last executing test programs:

11.84854433s ago: executing program 1 (id=6582):
syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000480)='connect aa:aa:aa:aa:aa:11 1', 0x1b)

11.715201397s ago: executing program 2 (id=6584):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0x12008000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
kcmp(r0, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (fail_nth: 1)

11.220223483s ago: executing program 2 (id=6585):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0))
sendmsg$nl_route_sched(r0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})
fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000019080)='net/dev_mcast\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0)
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x80)

10.259381237s ago: executing program 1 (id=6590):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1, 0x20000008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ff, 0x0, r0})
msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1}, 0x0, 0x0, 0x160071a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
sched_setscheduler(0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbffe, 0x0, "ec28aa0001000007"})
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
setgroups(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)

9.659011892s ago: executing program 4 (id=6591):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_io_uring_setup(0x5d97, 0x0, &(0x7f0000002240), &(0x7f0000002280))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000002980)="8d", 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x144}}, 0x0)

9.625527424s ago: executing program 0 (id=6592):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
syz_emit_ethernet(0x106, &(0x7f0000000900)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "07001c", 0xd0, 0x3a, 0x0, @private0, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a9d528", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@private2, @empty, @remote, @empty]}, @srh={0x16, 0xa, 0x4, 0x5, 0x3, 0x0, 0x2, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0]}]}}}}}}}, 0x0)
socket(0x10, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095010000000000008a"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r3 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000300)}, {&(0x7f0000001940)="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", 0xb74}], 0x4}, 0x0)
sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000400))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0xb8, 0x31, 0x200, 0x70bd25, 0x0, {0x18}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x24, 0xda, 0x0, 0x1, [@typed={0x6, 0x88, 0x0, 0x0, @str='}\x00'}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x10d}]}, @nested={0x75, 0x0, 0x0, 0x1, [@generic="6323d733ab375a16d28e58f59a489bdfa5be2dd0660df049257906e990468a187d048daed947d724c564084a9f0211bca07a5fa86bc5ec4209eb5f0e9e5b36518b1f5b1a624f556aa066e98dab029678aa2d9cab11f2cf1e36f5fd1dfe0bdd37023b1e4b6dd69e39919d966d4694e8679b"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

9.279268224s ago: executing program 4 (id=6593):
socket(0x0, 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
ftruncate(0xffffffffffffffff, 0x1f)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x60)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xa)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

8.531401698s ago: executing program 3 (id=6595):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0x7)
openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0)

8.176380357s ago: executing program 2 (id=6596):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002340)=@delchain={0x60, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_HASH={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_RATE={0x6}]}, 0x60}}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/70, 0x46, 0x0, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/44, 0x2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
unshare(0x24020400) (fail_nth: 1)

8.066690964s ago: executing program 4 (id=6597):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r6, 0x1}, 0x14}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
get_mempolicy(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000106000/0x4000)=nil, 0x2)

6.63852952s ago: executing program 1 (id=6598):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.634697706s ago: executing program 2 (id=6599):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x0, 0x59c35848f23b894a, 0x0) (async, rerun: 64)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
r5 = syz_open_dev$I2C(&(0x7f0000000440), 0xffffffffffffffff, 0x60102)
ioctl$I2C_SLAVE_FORCE(r5, 0x706, 0x42) (async)
ioctl$I2C_PEC(r5, 0x708, 0x9) (async, rerun: 64)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "a26df55a767236e62139c2071a176250a12fab5932b902510feb36506cb52f0560"}}) (rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) (async)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6)
r6 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xfffffff7})

6.381081876s ago: executing program 3 (id=6600):
syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
ioctl$TCXONC(r1, 0x4b3a, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000480)='connect aa:aa:aa:aa:aa:11 1', 0x1b)

5.276766131s ago: executing program 4 (id=6601):
syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x200000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x1001402, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x5)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
getsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, &(0x7f0000000180))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc, 0x4}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200009e8ed366850000008600000095"], 0x0, 0x80000003, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='cq_schedule\x00', r7}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x54, &(0x7f0000000740)=ANY=[@ANYBLOB="bfd290b0378800000000000081000e00080045000042000000000011907800000000000000000000f020002e9078703b9e6b40de511f22f7a5e99021cfa01006aa0000d8bf4ac4bdf500"/84], 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511000000000000080045000078000000000011907800000000e000000100004e2000649078020000000000000000000000fdcdae25a7a292872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f"], 0x0)

5.147094797s ago: executing program 3 (id=6602):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0xa0, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x0, 0xff13, 0x0, 0xffff8000, 0xfffffffb}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8001}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}]}}}]}, 0xa0}}, 0x0)
bind$packet(r2, &(0x7f0000000400)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'tunl0\x00', <r8=>0x0})
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8000, 0x7, 0x40, 0xe00}, 0x1c)
sendmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f00000000c0)=@can={0x1d, r8}, 0x80, 0x0, 0x0, &(0x7f0000001840)=ANY=[], 0x4f8}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x21, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x59, 0x43, 0x4f, 0x40, 0x16c0, 0x5df, 0x6187, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)

5.144936696s ago: executing program 2 (id=6603):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
io_setup(0x6, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}])
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
rt_sigpending(0x0, 0x1000000)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x7, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={r4})
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r0)

4.605151177s ago: executing program 1 (id=6604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
syz_emit_ethernet(0x8a, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000740)=[{&(0x7f0000000a80)="153edc81699e", 0x6}, {&(0x7f0000000dc0)='Q', 0x1}, {&(0x7f0000000440)}, {&(0x7f0000001900)="d3", 0x1}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0", 0x4c}, {&(0x7f0000000040)="efced5", 0x3}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000000200)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083bdba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e05", 0x7f}, {&(0x7f00000005c0)="bb31389c501cac6fc63962e9bfbb888c3fa84c6194cdff0aa75e6c493bbee9771c98dff3f7cbd16a35c086a23c9184598df49a64265ce92596a352d1bd2d6476f97e57101aa4439386152f2d5845f367fee545f3c9ac0fa79e378da5efb4a9", 0x5f}], 0x9)
write$binfmt_script(r2, &(0x7f0000000040), 0x18a3c85)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r9})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x2}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000e6ffffff00000000000a40000000160a03020000000000000000020000000900020073797a3000000000090001400000d837a9940ae5c6"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000014000000110001000000053be5bf39e635cbbad4"], 0x54}}, 0x0)

4.55351102s ago: executing program 4 (id=6605):
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2000000ea8, 0x440001)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0)
syz_emit_vhci(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x1c, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101a40)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
sendfile(r6, r5, 0x0, 0x7ffff000)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x7e29, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000280))
r8 = io_uring_setup(0x2f64, &(0x7f0000000340)={0x0, 0x1aeb, 0x0, 0x2, 0x315, 0x0, r7})
syz_io_uring_setup(0x60cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000040), &(0x7f00000005c0))
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$qrtr(r4, &(0x7f0000000040), 0xc)
fchdir(r4)
r9 = socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x9)
dup2(r9, r4)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

4.215641974s ago: executing program 4 (id=6606):
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000794a29408c46ea906d990102030109022400010000000009040000010e010100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000000000000001890090780000000000000000000000000000ffffac1414aa000000fa61ed9000000000000000"], 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x4008af24, &(0x7f0000000080))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657458315f746f5f626174616476000900010073797a30"], 0xa0}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x6b, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
read$hiddev(r1, &(0x7f0000001100)=""/234, 0xea)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001200), 0x2000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2/\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\/\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

3.491718617s ago: executing program 3 (id=6608):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1, 0x20000008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msgget$private(0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ff, 0x0, r0})
msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x8, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1}, 0x0, 0x0, 0x160071a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
sched_setscheduler(0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbffe, 0x0, "ec28aa0001000007"})
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
setgroups(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)

3.069298775s ago: executing program 0 (id=6609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000130a010100e483d81e7676ddfe"], 0x20}}, 0x0)

2.743328896s ago: executing program 1 (id=6610):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='svcrdma_sq_post_err\x00'}, 0xffffff83)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x1de0, &(0x7f0000000440))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x1a, 0x20000000, r10)

