last executing test programs:

33.45926509s ago: executing program 3 (id=3091):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

33.410316772s ago: executing program 3 (id=3092):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000040100000000000000"], 0x1fc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0x10}, {0x4, 0xfff3}}}, 0x24}}, 0x805)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)=@newtfilter={0x1410, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x13dc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_MATCHALL_ACT={0x13b8, 0x2, [@m_mirred={0xffffffffffffffd4, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x98b8, 0x340, 0x6, 0x4, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xfffffffa, 0x5, 0x8, 0x5}, 0x2e3fac55c1b2254f}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x4, 0x1}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x8, 0x8, 0xffffff82}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x7, 0x2000000e, 0xc, 0x4b}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0xfffffffa, 0xf606}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0xffffffffffffffff, 0xffffea2c, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xffffffff}, 0x2, r2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xc0, 0x0, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x0, 0x5, 0xffffffff, 0xf910}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x0, 0x3}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xa, 0x7, 0xda, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x2, 0x9, 0x6}, 0x56712078cc8e4236, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8000, 0x8, 0x1, 0x8}, 0x1}}]}, {0x46, 0x6, "f1345655f2ce84a28133bdd17e3ccd65cf63b6d8fedeb1a18fef4b934eedc86449ad75331d86ebdd34f00765845269af6776fbcab3e8125c1fccbc957593a71c5cea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x70, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x5, 0x6, 0x4c5, 0x2e}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0xffffffff, 0x97d5}, 0x31}}]}, {0xa, 0x6, "15838c9d45e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0xa, 0xbc, 0x8, 0x1, 0x1}, 0x3}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x2}}]}}]}, 0x1410}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

33.386500578s ago: executing program 3 (id=3093):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0)
io_setup(0xb4, &(0x7f0000002340)=<r1=>0x0)
r2 = memfd_secret(0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
io_submit(r1, 0x2000000000000160, &(0x7f00000003c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x28, 0xfffff038}, {0x6, 0x0, 0x0, 0xfff}]}, 0x10)
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kvm_dirty_ring_push\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x13)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES64=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7, 0x0, 0x8}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32=r0], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r9, 0x1000)
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000300)={0x101000, 0x1b2, 0x2}, 0x18)
linkat(r10, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r11, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x6, 0xe5, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x82, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x60f, 0x9}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x9, "96"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x604, 0x1, 0x4, 0xa0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0xb, 0x5, "3c70e692eb630e58"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0xe, 0xa, "cef428"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x8, "fc", "1f4f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x80, 0x3, 0x6, {0x7, 0x25, 0x1, 0x1, 0x5c, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xfe}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x6, 0x8, "7d946999820fce"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x3a, "000000000000000275"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x401, 0x4, 0x4, "e1622f9f89"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5e, 0x11, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x4, 0xf1}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x3, 0x3, 0x4, 0x10, 0x6}, 0x23, &(0x7f0000000b40)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "49785a14cd02ee57b6a254bea074e229"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xa, 0x2}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x401}}, {0x80, &(0x7f0000000600)=@string={0x80, 0x3, "d045db33cc9944b003fccafb0a485d4c9d8ad29eb580fe0c2270ff49cd7a15d5ad6ffcfc798776c3cc874b57003563f70080432c96e76c82da4c97002904c18b4b2872b77a873dfd00ad66ba4422844be2263da6b0c8f7c37fd1508bcba56e6b66175c13454559e04b9e25996f7e234fb3d4b4beac8ecc61f95adb20a4f6"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x340a}}, {0x7b, &(0x7f00000007c0)=@string={0x7b, 0x3, "5d8d2192d78fa418a56804e558ad6ce79ec305285a38fdd2042a3456d24dcd27a7259b4540dee1ff841cc8d4c86fb3ceeae0a76ab6c7d704c3f3a85a75508bce4e00524aac54cc9eda6b0b551a40386dc83ceca5d26321cd3fb0072a05304f7d67e9e0640c78a1b8b3af2969c83a15d7109330d9457e433d7f"}}, {0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="0cffff0a75fa6ad153093b80c469e6b0d2e5fd5fc131fd7388bd87d406c2c4b9076cbe178e552cf3931420e326281f5cda81359fe1414c38fe053cbe9ba77076eec8e8a9f46b6f56ba9106901d2c1d684b5ad599acb1"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1404}}, {0xac, &(0x7f0000000880)=@string={0xac, 0x3, "591200d2b323b516bf58e64cfef4bb9015818da892b56a20adc56636173b491c91a3b7c92a6226ba8103beb0fc8991075dca78d3bd0e562e40f9ec4c7b019c48d5905dec340b3df38b8f9485cbcf18d8e134d027b36595f17cdfc868afbd991152ba5db636c4ac910525df1f281c4a7e873b351ca58f1362f58b5801fdea59fd60c1054dd97d1a4aab12de7e77b7347f8b35b544df3534cabd5b70b6c394c5cb550b60f84d2fab27d5f2"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x140c}}, {0xc1, &(0x7f0000000980)=ANY=[@ANYRES64=r8]}]})

28.396509345s ago: executing program 0 (id=3117):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000680)=ANY=[@ANYBLOB="73697a653dd0"])
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb0}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x40010021)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x4000000)

27.412071955s ago: executing program 0 (id=3120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
fanotify_init(0x200, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0)

26.893430018s ago: executing program 0 (id=3122):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = epoll_create(0x917)
epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x9)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

25.805240142s ago: executing program 0 (id=3125):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xa, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000400)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)

24.595892939s ago: executing program 0 (id=3134):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce)
r4 = socket(0x2, 0x80805, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x1000}], 0x6f, 0x0, &(0x7f0000000580)="fb41da41bf7e31c18ff453c2eea6d5cdfb16fafe47ee8fb0c65c7487a8f8265110bf0c52a9b94d4d9b62d14ad0cae663433591078ff7cad19a8f09cdd26cade439ca841cdc5722397ae55a4d2e984d2ecfd310688371893db325f6c494b802326ffa810535e7dc01c084a7e7b48623"})
sendmmsg$inet(r4, &(0x7f0000007e00), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps\x00')
preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000180))
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x1fc, 0x4)
sendmmsg$inet6(r7, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{0x0}], 0x1}}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0xfffffffc, 0x4)

23.048113491s ago: executing program 0 (id=3138):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26)
getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00)

22.974993554s ago: executing program 3 (id=3097):
socket$kcm(0x2, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
socket$kcm(0x2, 0x2, 0x73)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007e0000543451330018ea80495abc8fd7be0000000000000074b03000ffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
read$sequencer(r3, &(0x7f0000000300)=""/31, 0x1f)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

22.904976912s ago: executing program 3 (id=3139):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), 0x0)
openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3)
listen(r3, 0x20000005)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]})
setuid(0x0)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}})

22.750479546s ago: executing program 4 (id=3141):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x54}}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000000)={0x0, 0x30, 0x4, "01abb9c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26)
getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00)
syz_io_uring_setup(0x9e, &(0x7f0000000080)={0x0, 0xb61f, 0x400, 0x1, 0x146}, &(0x7f0000000180), &(0x7f00000001c0))

20.332211425s ago: executing program 4 (id=3148):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000380)={0x9, @output={0x1000, 0x1, {0x9c7d, 0xffffffff}, 0x4, 0x8}})
syz_usb_connect(0x1, 0x2f, &(0x7f0000001bc0)={{0x12, 0x1, 0x200, 0x6c, 0xa6, 0x2c, 0x8, 0x421, 0x26c, 0x942e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x5, 0x5, 0xa0, 0x1, [{{0x9, 0x4, 0xf2, 0x1, 0x1, 0x2, 0x2, 0xff, 0x80, [], [{{0x9, 0x5, 0x4, 0x1, 0x10, 0x7, 0x3, 0x7, [@generic={0x2}]}}]}}]}}]}}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x0)

20.312566698s ago: executing program 2 (id=3149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) (fail_nth: 1)

20.048465204s ago: executing program 2 (id=3151):
iopl(0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000380))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
ioctl$TIOCGICOUNT(r1, 0x5409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')

19.344227445s ago: executing program 3 (id=3154):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r4], 0x24}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080))
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x18, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4004000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c400000", @ANYRES16=r8, @ANYBLOB="00022bbd7000fddbdf25030000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x20008090)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pread64(r9, &(0x7f0000000080)=""/181, 0xb5, 0x365)

19.169358115s ago: executing program 2 (id=3155):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r0, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4000040)

19.112957885s ago: executing program 2 (id=3156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21, @void, @value}, 0x94)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x10800000, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[], [{@flag='silent'}, {@smackfsroot}], 0x2f})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r4, &(0x7f0000000300)=""/154, 0x9a)
add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef211591b7e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xb5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x2, 0x1, @local, 0xcf}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
sendto$inet6(r3, 0x0, 0x2a, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x5, @private1, 0xffffffbe}, 0x76)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
syslog(0x4, &(0x7f00000001c0)=""/72, 0x48)
syslog(0x3, &(0x7f0000000500)=""/218, 0xda)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0xa0000005, 0x83d, 0x80000000, 0x4, 0x1ff, 0x0, 0x5, [0x4, 0x3]}})

18.978088799s ago: executing program 1 (id=3157):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce)
r4 = socket(0x2, 0x80805, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x1000}], 0x6f, 0x0, &(0x7f0000000580)="fb41da41bf7e31c18ff453c2eea6d5cdfb16fafe47ee8fb0c65c7487a8f8265110bf0c52a9b94d4d9b62d14ad0cae663433591078ff7cad19a8f09cdd26cade439ca841cdc5722397ae55a4d2e984d2ecfd310688371893db325f6c494b802326ffa810535e7dc01c084a7e7b48623"})
sendmmsg$inet(r4, &(0x7f0000007e00), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps\x00')
preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000180))
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x1fc, 0x4)
sendmmsg$inet6(r7, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{0x0}], 0x1}}], 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0xfffffffc, 0x4)

18.557083015s ago: executing program 2 (id=3158):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x8, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}]})
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{}, {<r3=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000080)=[{}, {{}, {<r4=>0x80000000}}]})
syz_open_dev$media(&(0x7f0000000040), 0x8c85, 0x240)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000900)=[{{}, {<r5=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={r5, &(0x7f000000a2c0)=[{}, {<r6=>0x80000000}], 0x0})
ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000440)={r6})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

18.467937971s ago: executing program 4 (id=3159):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280))
openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3)
listen(r3, 0x20000005)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]})
setuid(0x0)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}})

18.327040353s ago: executing program 1 (id=3160):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x125)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001})
r4 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x1}], 0x1c)
listen(r4, 0x20000005)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x401, 0x10, 0x5, 0x1}]})
setuid(0x0)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}})

18.261160036s ago: executing program 2 (id=3161):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000005f80), 0x1, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500))
prlimit64(r0, 0xd, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'dh\x00', 0x0, 0x80000}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x16c, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x1, 0xe, 0x0, 0x1, 0x38, 0x4, 0x2}}, {0x8, 0x2, [0x7ff, 0x3]}}, {{0x1c, 0x1, {0x4, 0x9, 0x1, 0x0, 0x2, 0xf, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x1, 0x6, 0x35]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x1, 0xe9b9, 0x603c, 0x800, 0x5, 0x1, 0x1fe, 0x9}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xbf, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x4}}, {0xc, 0x2, [0x9, 0x5, 0x185, 0x9]}}, {{0x1c, 0x1, {0xc8, 0x6, 0x0, 0xffff51a0, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x9, 0x8, 0x8, 0x2, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0xe9, 0x4, 0x1, 0x6, 0x100, 0x4]}}, {{0x1c, 0x1, {0xd, 0xfb, 0x8, 0x8, 0x2, 0x5, 0xd, 0x6}}, {0x10, 0x2, [0x7499, 0x3, 0x5, 0x10, 0x2, 0xb]}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

17.535154502s ago: executing program 4 (id=3162):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000040)}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x73}], 0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x24040900)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0)
ioctl$KVM_NMI(r7, 0xae9a)

16.692846392s ago: executing program 1 (id=3163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040601020000000200000000000000000500010007"], 0x1c}}, 0x0)

16.666165081s ago: executing program 1 (id=3164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040601020000000200000000000000000500010007"], 0x1c}}, 0x0) (fail_nth: 1)

16.367097877s ago: executing program 1 (id=3165):
iopl(0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000380))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, 0x0)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240))
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
ioctl$TIOCGICOUNT(r2, 0x5409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')

16.339009612s ago: executing program 4 (id=3166):
mremap(&(0x7f00004e8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000f78000/0x2000)=nil)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000977000/0x1000)=nil)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000003c0)=0x3ff, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

15.977260191s ago: executing program 4 (id=3167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

15.755019734s ago: executing program 1 (id=3168):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0x10}, {0x4, 0xfff3}}}, 0x24}}, 0x805)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)=@newtfilter={0x1410, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x13dc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_MATCHALL_ACT={0x13b8, 0x2, [@m_mirred={0xffffffffffffffd4, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x98b8, 0x340, 0x6, 0x4, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xfffffffa, 0x5, 0x8, 0x5}, 0x2e3fac55c1b2254f}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x4, 0x1}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x8, 0x8, 0xffffff82}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x7, 0x2000000e, 0xc, 0x4b}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0xfffffffa, 0xf606}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0xffffffffffffffff, 0xffffea2c, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xffffffff}, 0x2, r2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xc0, 0x0, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x0, 0x5, 0xffffffff, 0xf910}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x0, 0x3}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xa, 0x7, 0xda, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x2, 0x9, 0x6}, 0x56712078cc8e4236, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8000, 0x8, 0x1, 0x8}, 0x1}}]}, {0x46, 0x6, "f1345655f2ce84a28133bdd17e3ccd65cf63b6d8fedeb1a18fef4b934eedc86449ad75331d86ebdd34f00765845269af6776fbcab3e8125c1fccbc957593a71c5cea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x70, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x5, 0x6, 0x4c5, 0x2e}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0xffffffff, 0x97d5}, 0x31}}]}, {0xa, 0x6, "15838c9d45e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0xa, 0xbc, 0x8, 0x1, 0x1}, 0x3}}]}, {0x0, 0x6, "1b7995c8ac1d8f44f5659e5648ef0fdbefca47fc9c2d6c0ebb40148742d6cc20b674a5fc62ad6858a92264692761e403ef4e1f3ab35b8bf52c215dbae6597d1b3d82045ed451d93ad2123a9321eebaa2e6399b34aeb77aff7b2e2bedae4793db3a9e079e961180b02a935000b1711add58d074993d3038d8189f1bfb5929ec4daa2caec7893f79e8b62dcc1191a15a15f71dc57d9e88495ab1fc9e363053b98b8a536a2257ddb4a6801df87001e5c08cd6886b05aa931b0e40fa6899d400a0d1a875712374513bb089a53aaee855eeeddfca08ae87d1e016d2803f025162530a48f1d2b42497b6508c9dccfbb8d7eb00e27af1e1c0932c71f8d0f4101338a184fe418f943a91e15ecae6c1fd50827e120d020368d680c9a66246b8cea9e05f2a5f818e490fb74ea1c0837d97e47ccb367059307b269e1114c3d0db28beda02443bde7822f97fa7762008bc66d6327966682b5d7e60b9054ca4d20437d5783b04b626044a64ef0cecaf4c9802db1c5c7891eb6e6718255658671e86945ec983340d8b1d4bd2c9acf3bfd7bcc191620a4f854c6a8a0d1df42e3839fdb0807d9d69cd42ac49c74d30f481dbafc5f4035e1fcce8d79bcd0f932a834c352869eae0b490a442ee74f7a553d1fd3796c55d0154cf6e96d58b67898b233430041c6b3249e9694c2fd598dd786e0453ddf64d2cf278d60e1aee0fb0bb6de45cd8eeb258d4ca8fc1ac90d9c1d00c7a49535f61c0bf2e4f46b2aac82ed58f552a11d6bad5abd5d6df65ece3eee34b9b9600e1bfd9c32ef4ab57d33fa238261f89ae511f32c526b357d0ca245ee4858ce990fc15ace749296cb1884afdcba7d40c2654b2bd95e0fdf40a9cf0fdfab243284c26e5532acefd23a077d0fec72cc3d3dad9a73c13ed36e8d015817eff7acc88aef543cc73832dc6d0a65dbfd8151c91a31b0f7d48d28aaa3edbe657c74072cd1e9f3b1f83a268765a00424cab23acc85d0d87de99bed4866dac4dc0bdbdd44de69a84c73885043e801eadd0bdf2ecf990bfb1aaac807d352014044f40b9f046c2a576802967aee6eab71ef28f750d3a8331afd8b746e2f865f8a2b530d966555dbdae3e2f5d35946c3fabe702cb75131e5300336934a072ba03e579b77aca041266c5a8b475de856736ccfac1638a9de76234ca22b401a8d0ef898f2fd5f21a41853c1f154018951764f79657b57a9dfdc89e9aaa29d8bda74369a9c8b168d15da9d2c5ca97e366ca8a65975f406a11d22c860fb2ab5d473357c572bf4baa5bb757a5ddad6d1db10e6f269541cf55f44688f7870752fc4fc04f4ed4e0e1d18368d59575e67430090bf8e033fc9945aaa396db3fd6aaa6b2db490c2efbf8bbafa37a6a006f842c3c9f9303a627db4468abb01eb9d5c4a24f104acba18f95aeae8bf2ca0130f9eb07433d0933887ab6a1c74043e04e6b13f8ad37e812746a25d22f868fcfa59f1d7ec6758bcd397d0e8ebf479d63ced3a0230964e5ffb9ff020bd97c555402d7cb76fe228d719decabce207d990e911dc20d5aff134568c5b76894358f2743f8c31b96df9f45fd1431ca09f4de11e9a402c425f126c7a2d2ffcdfc5e895ec8fa6f8b676f713e381edc79a7187f7d9aa1764953ae7948e2fbd76af291064a3ea657b51b72fafd99ded458acd7896a0361c4ee7b33cd0b1bceb9e6f15c35dfd030bfaed80b4d1a7bb4edf8d71a932a55e4683aa5fbf5dbe53fc291d188e9050ed3cd4729ac48d25bbfcb95884bb77deda66dfd5120110220f364f25def7c913d028b73f66e09a4b7ac2651ca9a7013d4baa32ae32a95d074fb48d540025fc783b7e26df8ef839435203282e0b765288e7a268a2b1435488b0dcaf529430ed6e8d3122041b734a2f1a6f993cb8a2702d57f0deb8b0371ce2b8d326e7497fec2754004acc579f1a2bb75003a9a430d466d25f128143995d01e63698e88b7320d6f1f386e04d1d8289317e61e21fc91f293686d2a8f4de929b90322eee06dc033f37926de801fa83aac6c99becd275c28ff3f4e27a4a50229d38bf816dee9f69eab1cf6dc5372c925c1956bb6ae8ff6df08a9ee66f141b416cbe4854ba2aae05dc2394a33c50a92551c505194be58979cb16b1b009eef1e071f051a83ed2d2865ea0b587c6c78b653d276e8ab7b557684e439524bc34442ea85892f8f27600f568704c4ae22c45e916ab9a5eb6c1b4236712a69bdb7041d7f8cf1d0d6fd4ab7d4adbbb6c61d2eba5d24cf7576a647fde49b8b22236b0d59c437a0558486958c57fbc18750299436fa48e12efaaeb7784c2e8838b2e3ad8b660de0482fc12a13b3e58aa4b89d9f06ce4d2df228d5261b01e10f4242d2e9d092279623bf9a765193c95ede6b4c1dbf861565d1436c7a7b5251b58681dd946411ff63d42df45c4e9f21c25be50743eaff3d0556010abcfae042ade01bce793a6bf7c063671437eebfd9783556d66380ed35a75e2d6321287afe39829de23f537451f3bb4426c5a2d6420821367298edb7e5f45ec75a76982cc7aff9d4af3a83d2218c5cda07b03547b5a3e82a56115fbe9e728107aaba8b643bf03f69aa189f43d12c4b7773552150093e719369ffd8793e58875921b5c8a47b1bb807e62f31db5189c2d26522d93ae727ff199175b110715ef21f1ef6a861129fec6b7abe65aaf590b76ffc0e7efb0311f631a16641c1863f6328e72653a12d0c15cfccd3e891dc18231b6ce4fd03d4f33084fa078cc1382129ee4ac1792613d74a696ebeebea1448d346db6a3df19255614cfacf371f87ff9d6f7101a2bbc513eb6f1e9d130963a793dfb93cc969ff7b1ce5eca6a1cd83ddde8464a62a812846a2c5a3bf8d39f057963f9a23551bf4251703bd8a79ffe1eab2886b82eda1159130c5dc75c2c043de0a3cb051154348bd8c4d46796044688c420b69fe903ef1a309da6c0b272ba324be24b18a184d9e852405743c6ebc9422c009cf0bf2d2bc253e10838806f87f59db74874a1ab2afd398257f9d82045139343e28dca7be733972c25dd45f3699a0ed19802e4d3065d6000e2fd850cf639b7b238b3e44f0256dceae35bfe6cdb3571660729efb005ce3d233fd86300d61518fc96369c9998ff7169b9153ccc4628da6af83d61874e89b2774fea5b834cc424281fd53b76c7acb0745f986354400cf2f5f9984b5884669cb890f256c613755d06905d53eab7842beeecebd39c963a79c78fbb539f4df07b2eee26346a29ec19b02ba1675a6d17ba7f597229c7963b617a6e5ba210f6470773808c67400c59ae014f9ab3258f129d95ac681e55705cbf4574358be6ab627f9df3decf85dd202522145d905168721230644c8b0bfb04f66e6ce71e135dbdd5bb1a87040ebecdd2136eb1f77e162a9a748600370a490ad133cee5d245c615b63c9d4bc92fda91ba898d40b938920a43ff827cf1c21fbaf12ef79ac8f4e2e960138ad0e3824253ab037163a43771c15ebb9622f6181962424f5ec3da4b0c08e10a81042633d2255adc5a62c382b13d406a232644fadc483b23f8f7c4ebb7d70fca9ac3b47bc8363f81686ec25e3945b38975cf7b6487a5a713c4e03d8129ea9c7b8f65b7f71ea8d95e63a74dc4dcb2a7120adce4d5aeb7108766df70708fc33c7a1c4ce422378012588a88876e6224fe096d51cd0d7a759799951c31431d40d0fc601684f6935e44f58fd6dd9e6b059ec9d9fca26e8b56942ed459bf5f93c9e24e091bdc792a962d8d268bc13f6c70ca337266b3184caf61ad1870063c09feff7eec1c048d830d2b87d3b7f9b16ff6a36d0d4fce73622673f5922ec59310e44a9b434958bb143bcb8e1fa6b7f4b736da784c1b407b87e01ae378230edf24ab43a6a57e533b3bbcb624cd193fb17e932516e7d6f79fcde106f2df3f45c9d0161e3357b8233b34940a73d7ed36c74294c1e32699209fa139ac36bb481ed82c7678f361e8d0518990924d4a6179c680ab544580bc21fe1fe913d19bd52e8c4e8f39e6fc66502199c2ef305c9246381d40478c127fa1242f3a860be0c5e10bc4fedd8efbb417e072c78c37f6e906e8d7492fcde833a31b310d25d4a0e3761b8ed6347cf00e56dc5aa506cfc03ba41c674e393bc022d372b48c109bd8c8acc78673e44abfe9b6bf61eaa0b147cb95955e97949bd70a6184da3242afbd5f9e9523df84a73bccd59ba38748885322703e052324bed7ce5553b00a9a28753dba15b29cf1e50f502a0f3959f379a56f912509cf2fd9b6dc789c361cf0851aaf6ef5c734dfc252b106d221886a84339867d7d4141590a0498a32e625b3020ea0d219b0b2a84cc41a2b72f35c3d1daa6f8f80997b220f166800e9c3cbefe10124ac85cf61a5e549b6eff4236ac56e446f57dfc99ee95d1d31513c79d4f6d828218dfe0f2d1ad25fc6fb696a5ecbee6aa3241a518888535e7728af8629db5128247a20d363b4bf33902ab1c40a6b997beea852de35f84f59d4d3f5937b2c7d9f30ac33ef93b85588a4451b02c6d49b2450270eec747d51ac8cf72135097445dd791eb2e62f93f4b26bf0f4d32f37d2869aedf9aab2996e93ee3b60e247a61ce202720407e7712dcab4477ff9ed97b0b4467d26867cc0745bb26866aeab070bf9bbab9b24093e0be5bb59fba961a4c43d0450cefc7a91dd12113468f8958dfcb3092b88cc2ebf58ea09049e7ea1b3d2a8c6a599408b2af4681485a3531e3fb540a94eb43bed21d78d79933ca679e0bd0a40d62b18f4788dbc3146bde52a6da49d9a2937f5d7c24115307c95c08448ceb56ee8c092c110317b7066aca306958736898b4080ca7bfa3c2ec8a240186725b2a1eb0adc37a9456b558e4aaad7ebf77eaa7af6d2081cf4a5b9f67dc872ab891fe578c974272fcad539d8645588c2b561056bfc0dca037905c46d69f8b1316b3ed461e60c05fd7c38557721f20903e8b5fcb67cdfdf3f896ceaca8615f9077648862ee95231233150ae36fbfc0a896089511df39a7ab7805e0271da515f6c4ed79f40fa32b89515064730343dec016223cb99849e8111dda9f7ace7f0312de12f233720abe0dd97174f5cc49918da390052dc583632702a749223cefd5687d524d1de58735bb6d8a3f605c949970efb5c6946ad6ff8c6cb3eb30368464fbe913d0561fd5c0b78629a9f7362bb8386576f9778a9833b1dd45b96e359f8e0243fe6b61a14bba2d992523d189c6e2009784a6f27ba6c721cf2fc5b59a1b570362056c68a3485cb652a3606e66052bf4ad3ba9de387e68f097f91c09342c311773d68952fcd84961d61e03e63f393d402598fb9054559c0b5210c63174b3c5d927fd76e5f84a2c81e896e40e05df1426696a6f4ca0e8d0a96bbe5a5c939b2d0a5adc0a06ffa6817cc641d5533b6d3d59539c7e6522729c6bd5771074c136375ce87fd11c5343737efb5cbd5588f2f965e1ff3a1373f182d1ea85b5ebf56a220d99e7f7d7952c4f6b6cbdcbd08c26a04628180c06d0251b167ac940df1af2aee6b3bffbd28331801d5d8dc732c0c0dc43c719a588e3e2c0b54527b9f3df2147f562f1e0520c924ae3f85f8d13a4678389564e9356a4601ed7a570be569cf164edd03c9209a40aee50fd92443193edc1314d3ba800e700c480c8a6aa29cb6f4ab8e0032a36e7648f6c074f0087d46595898adb6e3d5a08800904990b8d0a40bfb09c4fb7ab3d17d030620869aadc2132855012a4255219ccfbcb43354bea8c0accb768c2fbe3e35acd56be5be1a1ec2758616b33cac7dc47b90d2288abf2c781530c41e29dc5e3d1"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x2}}]}}]}, 0x1410}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.025880735s ago: executing program 32 (id=3161):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000005f80), 0x1, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500))
prlimit64(r0, 0xd, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="4803219e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'dh\x00', 0x0, 0x80000}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x16c, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x1, 0xe, 0x0, 0x1, 0x38, 0x4, 0x2}}, {0x8, 0x2, [0x7ff, 0x3]}}, {{0x1c, 0x1, {0x4, 0x9, 0x1, 0x0, 0x2, 0xf, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x1, 0x6, 0x35]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x1, 0xe9b9, 0x603c, 0x800, 0x5, 0x1, 0x1fe, 0x9}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xbf, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x4}}, {0xc, 0x2, [0x9, 0x5, 0x185, 0x9]}}, {{0x1c, 0x1, {0xc8, 0x6, 0x0, 0xffff51a0, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x9, 0x8, 0x8, 0x2, 0x6, 0x0, 0x6}}, {0x10, 0x2, [0xe9, 0x4, 0x1, 0x6, 0x100, 0x4]}}, {{0x1c, 0x1, {0xd, 0xfb, 0x8, 0x8, 0x2, 0x5, 0xd, 0x6}}, {0x10, 0x2, [0x7499, 0x3, 0x5, 0x10, 0x2, 0xb]}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

