
[  764.971113][ T9864]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  764.971133][ T9864]  bpf_prog_test_run+0x2ca/0x340
[  764.971157][ T9864]  __sys_bpf+0x581/0x870
[  764.971178][ T9864]  ? __pfx___sys_bpf+0x10/0x10
[  764.971211][ T9864]  ? ksys_write+0x230/0x260
[  764.971233][ T9864]  ? __pfx_ksys_write+0x10/0x10
[  764.971250][ T9864]  ? rcu_is_watching+0x15/0xb0
[  764.971282][ T9864]  __x64_sys_bpf+0x7c/0x90
[  764.971302][ T9864]  do_syscall_64+0xfa/0x3b0
[  764.971322][ T9864]  ? lockdep_hardirqs_on+0x9c/0x150
[  764.971341][ T9864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.971359][ T9864]  ? clear_bhb_loop+0x60/0xb0
[  764.971379][ T9864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.971395][ T9864] RIP: 0033:0x7f5601a8ebe9
[  764.971410][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  764.971424][ T9864] RSP: 002b:00007f55ffcf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  764.971443][ T9864] RAX: ffffffffffffffda RBX: 00007f5601cb5fa0 RCX: 00007f5601a8ebe9
[  764.971456][ T9864] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a
[  764.971467][ T9864] RBP: 00007f55ffcf6090 R08: 0000000000000000 R09: 0000000000000000
[  764.971477][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  764.971488][ T9864] R13: 00007f5601cb6038 R14: 00007f5601cb5fa0 R15: 00007ffd52477948
[  764.971516][ T9864]  </TASK>
[  765.040211][ T9559] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  765.069185][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.070056][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.095629][ T5909] usb 9-1: probing VID:PID(2201:012C)   
[  765.099181][ T5909] usb 9-1: vub300 testing BULK OUT EndPoint(0) 02
[  765.099206][ T5909] usb 9-1: vub300 testing BULK IN EndPoint(1) 82
[  765.099226][ T5909] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs
[  765.099313][ T5909] vub300 9-1:0.239: probe with driver vub300 failed with error -22
[  765.149519][ T5909] usb 9-1: USB disconnect, device number 18
[  766.645405][ T9559] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  767.296147][ T9645] hsr_slave_0: entered promiscuous mode
[  767.297554][ T9645] hsr_slave_1: entered promiscuous mode
[  767.298487][ T9645] debugfs: 'hsr0' already exists in 'hsr'
[  767.298510][ T9645] Cannot create hsr debugfs directory
[  767.942407][ T9904] pimreg: tun_chr_ioctl cmd 1074025673
[  768.824957][ T5909] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  768.994351][ T5909] usb 9-1: Using ep0 maxpacket: 16
[  769.000281][ T5909] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  769.000308][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.000326][ T5909] usb 9-1: Product: syz
[  769.000338][ T5909] usb 9-1: Manufacturer: syz
[  769.000351][ T5909] usb 9-1: SerialNumber: syz
[  769.050146][ T5909] r8152-cfgselector 9-1: Unknown version 0x0000
[  769.050171][ T5909] r8152-cfgselector 9-1: config 0 descriptor??
[  771.625648][ T5910] r8152-cfgselector 9-1: USB disconnect, device number 19
[  772.055058][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.452147][ T9559] 8021q: adding VLAN 0 to HW filter on device team0
[  772.508996][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.509216][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.511796][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.511943][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  772.665663][   T37] audit: type=1326 audit(1756304489.646:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.665775][   T37] audit: type=1326 audit(1756304489.646:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.669884][   T37] audit: type=1326 audit(1756304489.646:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.670062][   T37] audit: type=1326 audit(1756304489.646:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.670579][   T37] audit: type=1326 audit(1756304489.646:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.671083][   T37] audit: type=1326 audit(1756304489.646:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.671555][   T37] audit: type=1326 audit(1756304489.646:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.754211][   T37] audit: type=1326 audit(1756304489.646:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.754261][   T37] audit: type=1326 audit(1756304489.656:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  772.754298][   T37] audit: type=1326 audit(1756304489.656:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9967 comm="syz.8.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb211e5ebe9 code=0x7ffc0000
[  773.842333][ T8449] bridge_slave_1: left allmulticast mode
[  773.842367][ T8449] bridge_slave_1: left promiscuous mode
[  773.842637][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.025781][ T8449] bridge_slave_0: left allmulticast mode
[  774.025814][ T8449] bridge_slave_0: left promiscuous mode
[  774.028036][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.389053][ T8449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  775.465043][ T8449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  775.554901][ T8449] bond0 (unregistering): Released all slaves
[  776.315907][ T8449] hsr_slave_0: left promiscuous mode
[  776.361054][ T8449] hsr_slave_1: left promiscuous mode
[  776.361982][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  776.395101][ T8449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  776.534316][   T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  776.694495][   T10] usb 9-1: Using ep0 maxpacket: 16
[  776.697110][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  776.697135][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  776.701747][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  776.701774][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.701792][   T10] usb 9-1: Product: syz
[  776.701804][   T10] usb 9-1: Manufacturer: syz
[  776.701817][   T10] usb 9-1: SerialNumber: syz
[  776.963518][   T10] usb 9-1: 0:2 : does not exist
[  776.998895][   T10] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  777.074458][   T10] usb 9-1: USB disconnect, device number 20
[  777.232231][ T9865] udevd[9865]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  777.924994][ T8449] team0 (unregistering): Port device team_slave_1 removed
[  778.184895][ T8449] team0 (unregistering): Port device team_slave_0 removed
[  782.837739][ T9623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  782.883170][ T9623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  783.036240][ T9623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  783.103075][ T9623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  783.201239][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  783.502366][ T9645] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  783.628234][ T9645] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  783.722050][ T9645] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  783.906089][ T5842]  non-paged memory
[  783.906102][ T5842] list_del corruption, ffff88801ff68980->next is LIST_POISON1 (dead000000000100)
[  783.906611][ T5842] ------------[ cut here ]------------
[  783.906620][ T5842] kernel BUG at lib/list_debug.c:58!