2.202930402s ago: executing program 0 (id=6611):
r0 = getgid()
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=<r2=>0x0)
getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r3=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, <r4=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x4000)
r7 = openat$random(0xffffffffffffff9c, &(0x7f0000002980), 0x30dbd0af5b5e452f, 0x0)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000029c0), 0x48500, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r10 = syz_open_dev$dmmidi(&(0x7f0000002a00), 0x9, 0x40)
r11 = dup(0xffffffffffffffff)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
r13 = getpgrp(0x0)
r14 = geteuid()
r15 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r16 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a40), 0x0, 0x0)
r17 = mq_open(&(0x7f0000002a80)='%/.-\'}&-$\x00', 0x1, 0xcf, &(0x7f0000002ac0)={0x7f, 0x3, 0x0, 0x7})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002b00)={<r18=>0x0}, &(0x7f0000002b40)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r19=>0xffffffffffffffff, r0}}, './file0\x00'})
r20 = openat$cgroup(0xffffffffffffffff, &(0x7f0000004100)='syz0\x00', 0x200002, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004140)={<r21=>0x0}, &(0x7f0000004180)=0xc)
getresuid(&(0x7f00000041c0)=<r22=>0x0, &(0x7f0000004200), &(0x7f0000004240))
read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}, 0x2020)
r24 = syz_open_dev$cec(&(0x7f00000062c0), 0x0, 0x200000)
r25 = accept4$ax25(0xffffffffffffffff, &(0x7f0000006300)={{0x3, @rose}, [@netrom, @null, @remote, @remote, @remote, @null, @remote, @rose]}, &(0x7f0000006380)=0x48, 0x80000)
r26 = accept$inet(0xffffffffffffffff, &(0x7f00000063c0)={0x2, 0x0, @remote}, &(0x7f0000006400)=0x10)
r27 = socket(0x9, 0x6, 0xf4)
r28 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$unix(r1, &(0x7f0000009a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="5ffe9db9d9468ae94192144e0418897448a6e6704d4e4fc09d9182e6cd813399138b9a13d2654f24ea9a1dd2a0465dcf66f116a292abd93ece51c4b8fa9c94c670e9fd11ce65d2987d", 0x49}, {&(0x7f0000000140)="1d83d8d0a6bf4ad7b7dc16d18e55606adaa232a2f72c1f2bb2f7aa1eb90024a9fdef0b32487f14d8af4e77e80a86d2e362f6dc6cdd12a1cf54097fac3eed0a061e3dacf4ea31dc97318bca5c88e61755f1896770ff54febbb8c81ee51b1ab848cb65a39ad252392620a34b6a0324903eca13a5266f90274a163fa8f2109008486611a1859731fdc6a2c55c2b12de0dcadc8b1fc6dc144a0ad0edafe8facc3602f3c2f81dbe38f26c11d4f5f101183409fe30d5", 0xb3}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r0}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x40, 0x1}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000000640)="0a63a6b51d56e6b5c54b4664aaf4691aaf35ad5a1539773e3a535da12213f9ac5afe50e78deda2d9c2c67bb55aabb0ced3", 0x31}, {&(0x7f0000000680)="a74a0295e91a47cc76d04eaa7920b11f563cd5ed2681380d5d2270b6ac29de8441d4edbc9593e8d431ddc1dead9ddecfcdbf393139d080af0d6a323d693d9ff687d7aa1aa6aeace532bbf63040586b07e607d04e623523a8d14e77549db192a2f37253a1", 0x64}, {&(0x7f0000000700)="81544c063106f3819bd1e6000721dc5aac407ae29f52bb58f109c5772d356f7aaf5c9f7fe3dff32ea40e4ee19eb911b57a13caf687cbc5618c31d366e2b27511f32d48778f534017a6c026c7b9a49290e69e1ad929f85a8b576657200bba37b4619607b57cc793a2aee23489da41157cbafa94f6ddb3f03027e8b669714fd81eacb4cedf033782d6f3b8e59f6954dce6097b60e24a7012f9ec7c545e8cd6d395e087f32970bd86648f3c77f0c1e0c0d224e2475ea30ae3fa5451f933020d523330b87bdc70da5526cd90741c6cd16d42364b19e747b091ffd4ab3a9c4cd209248a2ebaa82047705bdca27bc1dcf63ddf38b08e43dd479549f46f5606244c1eeeebc7b669910ce67df8458e44a6db16e6b0ccbe4f2bc145be9541f755912f6bf39955328b72a89b2269928f5ca92afb11400c88b15ef1a9cfb9c3d42bf6e8c4e1a229fbc5c3bdceb823854e929fd41f86e6e81f4990c45c3f477cfa0d4df3f5ab7bf71941d5a94640da03818d15642f4bcd4d446fbb825a7e338ea1789a882f4d91169b6d76ee9df84d14fb0a67177fbad1d8fb594b6b9fa288ab206d07ce0373610c9b2e6cad9e8807ad8a71dc67f1e0b35471a66d0e53de24d070d296f04d6ba57d2e786807b19818aa37aef84d53b7de2521958ca688b03c0707b256bf2e0f654a45c6414601798dc24e135e134ebf7f36df897c6653d50227a411abf73d0a5608fe38bcfdf9b49f3045432da6852b4b0e376c15baeb6abecc324bda39c3eb178d8e9cfdc89f148b547b298f62b01b01038770f5af4791a9413da90257d7e143fb02b8f1b65cb1b5c093238e2c0b6db3f0a15063754f70ac96d9f08364e1a0db32ee504f8445f8102e7c022f2a4da1ebf6dab9939101374a9f7baec385dfdea76ccd274eafb1fe8d82704032ac3da9615c0d22383b502a29217bdebcdc2873e819508bac8b824663af73d9119a5fe9117ce5c426c638f5ee5fce962c131c5276bb0aee6d01b002c0595a4b13ab6c076639740b2c5937d881ce13a9fed16cff6bac0424cd0f7c7b6921a7710732a6378ac62c90375440eef5e220daea32a92e477260504603cbe3117a1866f26bca61ed9d67a243a0f84e06996447507fd9b6e4c7eaa8476be1b9fb32e99f1d477cf9373175d54d8ec874c0c6f1c8fc99863a4abbaca8b7650b243425021a9f40371091d23fdf0086ff51200cc7b870ac1af7346959325d49f247b53bdb80cb9a4b916d998219129442da3a08840e319b1de6f61e814d612eb36bcad9fc24d9bf961fea2f1d2b19f87e6ac262ad6728f68ee0d35d21d1e006f474b078b41ab2db630f5b0862e04f09cacac25ebcc0cd0645dae12bbdba6d6d0712f870ede4fa5b5fe9a0bb2bc671c77fe39162d1f4d443f9fe1e01a7eafaca5185ed7cd97ac17e8c3dd867064f906cb10427898eaf3f0aa6074425f5983dd5dc479b7f53fd42db125d83b918ce5e9ae1efb4824cae573fd770df1c16cfa9f43810f83e475c95a437b7dc055c774ecf1b1ec002e5405e4c56e1447df7b71c4e0756370ed950db4a5906712944280f0b3a0e4cd937ae12dd4b8e18900afbddfa3b9f826550f45ef5d766056cd66fed49b4b114e887b5ba8f86621ffb3680e2b1a9ce2eb5311470e1b61fea7e8e76fda9c05dac0882fe7cb1a0da1bede80fe176a9342b56853b93346441d174ae84462f76a10b8a68377f947c3e414a58b2659401dbf93f61ecea1aa731d1bbe4514b6ea451b1731fb069d93907566ee37a7522c60d6601a204a112ed5b5a2c24df264bf57aa6685b9557e9f1745728f2b2db12b315b39a63a0499ff4b88429e91c5e76cacba76a157f115e2e89198ea786cf0e9da2490ecd605ac4463ea953274328e1ccb9df0be7462d01a4a264e02a2986ca4b843f6873ec730484e0a8700e2e0b5c3cfd3858e9c3828479a079d17a8b2bdaee4c88643f291adc3f382c7f324e9bd5484138e6ada07438acbc2df0141edacf02afe4fe88a4fd3689bd9395d1840eaa266994207d2eadf71c00db962645dc08cef482af22223fb3c131ac5bcde895e0c7ca41f30ef5e7ae2b98aa2ba70cce39772cdce60a34d2ca26e9d8c4646b47a76f3be37d4d928708019e4f52094580ffd96f2aae98f870fff924367399fc72f48d896f1369cbfa2ff2c0b87cfd04e61bbfa5f35a830e71bbf84d7dba0941bca6dd7673705b30a68f7ad5e342e456896588c33c944e0fda7047ce444454184e4ff22e051b03a2a353c2653f513e220e7966ba36b886a8c4ba3f7c096a30ba9637cf720ece17b3f6190cc8059d084b04e8a3d87c8b552b9e95e1fd5a929fd8260dcaa2ced5129668f24c1f54424fdc42d4e5407f80424245abf088c18a6762edf6edc3b2c93ee6f05318cd3b8b4cedd316005d776d70597907fe8d2a1fbf365116161acdba5d35008a41dac2b756aae2d080493091e76debbf143104819a955582ea8c15639bc4c4582d46e50f44461df1769df11591be743d27eb1dddc806ef405c8677acac14aa10da14121f827b721c29b9dff44efc005e70c334660144345cbcca305c9203a2edfa3a97d66d6ed6be82d6b5d45d454a4ec04b91c7932fc52db63a375b45b7e914779d3c27bec93a155c5930a81fa4b490ae1d916430656d03f40d22924dde92b62f97a5fc1d0bcd4a4d830d716e6053ead291f1efb967c2cfb44b42920b6689cc1efa8b01186fe7c3b013b19c366d5aaf30f6727c8678bd0f8ec54c67c67044e94e5469ebb4ed2c387b2c2b26b5b2eb7434c03d49b957490f1338b66130f2def2a7775fa4abeb1040639f7e0de477113fc36e5af505f27f2a12b830dd325ba6977b4221189f75645831ce8a9d0798fb4d16c0dbb69453f0435a0abd6f443fb5913e03814423a40ebd35df359acfebc86b42866fdf07185c3ae76aacede935ab2cf71beedc73cf7dac8998b13a9165cdc9d6d3fefc41b41645fa66540367e44e4bed109d9a0d132e9f9de0e8d054b5b7e239ae11d62431bdc89ecb6c99741ad3a751679a8f6817802da9e868a6a0be998b03ac51af3ed9b2abc0c1f368a115f0cdc0b5d3d54642cd4a92f0df90a2e5d6d19b633fdf1a67bedaf1b62fb43edac01d157047b19f95f224c9c57dd2108b2b836657bf99a64b25fbab89fb42d9acccf83c3a5d4695be3fede890c40b8ccf88c0f0010aff7dd2f9dbe3317591a44d695d5e18b0a9d148c7656b9238731f770796203ccd887b8c6b511ce497c984f8ec131a514b27a3676af1a1d2782ec9bd46b41f6822417a74bb25d7039992cfcf760a45043ec689eae9dc8317fb935bd5f5c05dfb9c8971c85167389ffc4dff55bdfa0fbce343425ea68ce3eb7be6c2dc2276370aed66a0fc548b25148d95e4fec691f74bcd9451964ee6817dc0ba957478436a86ce9bd39d733df8d944fba942ac93c69b82be1d14983481769551aeec63b018517d66050b708385ca4b24488bfa4e6ed88afea9557c1a33215e4e58f26b6f3ba7d478160d98e732ec57cbb0a2415a1a0b54dda57395727eb8fb69a32c979e892e2917ad578df3382a22cf71159ca6bb7b03236e6595a9ef94ceabfffffc9a54d19437228f57552ab7f9ffe4636155eb89288176a7c5e67e470a4d7b706d20d3589b057eec777d2a5733a920a7b0ee2b7e0dce2c8ab51ec556117d0ae00f39789ff944b90815fb94b4f42def016c70027f143bfed5208335c23c04e5faa2d4bbea72779633a20097a15bc025776d6079b84e110aafb98a6a5bae5d81ad690818672ad5adaed035512d6baaf041a0705e5962416a5049fdd5aa14d560770c8366c597c373345a929ad679fd35fc3850c0b6ec8a7a34ab0d646d9a9fdaff6e33fc80aeae2f661d1ae6a0bad2682c99bcd7d5363d8f973b42cf9a92f78a492e45066cbb92b7571f553372209d7f93fa57545c036f5a7aa21fe317bbc5b548e63809fa5b1d8a2d4087601e490c85c01d120a9b8234cc14b4211aa88a098a0fe7c7adab22cfcc9ba37170798ae3fa4769a95b319e30c3beda5f0eee63c078a867a0f0367e8aa0266598503ae8b5ca743e6e522949cb8c816d808ecd2714a5f6988dadd0088fc869273c67cd8cc1fcd20dbc25071116de002543d30fcf247d6c2c8cc99cfac885c6d5918d04ee7d2cf7b8af0d572eb3bf968a544c4cc1c67fe501fe6bfae3d409bcb7819cd2f7132a1d721b3f4908da221ac13d7d16bc3cd957726f5aae1c8d87cfbfd122f2027f9da091657eca1500457d4d9e97a75a5047e16f0443a57109da03d4341b13963c3a36ddf4e0882bd8a64f8ca0cbc9c3cf8ae24413a9d2c3097bcbfe27ea2f3c0450af97551094f80473064773a9be6ca1fff12f58b9df13994165fbe60d71733aaccc6902d30188c843610e22296ce32e1091e6f2d885484c8851b1128a31bdd5d6154f221cf459edf036d0542d1ee6e7b4c70e923fe7616b5ae4d7983787cc0b78064c8316d6517e378e50a584711b073169f3e114c10d9002567e4f9b07b9f0cb2e5a570bd66a27533be59ae89e81f85d3b31314f079be7bcd4921f08417ab0c8ec56047e8036e1a92a3fed44d9d6dd0eccf12d05b1c19f0ec41a59dfd8d6e1b347b8ec28a9bf273c40592a2cd04f832d07a8a9cda99fc2af16b29fcb02514b91e851ce5ea5e6db5a2300a9de30e8f6b346ba44b9784c9f0d00e1277745c6f9cbc23305c9965c3e3d26d9639485ce1603bfe393d6bf43286b90212e146491d5cd98ad072eef1ca3307ca7ca81a069fe84da116f6e8e93402062b741954a0962c10be83a4fdbf4a3c62a71952a46f6721ebc4d591d7711e31a30bd3073762b6ca7d1d9192ec21b2e7f0f05f240c291561a5fcdf92e39a51d1adaffc11f0f55154f9a134e12b3f2d14edcb58c3dffc7329933ce4b8d8a610b4db9d336d5d0544c6d9ca9835a98d228692a5520ec2f551fa7607903d4860ffe4bd167a7bbd09ad3af1b89173517c89f9f3308ee69aefc544edfd48288227245ee12d1e72e1a4e7b7be5b6b600fb5d5f59396affeb8cc9d03193e6bdc94179f09712a49d7cd54413142561f98ec2526eb9cf3e5f3d3381a0513e318db3e623e30dfdf7fb5597046cb69525615eecbf89a6b92eb9d56eb4d8b63d9df0ac9ff9f6a604b1c3de17dca33562cff2f89a67398fac03830b58199345061e920d13e4706ec5515bc4664a4622b5125dee167b85ea62a466eedf172a5dd72a93f8425b5d937bf51264b4fc3d228362a1fab702e87f28fd292d033d66a6368debd35bff7a2200ef40bdfad49d47e856ea3fe77751411d0e0054bbb809147b2ee96abc042d0c40c28da8b83bcd26f3e490da2505468c9c77ec18d6d8cc3ca3fd9ed942a8caf51e82a3f5229fc882a837e059f34ac580d3acba86b013acb7ac1606bd9ce31933eb597340663d92bc8797653dff23231bd7ffe87652b352e0065367ab4f616032d4281e38141535e80a2a5a37730e6024672724cca51b31745f3ef20bfdae6e9f5958fabc27ba46c0070bfc96937b5319a7ae8ff3c70d8fe9efa6886a4539743a71d37ac9d252e556780be828695122974728e6e0937d4e060549e91d313ee6150c90b8cb7fb4e5c20adf588314e58bd93b4676b2cdb2811834f3d12f8df7224a376a92743666ff718f71ddc7c8fec6a593951987b46df25a9542736251cb9182ff4d81767f2860daee955cac85ea843c1132034f390f552df3ed12ca7f431f218c5d97fb6eec276750f11052cb13f6a7ababc0a2bc5438fb51f4c56abaff977e5309828adafc80486130719e90", 0x1000}, {&(0x7f0000001700)="890c45a39586e5f2368a6beb4cfe6ff4837ebbb91125626e6a1e887f73ef01943bc291cc35696315bc8cb37da9b8fc72f64e553e1a2196172b163fed685d07a8095844", 