21.370158ms ago: executing program 33 (id=3168):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0x10}, {0x4, 0xfff3}}}, 0x24}}, 0x805)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)=@newtfilter={0x1410, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x13dc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_MATCHALL_ACT={0x13b8, 0x2, [@m_mirred={0xffffffffffffffd4, 0x6, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x98b8, 0x340, 0x6, 0x4, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xfffffffa, 0x5, 0x8, 0x5}, 0x2e3fac55c1b2254f}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x4, 0x1}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x8, 0x8, 0xffffff82}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x7, 0x2000000e, 0xc, 0x4b}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0xfffffffa, 0xf606}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0xffffffffffffffff, 0xffffea2c, 0x3}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x1, 0xffffffff}, 0x2, r2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xc0, 0x0, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x0, 0x5, 0xffffffff, 0xf910}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x0, 0x3}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xa, 0x7, 0xda, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x2, 0x9, 0x6}, 0x56712078cc8e4236, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8000, 0x8, 0x1, 0x8}, 0x1}}]}, {0x46, 0x6, "f1345655f2ce84a28133bdd17e3ccd65cf63b6d8fedeb1a18fef4b934eedc86449ad75331d86ebdd34f00765845269af6776fbcab3e8125c1fccbc957593a71c5cea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x70, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x5, 0x6, 0x4c5, 0x2e}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0xffffffff, 0x97d5}, 0x31}}]}, {0xa, 0x6, "15838c9d45e5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0xa, 0xbc, 0x8, 0x1, 0x1}, 0x3}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x2}}]}}]}, 0x1410}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 34 (id=3167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}}}]}, 0x4c}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