[  783.906654][ T5842] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  783.906673][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  783.906691][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  783.906701][ T5842] Workqueue: hci2 hci_conn_timeout
[  783.906729][ T5842] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  783.906750][ T5842] Code: 00 10 62 8b 48 89 de e8 f0 a6 67 fc 90 0f 0b 4c 89 e7 e8 25 cc 3e fd 48 c7 c7 60 10 62 8b 48 89 de 4c 89 e2 e8 d3 a6 67 fc 90 <0f> 0b 4c 89 e7 e8 08 cc 3e fd 48 c7 c7 c0 10 62 8b 48 89 de 4c 89
[  783.906762][ T5842] RSP: 0018:ffffc90004f2f980 EFLAGS: 00010246
[  783.906774][ T5842] RAX: 000000000000004e RBX: ffff88801ff68980 RCX: 34794fac7005ca00
[  783.906784][ T5842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  783.906793][ T5842] RBP: ffffffff8a042580 R08: 0000000000000000 R09: 0000000000000000
[  783.906803][ T5842] R10: dffffc0000000000 R11: ffffed1017124863 R12: dead000000000100
[  783.906814][ T5842] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  783.906825][ T5842] FS:  0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000
[  783.906836][ T5842] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  783.906846][ T5842] CR2: 00007fb210084d58 CR3: 0000000028642000 CR4: 00000000003526f0
[  783.906862][ T5842] Call Trace:
[  783.906868][ T5842]  <TASK>
[  783.906876][ T5842]  hci_cmd_sync_dequeue_once+0x24a/0x370
[  783.906895][ T5842]  hci_cancel_connect_sync+0xc8/0x120
[  783.906915][ T5842]  hci_abort_conn+0x191/0x330
[  783.906932][ T5842]  ? process_scheduled_works+0x9ef/0x17b0
[  783.906952][ T5842]  process_scheduled_works+0xade/0x17b0
[  783.906980][ T5842]  ? __pfx_process_scheduled_works+0x10/0x10
[  783.907007][ T5842]  worker_thread+0x8a0/0xda0
[  783.907027][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  783.907051][ T5842]  ? __kthread_parkme+0x7b/0x200
[  783.907076][ T5842]  kthread+0x711/0x8a0
[  783.907099][ T5842]  ? __pfx_worker_thread+0x10/0x10
[  783.907118][ T5842]  ? __pfx_kthread+0x10/0x10
[  783.907140][ T5842]  ? __pfx_kthread+0x10/0x10
[  783.907161][ T5842]  ret_from_fork+0x3fc/0x770
[  783.907182][ T5842]  ? __pfx_ret_from_fork+0x10/0x10
[  783.907204][ T5842]  ? __switch_to_asm+0x39/0x70
[  783.907220][ T5842]  ? __switch_to_asm+0x33/0x70
[  783.907235][ T5842]  ? __pfx_kthread+0x10/0x10
[  783.907256][ T5842]  ret_from_fork_asm+0x1a/0x30
[  783.907279][ T5842]  </TASK>
[  783.907292][ T5842] Modules linked in:
[  783.907309][ T5842] ---[ end trace 0000000000000000 ]---
[  783.907321][ T5842] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  783.907342][ T5842] Code: 00 10 62 8b 48 89 de e8 f0 a6 67 fc 90 0f 0b 4c 89 e7 e8 25 cc 3e fd 48 c7 c7 60 10 62 8b 48 89 de 4c 89 e2 e8 d3 a6 67 fc 90 <0f> 0b 4c 89 e7 e8 08 cc 3e fd 48 c7 c7 c0 10 62 8b 48 89 de 4c 89
[  783.907357][ T5842] RSP: 0018:ffffc90004f2f980 EFLAGS: 00010246
[  783.907372][ T5842] RAX: 000000000000004e RBX: ffff88801ff68980 RCX: 34794fac7005ca00
[  783.907392][ T5842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  783.907402][ T5842] RBP: ffffffff8a042580 R08: 0000000000000000 R09: 0000000000000000
[  783.907413][ T5842] R10: dffffc0000000000 R11: ffffed1017124863 R12: dead000000000100
[  783.907430][ T5842] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  783.907444][ T5842] FS:  0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000
[  783.907459][ T5842] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  783.907471][ T5842] CR2: 00007fb210084d58 CR3: 0000000028642000 CR4: 00000000003526f0
[  783.907489][ T5842] Kernel panic - not syncing: Fatal exception
[  783.907764][ T5842] Kernel Offset: disabled