0x43}, {&(0x7f0000001780)="ebd9a7c4d43d10841366be442a6538da21b54be8344bbcb3f34479d011ad4b72a3238806bfce4c4d5e1f8f427e7de50034e32b67a7d5dcbae49f44c5662780586b2360fb8bf87c0a8b908bfe248e8f70e7e3e726ec6b96c787ce4dbb75eb8ecaac0590217ef0ac396c8bf7ee5a7fd1fb90a76df2308addd6b5f326663c618ea9853805818d9f07e27eff322396b74c7731d98f95e8cacc68c3471eb58a9b38d4935df43cc56b514535f797ec69ba77599b21523c33ace20c41b58d545e3d43e311fc774b9a2ea3bdd08c0616b4fede63acd8d6c66491f0938b0b6b6f969291dd62066b08f7cb273ee42016dfb7b46cfdeb0c4d9de5a7c76f", 0xf8}, {&(0x7f0000001880)="b0d40551c6d8432e31d3dbd18190f3027d98aac417b572700c02d46133a0ea65a7bb7c188aba2808b29483ad1de6c76c970825c2815bad4ee23d32dcac71c547b30f2499167594221d72a5844b5a3df83f818de1c618732f5c921f73d024323e1af2eb9b1f5ad68a709031a50b02f8a1c784473d73202410784ae741cfd0b4b4ddcfeefc200195f0560f62c9c4ebc284de31bc15746c90175e04a28493bcb945a8d66369cd8f65cc60c475c1eeb2fab1b029c101374622ced1048e6a17eac88db0731d2869b33163c69e8477748e40020ecbdd65a4beff91d4f7201827fae2bf0965ee0d3491a0c6e990e4d410b51768036a057eb944b3f77c5ac2de1de690cbd6827308a5f93d001308a0a65fee8cd9a03baf02d10f3a739fd064a01dc519ff48202e30a90aebfddcf84ed2d02823682160cca27bf9244691320773aeb2218afe643d8e2597183a015fe7ead91e68149cf229452f2ea0aa610bdb028bf463963cc60786cca0c038049aa2a48636e27768802bc6bdd4a6bfbfbb4de598507cc8b275cfbae197a82ad0479635a0ee5ff7335bb4ef31042cfd982cec1dad643087eb05b1148197cd8ba35681ad0f2347b8693766d451b1768cb8cc5b3d48bc00b5279cb88cae3dd6444cc2b0c7d7a3e1b7e8304518b811202494507c5b2d68b5a73f6f5987ebdcc3811f73fe0396262c0655c1b1663f0d2135aeb35d4c9857d3ccf39ea3d9111739efbde7ac0714157d7d3491f9cda4c64b7934c0eaace7147be137de7e9213ce86850ecd732171aacc30b446fe92dd82e0b2626de9e25ddb9492ffb3f2aa0481642d3d5c594558cec80041b3d13b7a31e4b51fa8275623a93d18e8a243f01e725cd27e3ddc5c937ff6e12ee68b1e3b3e11cc3ad8fbd644719c8932e599b581e5dd595343686acb5fbd14d1d83751158fe58b68022443a76636130657f4ca64c5264a6f3db03877eb5c6f0979e6782df4c7291dc3ca51d1426262ab55d2852f283ce71cea716740415ec83a6ed92bacd24e4f8f34037f978b58bf86d62d65194e027733f7194047f0ed93d8fb85cef47bf42285c1f792c0506bd5dcb92b7ff5a5da81fa24754bff930984f6b59fdb2034e60bf34b52c3f2dda22df051ba6381d52a1118b8375f3b281789ac15442251135f5a7c2ee69a1b536ad595a35432237d49ca434642f997754497fc0432abefb779e188ff3b772ce89a9f82b5bb7634b732f8bdbf4f8644b082de5498a415ff59e6fca2e2defa22ad7e3f015d173529263bedc489abccfe67dabdeaff8715afa62c6f8b5bb6171cede9bb790e675de82dc9e7eb50edfd610f7ad205309d24f9056f88554b403c2ddb81983610ffb318ed2ccbc3c0675188b4b9cbe3d61c9059d5e7fba369cf09b7bd09113e0a28bbc355fd1e96256aa46ef7838b1a3ac65e69464b9aa42014c7a47777d8998a100666c1069779066f07b60809d50c438d7c316c31934e5562be0800493020ae414d18f77833cda4132a67d4948a5d356a7374a2f9bf62941465c7f0cf56f8069d2fff15947fcd7b327dc14859bf974709934044b3f77ea093da516b4138359fde44c329a737c834074f8ca965ce317c83603c803166b8a86c369ac091b9bdd32bb7e486def4ca16044fa4eedd338500eff5b80ad99e5bae6b09a893f9d971dcaa8b9713d369cbe4a10ee6e5ee2b6e4a49e18fcde3e89012a610a69f2863744920bc9655d7eec631a8d3bb24bcb07fc12f3af129ba66a3bf96abc3243eecb07c8c9d76372e3a3f0bd49b6974d1daea755b3e4aa9e06620bb68110aa50a89e30f052a239090bbd854598bb301e7815180023dfb2dea245b44584149196ab42bdfc8bda56d544d7dbfbca2ff66c9839ffadaee2066460768d124aab5bf931b618a9b84c276192db67bd45b55b584a8517ed491aaf3371940c50df2cd2c1d3679c2c6ff391ac6ad1bf3ec936e5bef38edd57bff78a9349a821bf8f92d2ed75620ecdf04366792491ff008a85fb1493ecf02f67ccb43e15b23b0b120a20ec473d7da33137201d41ce59ea7037eed2af6dea488994310f55c69075bcdf7808571e12ac07e99c1c5a0a8df98ebc1287e7cfb195f20157d517ad0a42cca803a63be0e97f758612d177ff04e8c94139de228ec38913b43a2a6b996f523f18953304ae951d3436b1390ccb60eb8ca21847710b98133fe309318e5061890866634991d9250331b2b28f8aee4c295e0f503e44e8b476f22928c69f7b74cc9735f0978078ec7b59d431e84dd2dd27593a2394bae5527e905ca0d11be4eca4279d2cd8d1e3261843a52b18bb020b0ccc4fad6022979073ff76c6aad14037db2f494b78c10e62f2393f6f1dc023f954560cdc1b9348b8b6054a62f26f4dd3355cf992e0742446c31f5915fc2afd6562e7268fbce5bbae06e735726f853bd7879f86ebf256096bde84bc3ea47bd917056e7765c4eb7ee648bfcfecb287d49151633ab53e23b4f26d043a7f3721c91d5f3d1b85e6de9befd8caf633acb732d5b5734280c77540597c3284f170c729d370409d7777f9e94333362104ffc21de5d1e5e6a49e7ec59da3dca540781de17aeec4cab23e519dec18a2445e58e9b6e7a6e590534f095ca18e5e659c0c7a8028be733e831e4627de906ff472484a59896e38038adc22fbd5b520c955bc9ea12a856f57ab94edf9e359f80673dd5e6f478f116dd658b2e0841c4e465c0b82ad4bf20b15b5d3a2b0ac11d44f93df944d36340fb1f61dc1abf260f22cac05ddc6fb28eab851dd659c019fedce9c9780374e448fb9f8531471e81e0a78d1ed31446a90ce7545df7133511bd61f5f785cad9896a83164db36fa4cd68c1649115476d51bd75e5f591b23d46a29b87884e96cd42f695e07dd144c3f110ffb03857b111d45ed521520256f98d31073944747579f804fb895ce960c954b2cd24d5efa4007749e087e8c6e305b9fb5247a682528343796d860ee1f3b0d61aec525d647feafa0f81f6e85dddcd5c542889ff795d9e257d7086187bcdb4502d7213d7f03bb351610404b0bd7cb0f05982a0ae40d003a32ebd2a14d6e02fd250caa860ecbaa98a59e71ac1b3177578645671ceb76f779d337fbad364c8f3bf5f61627e1b271749f6e3346a0f3242a82cda30dc7eaca7b22b6179123c09bb4553518d757999b341a842d2a1afab4f5d784c113b33d691f99ea09ee06dde4258a4b453d2f9c4601eea3745cf823efa04210ff18a85f37ac22156a4ed37d61f6f3b34fb493725ecfbb45e91aed98b2531646825a98b14298acdcd9546b29914e2d9f4f1810205e6d0e07b58d814d7c45451b1984c5239b917abf5336a241609d6fca246bac21428761432cbf4f79ff13d857d261ed091da422f378e6d3c62749084a34095711794a22f54e805b70f01e7b33dc10ff9cf99d2b0cb4eec9c1756edbbad8a218d587fefefd9e0102db5a2baf696b037fb5b3518e35e1b0a567e2f5b5ebd163877bafb5fd01bb09e36e1b2f9bfa686e724b4bdfac92f90f699cc8d94b5c135f9c69154fda7a51ac7f1da3e5bc5bb8e635c6e11a55786a85ed0b7ed1342de0dca660796b1aaf9fdd90b78a05f9c9ef24c16cc28a119099922ea42650a26ecd04f67f4a5096ea6747a47f8ef1d4c25fd744dac0935f753e4c3f6f70d06d8f286f9bdd2be3671212b8d59e7aad143ceeb764bdb8f5054f6c90b47b8a52d15b542ad94c08a778d90eac51c625cac72832b94508f561e0bf4af9d38bb91023d36b67dcfe2663918508a90c435f0a598bee8b40beb10999eb8b1d2668064b3b4d713b1b4fa47e2b237b415cfa1d0523f02530d74109cf85d75e8c204de8bbda649f314b6e6554499da4678e723da8383e8bd909616e078cf57332c6cea31df6bd27e7723d7051fffcedf4e734abde616557076cac93583bad2baf1a821ac8f256d1b7b1e05f96b8c71475b7646305169b3acc439dea5ca3165cd62a2fe38ffc0ff1d0d732e161f844e74a8542ceb91e456c84ffb0ea6d16ae7b9b084023d426ed99a770d01edb277c9f5946e45558552ea2ebad04ecb5cd61001996c9b404f8696a1e53aacfa798899c64b4a42bdc63d0740c7a10f83accd317e229b3bd298e06dcd63ba3d8a0b7d9da388295eecf66a62df4191f96c3407ad973c29d818ca99893febbaf1bbf014f690c5aa2ad5b5644d2466ea6e11f2d7e6a2d92bd978ccf585bd15219c86b12a296adf61f51c113bcd67c4a69129847c274883da5cb45f27c47d2fa82bb80fccb85dea3b6dd1e51d2ce17746bcaab5eb4dba7b66c9377894a177fdce49b9245d9ae2e7a74bdca326d6a517d6531dddc9a87c9ed9a5a18f0f80ec247e353d76e5e204034354f7f7a547e641c23128df4e15450e74e2c0a05319508fe04f0b4e7785afaa8bc25d03fefd3df6e51fa645382028c64c5b5997645fb495c167007555d4e90d110cfbdded78e3b7b2624d148321bcb08eaf4ce3b30d56a7bb4618f15341abc51a8a591ebddee11a10c372815e61609a803665c5e9f15c9c13502fde55323bf124d4aa5b9885ff8bc749410fe7dd02d87e4f58eb6ba7fbb92675e59e83c2abbf3c8886ea50201a0ea577ba92a6dac6a39bf3f75947f14a37a60dcb41d506b80cb9cb024c1d1078881ab8c457c77e8ac36ba02186bd31dd96718d9e5deda0638a1d361c777be8aeeb0e6b41179a455de6c6330983ed19eb5bfe2c98b7b7102064c2b4292577cc11823a5fae0dce190e70ee753463c923be0919c75028ad2d64b85832c8d7f6c48f1a5915d3c621317658cc375283711a785cfbdf8a33b7807b9e0c7cadc24a1124ee73673132db22368c0b490bbcdc0a8657e5c881d262f7c910dd7941303a7c5c51b5621883d80cf12fc858cdc7f85755ee1cfe75ea4b54f6cee0d5bcb7b018ab2deadeac06ee57cba78d652330f23a6a3a37c1c3c9a9ae294c1a3b1695f2ab6e9cc8a921b2cf01e447fb0e2066581d83d44b2f82372f4a63f00188e961bc2632dc301341d2ef6c43e2e4d1959bd65dfb327ad6a9d84d584434ee405686d3e297c704838076438f798e64950311fd38fdcf88951c6c400425bfdce244445055de91ec27b114deff94fbc0771351e9f5fcb9adf36e7ac52b044adec05a528fab9b05c6c37d3b7668a9ca8290aa5d786dc15e64133a306104191da3a8db785916314faf19bc54db331e5544ad0bbc433635a323b0de1714df267ae10340b103c34c48880ea7d0e8a7053ef29e1a954a8a0c3da1c1b18f0887b67cf2255bcbc4354d3b0dc243ae0a741a422a396c201764ad6d94eb5401dad864ddb4884310a8d6f11c9d85d646ea655fb7fc671fc9a248532ae3e19b74f47bc6ffd1542cdd4539389398beb1e19990e4e326664dd35318c2452c60f197042a5d68b68e2d2e21d6e8c27cbbe590b55030c284462bc12dce9bbe3de9220338ef4fb516ea8053311847a3474228c24706a7c0b2d33b8b359b8c849fb768861b970b4dc7c2c33161627d1772724a35f950ee6feb004618836d410d9264206bdbd9f2c6019e0726452659d0c9a52ad575beebdf50ac2bc8924471307b47d07364fb97e0096ed3838954b96f02d1bdac30235015ef15660ad5c2cd6510d93654fd4c605e70bb751059d9a565527487d2c17edf83b445a9cde63d92491a98f6fa2e861227bed7fcb6313c5320d5c61d2f2411647026c0451f1b2f2dd7e41f58393db4763c303e975945ff9a098dfb647381e6ab8e579f1b24359a2854910ea8fc368f5ec5b8e31efeebfe45ad24d966e0eed0d2eacdda", 0x1000}, {&(0x7f0000002880)="8b1020843f858e3fde9d4afe9adb1e6d9b6a64685f9cf2041d374ac33651d871b5ed92d2c97a580caaf7a9489c35f7b26877bc97e08958f35e79f01f5c5e9a8e5c95f7ed1b4a988e3d85dcb041861afa1b35469012db64fb5567575c04af055e43f6e165e5126ada", 0x68}], 0x7, &(0x7f0000002bc0)=[@rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r8, r9, r10, r11, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r15, r16]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r0}}}], 0xa0, 0x20008810}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002c80)="80d9ada646d4c6a4592f1b62ea63f77e5af849f8f186af6e1880f6415e15d7eb01afa3621aa6c2baed305659504755470889344b50cdc62de5c6a84d1d94a6d7e1488f5f0e555f607b5bdb72460ab0cd88901de1ed8d41a16324505c2dbb8ab78fb052114cecdbbb17e35d80511eecccf0ce0dd0eb3a83789061fbdb3572b5b941a0b6a800531ec4d447b830069723328ccdfe93c3246adac7d84977a9", 0x9d}, {&(0x7f0000002d40)="5349aa775577195974a7ba1549303bfedb94f980e2a446b646002f945a885622d37e826a675e563b940a3d6cf30b8197a3513861ebdf8509fea4fef9704f53fa42d1cca41a318b94cfb592b6c9970a38b9079ee5b403682ba4cbd1f6d38f8e668d569f18a6d5c06e651b7ab6dc7eb4ee8a9b2445348359a2559ab5355d06983d0e6dd4aef346ed06cb1c30fba0a10bb851e6c10e3cb5238a7d8221d277c11db39f34e5e3be49c51f85028564c5a3a20d3a5295123743c38e35c6c2d128b7d144f516a5ca9e95a42390", 0xc9}, {&(0x7f0000002e40)="da48f393301c553ae826885ee6a7a2606469aa2e30c8bbdffe3816db4d5bf53ac99d522c8af57de8b74bde63383cb801146e0fda1918bd3e750617d4b512ac", 0x3f}, {&(0x7f0000002e80)="ba3d9492d417728ddab80d27129b6fcc067116b151adf03376d0b56b0465f7f2f430bb4b59c423ba0cddafa5f5a5624db22f3dfed7a95689751fbb1c077d603016a13f46a65e12e54d9433bfc929c873e090893cb3b3cda691863c3b3b5a07483e338316ce2e9bf79cf0edb2a6f926539dc6a15d48252ef38363c5309d691ef3e00b6dc183e8023e526c48a8751118458749dcdf8f1b80be1053257ba348e921b693c95fe75c2a3d90833aa150a783bc4123e7e7f8dbe6fde81cbd5129ad351f352c3d3f0f96504e03bca386bf9c54b134f543d47f70e1abe1758f3d01f2a7b9b1b2b764130bacc565fba1f5a913cf6f74337519558c3e17ac5a", 0xfa}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="af7e6dd4ab0907c90b5b7794e67e4185963c2b72d4b9818ebc81b681626a710b9ada386c4deebfd23636b6b1f6039027801e7228befd603d865660f08b386ab814c6093dd7fc28dfd973815e2875be1b1e065876779b68cb787f5848c48b3b5e4d66e648ba8bfd41785db2d6d7ef1298337540f3d520aed81063add5df27b672cbda2de3b9fddb38cd0dd7fe7c66b432e1414ab89eb4c7b62f32d1cd0c38fd61f322e7ad66a639bc24ee1f3ddf34037a3c33539db2fabd344691ef8a37a898a1895998e1732375", 0xc7}], 0x6, &(0x7f0000009940)=[@rights={{0x14, 0x1, 0x1, [r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r0}}}, @cred={{0x1c, 0x1, 0x2, {r23, 0x0, r0}}}, @rights={{0x18, 0x1, 0x1, [r24, r25]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r26, r27]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r28, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0, 0xc000}}], 0x3, 0x20000880)