481): avc:  denied  { create } for  pid=15585 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  717.052588][T10205] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  717.162593][ T8672] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  717.174887][T12144] team0 (unregistering): Port device team_slave_1 removed
[  717.191616][T12144] team0 (unregistering): Port device team_slave_0 removed
[  717.223647][T10205] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  717.236972][T10205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.250773][T10205] usb 5-1: config 0 descriptor??
[  717.315620][ T8672] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  717.324869][ T8672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.335511][ T8672] usb 3-1: config 0 descriptor??
[  717.345107][ T8672] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  717.357851][T15488] 8021q: adding VLAN 0 to HW filter on device team0
[  717.368723][T12151] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.375835][T12151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.387668][T12147] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.394794][T12147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.484496][T10205] usb 5-1: USB disconnect, device number 82
[  717.504986][T15488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  717.537430][T15488] veth0_vlan: entered promiscuous mode
[  717.550331][ T8672] gp8psk: usb in 128 operation failed.
[  717.558769][ T8672] gp8psk: usb in 137 operation failed.
[  717.561848][T12144] IPVS: stop unused estimator thread 0...
[  717.565746][T15488] veth1_vlan: entered promiscuous mode
[  717.578034][ T8672] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  717.582900][ T5830] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  717.594574][ T8672] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  717.608331][ T8672] usb 3-1: USB disconnect, device number 64
[  717.611430][T15488] veth0_macvtap: entered promiscuous mode
[  717.625404][T15488] veth1_macvtap: entered promiscuous mode
[  717.637912][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.648652][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.659145][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.669759][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.679986][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.691186][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.701109][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  717.712160][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.723268][T15488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.733510][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.744343][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.754381][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.764896][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.774765][ T5830] usb 4-1: Using ep0 maxpacket: 16
[  717.775030][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.783401][ T5830] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  717.791070][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.801446][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.809940][T15488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  717.820755][ T5830] usb 4-1: Product: syz
[  717.827901][T13600] Bluetooth: hci5: command tx timeout
[  717.832282][ T5830] usb 4-1: Manufacturer: syz
[  717.837455][T15488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  717.843705][ T5830] usb 4-1: SerialNumber: syz
[  717.852913][T15488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.867941][T15488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.874184][ T5830] usb 4-1: config 0 descriptor??
[  717.876932][T15488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.888442][ T5830] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  717.890951][T15488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.908203][T15488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.943705][T12151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.951530][T12151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.969961][T12151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.978572][T12151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.990539][   T29] audit: type=1400 audit(1737677965.916:482): avc:  denied  { mounton } for  pid=15488 comm="syz-executor" path="/root/syzkaller.XCfuV1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  718.019653][   T29] audit: type=1400 audit(1737677965.956:483): avc:  denied  { mount } for  pid=15488 comm="syz-executor" name="/" dev="gadgetfs" ino=7371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  719.174049][ T5830] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  719.200976][ T8672] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  719.341272][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'.
[  719.435289][ T8672] usb 2-1: Using ep0 maxpacket: 32
[  719.441883][ T8672] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  719.451092][ T8672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.460426][ T8672] usb 2-1: config 0 descriptor??
[  719.467314][ T8672] as10x_usb: device has been detected
[  719.472932][ T8672] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  719.483924][ T8672] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  719.494285][ T8672] as10x_usb: error during firmware upload part1
[  719.500681][ T8672] Registered device nBox DVB-T Dongle
[  719.628206][T15632] sp0: Synchronizing with TNC
[  719.657027][T10205] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  719.836831][T10205] usb 1-1: Using ep0 maxpacket: 16
[  719.872562][ T8672] usb 2-1: USB disconnect, device number 38
[  719.886051][T10205] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  719.899821][T10205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.909037][T10205] usb 1-1: Product: syz
[  719.914762][T10205] usb 1-1: Manufacturer: syz
[  719.919566][T10205] usb 1-1: SerialNumber: syz
[  719.930414][ T8672] Unregistered device nBox DVB-T Dongle
[  719.931278][T10205] usb 1-1: config 0 descriptor??
[  719.946817][ T8672] as10x_usb: device has been disconnected
[  719.957328][T10205] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  720.407440][T10205] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  720.413604][T15611] futex_wake_op: syz.1.2635 tries to shift op by -1; fix this program
[  720.447775][ T5830] usb 4-1: USB disconnect, device number 85
[  720.832567][ T8672] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  721.012611][ T8672] usb 2-1: Using ep0 maxpacket: 32
[  721.019052][ T8672] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  721.028225][ T8672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.037640][ T8672] usb 2-1: config 0 descriptor??
[  721.044876][ T8672] as10x_usb: device has been detected
[  721.050469][ T8672] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  721.062203][ T8672] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  721.074451][ T8672] as10x_usb: error during firmware upload part1
[  721.080887][ T8672] Registered device nBox DVB-T Dongle
[  721.122944][ T5830] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  721.271073][ T8672] usb 2-1: USB disconnect, device number 39
[  721.282306][ T8672] Unregistered device nBox DVB-T Dongle
[  721.282607][ T5830] usb 3-1: Using ep0 maxpacket: 32
[  721.282887][ T8672] as10x_usb: device has been disconnected
[  721.291361][ T5830] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  721.309093][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.349645][ T5830] usb 3-1: config 0 descriptor??
[  721.362828][ T5830] as10x_usb: device has been detected
[  721.368885][ T5830] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  721.386370][ T5830] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  721.396881][ T5830] as10x_usb: error during firmware upload part1
[  721.403488][ T5830] Registered device nBox DVB-T Dongle
[  721.472535][ T5907] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  721.580727][T15651] futex_wake_op: syz.2.2670 tries to shift op by -1; fix this program
[  721.590340][T15651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.599248][T15651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.611469][ T5830] usb 3-1: USB disconnect, device number 65
[  721.621779][ T5830] Unregistered device nBox DVB-T Dongle
[  721.622562][ T5830] as10x_usb: device has been disconnected
[  721.654628][ T5907] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  721.663945][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.674350][ T5907] usb 5-1: config 0 descriptor??
[  721.692712][ T5873] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  721.842679][ T5873] usb 4-1: Using ep0 maxpacket: 16
[  721.852751][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11
[  721.866057][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57923, setting to 1024
[  721.883341][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  721.994151][ T5873] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  722.003381][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.025345][ T5873] usb 4-1: config 0 descriptor??
[  722.027249][    T9] usb 5-1: USB disconnect, device number 83
[  722.293156][ T5830] usb 1-1: USB disconnect, device number 77
[  723.366877][ T5873] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001C/input/input32
[  723.510727][ T5873] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  724.319686][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'.
[  725.353440][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2686'.
[  725.354132][    T9] usb 4-1: USB disconnect, device number 86
[  725.732559][ T5873] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  725.952695][ T5873] usb 3-1: Using ep0 maxpacket: 16
[  725.991772][ T5873] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  726.012524][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.020651][ T5873] usb 3-1: Product: syz
[  726.025382][ T5873] usb 3-1: Manufacturer: syz
[  726.029989][ T5873] usb 3-1: SerialNumber: syz
[  726.042048][ T5873] usb 3-1: config 0 descriptor??
[  726.052629][T15609] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[  726.060461][ T5830] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  726.060790][ T5873] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  726.214168][T15609] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  726.223519][T15609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.231737][ T5830] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  726.242887][T15609] usb 5-1: config 0 descriptor??
[  726.248393][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.258115][T15609] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  726.267590][ T5830] usb 2-1: config 0 descriptor??
[  726.382870][ T5907] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  726.462137][T15609] gp8psk: usb in 128 operation failed.
[  726.468160][T15609] gp8psk: usb in 137 operation failed.
[  726.473960][T15609] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  726.489231][ T5830] usb 2-1: USB disconnect, device number 40
[  726.503888][T15609] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  726.519700][T15609] usb 5-1: USB disconnect, device number 84
[  726.534554][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.550401][ T5907] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  726.561875][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  726.587678][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  726.603146][ T5907] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  726.613043][ T5907] usb 4-1: Manufacturer: syz
[  726.627188][ T5907] usb 4-1: config 0 descriptor??
[  726.634230][ T5907] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  726.738335][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'.
[  726.747523][T15740] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2692'.
[  726.819592][ T5873] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[  728.402748][   T29] audit: type=1400 audit(1737677976.326:484): avc:  denied  { connect } for  pid=15766 comm="syz.1.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  728.423419][   T29] audit: type=1400 audit(1737677976.326:485): avc:  denied  { shutdown } for  pid=15766 comm="syz.1.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  729.345778][T15609] usb 4-1: USB disconnect, device number 87
[  729.380742][ T8672] usb 3-1: USB disconnect, device number 66
[  729.381294][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'.
[  730.936341][ T5873] IPVS: starting estimator thread 0...
[  731.345731][T15821] IPVS: using max 55 ests per chain, 132000 per kthread
[  731.453883][   T29] audit: type=1400 audit(1737677979.296:486): avc:  denied  { create } for  pid=15831 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  731.473812][   T29] audit: type=1400 audit(1737677979.296:487): avc:  denied  { connect } for  pid=15831 comm="syz.4.2725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  731.938906][   T29] audit: type=1400 audit(1737677979.586:488): avc:  denied  { getopt } for  pid=15827 comm="syz.3.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  732.169479][T15841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2727'.
[  732.189301][T15841] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.250869][T15841] bridge_slave_0 (unregistering): left promiscuous mode
[  732.258140][T15841] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.272625][T15841] bridge_slave_0 (unregistering): left allmulticast mode
[  732.341140][T15846] pimreg: entered allmulticast mode
[  732.488485][T15868] tipc: Started in network mode
[  732.493697][T15868] tipc: Node identity 0e3f7a84e82, cluster identity 4711
[  732.500842][T15868] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[  733.390543][   T29] audit: type=1400 audit(1737677981.316:489): avc:  denied  { bind } for  pid=15887 comm="syz.4.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  733.814342][T15609] tipc: Node number set to 3860822660
[  734.695036][   T29] audit: type=1400 audit(1737677982.626:490): avc:  denied  { read } for  pid=15919 comm="syz.3.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  734.826112][   T29] audit: type=1400 audit(1737677982.746:491): avc:  denied  { connect } for  pid=15915 comm="syz.4.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  735.028473][   T29] audit: type=1400 audit(1737677982.846:492): avc:  denied  { read } for  pid=15928 comm="syz.2.2757" laddr=127.0.0.1 lport=51082 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  735.837352][   T29] audit: type=1400 audit(1737677983.766:493): avc:  denied  { mount } for  pid=15950 comm="syz.2.2764" name="/" dev="ramfs" ino=54317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  735.859616][    C0] vkms_vblank_simulate: vblank timer overrun
[  735.867689][   T29] audit: type=1400 audit(1737677983.766:494): avc:  denied  { unmount } for  pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  735.891221][   T29] audit: type=1326 audit(1737677983.826:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d578cd29 code=0x7ffc0000
[  735.918841][   T29] audit: type=1326 audit(1737677983.846:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d578cd29 code=0x7ffc0000
[  735.942222][    C0] vkms_vblank_simulate: vblank timer overrun
[  735.948707][   T29] audit: type=1326 audit(1737677983.846:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f91d578cd29 code=0x7ffc0000
[  736.076713][   T29] audit: type=1326 audit(1737677983.846:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d578cd29 code=0x7ffc0000
[  736.468696][   T29] audit: type=1326 audit(1737677983.846:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15952 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d578cd29 code=0x7ffc0000
[  736.492074][    C0] vkms_vblank_simulate: vblank timer overrun
[  736.605632][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'.
[  736.630998][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  736.652702][T15966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.678458][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.853489][T15966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.793953][T16026] sch_tbf: burst 4398 is lower than device lo mtu (39799) !
[  740.834187][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'.
[  740.932586][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  740.932603][   T29] audit: type=1400 audit(1737677988.846:531): avc:  denied  { ioctl } for  pid=16021 comm="syz.4.2788" path="socket:[53899]" dev="sockfs" ino=53899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  741.020617][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2791'.
[  743.561091][   T29] audit: type=1400 audit(1737677991.286:532): avc:  denied  { ioctl } for  pid=16080 comm="syz.0.2806" path="socket:[54467]" dev="sockfs" ino=54467 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  743.735504][   T29] audit: type=1400 audit(1737677991.286:533): avc:  denied  { write } for  pid=16080 comm="syz.0.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  743.805168][T16095] tipc: Can't bind to reserved service type 1
[  743.910235][T16097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  743.919747][T16096] tipc: Resetting bearer <eth:syzkaller0>
[  743.982152][T16106] trusted_key: syz.1.2807 sent an empty control message without MSG_MORE.
[  744.931649][T16111] netlink: 'syz.4.2815': attribute type 2 has an invalid length.
[  745.020734][T16096] tipc: Disabling bearer <eth:syzkaller0>
[  745.031465][T16111] fþ²¹¥‰: entered promiscuous mode
[  745.576923][T16136] macvlan2: entered promiscuous mode
[  745.582393][T16136] macvlan2: entered allmulticast mode
[  745.690577][T15609] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  746.653704][T15609] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  746.672069][T15609] usb 2-1: config 0 has no interface number 0
[  746.678829][T15609] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  746.694711][T16147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2827'.
[  746.703977][T16147] netlink: 5044 bytes leftover after parsing attributes in process `syz.2.2827'.
[  746.800272][T15609] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  746.810129][T15609] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  746.819932][T15609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.832832][T15609] usb 2-1: config 0 descriptor??
[  746.853371][T15609] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  747.125212][T16123] iowarrior 2-1:0.1: Error -90 while submitting URB
[  747.235806][ T8672] usb 2-1: USB disconnect, device number 41
[  748.081673][T16182] hub 9-0:1.0: USB hub found
[  748.086551][T16182] hub 9-0:1.0: 1 port detected
[  748.147997][T16184] ip6gre1: entered allmulticast mode
[  749.654189][T16219] bond0: entered promiscuous mode
[  749.659452][T16219] bond_slave_0: entered promiscuous mode
[  749.665376][T16219] bond_slave_1: entered promiscuous mode
[  749.674831][T16219] batadv0: entered promiscuous mode
[  750.094175][   T29] audit: type=1400 audit(1737677998.006:534): avc:  denied  { listen } for  pid=16210 comm="syz.4.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  750.187999][T16219] 8021q: adding VLAN 0 to HW filter on device hsr1
[  750.224537][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2855'.
[  750.255346][T16230] 8021q: adding VLAN 0 to HW filter on device bond3
[  750.270660][T16230] bond3: option mode: unable to set because the bond device is up
[  750.337078][   T29] audit: type=1400 audit(1737677998.266:535): avc:  denied  { map } for  pid=16241 comm="syz.0.2858" path="socket:[54189]" dev="sockfs" ino=54189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  750.965827][T16256] capability: warning: `syz.4.2860' uses 32-bit capabilities (legacy support in use)
[  751.448449][   T29] audit: type=1400 audit(1737677999.376:536): avc:  denied  { ioctl } for  pid=16261 comm="syz.0.2864" path="socket:[54717]" dev="sockfs" ino=54717 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  753.719524][T16290] can0: slcan on ptm0.
[  753.803374][T16285] can0 (unregistered): slcan off ptm0.
[  753.864872][T16310] bridge0: port 3(syz_tun) entered blocking state
[  753.872125][T16310] bridge0: port 3(syz_tun) entered disabled state
[  753.880456][T16310] syz_tun: entered allmulticast mode
[  753.900240][T16310] syz_tun: entered promiscuous mode
[  753.914283][T16310] bridge0: port 3(syz_tun) entered blocking state
[  753.920858][T16310] bridge0: port 3(syz_tun) entered forwarding state
[  753.940402][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'.
[  754.096344][T16310] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.730997][T16374] sp0: Synchronizing with TNC
[  756.619840][T16342] lo speed is unknown, defaulting to 1000
[  756.626994][T16342] lo speed is unknown, defaulting to 1000
[  756.746863][ T5830] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  756.759426][T16342] lo speed is unknown, defaulting to 1000
[  756.776296][T16342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  756.875920][T16342] lo speed is unknown, defaulting to 1000
[  756.882311][T16342] lo speed is unknown, defaulting to 1000
[  756.891339][T16342] lo speed is unknown, defaulting to 1000
[  756.903468][T16342] lo speed is unknown, defaulting to 1000
[  757.304086][T16342] lo speed is unknown, defaulting to 1000
[  757.330804][ T5830] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  757.528390][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.599031][T16342] lo speed is unknown, defaulting to 1000
[  757.647779][ T5830] usb 2-1: config 0 descriptor??
[  757.671103][ T5830] usb 2-1: can't set config #0, error -71
[  757.702978][ T5830] usb 2-1: USB disconnect, device number 42
[  757.979338][T16414] sp0: Synchronizing with TNC
[  759.392887][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'.
[  759.582376][T16430] sp0: Synchronizing with TNC
[  760.268732][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  760.276357][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  760.284535][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  760.292957][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  760.301214][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  760.309080][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  760.467996][T16443] chnl_net:caif_netlink_parms(): no params data found
[  760.520970][T12152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.544351][T16443] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.551570][T16443] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.559168][T16443] bridge_slave_0: entered allmulticast mode
[  760.566191][T16443] bridge_slave_0: entered promiscuous mode
[  760.576017][T16443] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.585168][T16443] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.593916][T16443] bridge_slave_1: entered allmulticast mode
[  760.600673][T16443] bridge_slave_1: entered promiscuous mode
[  760.699045][T12152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.966611][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.979084][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.700161][T12152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.722371][T16443] team0: Port device team_slave_0 added
[  761.729197][T16443] team0: Port device team_slave_1 added
[  762.223434][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.230418][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.269693][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.367592][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.377552][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.404087][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.404691][T13600] Bluetooth: hci2: command tx timeout
[  762.423637][T12152] tipc: Resetting bearer <eth:netdevsim0>
[  762.508969][T12152] tipc: Disabling bearer <eth:netdevsim0>
[  762.672547][ T5907] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  762.905841][T12152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.929659][T16443] hsr_slave_0: entered promiscuous mode
[  762.937979][T16443] hsr_slave_1: entered promiscuous mode
[  763.083889][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  764.061876][ T5907] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  764.080187][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  764.096048][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  764.105654][ T5907] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  764.147053][T16496] sp0: Synchronizing with TNC
[  764.472707][T13600] Bluetooth: hci2: command tx timeout
[  764.558152][ T5907] usb 2-1: Manufacturer: syz
[  764.589392][T12152] bridge_slave_1: left allmulticast mode
[  764.600083][T12152] bridge_slave_1: left promiscuous mode
[  764.612803][T12152] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.621085][ T5907] usb 2-1: config 0 descriptor??
[  764.629627][ T5907] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  764.936301][T12152] bond0 (unregistering): left promiscuous mode
[  764.949042][T12152] bond_slave_0: left promiscuous mode
[  765.041160][T12152] bond_slave_1: left promiscuous mode
[  765.193553][T12152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  765.224335][T12152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  765.239181][T12152] bond0 (unregistering): Released all slaves
[  765.377571][T12152] tipc: Left network mode
[  765.932621][    T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  765.943987][ T5873] usb 2-1: USB disconnect, device number 43
[  766.100665][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  766.110683][T16443] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  766.137255][T16443] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  766.589036][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  766.607237][T13600] Bluetooth: hci2: command tx timeout
[  766.670331][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  766.679922][T12152] batadv0: left promiscuous mode