1.493401967s ago: executing program 0 (id=6612):
syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x1)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000480)='connect aa:aa:aa:aa:aa:11 1', 0x1b)

1.45738562s ago: executing program 2 (id=6613):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
io_setup(0x6, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}])
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
rt_sigpending(0x0, 0x1000000)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r0)

1.311217711s ago: executing program 1 (id=6614):
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000794a29408c46ea906d990102030109022400010000000009040000010e010100"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000000000000001890090780000000000000000000000000000ffffac1414aa000000fa61ed9000000000"], 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x4008af24, &(0x7f0000000080))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657458315f746f5f626174616476000900010073797a30"], 0xa0}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x6b, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
read$hiddev(r1, &(0x7f0000001100)=""/234, 0xea)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001200), 0x2000, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2/\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\/\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

1.067713174s ago: executing program 0 (id=6615):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) (fail_nth: 1)

388.802078ms ago: executing program 3 (id=6616):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
renameat2(r3, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file1\x00', 0x0)
fsync(r3)
close_range(r0, 0xffffffffffffffff, 0x0)

183.200217ms ago: executing program 0 (id=6617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
syz_emit_ethernet(0x8a, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000740)=[{&(0x7f0000000a80)="153edc81699e", 0x6}, {&(0x7f0000000dc0)='Q[', 0x2}, {&(0x7f0000000440)}, {&(0x7f0000001900)="d3", 0x1}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0", 0x4c}, {&(0x7f0000000040)="efced5", 0x3}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000000200)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083bdba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e05", 0x7f}, {&(0x7f00000005c0)="bb31389c501cac6fc63962e9bfbb888c3fa84c6194cdff0aa75e6c493bbee9771c98dff3f7cbd16a35c086a23c9184598df49a64265ce92596a352d1bd2d6476f97e57101aa4439386152f2d5845f367fee545f3c9ac0fa79e378da5efb4a9", 0x5f}], 0x9)
write$binfmt_script(r2, &(0x7f0000000040), 0x18a3c85)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r8})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x2}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000e6ffffff00000000000a40000000160a03020000000000000000020000000900020073797a3000000000090001400000d837a9940ae5c6"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000014000000110001000000053be5bf39e635cbbad4"], 0x54}}, 0x0)

0s ago: executing program 3 (id=6618):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xed49a000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r1 = userfaultfd(0x80001)
shmdt(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @private1}, 0x1c)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

kernel console output (not intermixed with test programs):