[  766.694645][T12152] hsr_slave_0: left promiscuous mode
[  766.701216][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.711389][T12152] hsr_slave_1: left promiscuous mode
[  766.718472][T12152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.726288][T12152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  766.738365][T12152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  766.754164][T12152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  766.769037][T16517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  766.781066][T12152] veth1_macvtap: left promiscuous mode
[  766.787973][T12152] veth0_macvtap: left promiscuous mode
[  766.801073][T12152] veth1_vlan: left promiscuous mode
[  766.813701][T12152] veth0_vlan: left promiscuous mode
[  766.825166][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  766.842580][T15609] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  767.002496][T15609] usb 5-1: Using ep0 maxpacket: 16
[  767.013856][T15609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11
[  767.037938][T15609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57923, setting to 1024
[  767.064178][T15609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  767.095006][T16443] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  767.102042][T15609] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  767.126338][T16443] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  767.166519][T15609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.206363][T15609] usb 5-1: config 0 descriptor??
[  767.214421][T12152] pimreg (unregistering): left allmulticast mode
[  768.080651][T12152] team0 (unregistering): Port device team_slave_1 removed
[  768.112595][T12152] team0 (unregistering): Port device team_slave_0 removed
[  768.277196][T16443] 8021q: adding VLAN 0 to HW filter on device bond0
[  768.293471][T16443] 8021q: adding VLAN 0 to HW filter on device team0
[  768.462604][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  768.511544][T12144] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.518748][T12144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.622566][T13600] Bluetooth: hci2: command tx timeout
[  768.630925][T12144] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.638047][T12144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  768.646745][T15609] usbhid 5-1:0.0: can't add hid device: -71
[  768.656511][T15609] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  768.675968][T15609] usb 5-1: USB disconnect, device number 85
[  768.681441][T12152] IPVS: stop unused estimator thread 0...
[  768.715548][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  768.737185][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.751203][    T9] usb 2-1: config 0 descriptor??
[  768.815237][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.843992][T16443] veth0_vlan: entered promiscuous mode
[  768.855103][T16443] veth1_vlan: entered promiscuous mode
[  768.879128][T16443] veth0_macvtap: entered promiscuous mode
[  768.888916][T16443] veth1_macvtap: entered promiscuous mode
[  768.904972][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  768.917355][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.927429][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  768.938134][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.951158][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  768.961851][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.976285][ T5873] usb 2-1: USB disconnect, device number 44
[  768.992249][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  769.006784][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  769.020174][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  769.031062][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  769.043667][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  769.054291][T16443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  769.065754][T16443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  769.077098][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  769.116276][T16443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  769.125603][T16443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  769.137438][T16443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  769.156602][T16443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  769.202381][    T9] usb 1-1: USB disconnect, device number 78
[  769.337313][T12151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.373797][T12151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.435389][T12144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.451355][T12144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.721737][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2941'.
[  771.206197][T16687] hugetlbfs: Bad value 'Ð' for mount option 'size'
[  771.206197][T16687] 
[  771.773384][T16699] FAULT_INJECTION: forcing a failure.
[  771.773384][T16699] name failslab, interval 1, probability 0, space 0, times 0
[  771.800581][T16699] CPU: 1 UID: 0 PID: 16699 Comm: syz.4.2951 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  771.800605][T16699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  771.800615][T16699] Call Trace:
[  771.800620][T16699]  <TASK>
[  771.800627][T16699]  dump_stack_lvl+0x16c/0x1f0
[  771.800651][T16699]  should_fail_ex+0x497/0x5b0
[  771.800670][T16699]  ? fs_reclaim_acquire+0xae/0x150
[  771.800689][T16699]  should_failslab+0xc2/0x120
[  771.800710][T16699]  __kmalloc_noprof+0xcb/0x510
[  771.800735][T16699]  tomoyo_realpath_from_path+0xb9/0x720
[  771.800769][T16699]  ? tomoyo_path_number_perm+0x235/0x590
[  771.800793][T16699]  ? tomoyo_path_number_perm+0x235/0x590
[  771.800818][T16699]  tomoyo_path_number_perm+0x248/0x590
[  771.800839][T16699]  ? tomoyo_path_number_perm+0x235/0x590
[  771.800864][T16699]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  771.800888][T16699]  ? rcu_is_watching+0x12/0xc0
[  771.800916][T16699]  ? preempt_count_add+0x76/0x150
[  771.800941][T16699]  ? __pfx_lock_release+0x10/0x10
[  771.800961][T16699]  ? trace_lock_acquire+0x14e/0x1f0
[  771.800988][T16699]  ? __fget_files+0x40/0x3a0
[  771.801009][T16699]  ? lock_acquire+0x2f/0xb0
[  771.801030][T16699]  ? __fget_files+0x40/0x3a0
[  771.801053][T16699]  ? __fget_files+0x206/0x3a0
[  771.801074][T16699]  security_file_ioctl+0x9b/0x240
[  771.801100][T16699]  __x64_sys_ioctl+0xb7/0x200
[  771.801119][T16699]  do_syscall_64+0xcd/0x250
[  771.801141][T16699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.801165][T16699] RIP: 0033:0x7f302a18cd29
[  771.801180][T16699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.801198][T16699] RSP: 002b:00007f302b076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  771.801217][T16699] RAX: ffffffffffffffda RBX: 00007f302a3a6080 RCX: 00007f302a18cd29
[  771.801229][T16699] RDX: 00000000200101c0 RSI: 00000000c1205531 RDI: 0000000000000009
[  771.801241][T16699] RBP: 00007f302b076090 R08: 0000000000000000 R09: 0000000000000000
[  771.801253][T16699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.801264][T16699] R13: 0000000000000000 R14: 00007f302a3a6080 R15: 00007ffe3e6a1778
[  771.801281][T16699]  </TASK>
[  771.801343][T16699] ERROR: Out of memory at tomoyo_realpath_from_path.
[  772.603271][T16717] futex_wake_op: syz.0.2956 tries to shift op by -1; fix this program
[  773.133973][ T5873] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  773.213051][ T6795] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  773.377163][ T5873] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  773.412727][ T6795] usb 1-1: device descriptor read/64, error -71
[  773.482713][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.593087][ T5873] usb 3-1: config 0 descriptor??
[  773.703411][ T6795] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  773.840439][T16743] hugetlbfs: Bad value 'Ð' for mount option 'size'
[  773.840439][T16743] 
[  773.850914][ T6795] usb 1-1: device descriptor read/64, error -71
[  773.882624][ T5873] usb 3-1: USB disconnect, device number 67
[  774.021969][ T6795] usb usb1-port1: attempt power cycle
[  774.372712][ T6795] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  774.414351][ T6795] usb 1-1: device descriptor read/8, error -71
[  774.700328][ T6795] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  774.711724][T16752] hugetlbfs: Bad value 'Ð' for mount option 'size'
[  774.711724][T16752] 
[  774.725165][ T6795] usb 1-1: device descriptor read/8, error -71
[  774.855406][ T6795] usb usb1-port1: unable to enumerate USB device
[  775.942629][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'.
[  775.952706][T16779] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2974'.
[  776.718424][   T29] audit: type=1400 audit(1737678024.646:537): avc:  denied  { create } for  pid=16787 comm="syz.4.2977" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  776.816246][   T29] audit: type=1400 audit(1737678024.676:538): avc:  denied  { write } for  pid=16787 comm="syz.4.2977" name="file0" dev="tmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  776.849711][   T29] audit: type=1400 audit(1737678024.676:539): avc:  denied  { open } for  pid=16787 comm="syz.4.2977" path="/566/file0" dev="tmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  776.873841][   T29] audit: type=1400 audit(1737678024.686:540): avc:  denied  { ioctl } for  pid=16787 comm="syz.4.2977" path="/566/file0" dev="tmpfs" ino=3036 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  777.403833][T10205] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  777.617037][T16809] FAULT_INJECTION: forcing a failure.
[  777.617037][T16809] name failslab, interval 1, probability 0, space 0, times 0
[  777.630250][T16809] CPU: 0 UID: 0 PID: 16809 Comm: syz.1.2979 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  777.630275][T16809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  777.630287][T16809] Call Trace:
[  777.630293][T16809]  <TASK>
[  777.630301][T16809]  dump_stack_lvl+0x16c/0x1f0
[  777.630325][T16809]  should_fail_ex+0x497/0x5b0
[  777.630344][T16809]  ? fs_reclaim_acquire+0xae/0x150
[  777.630364][T16809]  should_failslab+0xc2/0x120
[  777.630385][T16809]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  777.630406][T16809]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  777.630433][T16809]  ? vm_area_dup+0x21/0x2f0
[  777.630456][T16809]  vm_area_dup+0x21/0x2f0
[  777.630477][T16809]  __split_vma+0x181/0x1160
[  777.630499][T16809]  ? vma_merge_existing_range+0x931/0x1fa0
[  777.630520][T16809]  ? __pfx___split_vma+0x10/0x10
[  777.630546][T16809]  ? __pfx_stack_trace_save+0x10/0x10
[  777.630568][T16809]  ? ima_file_mprotect+0x1b9/0x690
[  777.630593][T16809]  vma_modify.constprop.0+0x2ed/0x3b0
[  777.630615][T16809]  vma_modify_flags+0x209/0x2a0
[  777.630638][T16809]  ? __pfx_vma_modify_flags+0x10/0x10
[  777.630664][T16809]  mprotect_fixup+0x2c2/0xbe0
[  777.630689][T16809]  ? __pfx_mprotect_fixup+0x10/0x10
[  777.630711][T16809]  ? selinux_file_mprotect+0x161/0x610
[  777.630737][T16809]  do_mprotect_pkey+0x9c2/0xd30
[  777.630762][T16809]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  777.630787][T16809]  ? __fget_files+0x206/0x3a0
[  777.630812][T16809]  ? __pfx_ksys_write+0x10/0x10
[  777.630832][T16809]  ? rcu_is_watching+0x12/0xc0
[  777.630857][T16809]  __x64_sys_mprotect+0x78/0xc0
[  777.630880][T16809]  do_syscall_64+0xcd/0x250
[  777.630901][T16809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.630924][T16809] RIP: 0033:0x7fceee98cd29
[  777.630939][T16809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  777.630954][T16809] RSP: 002b:00007fceec7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  777.630972][T16809] RAX: ffffffffffffffda RBX: 00007fceeeba6160 RCX: 00007fceee98cd29
[  777.630985][T16809] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000000020000000
[  777.630996][T16809] RBP: 00007fceec7f6090 R08: 0000000000000000 R09: 0000000000000000
[  777.631005][T16809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.631017][T16809] R13: 0000000000000000 R14: 00007fceeeba6160 R15: 00007fff7df89108
[  777.631034][T16809]  </TASK>
[  777.896449][T10205] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  778.011730][T10205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.072897][   T29] audit: type=1400 audit(1737678025.916:541): avc:  denied  { unlink } for  pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=3036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  778.112691][T10205] usb 1-1: config 0 descriptor??
[  778.320480][T16813] futex_wake_op: syz.3.2982 tries to shift op by -1; fix this program
[  778.329896][ T6795] usb 1-1: USB disconnect, device number 83
[  780.402501][T10205] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  780.562624][T10205] usb 3-1: Using ep0 maxpacket: 8
[  780.563575][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'.
[  780.624860][T10205] usb 3-1: unable to get BOS descriptor or descriptor too short
[  780.669685][   T29] audit: type=1400 audit(1737678028.596:542): avc:  denied  { cmd } for  pid=16850 comm="syz.1.2993" path="socket:[57105]" dev="sockfs" ino=57105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  780.703878][T10205] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  780.712062][T10205] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  780.846755][T10205] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  781.271256][T10205] usb 3-1: config 4 has no interface number 0
[  781.449747][T16868] sp0: Synchronizing with TNC
[  781.665491][T10205] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  781.675737][T10205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.801019][T10205] usb 3-1: Product: syz
[  781.805519][T10205] usb 3-1: Manufacturer: syz
[  781.810156][T10205] usb 3-1: SerialNumber: syz
[  782.107796][T10205] usb 3-1: Found UVC 0.02 device syz (04f2:b746)
[  782.122764][T10205] usb 3-1: No streaming interface found for terminal 6.
[  782.158623][T10205] usb 3-1: USB disconnect, device number 68
[  783.058611][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'.
[  783.322561][T10205] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[  783.545132][T10205] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  783.821954][T10205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.847558][T10205] usb 5-1: config 0 descriptor??
[  783.854796][T10205] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  783.972961][T16918] random: crng reseeded on system resumption
[  784.585476][   T29] audit: type=1400 audit(1737678031.906:543): avc:  denied  { write } for  pid=16914 comm="syz.1.3005" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  784.892055][T16928] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  785.128035][T10205] gp8psk: usb in 128 operation failed.
[  785.598881][T10205] gp8psk: usb in 137 operation failed.
[  785.643576][T10205] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  785.691186][T10205] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  785.734763][T10205] usb 5-1: USB disconnect, device number 86
[  785.977656][ T5907] libceph: connect (1)[c::]:6789 error -101
[  786.002860][ T5907] libceph: mon0 (1)[c::]:6789 connect error
[  786.200854][T16943] ceph: No mds server is up or the cluster is laggy
[  786.293419][T16946] FAULT_INJECTION: forcing a failure.
[  786.293419][T16946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.323760][ T8672] libceph: connect (1)[c::]:6789 error -101
[  786.331294][T16957] Process accounting resumed
[  786.379063][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.0.3012 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  786.379092][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  786.379111][T16946] Call Trace:
[  786.379117][T16946]  <TASK>
[  786.379124][T16946]  dump_stack_lvl+0x16c/0x1f0
[  786.379151][T16946]  should_fail_ex+0x497/0x5b0
[  786.379173][T16946]  _copy_to_user+0x32/0xd0
[  786.379196][T16946]  simple_read_from_buffer+0xd0/0x160
[  786.379222][T16946]  proc_fail_nth_read+0x198/0x270
[  786.379248][T16946]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.379275][T16946]  ? bpf_lsm_file_permission+0x9/0x10
[  786.379302][T16946]  ? security_file_permission+0x71/0x210
[  786.379331][T16946]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.379358][T16946]  vfs_read+0x1df/0xbe0
[  786.379380][T16946]  ? __fget_files+0x1fc/0x3a0
[  786.379400][T16946]  ? __pfx___mutex_lock+0x10/0x10
[  786.379422][T16946]  ? __pfx_vfs_read+0x10/0x10
[  786.379445][T16946]  ? __fget_files+0x206/0x3a0
[  786.379470][T16946]  ksys_read+0x12b/0x250
[  786.379489][T16946]  ? __pfx_ksys_read+0x10/0x10
[  786.379509][T16946]  ? rcu_is_watching+0x12/0xc0
[  786.379535][T16946]  ? rcu_is_watching+0x12/0xc0
[  786.379561][T16946]  do_syscall_64+0xcd/0x250
[  786.379583][T16946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.379608][T16946] RIP: 0033:0x7fc21338b73c
[  786.379622][T16946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  786.379640][T16946] RSP: 002b:00007fc214110030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  786.379659][T16946] RAX: ffffffffffffffda RBX: 00007fc2135a5fa0 RCX: 00007fc21338b73c
[  786.379671][T16946] RDX: 000000000000000f RSI: 00007fc2141100a0 RDI: 0000000000000003
[  786.379683][T16946] RBP: 00007fc214110090 R08: 0000000000000000 R09: 0000000000000000
[  786.379695][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.379706][T16946] R13: 0000000000000000 R14: 00007fc2135a5fa0 R15: 00007ffc74f5cad8
[  786.379725][T16946]  </TASK>
[  786.448536][ T8672] libceph: mon0 (1)[c::]:6789 connect error
[  786.765904][T16954] ceph: No mds server is up or the cluster is laggy
[  787.008964][T16969] FAULT_INJECTION: forcing a failure.
[  787.008964][T16969] name failslab, interval 1, probability 0, space 0, times 0
[  787.021961][T16969] CPU: 0 UID: 0 PID: 16969 Comm: syz.4.3017 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  787.021986][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  787.021998][T16969] Call Trace:
[  787.022004][T16969]  <TASK>
[  787.022011][T16969]  dump_stack_lvl+0x16c/0x1f0
[  787.022037][T16969]  should_fail_ex+0x497/0x5b0
[  787.022056][T16969]  ? fs_reclaim_acquire+0xae/0x150
[  787.022077][T16969]  should_failslab+0xc2/0x120
[  787.022102][T16969]  __kmalloc_noprof+0xcb/0x510
[  787.022128][T16969]  ip_options_get+0xae/0x4b0
[  787.022152][T16969]  ? trace_irq_enable.constprop.0+0xea/0x140
[  787.022177][T16969]  ? __pfx_ip_options_get+0x10/0x10
[  787.022198][T16969]  ? do_ip_setsockopt+0xc7a/0x3680
[  787.022224][T16969]  do_ip_setsockopt+0x2718/0x3680
[  787.022249][T16969]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  787.022275][T16969]  ? __pfx___schedule+0x10/0x10
[  787.022298][T16969]  ip_setsockopt+0x59/0xf0
[  787.022323][T16969]  raw_setsockopt+0xb8/0x290
[  787.022348][T16969]  ? __pfx_raw_setsockopt+0x10/0x10
[  787.022373][T16969]  ? sock_common_setsockopt+0x2e/0xf0
[  787.022400][T16969]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  787.022429][T16969]  do_sock_setsockopt+0x222/0x480
[  787.022454][T16969]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  787.022479][T16969]  ? trace_irq_enable.constprop.0+0xea/0x140
[  787.022508][T16969]  __sys_setsockopt+0x1a0/0x230
[  787.022532][T16969]  __x64_sys_setsockopt+0xbd/0x160
[  787.022553][T16969]  ? do_syscall_64+0x9a/0x250
[  787.022574][T16969]  do_syscall_64+0xcd/0x250
[  787.022595][T16969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.022620][T16969] RIP: 0033:0x7f302a18cd29
[  787.022635][T16969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  787.022652][T16969] RSP: 002b:00007f302b076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  787.022671][T16969] RAX: ffffffffffffffda RBX: 00007f302a3a6080 RCX: 00007f302a18cd29
[  787.022683][T16969] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005
[  787.022694][T16969] RBP: 00007f302b076090 R08: 0000000000000005 R09: 0000000000000000
[  787.022706][T16969] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  787.022717][T16969] R13: 0000000000000000 R14: 00007f302a3a6080 R15: 00007ffe3e6a1778
[  787.022735][T16969]  </TASK>
[  787.048929][T12156] Bluetooth: hci1: Frame reassembly failed (-84)
[  787.051092][   T29] audit: type=1400 audit(1737678034.846:544): avc:  denied  { getopt } for  pid=16966 comm="syz.4.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  787.984723][   T29] audit: type=1400 audit(1737678035.916:545): avc:  denied  { create } for  pid=16964 comm="syz.2.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  788.113014][T16994] Process accounting resumed
[  788.162854][   T29] audit: type=1400 audit(1737678035.916:546): avc:  denied  { ioctl } for  pid=16964 comm="syz.2.3015" path="socket:[57558]" dev="sockfs" ino=57558 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  788.181436][ T5907] libceph: connect (1)[c::]:6789 error -101
[  788.341092][ T5907] libceph: mon0 (1)[c::]:6789 connect error
[  788.396290][   T29] audit: type=1400 audit(1737678036.326:547): avc:  denied  { getopt } for  pid=16997 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  788.508558][   T29] audit: type=1400 audit(1737678036.396:548): avc:  denied  { create } for  pid=16999 comm="syz.4.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  788.603154][ T5907] libceph: connect (1)[c::]:6789 error -101
[  788.617263][ T5907] libceph: mon0 (1)[c::]:6789 connect error
[  788.687996][T16990] ceph: No mds server is up or the cluster is laggy
[  788.917113][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'.
[  789.269262][ T5835] Bluetooth: hci1: command 0x1003 tx timeout
[  789.306838][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'.
[  789.315818][T17010] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3026'.
[  789.325568][T13600] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  789.333605][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3025'.
[  789.342790][T17013] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3025'.
[  789.992036][T17017] netlink: 'syz.1.3029': attribute type 5 has an invalid length.
[  791.061208][T17041] FAULT_INJECTION: forcing a failure.
[  791.061208][T17041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  791.074683][T17041] CPU: 1 UID: 0 PID: 17041 Comm: syz.2.3036 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  791.074718][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  791.074728][T17041] Call Trace:
[  791.074734][T17041]  <TASK>
[  791.074741][T17041]  dump_stack_lvl+0x16c/0x1f0
[  791.074766][T17041]  should_fail_ex+0x497/0x5b0
[  791.074787][T17041]  _copy_from_user+0x2e/0xd0
[  791.074808][T17041]  copy_msghdr_from_user+0x99/0x160
[  791.074831][T17041]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  791.074854][T17041]  ? rcu_is_watching+0x12/0xc0
[  791.074877][T17041]  ? lock_release+0x4e2/0x6f0
[  791.074894][T17041]  ? get_pid_task+0xfc/0x250
[  791.074909][T17041]  ___sys_sendmsg+0xff/0x1e0
[  791.074926][T17041]  ? get_pid_task+0x35/0x250
[  791.074941][T17041]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.074963][T17041]  ? lock_release+0x4e2/0x6f0
[  791.074985][T17041]  ? __pfx_lock_release+0x10/0x10
[  791.075004][T17041]  ? trace_lock_acquire+0x14e/0x1f0
[  791.075035][T17041]  ? __fget_files+0x206/0x3a0
[  791.075056][T17041]  __sys_sendmsg+0x16e/0x220
[  791.075076][T17041]  ? __pfx___sys_sendmsg+0x10/0x10
[  791.075102][T17041]  ? rcu_is_watching+0x12/0xc0
[  791.075124][T17041]  ? rcu_is_watching+0x12/0xc0
[  791.075148][T17041]  do_syscall_64+0xcd/0x250
[  791.075168][T17041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.075191][T17041] RIP: 0033:0x7fd943b8cd29
[  791.075205][T17041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  791.075222][T17041] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.075238][T17041] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  791.075250][T17041] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  791.075262][T17041] RBP: 00007fd944aa4090 R08: 0000000000000000 R09: 0000000000000000
[  791.075272][T17041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.075284][T17041] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  791.075302][T17041]  </TASK>
[  791.342537][    T9] usb 5-1: new full-speed USB device number 87 using dummy_hcd
[  791.390602][T17047] usb usb8: usbfs: process 17047 (syz.2.3037) did not claim interface 0 before use
[  791.543598][    T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  791.561928][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.629591][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'.
[  791.638743][T17052] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3038'.
[  791.925864][    T9] usb 5-1: config 0 descriptor??
[  791.935039][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  792.140471][    T9] gp8psk: usb in 128 operation failed.
[  792.150563][    T9] gp8psk: usb in 137 operation failed.
[  792.159498][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  792.184384][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  792.214918][    T9] usb 5-1: USB disconnect, device number 87
[  793.125459][   T29] audit: type=1400 audit(1737678041.036:549): avc:  denied  { bind } for  pid=17065 comm="syz.1.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  793.370365][T17080] FAULT_INJECTION: forcing a failure.
[  793.370365][T17080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  793.383860][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.4.3046 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  793.383885][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  793.383896][T17080] Call Trace:
[  793.383904][T17080]  <TASK>
[  793.383911][T17080]  dump_stack_lvl+0x16c/0x1f0
[  793.383936][T17080]  should_fail_ex+0x497/0x5b0
[  793.383958][T17080]  _copy_from_user+0x2e/0xd0
[  793.383979][T17080]  copy_msghdr_from_user+0x99/0x160
[  793.384004][T17080]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  793.384030][T17080]  ? _kstrtoull+0x146/0x200
[  793.384055][T17080]  ? __pfx__kstrtoull+0x10/0x10
[  793.384079][T17080]  ? lock_release+0x4e2/0x6f0
[  793.384101][T17080]  ___sys_sendmsg+0xff/0x1e0
[  793.384124][T17080]  ? __pfx____sys_sendmsg+0x10/0x10
[  793.384148][T17080]  ? __pfx_kstrtouint+0x10/0x10
[  793.384178][T17080]  ? trace_lock_acquire+0x14e/0x1f0
[  793.384214][T17080]  __sys_sendmmsg+0x201/0x420
[  793.384238][T17080]  ? __pfx___sys_sendmmsg+0x10/0x10
[  793.384272][T17080]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  793.384299][T17080]  ? fput+0x67/0x440
[  793.384323][T17080]  ? ksys_write+0x1ba/0x250
[  793.384342][T17080]  ? __pfx_ksys_write+0x10/0x10
[  793.384363][T17080]  __x64_sys_sendmmsg+0x9c/0x100
[  793.384387][T17080]  do_syscall_64+0xcd/0x250
[  793.384409][T17080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.384434][T17080] RIP: 0033:0x7f302a18cd29
[  793.384448][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  793.384466][T17080] RSP: 002b:00007f302b097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  793.384485][T17080] RAX: ffffffffffffffda RBX: 00007f302a3a5fa0 RCX: 00007f302a18cd29
[  793.384498][T17080] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004
[  793.384509][T17080] RBP: 00007f302b097090 R08: 0000000000000000 R09: 0000000000000000
[  793.384520][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.384531][T17080] R13: 0000000000000000 R14: 00007f302a3a5fa0 R15: 00007ffe3e6a1778
[  793.384549][T17080]  </TASK>
[  794.355668][T17097] fuse: Bad value for 'fd'
[  794.410073][   T29] audit: type=1400 audit(1737678042.336:550): avc:  denied  { name_bind } for  pid=17098 comm="syz.3.3052" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  795.386035][ T6795] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  795.467829][T10205] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  795.630026][T10205] usb 5-1: Using ep0 maxpacket: 8
[  795.738957][T13600] Bluetooth: hci3: unexpected event for opcode 0x0402
[  795.749170][ T6795] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  795.765180][T10205] usb 5-1: unable to get BOS descriptor or descriptor too short
[  795.773179][ T6795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.799931][T10205] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  795.852321][ T6795] usb 3-1: config 0 descriptor??
[  795.877567][T10205] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  795.923982][ T6795] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  795.958048][T10205] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  796.089870][   T29] audit: type=1400 audit(1737678043.906:551): avc:  denied  { setopt } for  pid=17123 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  796.212539][T10205] usb 5-1: config 4 has no interface number 0
[  796.225191][ T6795] gp8psk: usb in 128 operation failed.
[  796.614970][ T6795] gp8psk: usb in 137 operation failed.
[  796.622236][ T6795] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  796.636459][T10205] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  796.645883][T10205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.654368][ T6795] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  796.664221][T10205] usb 5-1: Product: syz
[  796.706560][T10205] usb 5-1: Manufacturer: syz
[  796.711420][ T6795] usb 3-1: USB disconnect, device number 69
[  796.722082][T10205] usb 5-1: SerialNumber: syz
[  797.100605][T10205] usb 5-1: Found UVC 0.02 device syz (04f2:b746)
[  797.121124][T10205] usb 5-1: No streaming interface found for terminal 6.
[  797.152706][T10205] usb 5-1: USB disconnect, device number 88
[  797.689406][T17157] FAULT_INJECTION: forcing a failure.
[  797.689406][T17157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.745677][   T29] audit: type=1400 audit(1737678045.636:552): avc:  denied  { write } for  pid=17154 comm="syz.1.3073" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  797.936610][T17157] CPU: 0 UID: 0 PID: 17157 Comm: syz.4.3072 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  797.936640][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  797.936652][T17157] Call Trace:
[  797.936658][T17157]  <TASK>
[  797.936665][T17157]  dump_stack_lvl+0x16c/0x1f0
[  797.936692][T17157]  should_fail_ex+0x497/0x5b0
[  797.936714][T17157]  _copy_from_user+0x2e/0xd0
[  797.936736][T17157]  __sys_bpf+0x21c/0x49c0
[  797.936765][T17157]  ? __pfx_lock_release+0x10/0x10
[  797.936786][T17157]  ? __pfx___sys_bpf+0x10/0x10
[  797.936813][T17157]  ? vfs_write+0x306/0x1150
[  797.936836][T17157]  ? __mutex_unlock_slowpath+0x164/0x6a0
[  797.936866][T17157]  ? fput+0x67/0x440
[  797.936889][T17157]  ? ksys_write+0x1ba/0x250
[  797.936909][T17157]  ? __pfx_ksys_write+0x10/0x10
[  797.936932][T17157]  __x64_sys_bpf+0x78/0xc0
[  797.936956][T17157]  do_syscall_64+0xcd/0x250
[  797.936977][T17157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.936998][T17157] RIP: 0033:0x7f302a18cd29
[  797.937010][T17157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  797.937025][T17157] RSP: 002b:00007f302b097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  797.937051][T17157] RAX: ffffffffffffffda RBX: 00007f302a3a5fa0 RCX: 00007f302a18cd29
[  797.937062][T17157] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005
[  797.937072][T17157] RBP: 00007f302b097090 R08: 0000000000000000 R09: 0000000000000000
[  797.937082][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.937092][T17157] R13: 0000000000000001 R14: 00007f302a3a5fa0 R15: 00007ffe3e6a1778
[  797.937109][T17157]  </TASK>
[  798.378073][   T29] audit: type=1400 audit(1737678046.306:553): avc:  denied  { setopt } for  pid=17162 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  798.635883][T17169] sp0: Synchronizing with TNC
[  799.221433][T17179] sp0: Synchronizing with TNC
[  799.472628][ T6795] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  799.642548][ T6795] usb 2-1: Using ep0 maxpacket: 16
[  799.649288][ T6795] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  799.658521][ T6795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.667542][ T6795] usb 2-1: config 0 descriptor??
[  799.674883][ T6795] gspca_main: sonixj-2.14.0 probing 0471:0327
[  799.823368][ T5907] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  799.984356][ T5907] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  799.994258][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.012410][ T5907] usb 5-1: config 0 descriptor??
[  800.239042][T10205] usb 5-1: USB disconnect, device number 89
[  800.866354][T10205] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  801.062679][T17231] sp0: Synchronizing with TNC
[  801.282239][T17235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3095'.
[  801.292996][ T6795] gspca_sonixj: reg_w1 err -110
[  801.299343][   T29] audit: type=1400 audit(1737678049.226:554): avc:  denied  { map } for  pid=17181 comm="syz.1.3082" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  801.313248][T10205] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  801.322949][    C0] vkms_vblank_simulate: vblank timer overrun
[  801.341254][T17235] netlink: 'syz.4.3095': attribute type 1 has an invalid length.
[  801.345746][T10205] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  801.349033][T17235] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3095'.
[  801.358930][T10205] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  801.369263][   T29] audit: type=1400 audit(1737678049.226:555): avc:  denied  { execute } for  pid=17181 comm="syz.1.3082" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  801.385201][ T6795] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  801.419435][T10205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.434834][ T6795] usb 2-1: USB disconnect, device number 45
[  801.448102][T17215] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  801.457536][T10205] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  802.620419][T12153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.620817][T17249] =======================================================
[  802.620817][T17249] WARNING: The mand mount option has been deprecated and
[  802.620817][T17249]          and is ignored by this kernel. Remove the mand
[  802.620817][T17249]          option from the mount to silence this warning.
[  802.620817][T17249] =======================================================
[  802.642584][ T6795] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  802.673841][    C0] vkms_vblank_simulate: vblank timer overrun
[  802.764327][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  802.771914][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  802.780686][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  802.790362][T12153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.801164][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  802.810676][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  802.817954][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  802.827168][T12153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.898198][T17262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'.
[  802.912875][ T6795] usb 3-1: Using ep0 maxpacket: 16
[  802.925161][ T6795] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  802.938912][ T6795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.949554][ T6795] usb 3-1: Product: syz
[  802.954095][ T6795] usb 3-1: Manufacturer: syz
[  802.959911][T12153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.960627][ T6795] usb 3-1: SerialNumber: syz
[  802.997233][ T6795] usb 3-1: config 0 descriptor??
[  802.999827][T17252] chnl_net:caif_netlink_parms(): no params data found
[  803.015611][ T6795] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  803.077033][T17252] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.085712][T17252] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.093308][T17252] bridge_slave_0: entered allmulticast mode
[  803.100082][T17252] bridge_slave_0: entered promiscuous mode
[  803.134025][T12153] bridge_slave_1: left allmulticast mode
[  803.155519][T12153] bridge_slave_1: left promiscuous mode
[  803.170089][T12153] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.196623][T12153] bridge_slave_0: left promiscuous mode
[  803.210848][T12153] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.262060][ T5907] usb 1-1: USB disconnect, device number 84
[  803.451686][T17252] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.504211][T17252] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.515926][T17252] bridge_slave_1: entered allmulticast mode
[  803.579803][T17252] bridge_slave_1: entered promiscuous mode
[  803.730156][T12153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.748441][T12153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  803.822716][ T5907] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  803.881380][T12153] bond0 (unregistering): Released all slaves
[  803.892014][T12153] bond1 (unregistering): Released all slaves
[  803.927894][T17252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.974110][T17252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  804.280850][T17305] sp0: Synchronizing with TNC
[  804.294411][ T5907] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  804.311187][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.325548][T17252] team0: Port device team_slave_0 added
[  804.332355][ T5907] usb 2-1: config 0 descriptor??
[  804.342401][T17252] team0: Port device team_slave_1 added
[  804.381473][T17252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.394642][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  804.402621][ T5823] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  804.430846][T17252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.451677][T17252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.459174][ T6795] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[  804.474109][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  804.504421][T17252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.539119][T17252] hsr_slave_0: entered promiscuous mode
[  804.544010][ T5907] usb 2-1: USB disconnect, device number 46
[  804.545604][T17252] hsr_slave_1: entered promiscuous mode
[  804.565510][T17252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  804.573361][ T5823] usb 5-1: device descriptor read/64, error -71
[  804.574008][T17252] Cannot create hsr debugfs directory
[  804.597147][T12153] hsr_slave_0: left promiscuous mode
[  804.604265][T12153] hsr_slave_1: left promiscuous mode
[  804.611515][T12153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  804.619167][T12153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.627525][T12153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  804.635190][T12153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.676511][T12153] bridge_slave_0: left allmulticast mode
[  804.682250][T12153] veth0_macvtap: left promiscuous mode
[  804.687939][T12153] veth1_vlan: left promiscuous mode
[  804.693270][T12153] veth0_vlan: left promiscuous mode
[  804.812903][ T5823] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  804.862537][ T5835] Bluetooth: hci0: command tx timeout
[  804.872380][T17331] FAULT_INJECTION: forcing a failure.
[  804.872380][T17331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.888810][T17331] CPU: 0 UID: 0 PID: 17331 Comm: syz.0.3111 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  804.888835][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  804.888846][T17331] Call Trace:
[  804.888852][T17331]  <TASK>
[  804.888859][T17331]  dump_stack_lvl+0x16c/0x1f0
[  804.888885][T17331]  should_fail_ex+0x497/0x5b0
[  804.888907][T17331]  _copy_to_user+0x32/0xd0
[  804.888930][T17331]  simple_read_from_buffer+0xd0/0x160
[  804.888951][T17331]  proc_fail_nth_read+0x198/0x270
[  804.888980][T17331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.889007][T17331]  ? bpf_lsm_file_permission+0x9/0x10
[  804.889034][T17331]  ? security_file_permission+0x71/0x210
[  804.889062][T17331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.889099][T17331]  vfs_read+0x1df/0xbe0
[  804.889119][T17331]  ? __fget_files+0x1fc/0x3a0
[  804.889142][T17331]  ? __pfx___mutex_lock+0x10/0x10
[  804.889163][T17331]  ? __pfx_vfs_read+0x10/0x10
[  804.889186][T17331]  ? __fget_files+0x206/0x3a0
[  804.889211][T17331]  ksys_read+0x12b/0x250
[  804.889231][T17331]  ? __pfx_ksys_read+0x10/0x10
[  804.889251][T17331]  ? rcu_is_watching+0x12/0xc0
[  804.889276][T17331]  ? rcu_is_watching+0x12/0xc0
[  804.889300][T17331]  do_syscall_64+0xcd/0x250
[  804.889320][T17331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.889343][T17331] RIP: 0033:0x7fc21338b73c
[  804.889357][T17331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  804.889375][T17331] RSP: 002b:00007fc214110030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  804.889394][T17331] RAX: ffffffffffffffda RBX: 00007fc2135a5fa0 RCX: 00007fc21338b73c
[  804.889407][T17331] RDX: 000000000000000f RSI: 00007fc2141100a0 RDI: 0000000000000003
[  804.889419][T17331] RBP: 00007fc214110090 R08: 0000000000000000 R09: 0000000000000000
[  804.889431][T17331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.889442][T17331] R13: 0000000000000000 R14: 00007fc2135a5fa0 R15: 00007ffc74f5cad8
[  804.889461][T17331]  </TASK>
[  805.117826][   T29] audit: type=1400 audit(1737678053.046:556): avc:  denied  { read } for  pid=17345 comm="syz.0.3112" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  805.144270][   T29] audit: type=1400 audit(1737678053.046:557): avc:  denied  { open } for  pid=17345 comm="syz.0.3112" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  805.168892][ T5823] usb 5-1: device descriptor read/64, error -71
[  805.177822][   T29] audit: type=1400 audit(1737678053.046:558): avc:  denied  { ioctl } for  pid=17345 comm="syz.0.3112" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  805.185535][T17349] ALSA: mixer_oss: invalid index 80000
[  805.207831][   T29] audit: type=1400 audit(1737678053.046:559): avc:  denied  { write } for  pid=17345 comm="syz.0.3112" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  805.275000][T17356] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3113'.
[  805.282868][ T5823] usb usb5-port1: attempt power cycle
[  805.295035][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'.
[  805.357939][T12153] IPVS: stop unused estimator thread 0...
[  805.389371][ T6795] usb 3-1: USB disconnect, device number 70
[  805.531597][T17373] hugetlbfs: Bad value 'Ð' for mount option 'size'
[  805.531597][T17373] 
[  806.026747][ T5823] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  806.047391][T17252] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  806.066741][ T5823] usb 5-1: device descriptor read/8, error -71
[  806.069388][T17252] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  806.132077][T17252] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  806.162666][T17252] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  806.319709][T17252] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.384342][ T5823] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  806.409186][T17252] 8021q: adding VLAN 0 to HW filter on device team0
[  806.422899][ T5823] usb 5-1: device descriptor read/8, error -71
[  806.431670][T12153] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.438776][T12153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  806.823331][T12153] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.830452][T12153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.840823][ T5823] usb usb5-port1: unable to enumerate USB device
[  806.854672][T17389] sp0: Synchronizing with TNC
[  806.910831][T17252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  806.922054][T17252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  806.945594][ T5835] Bluetooth: hci0: command tx timeout
[  806.983512][T17402] FAULT_INJECTION: forcing a failure.
[  806.983512][T17402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  806.998335][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.2.3121 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  806.998361][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  806.998373][T17402] Call Trace:
[  806.998379][T17402]  <TASK>
[  806.998386][T17402]  dump_stack_lvl+0x16c/0x1f0
[  806.998412][T17402]  should_fail_ex+0x497/0x5b0
[  806.998434][T17402]  _copy_from_user+0x2e/0xd0
[  806.998456][T17402]  copy_msghdr_from_user+0x99/0x160
[  806.998480][T17402]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  806.998506][T17402]  ? rcu_is_watching+0x12/0xc0
[  806.998532][T17402]  ? lock_release+0x4e2/0x6f0
[  806.998552][T17402]  ? get_pid_task+0xfc/0x250
[  806.998570][T17402]  ___sys_sendmsg+0xff/0x1e0
[  806.998592][T17402]  ? get_pid_task+0x35/0x250
[  806.998610][T17402]  ? __pfx____sys_sendmsg+0x10/0x10
[  806.998633][T17402]  ? lock_release+0x4e2/0x6f0
[  806.998653][T17402]  ? __pfx_lock_release+0x10/0x10
[  806.998670][T17402]  ? trace_lock_acquire+0x14e/0x1f0
[  806.998699][T17402]  ? __fget_files+0x206/0x3a0
[  806.998721][T17402]  __sys_sendmsg+0x16e/0x220
[  806.998743][T17402]  ? __pfx___sys_sendmsg+0x10/0x10
[  806.998770][T17402]  ? rcu_is_watching+0x12/0xc0
[  806.998796][T17402]  ? rcu_is_watching+0x12/0xc0
[  806.998823][T17402]  do_syscall_64+0xcd/0x250
[  806.998842][T17402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.998867][T17402] RIP: 0033:0x7fd943b8cd29
[  806.998882][T17402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  806.998900][T17402] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  806.998920][T17402] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  806.998932][T17402] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003
[  806.998944][T17402] RBP: 00007fd944aa4090 R08: 0000000000000000 R09: 0000000000000000
[  806.998956][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  806.998967][T17402] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  806.998985][T17402]  </TASK>
[  808.113890][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'.
[  808.123628][T17417] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3123'.
[  808.198767][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  808.439922][T17252] veth0_vlan: entered promiscuous mode
[  808.500498][T17252] veth1_vlan: entered promiscuous mode
[  808.521242][T17252] veth0_macvtap: entered promiscuous mode
[  808.532774][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'.
[  808.541733][T17435] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3125'.
[  808.553979][T17436] FAULT_INJECTION: forcing a failure.
[  808.553979][T17436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  808.651139][T17252] veth1_macvtap: entered promiscuous mode
[  808.676655][T17436] CPU: 1 UID: 0 PID: 17436 Comm: syz.4.3128 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  808.676682][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  808.676694][T17436] Call Trace:
[  808.676700][T17436]  <TASK>
[  808.676707][T17436]  dump_stack_lvl+0x16c/0x1f0
[  808.676742][T17436]  should_fail_ex+0x497/0x5b0
[  808.676764][T17436]  _copy_to_user+0x32/0xd0
[  808.676786][T17436]  simple_read_from_buffer+0xd0/0x160
[  808.676807][T17436]  proc_fail_nth_read+0x198/0x270
[  808.676835][T17436]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  808.676862][T17436]  ? bpf_lsm_file_permission+0x9/0x10
[  808.676887][T17436]  ? security_file_permission+0x71/0x210
[  808.676916][T17436]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  808.676940][T17436]  vfs_read+0x1df/0xbe0
[  808.676959][T17436]  ? __fget_files+0x1fc/0x3a0
[  808.676979][T17436]  ? __pfx___mutex_lock+0x10/0x10
[  808.677000][T17436]  ? __pfx_vfs_read+0x10/0x10
[  808.677023][T17436]  ? __fget_files+0x206/0x3a0
[  808.677047][T17436]  ksys_read+0x12b/0x250
[  808.677067][T17436]  ? __pfx_ksys_read+0x10/0x10
[  808.677087][T17436]  ? rcu_is_watching+0x12/0xc0
[  808.677114][T17436]  ? rcu_is_watching+0x12/0xc0
[  808.677141][T17436]  do_syscall_64+0xcd/0x250
[  808.677164][T17436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.677189][T17436] RIP: 0033:0x7f302a18b73c
[  808.677204][T17436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  808.677221][T17436] RSP: 002b:00007f302b076030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  808.677240][T17436] RAX: ffffffffffffffda RBX: 00007f302a3a6080 RCX: 00007f302a18b73c
[  808.677253][T17436] RDX: 000000000000000f RSI: 00007f302b0760a0 RDI: 0000000000000003
[  808.677266][T17436] RBP: 00007f302b076090 R08: 0000000000000000 R09: 0000000000000000
[  808.677277][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.677289][T17436] R13: 0000000000000001 R14: 00007f302a3a6080 R15: 00007ffe3e6a1778
[  808.677307][T17436]  </TASK>
[  808.903495][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.914008][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.924218][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.934681][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.940815][T17447] FAULT_INJECTION: forcing a failure.
[  808.940815][T17447] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  808.944505][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  808.944520][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  808.945258][T17252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.959321][    T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  808.969736][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  809.003575][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  809.013404][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  809.024237][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  809.034088][T17252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  809.044521][T17252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  809.045330][ T5835] Bluetooth: hci0: command tx timeout
[  809.055018][T17252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  809.065840][T17447] CPU: 0 UID: 0 PID: 17447 Comm: syz.2.3130 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  809.065868][T17447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  809.065879][T17447] Call Trace:
[  809.065884][T17447]  <TASK>
[  809.065891][T17447]  dump_stack_lvl+0x16c/0x1f0
[  809.065918][T17447]  should_fail_ex+0x497/0x5b0
[  809.065947][T17447]  _copy_from_user+0x2e/0xd0
[  809.065968][T17447]  copy_msghdr_from_user+0x99/0x160
[  809.065993][T17447]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  809.066018][T17447]  ? rcu_is_watching+0x12/0xc0
[  809.066045][T17447]  ? lock_release+0x4e2/0x6f0
[  809.066064][T17447]  ? get_pid_task+0xfc/0x250
[  809.066082][T17447]  ___sys_sendmsg+0xff/0x1e0
[  809.066104][T17447]  ? get_pid_task+0x35/0x250
[  809.066120][T17447]  ? __pfx____sys_sendmsg+0x10/0x10
[  809.066143][T17447]  ? lock_release+0x4e2/0x6f0
[  809.066166][T17447]  ? __pfx_lock_release+0x10/0x10
[  809.066185][T17447]  ? trace_lock_acquire+0x14e/0x1f0
[  809.066215][T17447]  ? __fget_files+0x206/0x3a0
[  809.066240][T17447]  __sys_sendmsg+0x16e/0x220
[  809.066262][T17447]  ? __pfx___sys_sendmsg+0x10/0x10
[  809.066289][T17447]  ? rcu_is_watching+0x12/0xc0
[  809.066314][T17447]  ? rcu_is_watching+0x12/0xc0
[  809.066339][T17447]  do_syscall_64+0xcd/0x250
[  809.066362][T17447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.066385][T17447] RIP: 0033:0x7fd943b8cd29
[  809.066399][T17447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  809.066416][T17447] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  809.066435][T17447] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  809.066447][T17447] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[  809.066458][T17447] RBP: 00007fd944aa4090 R08: 0000000000000000 R09: 0000000000000000
[  809.066469][T17447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.066480][T17447] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  809.066497][T17447]  </TASK>
[  809.176663][    T9] usb 2-1: Using ep0 maxpacket: 16
[  809.209066][T17252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.285982][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  809.296686][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.305706][    T9] usb 2-1: Product: syz