 interval 1, probability 0, space 0, times 0
[ 1962.555512][T26690] CPU: 0 UID: 0 PID: 26690 Comm: syz.0.6320 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 1962.565723][T17666] usb 2-1: reset high-speed USB device number 73 using dummy_hcd
[ 1962.565928][T26690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1962.583707][T26690] Call Trace:
[ 1962.587005][T26690]  <TASK>
[ 1962.589948][T26690]  dump_stack_lvl+0x16c/0x1f0
[ 1962.594656][T26690]  should_fail_ex+0x497/0x5b0
[ 1962.599366][T26690]  ? fs_reclaim_acquire+0xae/0x160
[ 1962.604502][T26690]  should_failslab+0xc2/0x120
[ 1962.609209][T26690]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 1962.614608][T26690]  ? prepare_creds+0x2e/0x750
[ 1962.619315][T26690]  prepare_creds+0x2e/0x750
[ 1962.623858][T26690]  __sys_setreuid+0x101/0xaf0
[ 1962.628562][T26690]  do_syscall_64+0xcd/0x250
[ 1962.633067][T26690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1962.638952][T26690] RIP: 0033:0x7fbf8bd77299
[ 1962.643353][T26690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1962.662960][T26690] RSP: 002b:00007fbf8cb25048 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[ 1962.671396][T26690] RAX: ffffffffffffffda RBX: 00007fbf8bf05f80 RCX: 00007fbf8bd77299
[ 1962.679387][T26690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[ 1962.687375][T26690] RBP: 00007fbf8cb250a0 R08: 0000000000000000 R09: 0000000000000000
[ 1962.695368][T26690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1962.703356][T26690] R13: 000000000000000b R14: 00007fbf8bf05f80 R15: 00007ffce2430e98
[ 1962.711357][T26690]  </TASK>
[ 1962.765597][T17666] usb 2-1: device descriptor read/64, error -32
[ 1962.783374][    C0] eth0: bad gso: type: 1, size: 1408
[ 1966.634166][T26169] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[ 1966.643176][T17666] usb 2-1: reset high-speed USB device number 73 using dummy_hcd
[ 1966.643215][T26169] Bluetooth: hci6: Injecting HCI hardware error event
[ 1966.661561][T26169] Bluetooth: hci6: hardware error 0x00
[ 1966.855548][T17666] usb 2-1: device descriptor read/64, error -32
[ 1968.827569][T26169] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1969.289032][T26723] process 'syz.4.6327' launched './file0' with NULL argv: empty string added
[ 1969.993938][ T5253] usb 2-1: USB disconnect, device number 73
[ 1970.178314][ T5268] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1970.395554][ T5268] usb 5-1: Using ep0 maxpacket: 8
[ 1970.408338][ T5268] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1970.427131][ T5268] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[ 1970.435247][ T5268] usb 5-1: config 0 has no interface number 0
[ 1970.477244][ T5268] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1970.505557][ T5268] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1970.544133][ T5268] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1970.577957][ T5268] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1970.597984][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1970.638330][ T5268] usb 5-1: config 0 descriptor??
[ 1970.798215][T26734] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6331'.
[ 1971.596098][ T5268] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input71
[ 1971.651485][ T5268] input: failed to attach handler kbd to device input71, error: -5
[ 1972.026646][T26719] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1972.247148][T17666] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1972.447810][T17666] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 1972.468197][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1972.498487][T17666] usb 2-1: config 0 descriptor??
[ 1972.531772][T17666] usb 2-1: selecting invalid altsetting 1
[ 1972.604598][T17666] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1972.643433][T26754] FAULT_INJECTION: forcing a failure.
[ 1972.643433][T26754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1972.658444][T26754] CPU: 1 UID: 0 PID: 26754 Comm: syz.2.6337 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 1972.668891][T26754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1972.678963][T26754] Call Trace:
[ 1972.682245][T26754]  <TASK>
[ 1972.685161][T26754]  dump_stack_lvl+0x16c/0x1f0
[ 1972.689832][T26754]  should_fail_ex+0x497/0x5b0
[ 1972.694504][T26754]  _copy_from_user+0x30/0xf0
[ 1972.699088][T26754]  copy_msghdr_from_user+0x99/0x160
[ 1972.704311][T26754]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1972.710113][T26754]  ? find_held_lock+0x2d/0x110
[ 1972.714886][T26754]  ? __pfx___lock_acquire+0x10/0x10
[ 1972.720108][T26754]  ___sys_sendmsg+0xff/0x1e0
[ 1972.724696][T26754]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1972.729889][T26754]  ? ksys_write+0x21c/0x260
[ 1972.734384][T26754]  ? __fget_light+0x173/0x210
[ 1972.739060][T26754]  __sys_sendmsg+0x117/0x1f0
[ 1972.743648][T26754]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1972.748759][T26754]  do_syscall_64+0xcd/0x250
[ 1972.753272][T26754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1972.759179][T26754] RIP: 0033:0x7f127d777299
[ 1972.763583][T26754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1972.783188][T26754] RSP: 002b:00007f127e4d7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1972.791594][T26754] RAX: ffffffffffffffda RBX: 00007f127d905f80 RCX: 00007f127d777299
[ 1972.799563][T26754] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 1972.807543][T26754] RBP: 00007f127e4d70a0 R08: 0000000000000000 R09: 0000000000000000
[ 1972.815517][T26754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1972.823502][T26754] R13: 000000000000000b R14: 00007f127d905f80 R15: 00007ffe43d782c8
[ 1972.831502][T26754]  </TASK>
[ 1972.859240][T26741] FAULT_INJECTION: forcing a failure.
[ 1972.859240][T26741] name failslab, interval 1, probability 0, space 0, times 0
[ 1972.872774][T26741] CPU: 0 UID: 0 PID: 26741 Comm: syz.3.6333 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 1972.883222][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1972.893281][T26741] Call Trace:
[ 1972.896561][T26741]  <TASK>
[ 1972.899491][T26741]  dump_stack_lvl+0x16c/0x1f0
[ 1972.904181][T26741]  should_fail_ex+0x497/0x5b0
[ 1972.908884][T26741]  ? fs_reclaim_acquire+0xae/0x160
[ 1972.914007][T26741]  should_failslab+0xc2/0x120
[ 1972.918697][T26741]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 1972.924086][T26741]  ? taskstats_exit+0x656/0xbe0
[ 1972.928950][T26741]  taskstats_exit+0x656/0xbe0
[ 1972.933637][T26741]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1972.939023][T26741]  ? __pfx_taskstats_exit+0x10/0x10
[ 1972.944234][T26741]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1972.949445][T26741]  ? __seccomp_filter_orphan+0x18/0x140
[ 1972.954996][T26741]  ? __put_seccomp_filter+0x16/0x100
[ 1972.960286][T26741]  do_exit+0x84a/0x2bb0
[ 1972.964450][T26741]  ? get_signal+0x8f2/0x2770
[ 1972.969054][T26741]  ? __pfx_do_exit+0x10/0x10
[ 1972.973649][T26741]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1972.978691][T26741]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1972.984080][T26741]  do_group_exit+0xd3/0x2a0
[ 1972.988591][T26741]  get_signal+0x25fd/0x2770
[ 1972.993109][T26741]  ? __pfx___might_resched+0x10/0x10
[ 1972.998413][T26741]  ? vfs_write+0x14d/0x1140
[ 1973.002922][T26741]  ? __pfx_get_signal+0x10/0x10
[ 1973.007789][T26741]  arch_do_signal_or_restart+0x90/0x7e0
[ 1973.013348][T26741]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1973.019517][T26741]  syscall_exit_to_user_mode+0x150/0x2a0
[ 1973.025167][T26741]  do_syscall_64+0xda/0x250
[ 1973.029689][T26741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1973.035596][T26741] RIP: 0033:0x7fd2c7d77299
[ 1973.040034][T26741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1973.059666][T26741] RSP: 002b:00007fd2c8b71048 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 1973.068097][T26741] RAX: fffffffffffffffc RBX: 00007fd2c7f05f80 RCX: 00007fd2c7d77299
[ 1973.076074][T26741] RDX: 0000000000000000 RSI: 000000000060005f RDI: 0000000020000000
[ 1973.084138][T26741] RBP: 00007fd2c8b710a0 R08: 0000000000000000 R09: 0000000000000000
[ 1973.092109][T26741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1973.100083][T26741] R13: 000000000000000b R14: 00007fd2c7f05f80 R15: 00007fff7a029a18
[ 1973.108062][T26741]  </TASK>
[ 1973.113268][T17666] usb 2-1: USB disconnect, device number 74
[ 1973.278332][T26169] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[ 1973.472044][ T5268] usb 5-1: USB disconnect, device number 78
[ 1973.904918][T26762] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[ 1973.956481][    C0] eth0: bad gso: type: 1, size: 1408
[ 1974.045791][   T29] audit: type=1400 audit(1722102453.349:957): avc:  denied  { write } for  pid=26764 comm="syz.3.6341" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1974.515794][ T5253] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1974.523471][T17666] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1974.545537][ T5268] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1974.718759][ T5253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1974.744150][T17666] usb 5-1: too many configurations: 124, using maximum allowed: 8
[ 1974.755561][ T5253] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1974.771175][ T5268] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1974.790354][ T5268] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1974.795808][T17666] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1974.812972][ T5253] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1974.829002][T17666] usb 5-1: can't read configurations, error -61
[ 1974.835365][ T5268] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1974.842600][ T5253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1974.887959][ T5253] usb 2-1: config 0 descriptor??
[ 1974.909990][ T5268] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1974.958432][ T5268] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1974.984780][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1975.004265][ T5268] usb 4-1: Product: syz
[ 1975.011575][ T5268] usb 4-1: Manufacturer: syz
[ 1975.016016][T17666] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1975.031648][ T5268] cdc_wdm 4-1:1.0: skipping garbage
[ 1975.044751][ T5268] cdc_wdm 4-1:1.0: skipping garbage
[ 1975.069697][ T5268] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1975.084747][ T5268] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1975.119796][   T29] audit: type=1400 audit(1722102454.429:958): avc:  denied  { watch watch_reads } for  pid=26779 comm="syz.2.6347" path=2F6D656D66643A2D888C47F3BDBDE2D0401E8BF487E5490884A26D202864656C6574656429 dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1975.206604][T17666] usb 5-1: too many configurations: 124, using maximum allowed: 8
[ 1975.230139][T17666] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1975.250125][T17666] usb 5-1: can't read configurations, error -61
[ 1975.274765][T17666] usb usb5-port1: attempt power cycle
[ 1975.305639][T26169] Bluetooth: hci2: command tx timeout
[ 1975.320981][ T5253] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0
[ 1975.336802][ T5253] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0
[ 1975.367264][ T5253] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0
[ 1975.389008][ T5253] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0
[ 1975.414932][ T5253] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0
[ 1975.456224][ T5253] plantronics 0003:047F:FFFF.00C4: No inputs registered, leaving
[ 1975.515938][ T5253] plantronics 0003:047F:FFFF.00C4: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1975.705500][T17666] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1975.778349][T17666] usb 5-1: too many configurations: 124, using maximum allowed: 8
[ 1975.811214][T17666] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1975.879660][T17666] usb 5-1: can't read configurations, error -61
[ 1975.889322][T23992] usb 2-1: USB disconnect, device number 75
[ 1976.087031][T17666] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1976.147213][T17666] usb 5-1: too many configurations: 124, using maximum allowed: 8
[ 1976.169788][T17666] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1976.196748][T17666] usb 5-1: can't read configurations, error -61
[ 1976.222771][T17666] usb usb5-port1: unable to enumerate USB device
[ 1976.510224][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.518212][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.890042][T26804] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[ 1977.255505][T23992] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1977.577746][T23992] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 1977.720824][T23992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1977.800054][T15987] usb 4-1: USB disconnect, device number 48
[ 1977.876808][T23992] usb 2-1: config 0 descriptor??
[ 1977.909944][T23992] usb 2-1: selecting invalid altsetting 1
[ 1977.971534][T23992] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1978.120729][T17666] usb 2-1: USB disconnect, device number 76
[ 1982.616834][T17666] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1982.966287][T17666] usb 5-1: Using ep0 maxpacket: 32
[ 1984.418434][T17666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1984.528884][T17666] usb 5-1: config 0 has no interfaces?
[ 1984.556844][T17666] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1984.605521][T17666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1984.613691][T17666] usb 5-1: Product: syz
[ 1984.617981][T17666] usb 5-1: Manufacturer: syz
[ 1984.622707][T17666] usb 5-1: SerialNumber: syz
[ 1984.645137][T17666] usb 5-1: config 0 descriptor??
[ 1984.813814][T26845] 9pnet_virtio: no channels available for device syz
[ 1985.505675][T26851] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[ 1986.086024][T26860] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6368'.
[ 1986.321705][T26866] FAULT_INJECTION: forcing a failure.
[ 1986.321705][T26866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1986.361771][T26866] CPU: 0 UID: 0 PID: 26866 Comm: syz.3.6369 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 1986.372223][T26866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1986.382294][T26866] Call Trace:
[ 1986.385588][T26866]  <TASK>
[ 1986.388532][T26866]  dump_stack_lvl+0x16c/0x1f0
[ 1986.393241][T26866]  should_fail_ex+0x497/0x5b0
[ 1986.397966][T26866]  _copy_from_user+0x30/0xf0
[ 1986.402589][T26866]  copy_msghdr_from_user+0x99/0x160
[ 1986.407822][T26866]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1986.413653][T26866]  ? find_held_lock+0x2d/0x110
[ 1986.418421][T26866]  ? __pfx___lock_acquire+0x10/0x10
[ 1986.423615][T26866]  ___sys_sendmsg+0xff/0x1e0
[ 1986.428199][T26866]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1986.433391][T26866]  ? ksys_write+0x21c/0x260
[ 1986.437889][T26866]  ? __fget_light+0x173/0x210
[ 1986.442562][T26866]  __sys_sendmsg+0x117/0x1f0
[ 1986.447145][T26866]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1986.452250][T26866]  do_syscall_64+0xcd/0x250
[ 1986.456752][T26866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1986.462635][T26866] RIP: 0033:0x7fd2c7d77299
[ 1986.467037][T26866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1986.486630][T26866] RSP: 002b:00007fd2c8b71048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1986.495033][T26866] RAX: ffffffffffffffda RBX: 00007fd2c7f05f80 RCX: 00007fd2c7d77299
[ 1986.502992][T26866] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 1986.510952][T26866] RBP: 00007fd2c8b710a0 R08: 0000000000000000 R09: 0000000000000000
[ 1986.518918][T26866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1986.526895][T26866] R13: 000000000000000b R14: 00007fd2c7f05f80 R15: 00007fff7a029a18
[ 1986.534858][T26866]  </TASK>
[ 1988.687327][T26881] FAULT_INJECTION: forcing a failure.
[ 1988.687327][T26881] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1988.759679][T26881] CPU: 0 UID: 0 PID: 26881 Comm: syz.1.6373 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 1988.770132][T26881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1988.780208][T26881] Call Trace:
[ 1988.783510][T26881]  <TASK>
[ 1988.786462][T26881]  dump_stack_lvl+0x16c/0x1f0
[ 1988.791181][T26881]  should_fail_ex+0x497/0x5b0
[ 1988.795894][T26881]  _copy_to_user+0x30/0xc0
[ 1988.800342][T26881]  simple_read_from_buffer+0xd0/0x160
[ 1988.805748][T26881]  proc_fail_nth_read+0x1b0/0x290
[ 1988.810788][T26881]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1988.816327][T26881]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1988.821862][T26881]  vfs_read+0x1d4/0xbd0
[ 1988.826005][T26881]  ? __fdget_pos+0xeb/0x180
[ 1988.830495][T26881]  ? __pfx_vfs_read+0x10/0x10
[ 1988.835156][T26881]  ? __pfx___mutex_lock+0x10/0x10
[ 1988.840175][T26881]  ? __fget_files+0x256/0x400
[ 1988.844848][T26881]  ksys_read+0x12f/0x260
[ 1988.849075][T26881]  ? __pfx_ksys_read+0x10/0x10
[ 1988.853825][T26881]  do_syscall_64+0xcd/0x250
[ 1988.858340][T26881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1988.864264][T26881] RIP: 0033:0x7f9572175d7c
[ 1988.868700][T26881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[ 1988.888332][T26881] RSP: 002b:00007f9572e97040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1988.896748][T26881] RAX: ffffffffffffffda RBX: 00007f9572306058 RCX: 00007f9572175d7c
[ 1988.904707][T26881] RDX: 000000000000000f RSI: 00007f9572e970b0 RDI: 0000000000000007
[ 1988.912667][T26881] RBP: 00007f9572e970a0 R08: 0000000000000000 R09: 0000000000000000
[ 1988.920630][T26881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1988.928588][T26881] R13: 000000000000006e R14: 00007f9572306058 R15: 00007ffe6564aa28
[ 1988.936553][T26881]  </TASK>
[ 1988.957724][T16451] Bluetooth: hci2: command 0x0406 tx timeout