[  809.310019][    T9] usb 2-1: Manufacturer: syz
[  809.319928][    T9] usb 2-1: SerialNumber: syz
[  809.326457][T17252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  809.333809][   T29] audit: type=1400 audit(1737678057.256:560): avc:  denied  { map } for  pid=17450 comm="syz.4.3133" path="socket:[60576]" dev="sockfs" ino=60576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  809.335750][T17252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  809.369313][   T29] audit: type=1400 audit(1737678057.266:561): avc:  denied  { setopt } for  pid=17450 comm="syz.4.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  809.371393][T17252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  809.391104][    T9] usb 2-1: config 0 descriptor??
[  809.961287][    T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  809.973829][T17461] sp0: Synchronizing with TNC
[  810.193929][T12156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.202282][T12156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.546940][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'.
[  810.556213][T17476] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3136'.
[  810.757449][T12147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.782315][T12147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.816617][   T29] audit: type=1400 audit(1737678058.746:562): avc:  denied  { mounton } for  pid=17252 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  811.171779][T17494] sp0: Synchronizing with TNC
[  811.277017][T13600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  811.284412][    T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  811.293394][T13600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  811.300636][T13600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  811.310700][T13600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  811.318570][T13600] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  811.325783][T13600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  811.402638][T10205] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  811.505132][T17502] chnl_net:caif_netlink_parms(): no params data found
[  811.657371][T10205] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  811.674875][T10205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.713597][T10205] usb 5-1: config 0 descriptor??
[  811.728152][T10205] gspca_main: cpia1-2.14.0 probing 0813:0001
[  811.783600][T17502] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.791189][T17502] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.807363][T17502] bridge_slave_0: entered allmulticast mode
[  811.814548][T17502] bridge_slave_0: entered promiscuous mode
[  811.823746][T17502] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.830900][T17502] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.839174][T17502] bridge_slave_1: entered allmulticast mode
[  811.846161][T17502] bridge_slave_1: entered promiscuous mode
[  811.875252][T17502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  811.914613][T17502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.940679][T17502] team0: Port device team_slave_0 added
[  811.952367][T17502] team0: Port device team_slave_1 added
[  811.991130][T17502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  812.006855][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.035100][T17502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  812.070096][T17502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  812.080217][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.107450][T17502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  812.125750][T10205] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  812.141390][T17502] hsr_slave_0: entered promiscuous mode
[  812.148294][T17502] hsr_slave_1: entered promiscuous mode
[  812.154348][T17502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  812.161918][T17502] Cannot create hsr debugfs directory
[  812.466036][   T25] usb 2-1: USB disconnect, device number 47
[  812.531932][T10205] gspca_cpia1: usb_control_msg 02, error -71
[  812.541373][T17502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.543443][T10205] gspca_cpia1: usb_control_msg 05, error -71
[  812.565361][T17551] FAULT_INJECTION: forcing a failure.
[  812.565361][T17551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.572483][T10205] cpia1 5-1:0.0: unexpected systemstate: 00
[  812.589066][T17502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.601420][T17551] CPU: 0 UID: 0 PID: 17551 Comm: syz.1.3144 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  812.601445][T17551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  812.601456][T17551] Call Trace:
[  812.601461][T17551]  <TASK>
[  812.601468][T17551]  dump_stack_lvl+0x16c/0x1f0
[  812.601494][T17551]  should_fail_ex+0x497/0x5b0
[  812.601509][T10205] usb 5-1: USB disconnect, device number 94
[  812.601515][T17551]  _copy_to_user+0x32/0xd0
[  812.601537][T17551]  simple_read_from_buffer+0xd0/0x160
[  812.601554][T17551]  proc_fail_nth_read+0x198/0x270
[  812.601579][T17551]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  812.601606][T17551]  ? bpf_lsm_file_permission+0x9/0x10
[  812.601635][T17551]  ? security_file_permission+0x71/0x210
[  812.601664][T17551]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  812.601690][T17551]  vfs_read+0x1df/0xbe0
[  812.601710][T17551]  ? __might_fault+0xe3/0x190
[  812.601737][T17551]  ? __pfx_vfs_read+0x10/0x10
[  812.601756][T17551]  ? move_addr_to_user+0xab/0x1d0
[  812.601783][T17551]  ? __sys_getsockname+0x1d0/0x260
[  812.601803][T17551]  ? __pfx___sys_getsockname+0x10/0x10
[  812.601838][T17551]  ksys_read+0x12b/0x250
[  812.601857][T17551]  ? __pfx_ksys_read+0x10/0x10
[  812.601876][T17551]  ? rcu_is_watching+0x12/0xc0
[  812.601902][T17551]  ? rcu_is_watching+0x12/0xc0
[  812.601927][T17551]  do_syscall_64+0xcd/0x250
[  812.601953][T17551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.601977][T17551] RIP: 0033:0x7fceee98b73c
[  812.601991][T17551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  812.602008][T17551] RSP: 002b:00007fceef73c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  812.602027][T17551] RAX: ffffffffffffffda RBX: 00007fceeeba5fa0 RCX: 00007fceee98b73c
[  812.602039][T17551] RDX: 000000000000000f RSI: 00007fceef73c0a0 RDI: 0000000000000004
[  812.602058][T17551] RBP: 00007fceef73c090 R08: 0000000000000000 R09: 0000000000000000
[  812.602069][T17551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  812.602079][T17551] R13: 0000000000000000 R14: 00007fceeeba5fa0 R15: 00007fff7df89108
[  812.602097][T17551]  </TASK>
[  812.939234][T17560] FAULT_INJECTION: forcing a failure.
[  812.939234][T17560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.971913][T17502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.994439][T17560] CPU: 0 UID: 0 PID: 17560 Comm: syz.2.3146 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  812.994466][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  812.994478][T17560] Call Trace:
[  812.994484][T17560]  <TASK>
[  812.994491][T17560]  dump_stack_lvl+0x16c/0x1f0
[  812.994517][T17560]  should_fail_ex+0x497/0x5b0
[  812.994540][T17560]  _copy_from_user+0x2e/0xd0
[  812.994562][T17560]  move_addr_to_kernel+0x68/0x160
[  812.994583][T17560]  __sys_sendto+0x1ba/0x4f0
[  812.994609][T17560]  ? __pfx___sys_sendto+0x10/0x10
[  812.994640][T17560]  ? ksys_write+0x1ba/0x250
[  812.994665][T17560]  ? __pfx_ksys_write+0x10/0x10
[  812.994688][T17560]  __x64_sys_sendto+0xe0/0x1c0
[  812.994709][T17560]  ? trace_irq_enable.constprop.0+0xea/0x140
[  812.994734][T17560]  do_syscall_64+0xcd/0x250
[  812.994756][T17560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.994782][T17560] RIP: 0033:0x7fd943b8cd29
[  812.994797][T17560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  812.994815][T17560] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  812.994834][T17560] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  812.994851][T17560] RDX: 000000000000000e RSI: 00000000200003c0 RDI: 0000000000000003
[  812.994863][T17560] RBP: 00007fd944aa4090 R08: 0000000020000000 R09: 0000000000000014
[  812.994875][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  812.994886][T17560] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  812.994909][T17560]  </TASK>
[  813.274370][T17571] FAULT_INJECTION: forcing a failure.
[  813.274370][T17571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.288630][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.2.3147 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  813.288654][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  813.288664][T17571] Call Trace:
[  813.288669][T17571]  <TASK>
[  813.288676][T17571]  dump_stack_lvl+0x16c/0x1f0
[  813.288700][T17571]  should_fail_ex+0x497/0x5b0
[  813.288721][T17571]  _copy_from_user+0x2e/0xd0
[  813.288744][T17571]  copy_msghdr_from_user+0x99/0x160
[  813.288768][T17571]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  813.288793][T17571]  ? rcu_is_watching+0x12/0xc0
[  813.288818][T17571]  ? lock_release+0x4e2/0x6f0
[  813.288839][T17571]  ? get_pid_task+0xfc/0x250
[  813.288857][T17571]  ___sys_sendmsg+0xff/0x1e0
[  813.288879][T17571]  ? get_pid_task+0x35/0x250
[  813.288896][T17571]  ? __pfx____sys_sendmsg+0x10/0x10
[  813.288918][T17571]  ? lock_release+0x4e2/0x6f0
[  813.288942][T17571]  ? __pfx_lock_release+0x10/0x10
[  813.288961][T17571]  ? trace_lock_acquire+0x14e/0x1f0
[  813.288993][T17571]  ? __fget_files+0x206/0x3a0
[  813.289018][T17571]  __sys_sendmsg+0x16e/0x220
[  813.289041][T17571]  ? __pfx___sys_sendmsg+0x10/0x10
[  813.289069][T17571]  ? rcu_is_watching+0x12/0xc0
[  813.289095][T17571]  ? rcu_is_watching+0x12/0xc0
[  813.289121][T17571]  do_syscall_64+0xcd/0x250
[  813.289144][T17571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.289169][T17571] RIP: 0033:0x7fd943b8cd29
[  813.289184][T17571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.289201][T17571] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.289229][T17571] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  813.289242][T17571] RDX: 0000000004000080 RSI: 00000000200002c0 RDI: 0000000000000003
[  813.289254][T17571] RBP: 00007fd944aa4090 R08: 0000000000000000 R09: 0000000000000000
[  813.289265][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.289277][T17571] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  813.289295][T17571]  </TASK>
[  813.532567][ T5835] Bluetooth: hci0: command tx timeout
[  813.539178][T17575] FAULT_INJECTION: forcing a failure.
[  813.539178][T17575] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.552904][T17575] CPU: 1 UID: 0 PID: 17575 Comm: syz.2.3149 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  813.552928][T17575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  813.552939][T17575] Call Trace:
[  813.552945][T17575]  <TASK>
[  813.552952][T17575]  dump_stack_lvl+0x16c/0x1f0
[  813.552977][T17575]  should_fail_ex+0x497/0x5b0
[  813.552999][T17575]  _copy_from_user+0x2e/0xd0
[  813.553020][T17575]  copy_msghdr_from_user+0x99/0x160
[  813.553046][T17575]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  813.553073][T17575]  ? rcu_is_watching+0x12/0xc0
[  813.553100][T17575]  ? lock_release+0x4e2/0x6f0
[  813.553121][T17575]  ? get_pid_task+0xfc/0x250
[  813.553140][T17575]  ___sys_sendmsg+0xff/0x1e0
[  813.553160][T17575]  ? get_pid_task+0x35/0x250
[  813.553177][T17575]  ? __pfx____sys_sendmsg+0x10/0x10
[  813.553200][T17575]  ? lock_release+0x4e2/0x6f0
[  813.553223][T17575]  ? __pfx_lock_release+0x10/0x10
[  813.553242][T17575]  ? trace_lock_acquire+0x14e/0x1f0
[  813.553274][T17575]  ? __fget_files+0x206/0x3a0
[  813.553298][T17575]  __sys_sendmsg+0x16e/0x220
[  813.553321][T17575]  ? __pfx___sys_sendmsg+0x10/0x10
[  813.553348][T17575]  ? rcu_is_watching+0x12/0xc0
[  813.553373][T17575]  ? rcu_is_watching+0x12/0xc0
[  813.553400][T17575]  do_syscall_64+0xcd/0x250
[  813.553430][T17575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.553457][T17575] RIP: 0033:0x7fd943b8cd29
[  813.553471][T17575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.553490][T17575] RSP: 002b:00007fd944aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.553509][T17575] RAX: ffffffffffffffda RBX: 00007fd943da5fa0 RCX: 00007fd943b8cd29
[  813.553521][T17575] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  813.553533][T17575] RBP: 00007fd944aa4090 R08: 0000000000000000 R09: 0000000000000000
[  813.553544][T17575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.553555][T17575] R13: 0000000000000000 R14: 00007fd943da5fa0 R15: 00007ffe0e07a488
[  813.553573][T17575]  </TASK>
[  813.787060][T17502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.797976][T17577] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  813.936956][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3150'.
[  813.946172][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3150'.
[  814.182757][T10205] usb 5-1: new low-speed USB device number 95 using dummy_hcd
[  814.228402][T17502] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  814.240000][T17502] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  814.249840][T17502] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  814.258806][T17502] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  814.326077][T17502] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.340933][T17502] 8021q: adding VLAN 0 to HW filter on device team0
[  814.354138][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.361292][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  814.386474][T17587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  814.399728][T17587] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  814.447338][T10205] usb 5-1: config 5 has an invalid interface number: 242 but max is 0
[  814.455757][T10205] usb 5-1: config 5 has no interface number 0
[  814.461931][T10205] usb 5-1: config 5 interface 242 altsetting 1 endpoint 0x4 has invalid maxpacket 16, setting to 0
[  814.473066][T10205] usb 5-1: config 5 interface 242 has no altsetting 0
[  814.492737][T10205] usb 5-1: string descriptor 0 read error: -22
[  814.500291][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.507401][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  814.514905][T10205] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=94.2e
[  814.525890][T10205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.540840][T10205] rndis_host 5-1:5.242: invalid descriptor buffer length
[  814.555614][T12153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.565910][T10205] usb 5-1: bad CDC descriptors
[  814.566221][T10205] cdc_acm 5-1:5.242: invalid descriptor buffer length
[  814.690046][T17590] Illegal XDP return value 4294967274 on prog  (id 404) dev N/A, expect packet loss!
[  814.765518][   T29] audit: type=1400 audit(1737678062.696:563): avc:  denied  { mount } for  pid=17598 comm="syz.2.3156" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  814.777377][T17502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  814.796816][T17599] overlay: Unknown parameter 'silent'
[  814.828673][ T8672] usb 5-1: USB disconnect, device number 95
[  814.876623][T12153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.891568][   T29] audit: type=1400 audit(1737678062.726:564): avc:  denied  { mounton } for  pid=17598 comm="syz.2.3156" path="/40/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  815.191348][T17502] veth0_vlan: entered promiscuous mode
[  815.208586][T17502] veth1_vlan: entered promiscuous mode
[  815.208941][T13600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  815.224719][T13600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  815.226573][   T29] audit: type=1400 audit(1737678063.156:565): avc:  denied  { unmount } for  pid=16443 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  815.253520][T12153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.265033][T13600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  815.291305][T17502] veth0_macvtap: entered promiscuous mode
[  815.299877][T13600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  815.303782][T17502] veth1_macvtap: entered promiscuous mode
[  815.314466][T13600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  815.324628][T13600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  815.380334][T12153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.396045][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.460918][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.472769][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.483509][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.493859][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.505806][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.516123][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  815.527106][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.537933][T17502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  815.582613][ T5835] Bluetooth: hci0: command tx timeout
[  815.970750][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.998818][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  816.011589][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  816.023770][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  816.034025][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  816.049071][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  816.059254][T17502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  816.071804][T17502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  816.083337][T17502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  816.101357][T17502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  816.120399][T17502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  816.129516][T17502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  816.138358][T17502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  816.198377][T12153] bridge_slave_1: left allmulticast mode
[  816.204189][T12153] bridge_slave_1: left promiscuous mode
[  816.236672][T12153] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.245579][T12153] bridge_slave_0: left allmulticast mode
[  816.251233][T12153] bridge_slave_0: left promiscuous mode
[  816.257552][T12153] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.477082][T12153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  816.497006][T12153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  816.542520][T10205] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  816.908744][T12153] bond0 (unregistering): Released all slaves
[  816.935535][T10205] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  816.948631][T17628] sp0: Synchronizing with TNC
[  816.954873][T10205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.964213][T10205] usb 3-1: config 0 descriptor??
[  817.067573][T12151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  817.087898][T12151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  817.184646][T17637] FAULT_INJECTION: forcing a failure.
[  817.184646][T17637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  817.198037][T17637] CPU: 1 UID: 0 PID: 17637 Comm: syz.1.3164 Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  817.198059][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  817.198069][T17637] Call Trace:
[  817.198075][T17637]  <TASK>
[  817.198082][T17637]  dump_stack_lvl+0x16c/0x1f0
[  817.198106][T17637]  should_fail_ex+0x497/0x5b0
[  817.198130][T17637]  _copy_from_user+0x2e/0xd0
[  817.198151][T17637]  copy_msghdr_from_user+0x99/0x160
[  817.198174][T17637]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  817.198199][T17637]  ? rcu_is_watching+0x12/0xc0
[  817.198225][T17637]  ? lock_release+0x4e2/0x6f0
[  817.198245][T17637]  ? get_pid_task+0xfc/0x250
[  817.198262][T17637]  ___sys_sendmsg+0xff/0x1e0
[  817.198283][T17637]  ? get_pid_task+0x35/0x250
[  817.198300][T17637]  ? __pfx____sys_sendmsg+0x10/0x10
[  817.198323][T17637]  ? lock_release+0x4e2/0x6f0
[  817.198346][T17637]  ? __pfx_lock_release+0x10/0x10
[  817.198365][T17637]  ? trace_lock_acquire+0x14e/0x1f0
[  817.198396][T17637]  ? __fget_files+0x206/0x3a0
[  817.198420][T17637]  __sys_sendmsg+0x16e/0x220
[  817.198442][T17637]  ? __pfx___sys_sendmsg+0x10/0x10
[  817.198469][T17637]  ? rcu_is_watching+0x12/0xc0
[  817.198492][T17637]  ? rcu_is_watching+0x12/0xc0
[  817.198518][T17637]  do_syscall_64+0xcd/0x250
[  817.198537][T17637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.198556][T17637] RIP: 0033:0x7fceee98cd29
[  817.198565][T17637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  817.198575][T17637] RSP: 002b:00007fceef73c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.198587][T17637] RAX: ffffffffffffffda RBX: 00007fceeeba5fa0 RCX: 00007fceee98cd29
[  817.198595][T17637] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[  817.198601][T17637] RBP: 00007fceef73c090 R08: 0000000000000000 R09: 0000000000000000
[  817.198608][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  817.198614][T17637] R13: 0000000000000000 R14: 00007fceeeba5fa0 R15: 00007fff7df89108
[  817.198624][T17637]  </TASK>
[  817.406390][ T5835] Bluetooth: hci1: command tx timeout
[  817.665102][ T5835] Bluetooth: hci0: command tx timeout
[  817.827167][   T29] audit: type=1400 audit(1737678065.756:566): avc:  denied  { map } for  pid=17645 comm="syz.4.3167" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  817.889258][ T5823] IPVS: starting estimator thread 0...
[  817.959756][   T29] audit: type=1400 audit(1737678065.886:567): avc:  denied  { setopt } for  pid=17645 comm="syz.4.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  817.982756][T17647] IPVS: using max 65 ests per chain, 156000 per kthread
[  819.422636][ T5835] Bluetooth: hci1: command tx timeout
[  819.742813][ T5835] Bluetooth: hci0: command tx timeout
[  821.502623][ T5835] Bluetooth: hci1: command tx timeout
[  822.702697][T10205] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110
[  822.712986][T10205] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffff92
[  822.742597][T10205] asix 3-1:0.0: probe with driver asix failed with error -110
[  823.583163][ T5835] Bluetooth: hci1: command tx timeout
[  825.503119][  T969] kworker/1:2 (969) used greatest stack depth: 21840 bytes left
[  830.879716][T13600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  830.886983][T13600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  830.895090][T13600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  830.903120][T13600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  830.910647][T13600] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  830.918777][T13600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  832.942686][T13600] Bluetooth: hci3: command tx timeout
[  833.960858][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  833.968707][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  833.975935][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  833.983764][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  833.994531][ T5835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  833.997893][T17664] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  834.001710][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  834.010048][T17664] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  834.023265][T17664] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  834.030724][T17664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  834.038192][T17664] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  834.045492][T17664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  835.022651][T13599] Bluetooth: hci3: command tx timeout
[  836.062688][T13599] Bluetooth: hci6: command tx timeout
[  836.062807][ T5835] Bluetooth: hci7: command tx timeout
[  836.542639][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  837.102682][T17664] Bluetooth: hci3: command tx timeout
[  838.142671][T17664] Bluetooth: hci7: command tx timeout
[  838.142684][ T5835] Bluetooth: hci6: command tx timeout
[  839.182616][T17664] Bluetooth: hci3: command tx timeout
[  840.223152][ T5835] Bluetooth: hci7: command tx timeout
[  840.223208][T17664] Bluetooth: hci6: command tx timeout
[  842.302626][ T5835] Bluetooth: hci6: command tx timeout
[  842.302622][T17664] Bluetooth: hci7: command tx timeout
[  871.938314][T17664] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  871.945617][T17664] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  871.953205][T17664] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  871.960773][T17664] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  871.968382][T17664] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  871.975643][T17664] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  874.062660][ T5835] Bluetooth: hci8: command tx timeout
[  874.922910][T17664] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  874.930224][T17664] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  874.937601][T17664] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  874.945222][T17664] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  874.952840][T17664] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  874.960152][T17664] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  876.142650][T17664] Bluetooth: hci8: command tx timeout
[  877.022633][T17664] Bluetooth: hci9: command tx timeout
[  878.222646][T17664] Bluetooth: hci8: command tx timeout
[  879.102661][T17664] Bluetooth: hci9: command tx timeout
[  880.302633][T17664] Bluetooth: hci8: command tx timeout
[  881.183055][ T5835] Bluetooth: hci9: command tx timeout
[  882.622646][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  883.262595][T17664] Bluetooth: hci9: command tx timeout
[  890.945246][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  890.952635][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  890.959947][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  890.967765][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  890.975309][ T5835] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  890.983202][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  893.022603][T17664] Bluetooth: hci10: command tx timeout
[  893.997603][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  894.004962][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  894.014351][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  894.015169][T13600] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  894.021851][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  894.029267][T13600] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  894.036357][ T5835] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  894.050416][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  894.051406][T13600] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  894.067603][T13600] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  894.075411][T13600] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  894.082775][T13600] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  895.102641][T13599] Bluetooth: hci10: command tx timeout
[  896.062762][T13599] Bluetooth: hci11: command tx timeout
[  896.142611][T13599] Bluetooth: hci12: command tx timeout
[  897.182661][T13599] Bluetooth: hci10: command tx timeout
[  898.142701][T13599] Bluetooth: hci11: command tx timeout
[  898.222699][T13599] Bluetooth: hci12: command tx timeout
[  899.262641][T13599] Bluetooth: hci10: command tx timeout
[  900.222654][T13599] Bluetooth: hci11: command tx timeout
[  900.302866][T13599] Bluetooth: hci12: command tx timeout
[  902.303058][T13600] Bluetooth: hci11: command tx timeout
[  902.382624][T13600] Bluetooth: hci12: command tx timeout
[  932.006698][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  932.014566][ T5835] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  932.021942][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  932.030124][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  932.037645][ T5835] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  932.044959][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  933.823981][T13599] Bluetooth: hci0: command 0x0406 tx timeout
[  934.062614][T13600] Bluetooth: hci13: command tx timeout
[  934.986809][T13599] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  934.994215][T13599] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  935.001615][T13599] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  935.009909][T13599] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  935.017513][T13599] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  935.025117][T13599] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  936.142575][T13600] Bluetooth: hci13: command tx timeout
[  937.103770][T13600] Bluetooth: hci14: command tx timeout
[  938.222613][T13600] Bluetooth: hci13: command tx timeout
[  938.942694][T13600] Bluetooth: hci1: command 0x0406 tx timeout
[  939.182585][T13599] Bluetooth: hci14: command tx timeout
[  940.302623][T13599] Bluetooth: hci13: command tx timeout
[  941.262622][T13599] Bluetooth: hci14: command tx timeout
[  943.342604][T13599] Bluetooth: hci14: command tx timeout
[  951.006425][T13600] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  951.015397][T13600] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  951.022763][T13600] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  951.030432][T13600] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  951.038021][T13600] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  951.045358][T13600] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  953.102628][T13600] Bluetooth: hci15: command tx timeout
[  954.302583][T13600] Bluetooth: hci3: command 0x0406 tx timeout
[  954.560061][T13600] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  954.567670][T13600] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  954.575052][T13600] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  954.583959][ T5835] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  954.583969][T17664] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  954.584114][T17664] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  954.591637][ T5835] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  954.599543][T17664] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  954.612993][ T5835] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  954.620645][T17664] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  954.634845][T17664] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  954.642165][T17664] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  955.182817][T17664] Bluetooth: hci15: command tx timeout
[  956.702691][T13600] Bluetooth: hci16: command tx timeout
[  956.704382][T17664] Bluetooth: hci17: command tx timeout
[  957.262663][T17664] Bluetooth: hci15: command tx timeout
[  958.782661][T13599] Bluetooth: hci16: command tx timeout
[  958.783994][ T5835] Bluetooth: hci17: command tx timeout
[  959.342939][ T5835] Bluetooth: hci15: command tx timeout
[  959.422709][ T5835] Bluetooth: hci6: command 0x0406 tx timeout
[  959.422714][T13599] Bluetooth: hci7: command 0x0406 tx timeout
[  960.862631][T17664] Bluetooth: hci17: command tx timeout
[  960.862638][T13600] Bluetooth: hci16: command tx timeout
[  962.942620][T13600] Bluetooth: hci16: command tx timeout
[  962.942667][T17664] Bluetooth: hci17: command tx timeout
[  975.902777][   T30] INFO: task dhcpcd:5484 blocked for more than 143 seconds.
[  975.910109][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  975.917654][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  975.926409][   T30] task:dhcpcd          state:D stack:24928 pid:5484  tgid:5484  ppid:1      flags:0x00004002
[  975.937190][   T30] Call Trace:
[  975.940496][   T30]  <TASK>
[  975.943925][   T30]  __schedule+0x1142/0x5b60
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  975.948465][   T30]  ? stack_depot_save_flags+0x28/0x9c0
[  975.954168][   T30]  ? __pfx___schedule+0x10/0x10
[  975.959143][   T30]  ? lock_release+0x4e2/0x6f0
[  975.964057][   T30]  ? schedule+0x298/0x350
[  975.968409][   T30]  ? __pfx_lock_release+0x10/0x10
[  975.992120][   T30]  ? __mutex_trylock_common+0x78/0x250
[  975.997740][   T30]  ? schedule+0x1fd/0x350
[  976.002089][   T30]  ? lock_acquire+0x2f/0xb0
[  976.008168][   T30]  ? schedule+0x1fd/0x350
[  976.012548][   T30]  schedule+0xe7/0x350
[  976.016634][   T30]  schedule_preempt_disabled+0x13/0x30
[  976.022105][   T30]  __mutex_lock+0x6bd/0xb10
[  976.026670][   T30]  ? nl80211_pre_doit+0xb4/0xb10
[  976.031620][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  976.037158][   T30]  ? __nla_parse+0x40/0x60
[  976.041592][   T30]  ? nl80211_pre_doit+0xb4/0xb10
[  976.046670][   T30]  nl80211_pre_doit+0xb4/0xb10
[  976.051466][   T30]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  976.056882][   T30]  genl_family_rcv_msg_doit+0x1be/0x2f0
[  976.062783][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  976.069051][   T30]  ? genl_get_cmd+0x195/0x580
[  976.073752][   T30]  ? __kasan_slab_alloc+0x89/0x90
[  976.078781][   T30]  ? kmem_cache_alloc_node_noprof+0x223/0x3c0
[  976.084889][   T30]  ? __radix_tree_lookup+0x21f/0x2c0
[  976.090190][   T30]  genl_rcv_msg+0x565/0x800
[  976.094786][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  976.099827][   T30]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  976.105260][   T30]  ? __pfx_nl80211_get_wiphy+0x10/0x10
[  976.110715][   T30]  ? __pfx_nl80211_post_doit+0x10/0x10
[  976.116248][   T30]  netlink_rcv_skb+0x16b/0x440
[  976.121028][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  976.126089][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  976.131383][   T30]  ? down_read+0xc9/0x330
[  976.135762][   T30]  ? __pfx_down_read+0x10/0x10
[  976.140944][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  976.146379][   T30]  genl_rcv+0x28/0x40
[  976.150383][   T30]  netlink_unicast+0x53c/0x7f0
[  976.155255][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  976.160549][   T30]  netlink_sendmsg+0x8b8/0xd70
[  976.165524][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  976.170813][   T30]  ____sys_sendmsg+0xaaf/0xc90
[  976.175600][   T30]  ? copy_msghdr_from_user+0x10b/0x160
[  976.181065][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  976.186380][   T30]  ? __pfx_____sys_recvmsg+0x10/0x10
[  976.191664][   T30]  ___sys_sendmsg+0x135/0x1e0
[  976.196408][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.201179][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  976.206428][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.211201][   T30]  ? lock_acquire+0x2f/0xb0
[  976.215740][   T30]  ? populate_seccomp_data+0x213/0x540
[  976.221202][   T30]  __sys_sendmsg+0x16e/0x220
[  976.225893][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  976.231029][   T30]  ? __secure_computing+0x273/0x3f0
[  976.236285][   T30]  do_syscall_64+0xcd/0x250
[  976.241238][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.247197][   T30] RIP: 0033:0x7f9194ad0a4b
[  976.251606][   T30] RSP: 002b:00007fffeb3988b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  976.260049][   T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9194ad0a4b
[  976.268162][   T30] RDX: 0000000000000000 RSI: 00007fffeb398900 RDI: 0000000000000010
[  976.276157][   T30] RBP: 00007fffeb3acdc8 R08: 0000000000000000 R09: 0000000000000000
[  976.284163][   T30] R10: 00007fffeb3ad010 R11: 0000000000000246 R12: 0000000000000010
[  976.292147][   T30] R13: 00007fffeb39c960 R14: 0000000000000000 R15: 000055c11699ac10
[  976.300198][   T30]  </TASK>
[  976.303291][   T30] INFO: task kworker/u8:14:7092 blocked for more than 143 seconds.
[  976.311193][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  976.318533][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  976.327259][   T30] task:kworker/u8:14   state:D stack:23064 pid:7092  tgid:7092  ppid:2      flags:0x00004000
[  976.337459][   T30] Workqueue: events_unbound linkwatch_event
[  976.343783][   T30] Call Trace:
[  976.347094][   T30]  <TASK>
[  976.350003][   T30]  __schedule+0x1142/0x5b60
[  976.354571][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.359627][   T30]  ? __pfx___schedule+0x10/0x10
[  976.364539][   T30]  ? lock_release+0x4e2/0x6f0
[  976.369214][   T30]  ? schedule+0x298/0x350
[  976.373662][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.378702][   T30]  ? __mutex_trylock_common+0x78/0x250
[  976.384228][   T30]  ? schedule+0x1fd/0x350
[  976.388564][   T30]  ? lock_acquire+0x2f/0xb0
[  976.393111][   T30]  ? schedule+0x1fd/0x350
[  976.397439][   T30]  schedule+0xe7/0x350
[  976.401835][   T30]  schedule_preempt_disabled+0x13/0x30
[  976.407350][   T30]  __mutex_lock+0x6bd/0xb10
[  976.411881][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.416962][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  976.422348][   T30]  ? linkwatch_event+0x51/0xc0
[  976.427189][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  976.432225][   T30]  ? lock_release+0x4e2/0x6f0
[  976.436963][   T30]  ? process_one_work+0x813/0x1ba0
[  976.442093][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.447410][   T30]  ? linkwatch_event+0x51/0xc0
[  976.452209][   T30]  linkwatch_event+0x51/0xc0
[  976.456838][   T30]  ? __pfx_linkwatch_event+0x10/0x10
[  976.462151][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.467016][   T30]  process_one_work+0x9c5/0x1ba0
[  976.471970][   T30]  ? __pfx_process_one_work+0x10/0x10
[  976.477382][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.482156][   T30]  ? assign_work+0x1a0/0x250
[  976.486887][   T30]  worker_thread+0x6c8/0xf00
[  976.491499][   T30]  ? __pfx_worker_thread+0x10/0x10
[  976.496658][   T30]  kthread+0x3af/0x750
[  976.500765][   T30]  ? __pfx_kthread+0x10/0x10
[  976.505404][   T30]  ? lock_acquire+0x2f/0xb0
[  976.509919][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.514723][   T30]  ? __pfx_kthread+0x10/0x10
[  976.519308][   T30]  ret_from_fork+0x45/0x80
[  976.523758][   T30]  ? __pfx_kthread+0x10/0x10
[  976.528350][   T30]  ret_from_fork_asm+0x1a/0x30
[  976.533167][   T30]  </TASK>
[  976.536193][   T30] INFO: task kworker/u8:19:12147 blocked for more than 143 seconds.
[  976.544241][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  976.551911][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  976.560653][   T30] task:kworker/u8:19   state:D stack:25456 pid:12147 tgid:12147 ppid:2      flags:0x00004000
[  976.570903][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  976.576939][   T30] Call Trace:
[  976.580208][   T30]  <TASK>
[  976.583170][   T30]  __schedule+0x1142/0x5b60
[  976.587675][   T30]  ? bpf_trace_run2+0x1c2/0x590
[  976.592629][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  976.598810][   T30]  ? arch_stack_walk+0x40/0x100
[  976.603714][   T30]  ? __pfx___schedule+0x10/0x10
[  976.608560][   T30]  ? lock_release+0x4e2/0x6f0
[  976.613269][   T30]  ? schedule+0x298/0x350
[  976.617600][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.622707][   T30]  ? __mutex_trylock_common+0x78/0x250
[  976.628171][   T30]  ? schedule+0x1fd/0x350
[  976.632516][   T30]  ? lock_acquire+0x2f/0xb0
[  976.637026][   T30]  ? schedule+0x1fd/0x350
[  976.641350][   T30]  schedule+0xe7/0x350
[  976.645480][   T30]  schedule_preempt_disabled+0x13/0x30
[  976.651313][   T30]  __mutex_lock+0x6bd/0xb10
[  976.655883][   T30]  ? addrconf_dad_work+0x121/0x14e0
[  976.661079][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  976.666504][   T30]  ? lock_release+0x4e2/0x6f0
[  976.671181][   T30]  ? lock_release+0x4e2/0x6f0
[  976.675892][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.680934][   T30]  ? __pfx_lock_unpin_lock+0x10/0x10
[  976.686293][   T30]  ? trace_sched_wakeup+0xe8/0x140
[  976.691409][   T30]  ? addrconf_dad_work+0x121/0x14e0
[  976.696658][   T30]  ? rtnl_lock+0x9/0x20
[  976.700820][   T30]  addrconf_dad_work+0x121/0x14e0
[  976.705991][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  976.711457][   T30]  ? process_one_work+0x921/0x1ba0
[  976.716674][   T30]  ? lock_acquire+0x2f/0xb0
[  976.721196][   T30]  ? process_one_work+0x921/0x1ba0
[  976.726365][   T30]  process_one_work+0x9c5/0x1ba0
[  976.731311][   T30]  ? __pfx_process_one_work+0x10/0x10
[  976.736729][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.741504][   T30]  ? assign_work+0x1a0/0x250
[  976.746150][   T30]  worker_thread+0x6c8/0xf00
[  976.751202][   T30]  ? __pfx_worker_thread+0x10/0x10
[  976.756387][   T30]  kthread+0x3af/0x750
[  976.760470][   T30]  ? __pfx_kthread+0x10/0x10
[  976.765108][   T30]  ? lock_acquire+0x2f/0xb0
[  976.769616][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.774502][   T30]  ? __pfx_kthread+0x10/0x10
[  976.779108][   T30]  ret_from_fork+0x45/0x80
[  976.783593][   T30]  ? __pfx_kthread+0x10/0x10
[  976.788198][   T30]  ret_from_fork_asm+0x1a/0x30
[  976.793001][   T30]  </TASK>
[  976.796025][   T30] INFO: task kworker/u8:23:12153 blocked for more than 144 seconds.
[  976.804498][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  976.811777][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  976.820564][   T30] task:kworker/u8:23   state:D stack:24752 pid:12153 tgid:12153 ppid:2      flags:0x00004000
[  976.830784][   T30] Workqueue: netns cleanup_net
[  976.835599][   T30] Call Trace:
[  976.838868][   T30]  <TASK>
[  976.841786][   T30]  __schedule+0x1142/0x5b60
[  976.846350][   T30]  ? __switch_to+0x749/0x1190
[  976.851026][   T30]  ? rcu_watching_snap_stopped_since+0xd1/0x110
[  976.857816][   T30]  ? synchronize_rcu_expedited+0x424/0x450
[  976.863717][   T30]  ? __pfx___schedule+0x10/0x10
[  976.868593][   T30]  ? lock_release+0x4e2/0x6f0
[  976.873332][   T30]  ? schedule+0x298/0x350
[  976.877678][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.882761][   T30]  ? __mutex_trylock_common+0x78/0x250
[  976.888224][   T30]  ? schedule+0x1fd/0x350
[  976.892662][   T30]  ? lock_acquire+0x2f/0xb0
[  976.897165][   T30]  ? schedule+0x1fd/0x350
[  976.901478][   T30]  schedule+0xe7/0x350
[  976.905591][   T30]  schedule_preempt_disabled+0x13/0x30
[  976.911050][   T30]  __mutex_lock+0x6bd/0xb10
[  976.915604][   T30]  ? unregister_netdevice_many_notify+0x1a51/0x21a0
[  976.922197][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  976.927408][   T30]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  976.932810][   T30]  ? __pfx___might_resched+0x10/0x10
[  976.938106][   T30]  ? unregister_netdevice_many_notify+0x959/0x21a0
[  976.944649][   T30]  ? unregister_netdevice_many_notify+0x1a51/0x21a0
[  976.951258][   T30]  unregister_netdevice_many_notify+0x1a51/0x21a0
[  976.958170][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  976.965006][   T30]  ? rcu_is_watching+0x12/0xc0
[  976.969778][   T30]  ? lock_release+0x4e2/0x6f0
[  976.974476][   T30]  ? kernfs_remove_by_name_ns+0xc4/0x130
[  976.980117][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.985214][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  976.991197][   T30]  unregister_netdevice_queue+0x307/0x3f0
[  976.996951][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  977.003251][   T30]  _cfg80211_unregister_wdev+0x64b/0x830
[  977.008986][   T30]  ieee80211_remove_interfaces+0x34f/0x720
[  977.014843][   T30]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  977.021182][   T30]  ieee80211_unregister_hw+0x55/0x3a0
[  977.026625][   T30]  hwsim_exit_net+0x3ad/0x7d0
[  977.031301][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[  977.036609][   T30]  ? ip_vs_sync_net_cleanup+0x72/0xb0
[  977.042016][   T30]  ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[  977.047775][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[  977.053018][   T30]  ops_exit_list+0xb0/0x180
[  977.057525][   T30]  cleanup_net+0x5c6/0xbf0
[  977.062304][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  977.067298][   T30]  ? lock_acquire+0x2f/0xb0
[  977.071801][   T30]  ? process_one_work+0x921/0x1ba0
[  977.076946][   T30]  process_one_work+0x9c5/0x1ba0
[  977.081884][   T30]  ? __pfx_batadv_nc_worker+0x10/0x10
[  977.087301][   T30]  ? __pfx_process_one_work+0x10/0x10
[  977.092700][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.097487][   T30]  ? assign_work+0x1a0/0x250
[  977.102052][   T30]  worker_thread+0x6c8/0xf00
[  977.106990][   T30]  ? __pfx_worker_thread+0x10/0x10
[  977.112121][   T30]  kthread+0x3af/0x750
[  977.116221][   T30]  ? __pfx_kthread+0x10/0x10
[  977.120805][   T30]  ? lock_acquire+0x2f/0xb0
[  977.125361][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.130142][   T30]  ? __pfx_kthread+0x10/0x10
[  977.134861][   T30]  ret_from_fork+0x45/0x80
[  977.139283][   T30]  ? __pfx_kthread+0x10/0x10
[  977.144085][   T30]  ret_from_fork_asm+0x1a/0x30
[  977.148860][   T30]  </TASK>
[  977.151864][   T30] INFO: task kworker/u8:24:12154 blocked for more than 144 seconds.
[  977.159862][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  977.167558][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  977.176277][   T30] task:kworker/u8:24   state:D stack:24176 pid:12154 tgid:12154 ppid:2      flags:0x00004000
[  977.186607][   T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work
[  977.193598][   T30] Call Trace:
[  977.196866][   T30]  <TASK>
[  977.199775][   T30]  __schedule+0x1142/0x5b60
[  977.204320][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  977.209696][   T30]  ? lock_acquire.part.0+0x340/0x380
[  977.215043][   T30]  ? debug_object_activate+0x149/0x4a0
[  977.220531][   T30]  ? __pfx___schedule+0x10/0x10
[  977.225422][   T30]  ? lock_release+0x4e2/0x6f0
[  977.230093][   T30]  ? schedule+0x298/0x350
[  977.234440][   T30]  ? __pfx_lock_release+0x10/0x10
[  977.239462][   T30]  ? __mutex_trylock_common+0x78/0x250
[  977.244986][   T30]  ? schedule+0x1fd/0x350
[  977.249313][   T30]  ? lock_acquire+0x2f/0xb0
[  977.253925][   T30]  ? schedule+0x1fd/0x350
[  977.258286][   T30]  schedule+0xe7/0x350
[  977.262389][   T30]  schedule_preempt_disabled+0x13/0x30
[  977.268470][   T30]  __mutex_lock+0x6bd/0xb10
[  977.273044][   T30]  ? dl_scaled_delta_exec+0xdd/0x2e0
[  977.278333][   T30]  ? cfg80211_dfs_channels_update_work+0xd0/0x640
[  977.284810][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  977.289839][   T30]  ? lock_release+0x4e2/0x6f0
[  977.294556][   T30]  ? sched_clock_cpu+0x6d/0x4d0
[  977.299409][   T30]  ? psi_task_switch+0x2c1/0x8e0
[  977.304396][   T30]  ? __pfx_lock_release+0x10/0x10
[  977.309426][   T30]  ? lock_release+0x4e2/0x6f0
[  977.314144][   T30]  ? debug_object_deactivate+0x1ef/0x370
[  977.319815][   T30]  ? __pfx_lock_release+0x10/0x10
[  977.324900][   T30]  ? cfg80211_dfs_channels_update_work+0xd0/0x640
[  977.331332][   T30]  ? rtnl_lock+0x9/0x20
[  977.336330][   T30]  cfg80211_dfs_channels_update_work+0xd0/0x640
[  977.342618][   T30]  ? do_raw_spin_unlock+0x172/0x230
[  977.347824][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.352607][   T30]  ? lock_release+0x4e2/0x6f0
[  977.357284][   T30]  ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10
[  977.364267][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.369447][   T30]  ? process_one_work+0x921/0x1ba0
[  977.374718][   T30]  ? lock_acquire+0x2f/0xb0
[  977.379242][   T30]  ? process_one_work+0x921/0x1ba0
[  977.384443][   T30]  process_one_work+0x9c5/0x1ba0
[  977.389413][   T30]  ? __pfx_process_one_work+0x10/0x10
[  977.394834][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.399602][   T30]  ? assign_work+0x1a0/0x250
[  977.404243][   T30]  worker_thread+0x6c8/0xf00
[  977.408933][   T30]  ? __pfx_worker_thread+0x10/0x10
[  977.414075][   T30]  kthread+0x3af/0x750
[  977.418155][   T30]  ? __pfx_kthread+0x10/0x10
[  977.422777][   T30]  ? lock_acquire+0x2f/0xb0
[  977.427457][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.432233][   T30]  ? __pfx_kthread+0x10/0x10
[  977.437128][   T30]  ret_from_fork+0x45/0x80
[  977.441565][   T30]  ? __pfx_kthread+0x10/0x10
[  977.446200][   T30]  ret_from_fork_asm+0x1a/0x30
[  977.450982][   T30]  </TASK>
[  977.454052][   T30] INFO: task syz-executor:17502 blocked for more than 144 seconds.
[  977.461938][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  977.469716][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  977.478603][   T30] task:syz-executor    state:D stack:24392 pid:17502 tgid:17502 ppid:1      flags:0x00004006
[  977.488837][   T30] Call Trace:
[  977.492105][   T30]  <TASK>
[  977.495064][   T30]  __schedule+0x1142/0x5b60
[  977.499569][   T30]  ? __pfx_bpf_trace_run2+0x10/0x10
[  977.504940][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  977.510329][   T30]  ? __pfx___schedule+0x10/0x10
[  977.515255][   T30]  ? lock_release+0x4e2/0x6f0
[  977.519953][   T30]  ? schedule+0x298/0x350
[  977.524387][   T30]  ? __pfx_lock_release+0x10/0x10
[  977.529426][   T30]  ? __mutex_trylock_common+0x78/0x250
[  977.534964][   T30]  ? schedule+0x1fd/0x350
[  977.539306][   T30]  ? lock_acquire+0x2f/0xb0
[  977.543881][   T30]  ? schedule+0x1fd/0x350
[  977.548221][   T30]  schedule+0xe7/0x350
[  977.552271][   T30]  schedule_preempt_disabled+0x13/0x30
[  977.557765][   T30]  __mutex_lock+0x6bd/0xb10
[  977.562276][   T30]  ? reg_process_self_managed_hints+0x95/0x1f0
[  977.568499][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  977.573942][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  977.579940][   T30]  ? reg_process_self_managed_hints+0x95/0x1f0
[  977.586233][   T30]  reg_process_self_managed_hints+0x95/0x1f0
[  977.592246][   T30]  wiphy_register+0x1e45/0x2860
[  977.597148][   T30]  ? __pfx__dev_printk+0x10/0x10
[  977.602094][   T30]  ? __pfx_wiphy_register+0x10/0x10
[  977.607357][   T30]  ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0
[  977.613457][   T30]  ieee80211_register_hw+0x2455/0x4060
[  977.618912][   T30]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  977.624765][   T30]  ? net_generic+0xea/0x2a0
[  977.629269][   T30]  ? lockdep_init_map_type+0x16d/0x7d0
[  977.634768][   T30]  ? net_generic+0x30/0x2a0
[  977.639463][   T30]  ? __asan_memset+0x23/0x50
[  977.644114][   T30]  ? __hrtimer_init+0x106/0x2c0
[  977.648976][   T30]  mac80211_hwsim_new_radio+0x304e/0x54d0
[  977.654756][   T30]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  977.660837][   T30]  hwsim_new_radio_nl+0xb42/0x12b0
[  977.666037][   T30]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  977.672027][   T30]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  977.679925][   T30]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  977.687372][   T30]  genl_family_rcv_msg_doit+0x202/0x2f0
[  977.693039][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  977.699124][   T30]  ? bpf_lsm_capable+0x9/0x10
[  977.703864][   T30]  ? security_capable+0x7e/0x260
[  977.708823][   T30]  ? ns_capable+0xd7/0x110
[  977.713304][   T30]  genl_rcv_msg+0x565/0x800
[  977.717812][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  977.722898][   T30]  ? __pfx___dev_queue_xmit+0x10/0x10
[  977.728280][   T30]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  977.733889][   T30]  netlink_rcv_skb+0x16b/0x440
[  977.738675][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  977.743746][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  977.749049][   T30]  ? down_read+0xc9/0x330
[  977.753438][   T30]  ? __pfx_down_read+0x10/0x10
[  977.758215][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  977.763573][   T30]  genl_rcv+0x28/0x40
[  977.767561][   T30]  netlink_unicast+0x53c/0x7f0
[  977.772337][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  977.778170][   T30]  netlink_sendmsg+0x8b8/0xd70
[  977.783022][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  977.788406][   T30]  __sys_sendto+0x488/0x4f0
[  977.792940][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  977.797991][   T30]  ? __fput+0x686/0xb60
[  977.802134][   T30]  __x64_sys_sendto+0xe0/0x1c0
[  977.807030][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  977.813062][   T30]  do_syscall_64+0xcd/0x250
[  977.817572][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.824149][   T30] RIP: 0033:0x7f0a1bf8ebbc