[ 1989.224629][T26887] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[ 1989.915512][T15987] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1990.149862][T15987] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 1990.178457][T15987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1990.216614][T15987] usb 1-1: config 0 descriptor??
[ 1990.230597][T15987] usb 1-1: selecting invalid altsetting 1
[ 1990.291706][T15987] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1990.305981][T26909] libceph: resolve '0' (ret=-3): failed
[ 1990.315921][T17666] usb 5-1: USB disconnect, device number 83
[ 1990.381758][T16451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1990.418467][T16451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1990.439152][T16451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1990.447870][T16451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1990.455633][T16451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1990.463618][T16451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1990.497373][T26915] netlink: 'syz.2.6385': attribute type 2 has an invalid length.
[ 1990.527913][T25865] usb 1-1: USB disconnect, device number 33
[ 1990.554383][   T29] audit: type=1326 audit(1722102469.859:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.2.6385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f127d777299 code=0x0
[ 1991.808760][T23882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1992.193262][T23882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1992.282184][T26928] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[ 1992.306804][T26910] lo speed is unknown, defaulting to 1000
[ 1992.345449][   T29] audit: type=1400 audit(1722102471.649:960): avc:  denied  { read } for  pid=26933 comm="syz.1.6390" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1992.506138][T23882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1992.585647][T26169] Bluetooth: hci1: command tx timeout
[ 1992.704245][T23882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1992.733618][   T29] audit: type=1400 audit(1722102472.039:961): avc:  denied  { mount } for  pid=26939 comm="syz.0.6391" name="/" dev="ramfs" ino=111078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1993.111332][T23992] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1993.119091][   T46] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1993.223554][T23882] bridge_slave_1: left allmulticast mode
[ 1993.235435][T23882] bridge_slave_1: left promiscuous mode
[ 1993.246615][T23882] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1993.287862][T23882] bridge_slave_0: left allmulticast mode
[ 1993.295565][T23992] usb 1-1: device descriptor read/64, error -71
[ 1993.301906][T23882] bridge_slave_0: left promiscuous mode
[ 1993.315738][T23882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1993.355536][   T46] usb 3-1: Using ep0 maxpacket: 16
[ 1993.366561][   T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[ 1993.420994][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1993.458561][   T46] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[ 1993.475499][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1993.485759][ T5268] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1993.504847][   T46] usb 3-1: Product: syz
[ 1993.526931][   T46] usb 3-1: Manufacturer: syz
[ 1993.531588][   T46] usb 3-1: SerialNumber: syz
[ 1993.568336][   T46] usb 3-1: config 0 descriptor??
[ 1993.601712][T23992] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1993.738261][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1993.768901][ T5268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1993.783548][   T46] powermate 3-1:0.0: probe with driver powermate failed with error -5
[ 1993.820925][T23992] usb 1-1: device descriptor read/64, error -71
[ 1993.833742][ T5268] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[ 1993.853604][ T5268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1993.857446][   T46] usb 3-1: USB disconnect, device number 71
[ 1993.888715][ T5268] usb 4-1: Product: syz
[ 1993.895712][ T5268] usb 4-1: Manufacturer: syz
[ 1993.935538][ T5268] usb 4-1: SerialNumber: syz
[ 1993.945832][T23992] usb usb1-port1: attempt power cycle
[ 1993.996956][ T5268] usb 4-1: config 0 descriptor??
[ 1994.059305][ T5268] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[ 1994.085448][ T5268] usb 4-1: No valid video chain found.
[ 1994.263333][ T5268] usb 4-1: USB disconnect, device number 49
[ 1994.386272][T23992] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1994.456739][T23992] usb 1-1: device descriptor read/8, error -71
[ 1994.699547][T26169] Bluetooth: hci1: command tx timeout
[ 1994.855568][T23992] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1996.323145][T23992] usb 1-1: device descriptor read/8, error -71
[ 1996.464693][T23992] usb usb1-port1: unable to enumerate USB device
[ 1996.675282][   T29] audit: type=1326 audit(1722102475.979:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.2.6399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f127d777299 code=0x0
[ 1996.698155][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1996.745788][T26169] Bluetooth: hci1: command tx timeout
[ 1997.141878][T26972] 9pnet_virtio: no channels available for device syz
[ 1997.611427][T23882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1997.671040][T23882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1997.716926][T23882] bond0 (unregistering): Released all slaves
[ 1997.802537][T23882] bond1 (unregistering): Released all slaves
[ 1997.854014][T26964] netlink: 'syz.2.6399': attribute type 2 has an invalid length.
[ 1998.719513][   T29] audit: type=1400 audit(1722102478.019:963): avc:  denied  { append } for  pid=26988 comm="syz.1.6407" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1998.789103][   T29] audit: type=1400 audit(1722102478.019:964): avc:  denied  { ioctl } for  pid=26988 comm="syz.1.6407" path="socket:[111200]" dev="sockfs" ino=111200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1998.814652][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1998.825581][T26169] Bluetooth: hci1: command tx timeout
[ 1999.333575][T27008] 9pnet_virtio: no channels available for device syz
[ 1999.394617][T26910] chnl_net:caif_netlink_parms(): no params data found
[ 1999.505492][T17666] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1999.559559][   T29] audit: type=1400 audit(1722102478.859:965): avc:  denied  { write } for  pid=27001 comm="syz.1.6411" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1999.812484][T17666] usb 3-1: Using ep0 maxpacket: 32
[ 1999.848421][T17666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1999.879636][T17666] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1999.927086][T17666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2000.015471][T17666] usb 3-1: Product: syz
[ 2000.026058][T17666] usb 3-1: Manufacturer: syz
[ 2000.439362][T17666] usb 3-1: SerialNumber: syz
[ 2000.515020][T17666] usb 3-1: config 0 descriptor??
[ 2003.686412][T17666] usb 3-1: can't set config #0, error -71
[ 2003.787109][T17666] usb 3-1: USB disconnect, device number 72
[ 2003.903462][T23882] hsr_slave_0: left promiscuous mode
[ 2003.977704][T23882] hsr_slave_1: left promiscuous mode
[ 2004.015298][T23882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2004.039255][T23882] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2004.068436][T23882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2004.119525][T23882] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2004.226610][T23882] veth1_macvtap: left promiscuous mode
[ 2004.243060][T23882] veth0_macvtap: left promiscuous mode
[ 2004.252507][T23882] veth0_vlan: left promiscuous mode
[ 2004.263026][T27029] FAULT_INJECTION: forcing a failure.
[ 2004.263026][T27029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2004.312302][T27029] CPU: 0 UID: 0 PID: 27029 Comm: syz.0.6415 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2004.322750][T27029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2004.332821][T27029] Call Trace:
[ 2004.336117][T27029]  <TASK>
[ 2004.339067][T27029]  dump_stack_lvl+0x16c/0x1f0
[ 2004.343777][T27029]  should_fail_ex+0x497/0x5b0
[ 2004.348487][T27029]  _copy_from_user+0x30/0xf0
[ 2004.353108][T27029]  move_addr_to_kernel+0x68/0x160
[ 2004.358167][T27029]  __sys_bind+0xc4/0x220
[ 2004.362436][T27029]  ? __pfx___sys_bind+0x10/0x10
[ 2004.367314][T27029]  ? __pfx_ksys_write+0x10/0x10
[ 2004.372186][T27029]  __x64_sys_bind+0x72/0xb0
[ 2004.376715][T27029]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2004.381945][T27029]  do_syscall_64+0xcd/0x250
[ 2004.386482][T27029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.392404][T27029] RIP: 0033:0x7fbf8bd77299
[ 2004.396838][T27029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2004.416469][T27029] RSP: 002b:00007fbf8cb25048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 2004.424895][T27029] RAX: ffffffffffffffda RBX: 00007fbf8bf05f80 RCX: 00007fbf8bd77299
[ 2004.432858][T27029] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000004
[ 2004.440817][T27029] RBP: 00007fbf8cb250a0 R08: 0000000000000000 R09: 0000000000000000
[ 2004.448778][T27029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2004.456748][T27029] R13: 000000000000000b R14: 00007fbf8bf05f80 R15: 00007ffce2430e98
[ 2004.464722][T27029]  </TASK>
[ 2004.476330][ T5268] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 2004.488013][T27031] netlink: 'syz.3.6416': attribute type 1 has an invalid length.
[ 2004.678826][ T5268] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2004.704113][ T5268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2004.737903][ T5268] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2004.762494][ T5268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2004.780761][ T5268] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2004.790083][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2004.810390][ T5268] usb 2-1: Product: syz
[ 2004.818440][ T5268] usb 2-1: Manufacturer: syz
[ 2004.829568][ T5268] cdc_wdm 2-1:1.0: skipping garbage
[ 2004.835011][ T5268] cdc_wdm 2-1:1.0: skipping garbage
[ 2004.858905][ T5268] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2004.869973][ T5268] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2005.612923][T27040] FAULT_INJECTION: forcing a failure.
[ 2005.612923][T27040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2005.634877][T27040] CPU: 0 UID: 0 PID: 27040 Comm: syz.3.6419 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2005.645330][T27040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2005.655399][T27040] Call Trace:
[ 2005.658678][T27040]  <TASK>
[ 2005.661596][T27040]  dump_stack_lvl+0x16c/0x1f0
[ 2005.666267][T27040]  should_fail_ex+0x497/0x5b0
[ 2005.670941][T27040]  _copy_from_user+0x30/0xf0
[ 2005.675531][T27040]  copy_msghdr_from_user+0x99/0x160
[ 2005.680733][T27040]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2005.686538][T27040]  ? find_held_lock+0x2d/0x110
[ 2005.691297][T27040]  ? __pfx___lock_acquire+0x10/0x10
[ 2005.696486][T27040]  ___sys_sendmsg+0xff/0x1e0
[ 2005.701069][T27040]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2005.706271][T27040]  ? ksys_write+0x21c/0x260
[ 2005.710783][T27040]  ? __fget_light+0x173/0x210
[ 2005.715468][T27040]  __sys_sendmsg+0x117/0x1f0
[ 2005.720050][T27040]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2005.725155][T27040]  do_syscall_64+0xcd/0x250
[ 2005.729668][T27040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2005.735586][T27040] RIP: 0033:0x7fd2c7d77299
[ 2005.740017][T27040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2005.759644][T27040] RSP: 002b:00007fd2c8b71048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2005.768069][T27040] RAX: ffffffffffffffda RBX: 00007fd2c7f05f80 RCX: 00007fd2c7d77299
[ 2005.776040][T27040] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004
[ 2005.784027][T27040] RBP: 00007fd2c8b710a0 R08: 0000000000000000 R09: 0000000000000000
[ 2005.792015][T27040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2005.799999][T27040] R13: 000000000000000b R14: 00007fd2c7f05f80 R15: 00007fff7a029a18
[ 2005.807982][T27040]  </TASK>
[ 2006.037117][   T29] audit: type=1400 audit(1722102485.339:966): avc:  denied  { sqpoll } for  pid=27041 comm="syz.3.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2006.156797][T27042] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6420'.
[ 2006.240328][T23882] team0 (unregistering): Port device team_slave_1 removed
[ 2006.471830][T23882] team0 (unregistering): Port device team_slave_0 removed
[ 2007.297122][T25865] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 2007.531742][T25865] usb 1-1: Using ep0 maxpacket: 32
[ 2007.540395][T25865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 2007.568339][T25865] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2007.593308][T25865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2007.612337][T25865] usb 1-1: Product: syz
[ 2007.634141][T25865] usb 1-1: Manufacturer: syz
[ 2007.658975][T25865] usb 1-1: SerialNumber: syz
[ 2007.668859][T25865] usb 1-1: config 0 descriptor??
[ 2007.775715][ T5253] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2007.784309][T25865] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2008.045763][ T5253] usb 4-1: Using ep0 maxpacket: 32
[ 2008.067603][ T5253] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2008.103197][ T5253] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2008.112743][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2008.214851][ T5253] usb 4-1: Product: syz
[ 2008.234162][ T5253] usb 4-1: Manufacturer: syz
[ 2008.238908][ T5253] usb 4-1: SerialNumber: syz
[ 2008.257908][ T5253] usb 4-1: config 0 descriptor??
[ 2008.286505][ T5253] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2008.830222][   T59] usb 1-1: Failed to submit usb control message: -110
[ 2009.082479][   T59] usb 1-1: unable to send the bmi data to the device: -110
[ 2009.112601][   T59] usb 1-1: unable to get target info from device
[ 2009.138618][   T59] usb 1-1: could not get target info (-110)
[ 2009.144657][   T59] usb 1-1: could not probe fw (-110)
[ 2009.315590][T27021] usb 4-1: Failed to submit usb control message: -110
[ 2009.343912][T27021] usb 4-1: unable to send the bmi data to the device: -110
[ 2009.428393][T27021] usb 4-1: unable to get target info from device
[ 2009.434774][T27021] usb 4-1: could not get target info (-110)
[ 2009.440798][T27021] usb 4-1: could not probe fw (-110)
[ 2009.648502][T25541] usb 1-1: USB disconnect, device number 38
[ 2009.899767][T27064] 9pnet_virtio: no channels available for device syz
[ 2009.937056][T27021] smc: removing ib device syz0
[ 2010.057219][T26910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2010.064452][T26910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2010.081762][T25865] usb 2-1: USB disconnect, device number 77
[ 2010.117359][T26910] bridge_slave_0: entered allmulticast mode
[ 2010.189073][ T5268] usb 4-1: USB disconnect, device number 50
[ 2010.248375][T26910] bridge_slave_0: entered promiscuous mode
[ 2010.412844][T26910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2010.538860][T26910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2010.546418][T26910] bridge_slave_1: entered allmulticast mode
[ 2010.628105][   T29] audit: type=1400 audit(1722102489.919:967): avc:  denied  { ioctl } for  pid=27072 comm="syz.2.6428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 2010.653127][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2010.949999][T26910] bridge_slave_1: entered promiscuous mode
[ 2010.955938][   T29] audit: type=1326 audit(1722102490.259:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27077 comm="syz.3.6427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c7d77299 code=0x0
[ 2011.365146][T27078] netlink: 'syz.3.6427': attribute type 2 has an invalid length.
[ 2011.463019][T26910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2011.583638][T26910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2012.290679][T26910] team0: Port device team_slave_0 added
[ 2012.351153][ T5253] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 2012.438063][T26910] team0: Port device team_slave_1 added
[ 2012.557431][ T5253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 2012.605765][ T5253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 2012.628459][ T5253] usb 4-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2
[ 2012.675052][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2012.719510][ T5253] usb 4-1: Product: syz
[ 2012.786516][ T5253] usb 4-1: Manufacturer: syz
[ 2012.857655][ T5253] usb 4-1: SerialNumber: syz
[ 2014.485928][T27092] ufs: You didn't specify the type of your ufs filesystem
[ 2014.485928][T27092] 
[ 2014.485928][T27092] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 2014.485928][T27092] 
[ 2014.485928][T27092] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 2014.516914][T27092] ufs: ufstype=old is supported read-only
[ 2014.602740][ T5253] usb 4-1: config 0 descriptor??
[ 2014.658301][T26910] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2014.705513][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2014.814254][T26910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2014.855237][T26910] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2014.894642][T26910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2014.965025][T26910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2015.133962][   T46] usb 4-1: USB disconnect, device number 51
[ 2015.610296][T26910] hsr_slave_0: entered promiscuous mode
[ 2015.630874][T26910] hsr_slave_1: entered promiscuous mode
[ 2015.815510][ T5268] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 2016.018786][T27111] sg_write: data in/out 196608/16 bytes for SCSI command 0xdb-- guessing data in;