[  977.828594][   T30] RSP: 002b:00007ffe099f99f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  977.837330][   T30] RAX: ffffffffffffffda RBX: 00007f0a1ccd4620 RCX: 00007f0a1bf8ebbc
[  977.845563][   T30] RDX: 0000000000000024 RSI: 00007f0a1ccd4670 RDI: 0000000000000003
[  977.853578][   T30] RBP: 0000000000000000 R08: 00007ffe099f9a44 R09: 000000000000000c
[  977.861530][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  977.869561][   T30] R13: 0000000000000000 R14: 00007f0a1ccd4670 R15: 0000000000000000
[  977.878047][   T30]  </TASK>
[  977.881092][   T30] INFO: task syz-executor:17607 blocked for more than 145 seconds.
[  977.889074][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  977.896394][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  977.905153][   T30] task:syz-executor    state:D stack:25672 pid:17607 tgid:17607 ppid:1      flags:0x00004004
[  977.915454][   T30] Call Trace:
[  977.918738][   T30]  <TASK>
[  977.921664][   T30]  __schedule+0x1142/0x5b60
[  977.926216][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  977.931597][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.936415][   T30]  ? __pfx___schedule+0x10/0x10
[  977.941283][   T30]  ? lock_release+0x4e2/0x6f0
[  977.946040][   T30]  ? schedule+0x298/0x350
[  977.950371][   T30]  ? __pfx_lock_release+0x10/0x10
[  977.955441][   T30]  ? __mutex_trylock_common+0x78/0x250
[  977.960969][   T30]  ? schedule+0x1fd/0x350
[  977.965371][   T30]  ? lock_acquire+0x2f/0xb0
[  977.969898][   T30]  ? schedule+0x1fd/0x350
[  977.974274][   T30]  schedule+0xe7/0x350
[  977.978339][   T30]  schedule_preempt_disabled+0x13/0x30
[  977.984293][   T30]  __mutex_lock+0x6bd/0xb10
[  977.988815][   T30]  ? __request_module+0x18a/0x6c0
[  977.993956][   T30]  ? rcu_is_watching+0x12/0xc0
[  977.998726][   T30]  ? rtnl_newlink+0x5d9/0x1d60
[  978.003521][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  978.008541][   T30]  ? cap_capable+0xb3/0x250
[  978.013152][   T30]  ? ns_capable+0xd7/0x110
[  978.017584][   T30]  ? rtnl_newlink+0x5d9/0x1d60
[  978.022356][   T30]  rtnl_newlink+0x5d9/0x1d60
[  978.027100][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  978.032164][   T30]  ? avc_has_perm_noaudit+0x143/0x3a0
[  978.037633][   T30]  ? cred_has_capability.isra.0+0x192/0x2f0
[  978.044060][   T30]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  978.050354][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.055173][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.059959][   T30]  ? lock_release+0x4e2/0x6f0
[  978.064845][   T30]  ? rtnetlink_rcv_msg+0x93a/0xea0
[  978.069970][   T30]  ? __pfx_lock_release+0x10/0x10
[  978.075071][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[  978.080283][   T30]  ? bpf_lsm_capable+0x9/0x10
[  978.085501][   T30]  ? security_capable+0x7e/0x260
[  978.090547][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  978.095698][   T30]  ? lock_acquire+0x2f/0xb0
[  978.100205][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  978.105362][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  978.110419][   T30]  rtnetlink_rcv_msg+0x95b/0xea0
[  978.115407][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  978.120884][   T30]  ? __pfx_avc_has_perm+0x10/0x10
[  978.125954][   T30]  netlink_rcv_skb+0x16b/0x440
[  978.130717][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  978.136287][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  978.141583][   T30]  ? lock_release+0x4e2/0x6f0
[  978.146518][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  978.151812][   T30]  netlink_unicast+0x53c/0x7f0
[  978.156827][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  978.162130][   T30]  netlink_sendmsg+0x8b8/0xd70
[  978.166958][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  978.172235][   T30]  __sys_sendto+0x488/0x4f0
[  978.176800][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  978.181824][   T30]  ? __pfx_task_mm_cid_work+0x10/0x10
[  978.187531][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  978.193013][   T30]  ? xfd_validate_state+0x5d/0x180
[  978.198127][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.202968][   T30]  __x64_sys_sendto+0xe0/0x1c0
[  978.207747][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  978.213782][   T30]  do_syscall_64+0xcd/0x250
[  978.218290][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.224259][   T30] RIP: 0033:0x7fdb2a78ebbc
[  978.228669][   T30] RSP: 002b:00007fffac47a960 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  978.237104][   T30] RAX: ffffffffffffffda RBX: 00007fdb2b4d4620 RCX: 00007fdb2a78ebbc
[  978.245103][   T30] RDX: 000000000000003c RSI: 00007fdb2b4d4670 RDI: 0000000000000003
[  978.253116][   T30] RBP: 0000000000000000 R08: 00007fffac47a9b4 R09: 000000000000000c
[  978.261080][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  978.269117][   T30] R13: 0000000000000000 R14: 00007fdb2b4d4670 R15: 0000000000000000
[  978.277159][   T30]  </TASK>
[  978.280205][   T30] INFO: task syz.2.3161:17621 blocked for more than 145 seconds.
[  978.288345][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  978.295710][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  978.304639][   T30] task:syz.2.3161      state:D stack:27432 pid:17621 tgid:17616 ppid:16443  flags:0x00000004
[  978.315014][   T30] Call Trace:
[  978.318293][   T30]  <TASK>
[  978.321201][   T30]  __schedule+0x1142/0x5b60
[  978.325743][   T30]  ? __pfx___schedule+0x10/0x10
[  978.330588][   T30]  ? lock_release+0x4e2/0x6f0
[  978.335287][   T30]  ? schedule+0x298/0x350
[  978.339620][   T30]  ? __pfx_lock_release+0x10/0x10
[  978.344711][   T30]  ? __mutex_trylock_common+0x78/0x250
[  978.350188][   T30]  ? schedule+0x1fd/0x350
[  978.354546][   T30]  ? lock_acquire+0x2f/0xb0
[  978.359048][   T30]  ? schedule+0x1fd/0x350
[  978.363413][   T30]  schedule+0xe7/0x350
[  978.367476][   T30]  schedule_preempt_disabled+0x13/0x30
[  978.372963][   T30]  __mutex_lock+0x6bd/0xb10
[  978.377469][   T30]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  978.383790][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  978.389224][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  978.394305][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.399079][   T30]  ? lock_release+0x4e2/0x6f0
[  978.403803][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[  978.409041][   T30]  ? bpf_lsm_capable+0x9/0x10
[  978.413762][   T30]  ? security_capable+0x7e/0x260
[  978.418945][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  978.424114][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  978.429227][   T30]  rtnetlink_rcv_msg+0x372/0xea0
[  978.434210][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  978.439672][   T30]  netlink_rcv_skb+0x16b/0x440
[  978.444466][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  978.449924][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  978.455231][   T30]  ? lock_release+0x4e2/0x6f0
[  978.459907][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  978.465314][   T30]  netlink_unicast+0x53c/0x7f0
[  978.470193][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  978.475686][   T30]  netlink_sendmsg+0x8b8/0xd70
[  978.480615][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  978.486046][   T30]  ____sys_sendmsg+0xaaf/0xc90
[  978.490834][   T30]  ? copy_msghdr_from_user+0x10b/0x160
[  978.496653][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  978.501950][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  978.507401][   T30]  ? try_to_wake_up+0x953/0x1490
[  978.512361][   T30]  ? lock_release+0x4e2/0x6f0
[  978.517104][   T30]  ___sys_sendmsg+0x135/0x1e0
[  978.521789][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  978.527028][   T30]  ? wake_up_q+0x9e/0x140
[  978.531367][   T30]  ? __pfx_lock_release+0x10/0x10
[  978.536466][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[  978.541681][   T30]  ? __fget_files+0x206/0x3a0
[  978.546537][   T30]  __sys_sendmsg+0x16e/0x220
[  978.551178][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  978.556365][   T30]  ? __x64_sys_futex+0x1e1/0x4c0
[  978.561335][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.566150][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.570937][   T30]  do_syscall_64+0xcd/0x250
[  978.575509][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.581416][   T30] RIP: 0033:0x7fd943b8cd29
[  978.585892][   T30] RSP: 002b:00007fd944a83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  978.594629][   T30] RAX: ffffffffffffffda RBX: 00007fd943da6080 RCX: 00007fd943b8cd29
[  978.602655][   T30] RDX: 0000000000044080 RSI: 0000000020000040 RDI: 0000000000000008
[  978.610817][   T30] RBP: 00007fd943c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  978.618815][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  978.626946][   T30] R13: 0000000000000000 R14: 00007fd943da6080 R15: 00007ffe0e07a488
[  978.635004][   T30]  </TASK>
[  978.638046][   T30] INFO: task syz.4.3167:17646 blocked for more than 146 seconds.
[  978.645834][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  978.653159][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  978.661851][   T30] task:syz.4.3167      state:D stack:25952 pid:17646 tgid:17645 ppid:5829   flags:0x00004004
[  978.672110][   T30] Call Trace:
[  978.675418][   T30]  <TASK>
[  978.678342][   T30]  __schedule+0x1142/0x5b60
[  978.682874][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  978.688345][   T30]  ? __pfx___schedule+0x10/0x10
[  978.693245][   T30]  ? lock_release+0x4e2/0x6f0
[  978.698154][   T30]  ? schedule+0x298/0x350
[  978.702606][   T30]  ? __pfx_lock_release+0x10/0x10
[  978.707658][   T30]  ? __mutex_trylock_common+0x78/0x250
[  978.713157][   T30]  ? schedule+0x1fd/0x350
[  978.717498][   T30]  ? lock_acquire+0x2f/0xb0
[  978.721983][   T30]  ? schedule+0x1fd/0x350
[  978.726357][   T30]  schedule+0xe7/0x350
[  978.730432][   T30]  schedule_preempt_disabled+0x13/0x30
[  978.735941][   T30]  __mutex_lock+0x6bd/0xb10
[  978.740458][   T30]  ? register_nexthop_notifier+0x1b/0x70
[  978.746190][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  978.751223][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  978.757275][   T30]  ? __pfx_vxlan_init_net+0x10/0x10
[  978.762515][   T30]  ? register_nexthop_notifier+0x1b/0x70
[  978.768163][   T30]  ? rtnl_lock+0x9/0x20
[  978.772335][   T30]  register_nexthop_notifier+0x1b/0x70
[  978.777866][   T30]  ops_init+0x1df/0x5f0
[  978.782032][   T30]  setup_net+0x21f/0x860
[  978.786367][   T30]  ? __pfx_setup_net+0x10/0x10
[  978.791137][   T30]  ? down_read_killable+0xcc/0x380
[  978.796283][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  978.802060][   T30]  ? __raw_spin_lock_init+0x3a/0x110
[  978.807438][   T30]  ? debug_mutex_init+0x37/0x70
[  978.812315][   T30]  copy_net_ns+0x2b4/0x6c0
[  978.816795][   T30]  create_new_namespaces+0x3ea/0xad0
[  978.822082][   T30]  copy_namespaces+0x468/0x560
[  978.826931][   T30]  copy_process+0x2a11/0x8d10
[  978.831630][   T30]  ? __pfx_copy_process+0x10/0x10
[  978.836681][   T30]  ? __pfx_futex_wake_mark+0x10/0x10
[  978.841969][   T30]  ? futex_wait+0x121/0x380
[  978.846505][   T30]  kernel_clone+0xfd/0x960
[  978.850932][   T30]  ? __pfx_kernel_clone+0x10/0x10
[  978.855986][   T30]  ? __pfx___blk_flush_plug+0x10/0x10
[  978.861396][   T30]  ? do_futex+0x123/0x350
[  978.865839][   T30]  ? __pfx_do_futex+0x10/0x10
[  978.870516][   T30]  __do_sys_clone+0xba/0x100
[  978.875158][   T30]  ? __pfx___do_sys_clone+0x10/0x10
[  978.880361][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.885158][   T30]  ? rcu_is_watching+0x12/0xc0
[  978.889930][   T30]  do_syscall_64+0xcd/0x250
[  978.894482][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.900376][   T30] RIP: 0033:0x7f302a18cd29
[  978.905059][   T30] RSP: 002b:00007f302b096fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  978.913581][   T30] RAX: ffffffffffffffda RBX: 00007f302a3a5fa0 RCX: 00007f302a18cd29
[  978.921579][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e50c1600
[  978.929693][   T30] RBP: 00007f302a20e2a0 R08: 0000000000000000 R09: 0000000000000000
[  978.937809][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  978.945857][   T30] R13: 0000000000000000 R14: 00007f302a3a5fa0 R15: 00007ffe3e6a1778
[  978.953859][   T30]  </TASK>
[  978.956871][   T30] INFO: task syz.4.3167:17648 blocked for more than 146 seconds.
[  978.964669][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  978.971943][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  978.980664][   T30] task:syz.4.3167      state:D stack:28624 pid:17648 tgid:17645 ppid:5829   flags:0x00000004
[  978.990921][   T30] Call Trace:
[  978.994279][   T30]  <TASK>
[  978.997232][   T30]  __schedule+0x1142/0x5b60
[  979.001786][   T30]  ? __pfx___schedule+0x10/0x10
[  979.007299][   T30]  ? lock_release+0x4e2/0x6f0
[  979.012050][   T30]  ? schedule+0x298/0x350
[  979.016537][   T30]  ? __pfx_lock_release+0x10/0x10
[  979.021618][   T30]  ? __mutex_trylock_common+0x78/0x250
[  979.027213][   T30]  ? schedule+0x1fd/0x350
[  979.031538][   T30]  ? lock_acquire+0x2f/0xb0
[  979.036082][   T30]  ? schedule+0x1fd/0x350
[  979.040414][   T30]  schedule+0xe7/0x350
[  979.044545][   T30]  schedule_preempt_disabled+0x13/0x30
[  979.050086][   T30]  __mutex_lock+0x6bd/0xb10
[  979.054662][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.059429][   T30]  ? genl_rcv_msg+0x580/0x800
[  979.064237][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  979.069259][   T30]  ? __dev_queue_xmit+0x89b/0x43e0
[  979.074397][   T30]  ? __local_bh_enable_ip+0xa4/0x120
[  979.079699][   T30]  ? __dev_queue_xmit+0x89b/0x43e0
[  979.084846][   T30]  ? __radix_tree_lookup+0x21f/0x2c0
[  979.090126][   T30]  ? genl_rcv_msg+0x580/0x800
[  979.094861][   T30]  genl_rcv_msg+0x580/0x800
[  979.099369][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  979.104499][   T30]  ? __pfx___dev_queue_xmit+0x10/0x10
[  979.110338][   T30]  netlink_rcv_skb+0x16b/0x440
[  979.115642][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  979.120695][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  979.126124][   T30]  ? down_read+0xc9/0x330
[  979.130464][   T30]  ? __pfx_down_read+0x10/0x10
[  979.135292][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  979.140583][   T30]  genl_rcv+0x28/0x40
[  979.144599][   T30]  netlink_unicast+0x53c/0x7f0
[  979.149385][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  979.154713][   T30]  netlink_sendmsg+0x8b8/0xd70
[  979.159478][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  979.164810][   T30]  __sys_sendto+0x488/0x4f0
[  979.169321][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  979.174421][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.179197][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.184244][   T30]  __x64_sys_sendto+0xe0/0x1c0
[  979.189023][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  979.195133][   T30]  do_syscall_64+0xcd/0x250
[  979.199639][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.205577][   T30] RIP: 0033:0x7f302a18ebbc
[  979.210383][   T30] RSP: 002b:00007f302b074ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  979.218878][   T30] RAX: ffffffffffffffda RBX: 00007f302b074fc0 RCX: 00007f302a18ebbc
[  979.226993][   T30] RDX: 0000000000000020 RSI: 00007f302b075010 RDI: 0000000000000006
[  979.235067][   T30] RBP: 0000000000000000 R08: 00007f302b074f14 R09: 000000000000000c
[  979.243105][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  979.251079][   T30] R13: 00007f302b074f68 R14: 00007f302b075010 R15: 0000000000000000
[  979.259153][   T30]  </TASK>
[  979.262178][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  979.271326][   T30] INFO: task syz.1.3168:17652 blocked for more than 146 seconds.
[  979.279195][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  979.286513][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  979.295246][   T30] task:syz.1.3168      state:D stack:28000 pid:17652 tgid:17651 ppid:15488  flags:0x00000004
[  979.305482][   T30] Call Trace:
[  979.308775][   T30]  <TASK>
[  979.312072][   T30]  __schedule+0x1142/0x5b60
[  979.316637][   T30]  ? __pfx___schedule+0x10/0x10
[  979.321510][   T30]  ? lock_release+0x4e2/0x6f0
[  979.326218][   T30]  ? schedule+0x298/0x350
[  979.330558][   T30]  ? __pfx_lock_release+0x10/0x10
[  979.335623][   T30]  ? __mutex_trylock_common+0x78/0x250
[  979.341107][   T30]  ? schedule+0x1fd/0x350
[  979.345785][   T30]  ? lock_acquire+0x2f/0xb0
[  979.350320][   T30]  ? schedule+0x1fd/0x350
[  979.354686][   T30]  schedule+0xe7/0x350
[  979.358756][   T30]  schedule_preempt_disabled+0x13/0x30
[  979.364261][   T30]  __mutex_lock+0x6bd/0xb10
[  979.368776][   T30]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  979.375054][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  979.380171][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  979.385262][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.390056][   T30]  ? lock_release+0x4e2/0x6f0
[  979.394793][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[  979.400006][   T30]  ? bpf_lsm_capable+0x9/0x10
[  979.404731][   T30]  ? security_capable+0x7e/0x260
[  979.409672][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  979.415261][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  979.420389][   T30]  rtnetlink_rcv_msg+0x372/0xea0
[  979.425403][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  979.430937][   T30]  netlink_rcv_skb+0x16b/0x440
[  979.435775][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  979.441289][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  979.446649][   T30]  ? lock_release+0x4e2/0x6f0
[  979.451347][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  979.456760][   T30]  netlink_unicast+0x53c/0x7f0
[  979.461549][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  979.466881][   T30]  netlink_sendmsg+0x8b8/0xd70
[  979.471646][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  979.476968][   T30]  ____sys_sendmsg+0xaaf/0xc90
[  979.481728][   T30]  ? copy_msghdr_from_user+0x10b/0x160
[  979.487227][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  979.492547][   T30]  ? __pfx_lock_release+0x10/0x10
[  979.497575][   T30]  ? lock_acquire+0x2f/0xb0
[  979.502054][   T30]  ? schedule+0x1fd/0x350
[  979.506524][   T30]  ___sys_sendmsg+0x135/0x1e0
[  979.511307][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  979.517029][   T30]  ? __futex_wait+0x324/0x3c0
[  979.521736][   T30]  ? trace_lock_acquire+0x14e/0x1f0
[  979.527021][   T30]  __sys_sendmmsg+0x201/0x420
[  979.531715][   T30]  ? __pfx___sys_sendmmsg+0x10/0x10
[  979.536949][   T30]  ? __pfx_do_futex+0x10/0x10
[  979.541608][   T30]  ? xfd_validate_state+0x5d/0x180
[  979.546758][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.551526][   T30]  __x64_sys_sendmmsg+0x9c/0x100
[  979.556504][   T30]  do_syscall_64+0xcd/0x250
[  979.561041][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.567179][   T30] RIP: 0033:0x7fceee98cd29
[  979.571621][   T30] RSP: 002b:00007fceef73c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  979.580095][   T30] RAX: ffffffffffffffda RBX: 00007fceeeba5fa0 RCX: 00007fceee98cd29
[  979.588095][   T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005
[  979.596088][   T30] RBP: 00007fceeea0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  979.604090][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  979.612064][   T30] R13: 0000000000000000 R14: 00007fceeeba5fa0 R15: 00007fff7df89108
[  979.620548][   T30]  </TASK>
[  979.623611][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  979.632660][   T30] INFO: task syz-executor:17654 blocked for more than 147 seconds.
[  979.640541][   T30]       Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  979.647852][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  979.656566][   T30] task:syz-executor    state:D stack:27232 pid:17654 tgid:17654 ppid:1      flags:0x00000004
[  979.667352][   T30] Call Trace:
[  979.670621][   T30]  <TASK>
[  979.673664][   T30]  __schedule+0x1142/0x5b60
[  979.678172][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.682983][   T30]  ? lock_release+0x4e2/0x6f0
[  979.687666][   T30]  ? __pfx_lock_release+0x10/0x10
[  979.692704][   T30]  ? __pfx___schedule+0x10/0x10
[  979.697547][   T30]  ? lock_release+0x4e2/0x6f0
[  979.702227][   T30]  ? schedule+0x298/0x350
[  979.706595][   T30]  ? __pfx_lock_release+0x10/0x10
[  979.711636][   T30]  ? __mutex_trylock_common+0x78/0x250
[  979.717138][   T30]  ? schedule+0x1fd/0x350
[  979.721845][   T30]  ? lock_acquire+0x2f/0xb0
[  979.726443][   T30]  ? schedule+0x1fd/0x350
[  979.730771][   T30]  schedule+0xe7/0x350
[  979.734854][   T30]  schedule_preempt_disabled+0x13/0x30
[  979.740308][   T30]  __mutex_lock+0x6bd/0xb10
[  979.744944][   T30]  ? inet_rtm_newaddr+0x316/0x1560
[  979.750060][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  979.755163][   T30]  ? __pfx___nla_validate_parse+0x10/0x10
[  979.760981][   T30]  ? inet_rtm_newaddr+0x316/0x1560
[  979.766184][   T30]  ? rtnl_lock+0x9/0x20
[  979.770371][   T30]  inet_rtm_newaddr+0x316/0x1560
[  979.775418][   T30]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  979.781690][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.786625][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  979.792009][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  979.797162][   T30]  ? lock_acquire+0x2f/0xb0
[  979.801745][   T30]  ? rtnetlink_rcv_msg+0x205/0xea0
[  979.806945][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  979.812338][   T30]  rtnetlink_rcv_msg+0x95b/0xea0
[  979.817342][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  979.823293][   T30]  ? __pfx_avc_has_perm+0x10/0x10
[  979.828330][   T30]  netlink_rcv_skb+0x16b/0x440
[  979.833150][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  979.838618][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  979.843961][   T30]  ? lock_release+0x4e2/0x6f0
[  979.848639][   T30]  ? netlink_deliver_tap+0x1ae/0xd30
[  979.853967][   T30]  netlink_unicast+0x53c/0x7f0
[  979.858730][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  979.864069][   T30]  netlink_sendmsg+0x8b8/0xd70
[  979.868849][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  979.874191][   T30]  __sys_sendto+0x488/0x4f0
[  979.878695][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  979.883777][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.888547][   T30]  ? rcu_is_watching+0x12/0xc0
[  979.893527][   T30]  __x64_sys_sendto+0xe0/0x1c0
[  979.898747][   T30]  ? trace_irq_enable.constprop.0+0xea/0x140
[  979.905101][   T30]  do_syscall_64+0xcd/0x250
[  979.909622][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.915579][   T30] RIP: 0033:0x7f24f278ebbc
[  979.919989][   T30] RSP: 002b:00007ffffa6d1f40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  979.928842][   T30] RAX: ffffffffffffffda RBX: 00007f24f34d4620 RCX: 00007f24f278ebbc
[  979.936879][   T30] RDX: 0000000000000028 RSI: 00007f24f34d4670 RDI: 0000000000000003
[  979.944883][   T30] RBP: 0000000000000000 R08: 00007ffffa6d1f94 R09: 000000000000000c
[  979.952889][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  979.960862][   T30] R13: 0000000000000000 R14: 00007f24f34d4670 R15: 0000000000000000
[  979.968894][   T30]  </TASK>
[  979.971907][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  979.980958][   T30] INFO: lockdep is turned off.
[  979.985786][   T30] NMI backtrace for cpu 0
[  979.985794][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  979.985807][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  979.985813][   T30] Call Trace:
[  979.985816][   T30]  <TASK>
[  979.985821][   T30]  dump_stack_lvl+0x116/0x1f0
[  979.985837][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  979.985853][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  979.985866][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  979.985882][   T30]  watchdog+0xf14/0x1240
[  979.985896][   T30]  ? __pfx_watchdog+0x10/0x10
[  979.985908][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  979.985920][   T30]  ? __kthread_parkme+0x148/0x220
[  979.985936][   T30]  ? __pfx_watchdog+0x10/0x10
[  979.985948][   T30]  kthread+0x3af/0x750
[  979.985958][   T30]  ? __pfx_kthread+0x10/0x10
[  979.985968][   T30]  ? __pfx_kthread+0x10/0x10
[  979.985978][   T30]  ret_from_fork+0x45/0x80
[  979.985989][   T30]  ? __pfx_kthread+0x10/0x10
[  979.985998][   T30]  ret_from_fork_asm+0x1a/0x30
[  979.986017][   T30]  </TASK>
[  979.986021][   T30] Sending NMI from CPU 0 to CPUs 1:
[  980.098036][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20
[  980.099065][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  980.114035][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-05001-gd0d106a2bd21 #0
[  980.124160][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  980.134199][   T30] Call Trace:
[  980.137473][   T30]  <TASK>
[  980.140378][   T30]  dump_stack_lvl+0x3d/0x1f0
[  980.144969][   T30]  panic+0x71d/0x800
[  980.148847][   T30]  ? __pfx_panic+0x10/0x10
[  980.153252][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  980.158617][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  980.164584][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  980.169942][   T30]  ? watchdog+0xd7e/0x1240
[  980.174350][   T30]  ? watchdog+0xd71/0x1240
[  980.178755][   T30]  watchdog+0xd8f/0x1240
[  980.182992][   T30]  ? __pfx_watchdog+0x10/0x10
[  980.187657][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  980.192846][   T30]  ? __kthread_parkme+0x148/0x220
[  980.197861][   T30]  ? __pfx_watchdog+0x10/0x10
[  980.202529][   T30]  kthread+0x3af/0x750
[  980.206681][   T30]  ? __pfx_kthread+0x10/0x10
[  980.211617][   T30]  ? __pfx_kthread+0x10/0x10
[  980.216192][   T30]  ret_from_fork+0x45/0x80
[  980.220597][   T30]  ? __pfx_kthread+0x10/0x10
[  980.225172][   T30]  ret_from_fork_asm+0x1a/0x30
[  980.229931][   T30]  </TASK>
[  980.233170][   T30] Kernel Offset: disabled
[  980.237472][   T30] Rebooting in 86400 seconds..