[ 2016.018786][T27111]    program syz.3.6436 not setting count and/or reply_len properly
[ 2016.158061][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2016.228845][ T5268] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2016.612792][ T5268] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2016.633493][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2016.724067][ T5268] usb 2-1: config 0 descriptor??
[ 2016.863196][   T29] audit: type=1400 audit(1722102496.169:969): avc:  denied  { module_load } for  pid=27112 comm="syz.3.6437" path=2F6D656D66643A10376DAD4ADC3A46A006E6BBB8B0E8C387122B8F59EEC7D02CC6012A881455DEFA3AEEE81D91468629202864656C6574656429 dev="tmpfs" ino=1360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 2016.863340][T27113] Invalid architecture in ELF header: 0
[ 2017.167266][ T5268] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0
[ 2017.187437][ T5268] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0
[ 2017.355536][ T5268] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0
[ 2017.362993][ T5268] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0
[ 2017.382257][ T5268] plantronics 0003:047F:FFFF.00C5: unknown main item tag 0x0
[ 2017.397308][ T5268] plantronics 0003:047F:FFFF.00C5: No inputs registered, leaving
[ 2017.411155][ T5268] plantronics 0003:047F:FFFF.00C5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2017.663075][ T5253] usb 2-1: USB disconnect, device number 78
[ 2018.787585][   T29] audit: type=1400 audit(1722102498.099:970): avc:  denied  { execute } for  pid=27124 comm="syz.1.6440" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=112707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 2027.076020][T16451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2027.140108][T23619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2027.149391][T23619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2027.158217][T27150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2027.169380][T23619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2027.178742][T27150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2027.186488][T27150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2027.193599][T23619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2027.201015][T27150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2027.234353][T27150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2027.275868][T27150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2027.296404][T27150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2029.236044][T16451] Bluetooth: hci4: command tx timeout
[ 2029.395776][T16451] Bluetooth: hci5: command tx timeout
[ 2029.516654][T27150] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2029.526859][T27150] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2029.585986][T27150] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2029.598280][T27150] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2029.615831][T27150] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2029.623232][T27150] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2030.790513][T23882] IPVS: stop unused estimator thread 0...
[ 2031.244522][T27158] sg_write: data in/out 196608/16 bytes for SCSI command 0xdb-- guessing data in;
[ 2031.244522][T27158]    program syz.3.6447 not setting count and/or reply_len properly
[ 2031.346307][T27150] Bluetooth: hci4: command tx timeout
[ 2031.465627][T27150] Bluetooth: hci5: command tx timeout
[ 2031.706424][T27150] Bluetooth: hci8: command tx timeout
[ 2032.765555][T23992] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 2032.977827][T23992] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2032.990342][T23992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.096674][T23992] usb 4-1: config 0 descriptor??
[ 2033.114864][T23992] usb 4-1: selecting invalid altsetting 1
[ 2033.163361][T23992] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2033.374652][T23992] usb 4-1: USB disconnect, device number 52
[ 2033.385687][T27150] Bluetooth: hci4: command tx timeout
[ 2033.497387][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2033.557121][T27150] Bluetooth: hci5: command tx timeout
[ 2033.765353][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2033.788581][T27150] Bluetooth: hci8: command tx timeout
[ 2034.051555][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2034.182199][T27147] chnl_net:caif_netlink_parms(): no params data found
[ 2034.320719][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2034.710494][T27171] netlink: 'syz.3.6449': attribute type 4 has an invalid length.
[ 2035.112879][T26910] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2035.190400][T27147] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2035.221117][T27147] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2035.240142][T27147] bridge_slave_0: entered allmulticast mode
[ 2035.297899][T27147] bridge_slave_0: entered promiscuous mode
[ 2035.387138][T26910] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2035.468263][T27150] Bluetooth: hci4: command tx timeout
[ 2035.469464][T27146] chnl_net:caif_netlink_parms(): no params data found
[ 2035.626299][T27150] Bluetooth: hci5: command tx timeout
[ 2035.688224][T27147] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2035.695329][T27147] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2035.725645][T27147] bridge_slave_1: entered allmulticast mode
[ 2035.745589][T27147] bridge_slave_1: entered promiscuous mode
[ 2035.756956][T27153] chnl_net:caif_netlink_parms(): no params data found
[ 2035.839042][T26910] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2035.867893][T27150] Bluetooth: hci8: command tx timeout
[ 2036.671402][T26910] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2036.918435][T27183] netlink: 25 bytes leftover after parsing attributes in process `syz.3.6450'.
[ 2037.031706][T27147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2037.238568][T27147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2037.950663][T27150] Bluetooth: hci8: command tx timeout
[ 2037.953099][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.983873][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.329019][   T12] bridge_slave_1: left allmulticast mode
[ 2038.334696][   T12] bridge_slave_1: left promiscuous mode
[ 2038.376089][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2038.460994][   T12] bridge_slave_0: left allmulticast mode
[ 2038.497477][   T12] bridge_slave_0: left promiscuous mode
[ 2038.506771][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2039.813446][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2039.830296][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2039.895853][   T12] bond0 (unregistering): Released all slaves
[ 2040.328321][T27146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2040.351091][T27146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2040.361485][T27146] bridge_slave_0: entered allmulticast mode
[ 2040.382433][T27146] bridge_slave_0: entered promiscuous mode
[ 2040.546565][T27147] team0: Port device team_slave_0 added
[ 2045.466268][T27153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2045.473368][T27153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2045.507908][T27153] bridge_slave_0: entered allmulticast mode
[ 2045.537053][T27153] bridge_slave_0: entered promiscuous mode
[ 2045.548886][T27153] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2045.565545][T27153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2045.572747][T27153] bridge_slave_1: entered allmulticast mode
[ 2045.597902][T27153] bridge_slave_1: entered promiscuous mode
[ 2045.706378][T27146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2045.736009][T27146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2045.743238][T27146] bridge_slave_1: entered allmulticast mode
[ 2045.757304][T27146] bridge_slave_1: entered promiscuous mode
[ 2045.848511][T27147] team0: Port device team_slave_1 added
[ 2046.127527][T27153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2046.161003][T27153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2046.183902][T27146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2046.235564][T27147] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2046.257915][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2046.294238][T27147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2046.455089][T27146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2046.525147][   T12] hsr_slave_0: left promiscuous mode
[ 2046.553358][   T12] hsr_slave_1: left promiscuous mode
[ 2046.565744][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2046.573145][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2046.587795][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2046.596370][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2046.683302][   T12] veth1_macvtap: left promiscuous mode
[ 2046.690821][   T12] veth0_macvtap: left promiscuous mode
[ 2046.715750][   T12] veth1_vlan: left promiscuous mode
[ 2046.725838][   T12] veth0_vlan: left promiscuous mode
[ 2048.287068][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 2048.385950][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 2050.074926][T27147] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2050.085722][T27147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2050.198948][T27147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2050.231353][T16451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2050.243116][T16451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2050.253713][T16451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2050.262495][T16451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2050.271720][T16451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2050.279101][T16451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2050.340032][T27153] team0: Port device team_slave_0 added
[ 2050.388934][T27153] team0: Port device team_slave_1 added
[ 2050.516711][T27146] team0: Port device team_slave_0 added
[ 2050.551551][T27146] team0: Port device team_slave_1 added
[ 2050.750158][T27217] FAULT_INJECTION: forcing a failure.
[ 2050.750158][T27217] name failslab, interval 1, probability 0, space 0, times 0
[ 2050.764678][T27217] CPU: 1 UID: 0 PID: 27217 Comm: syz.3.6456 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2050.775336][T27217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2050.785409][T27217] Call Trace:
[ 2050.788691][T27217]  <TASK>
[ 2050.791608][T27217]  dump_stack_lvl+0x16c/0x1f0
[ 2050.796290][T27217]  should_fail_ex+0x497/0x5b0
[ 2050.800993][T27217]  ? fs_reclaim_acquire+0xae/0x160
[ 2050.806114][T27217]  should_failslab+0xc2/0x120
[ 2050.810783][T27217]  __kmalloc_noprof+0xcb/0x400
[ 2050.815547][T27217]  ? __pfx_lock_acquire+0x10/0x10
[ 2050.820587][T27217]  tomoyo_realpath_from_path+0xb9/0x720
[ 2050.826143][T27217]  ? tomoyo_profile+0x47/0x60
[ 2050.831024][T27217]  tomoyo_path_number_perm+0x245/0x590
[ 2050.836497][T27217]  ? tomoyo_path_number_perm+0x232/0x590
[ 2050.842118][T27217]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2050.848090][T27217]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2050.854066][T27217]  ? __fget_files+0x256/0x400
[ 2050.858738][T27217]  security_file_ioctl+0x75/0xc0
[ 2050.863666][T27217]  __x64_sys_ioctl+0xbb/0x220
[ 2050.868335][T27217]  do_syscall_64+0xcd/0x250
[ 2050.872836][T27217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2050.878720][T27217] RIP: 0033:0x7fd2c7d77299
[ 2050.883119][T27217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2050.902716][T27217] RSP: 002b:00007fd2c8b71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2050.911204][T27217] RAX: ffffffffffffffda RBX: 00007fd2c7f05f80 RCX: 00007fd2c7d77299
[ 2050.919165][T27217] RDX: 0000000020000280 RSI: 00000000c01864b0 RDI: 0000000000000003
[ 2050.927129][T27217] RBP: 00007fd2c8b710a0 R08: 0000000000000000 R09: 0000000000000000
[ 2050.935090][T27217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2050.943047][T27217] R13: 000000000000000b R14: 00007fd2c7f05f80 R15: 00007fff7a029a18
[ 2050.951010][T27217]  </TASK>
[ 2050.995879][T27217] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2051.468454][T27153] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2051.513052][T27153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2051.538943][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2051.585648][T27153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2051.611246][T27153] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2051.633493][T27153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2051.665902][T27153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2051.695129][T27146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2051.705930][T27146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2051.732060][T15987] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 2051.745503][T27146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2051.896071][T27146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2051.917146][T15987] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2051.933353][T15987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2051.954246][T27146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2051.999137][T15987] usb 4-1: config 0 descriptor??
[ 2052.035766][T27146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2052.057853][T15987] usb 4-1: selecting invalid altsetting 1
[ 2052.082621][T27147] hsr_slave_0: entered promiscuous mode
[ 2052.101578][T27147] hsr_slave_1: entered promiscuous mode
[ 2052.136955][T15987] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2052.155716][T27147] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2052.174457][T27147] Cannot create hsr debugfs directory
[ 2052.218884][   T46] usb 4-1: USB disconnect, device number 53
[ 2052.312458][T27153] hsr_slave_0: entered promiscuous mode
[ 2052.328663][T27153] hsr_slave_1: entered promiscuous mode
[ 2052.358260][T27150] Bluetooth: hci3: command tx timeout
[ 2052.358301][T27153] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2052.405586][T27153] Cannot create hsr debugfs directory
[ 2052.910250][T27146] hsr_slave_0: entered promiscuous mode
[ 2052.936426][T27146] hsr_slave_1: entered promiscuous mode
[ 2052.942806][T27146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2052.967886][T27146] Cannot create hsr debugfs directory
[ 2054.427118][T27150] Bluetooth: hci3: command tx timeout
[ 2054.895525][T25541] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 2055.095516][T25541] usb 4-1: Using ep0 maxpacket: 16
[ 2055.112348][T25541] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2055.158008][T25541] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2055.185677][T25541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2055.203910][T25541] usb 4-1: Product: syz
[ 2055.212945][T25541] usb 4-1: Manufacturer: syz
[ 2055.226141][T25541] usb 4-1: SerialNumber: syz
[ 2055.243337][T25541] usb 4-1: config 0 descriptor??
[ 2055.544960][ T5268] usb 4-1: USB disconnect, device number 54
[ 2055.563518][T27153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2055.574515][T27153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2055.958705][T27153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2055.969838][T27153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2056.134262][T27153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2056.144737][T27153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2056.379126][T27153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2056.490273][T27153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2056.564608][T27150] Bluetooth: hci3: command tx timeout
[ 2057.199509][T27214] chnl_net:caif_netlink_parms(): no params data found
[ 2058.667210][T27150] Bluetooth: hci3: command tx timeout
[ 2059.015590][   T12] bridge_slave_1: left allmulticast mode
[ 2059.021241][   T12] bridge_slave_1: left promiscuous mode
[ 2059.066536][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2059.100046][   T12] bridge_slave_0: left allmulticast mode
[ 2059.108819][   T12] bridge_slave_0: left promiscuous mode
[ 2059.114515][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2059.520025][T27249] sg_write: data in/out 196608/16 bytes for SCSI command 0xdb-- guessing data in;
[ 2059.520025][T27249]    program syz.3.6463 not setting count and/or reply_len properly
[ 2060.633376][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2060.653790][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2060.680262][   T12] bond0 (unregistering): Released all slaves
[ 2060.887572][ T5268] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 2060.924690][   T12] hsr_slave_0: left promiscuous mode
[ 2060.932505][   T12] hsr_slave_1: left promiscuous mode
[ 2060.944037][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2060.969896][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2061.095942][ T5268] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2061.133902][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2061.153300][ T5268] usb 4-1: config 0 descriptor??
[ 2061.178164][ T5268] usb 4-1: selecting invalid altsetting 1
[ 2061.223243][ T5268] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2061.399045][ T5268] usb 4-1: USB disconnect, device number 55
[ 2061.545086][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 2061.615799][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 2062.146603][T27214] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2062.179091][T27214] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2062.225753][T27214] bridge_slave_0: entered allmulticast mode
[ 2062.250711][T27214] bridge_slave_0: entered promiscuous mode
[ 2062.280916][T27214] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2062.306538][T27214] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2062.313679][T27214] bridge_slave_1: entered allmulticast mode
[ 2062.347671][T27214] bridge_slave_1: entered promiscuous mode
[ 2063.437375][T27147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2063.647905][T27153] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2063.689457][T27153] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2063.941407][T27147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2064.007247][T27214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2064.157959][T27153] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2064.182817][T27153] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2064.274301][T27147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2064.327392][T27214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2069.297701][T27147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2069.548106][T27214] team0: Port device team_slave_0 added
[ 2069.599331][T27214] team0: Port device team_slave_1 added
[ 2069.837218][T27214] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2069.854353][T27214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2069.887104][T25865] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 2069.895801][T27214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2069.926070][T27214] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2069.937158][T27214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2069.966279][T27214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2070.116948][T25865] usb 4-1: Using ep0 maxpacket: 16
[ 2070.124585][T25865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2070.183349][T25865] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2070.206372][T25865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2070.228159][T27214] hsr_slave_0: entered promiscuous mode
[ 2070.235036][T25865] usb 4-1: Product: syz
[ 2070.245947][T25865] usb 4-1: Manufacturer: syz
[ 2070.251022][T27214] hsr_slave_1: entered promiscuous mode
[ 2070.256894][T25865] usb 4-1: SerialNumber: syz
[ 2070.276706][T25865] usb 4-1: config 0 descriptor??
[ 2070.392490][T27147] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2070.496108][T27147] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2070.518300][T27147] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2070.606859][ T5268] usb 4-1: USB disconnect, device number 56
[ 2070.647495][T27147] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2070.964259][T27153] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2071.165766][T27153] 8021q: adding VLAN 0 to HW filter on device team0
[ 2071.274942][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2071.282157][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2071.336806][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2071.337297][T27269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=27269 comm=syz.3.6468
[ 2071.343971][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2071.939448][T27146] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2072.143525][T27146] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2072.198254][T27146] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2072.281533][T27146] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2072.568212][T27147] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2072.708535][T27153] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2072.809612][T27147] 8021q: adding VLAN 0 to HW filter on device team0
[ 2073.003052][T15987] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2073.010304][T15987] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2073.148797][T15987] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2073.156047][T15987] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2073.303926][T27214] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2073.377674][T27214] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2073.488243][T27214] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2073.527422][T27214] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2073.695033][T27153] veth0_vlan: entered promiscuous mode
[ 2073.739717][T27146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2073.844938][T27153] veth1_vlan: entered promiscuous mode
[ 2073.967544][T27146] 8021q: adding VLAN 0 to HW filter on device team0
[ 2074.070552][T15987] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2074.077839][T15987] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2074.129260][T15987] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2074.136650][T15987] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2074.171723][T27153] veth0_macvtap: entered promiscuous mode
[ 2074.236272][T27153] veth1_macvtap: entered promiscuous mode
[ 2074.403883][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2074.468152][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.479205][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2074.493137][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.533742][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2074.566166][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.581261][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2074.595556][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.607677][T27153] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2074.641439][T27214] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2074.730611][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2074.766350][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.794077][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2074.825563][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.865576][T27153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2074.896154][T27153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2074.927718][T27153] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2075.023351][T27147] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2075.116640][T27214] 8021q: adding VLAN 0 to HW filter on device team0
[ 2075.198495][T27153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.237682][T27153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.289998][T27153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.347369][T27153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2075.423595][T23992] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2075.430773][T23992] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2075.576643][T17666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2075.583802][T17666] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2075.994250][T27147] veth0_vlan: entered promiscuous mode
[ 2075.995701][T26238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.036892][T26238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2076.300405][T12498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2076.302968][T27147] veth1_vlan: entered promiscuous mode
[ 2076.352114][T27146] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2076.369401][T12498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2076.702390][T27147] veth0_macvtap: entered promiscuous mode
[ 2076.767068][T27147] veth1_macvtap: entered promiscuous mode
[ 2077.079889][T27146] veth0_vlan: entered promiscuous mode
[ 2077.088310][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.223425][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.295452][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.335687][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.365497][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.546231][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.577806][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.610794][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.621074][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.642306][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.446030][T27147] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2078.460512][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2078.471250][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.481942][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2078.494004][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.504066][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2078.515216][ T5282] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 2078.525324][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.535578][T27147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2078.535599][T27147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.537592][T27147] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2078.608076][T27307] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6472'.
[ 2078.624058][T27146] veth1_vlan: entered promiscuous mode
[ 2078.661723][T27146] veth0_macvtap: entered promiscuous mode
[ 2078.675093][T27146] veth1_macvtap: entered promiscuous mode
[ 2078.742798][T27147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.767260][ T5282] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2078.790912][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2078.799172][T27147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.815261][ T5282] usb 4-1: config 0 descriptor??
[ 2078.822102][T27147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.832078][T27147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2079.477886][T27313] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6473'.
[ 2079.671933][ T5282] usb 4-1: selecting invalid altsetting 1
[ 2079.704228][ T5282] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2079.721902][    C0] eth0: bad gso: type: 1, size: 1408
[ 2079.784687][ T5282] usb 4-1: USB disconnect, device number 57
[ 2079.829386][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.858075][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.886180][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.908642][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.934853][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2079.965431][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2079.975305][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2080.012108][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.053289][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2080.086112][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.105553][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2080.165581][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.187659][T27146] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2080.205137][T23296] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 2080.288821][T27214] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2080.371129][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.394990][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.405010][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.416284][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.456305][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.475258][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.485271][T23296] usb 2-1: Using ep0 maxpacket: 16
[ 2080.493695][T23296] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2080.514718][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.526052][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.539406][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2080.551626][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2080.564430][T23296] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2080.577086][T23296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2080.587148][T27146] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2080.597755][T23296] usb 2-1: Product: syz
[ 2080.613245][T23296] usb 2-1: Manufacturer: syz
[ 2080.622890][T23296] usb 2-1: SerialNumber: syz
[ 2080.648961][T27146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.661947][T23296] usb 2-1: config 0 descriptor??
[ 2080.678561][T27146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.697181][T27146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.706196][T27146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2080.871729][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2080.890297][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2081.119788][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2081.155746][T25865] usb 2-1: USB disconnect, device number 79
[ 2081.163718][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2081.353288][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2081.373275][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2081.509771][T22576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2081.520848][T22576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2081.636526][T27214] veth0_vlan: entered promiscuous mode
[ 2081.719851][T27214] veth1_vlan: entered promiscuous mode
[ 2081.812257][   T29] audit: type=1400 audit(1722102561.119:971): avc:  denied  { ioctl } for  pid=27328 comm="syz.3.6476" path="/dev/ptyqb" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 2081.867936][T27214] veth0_macvtap: entered promiscuous mode
[ 2081.952641][T27214] veth1_macvtap: entered promiscuous mode
[ 2081.999539][T16451] Bluetooth: hci1: sending frame failed (-49)
[ 2082.017232][T27150] Bluetooth: hci1: Opcode 0x1003 failed: -49
[ 2082.025888][T27150] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0
[ 2082.034583][T27150] Bluetooth: hci8: Injecting HCI hardware error event
[ 2082.043607][T27150] Bluetooth: hci8: hardware error 0x00
[ 2082.061252][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.108384][T27331] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2
[ 2082.194438][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.224748][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.261824][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.291685][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.319716][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.336611][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.384908][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.423065][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.435912][T17666] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[ 2082.447117][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.488654][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.520353][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.548514][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.581603][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.628902][T27214] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2082.668416][T17666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2082.751070][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2082.761817][T17666] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2082.795765][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.811771][T17666] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[ 2082.827462][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2082.842931][T17666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.856498][T17666] usb 3-1: Product: syz
[ 2082.860754][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.894778][T17666] usb 3-1: Manufacturer: syz
[ 2082.909702][T17666] usb 3-1: SerialNumber: syz
[ 2082.917230][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2082.943746][T17666] usb 3-1: config 0 descriptor??
[ 2082.961934][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.973043][T17666] usb 3-1: Found UVC 0.00 device syz (468c:90ea)
[ 2082.982643][T17666] usb 3-1: No valid video chain found.
[ 2082.990723][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.044324][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.085453][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.122994][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.306634][T16451] Bluetooth: hci8: unexpected event for opcode 0x041b
[ 2083.898404][T27214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.912081][T27214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.950715][T27214] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2083.979081][T27351] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6480'.
[ 2084.067165][T27214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2084.109409][T27214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2084.155379][T27214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2084.190371][T27214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2084.455546][T21968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2084.498524][T21968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2084.579811][T21968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2084.610790][T21968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2084.635511][    T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 2084.667442][T27150] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[ 2084.975765][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 2085.011276][    T9] usb 2-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33
[ 2085.036221][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2085.055869][    T9] usb 2-1: config 0 descriptor??
[ 2085.071245][    T9] usb 2-1: bad CDC descriptors
[ 2085.080421][    T9] cdc_acm 2-1:0.0: Zero length descriptor references
[ 2085.111465][    T9] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22
[ 2085.235603][T27282] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 2085.287875][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6478'.
[ 2085.336504][T17666] usb 2-1: USB disconnect, device number 80
[ 2085.418174][ T5282] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 2085.468455][T27282] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2085.498050][T27282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2085.515105][T27282] usb 4-1: config 0 descriptor??
[ 2085.524250][T27282] usb 4-1: selecting invalid altsetting 1
[ 2085.575288][T27282] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2085.657701][ T5282] usb 5-1: config 0 has no interfaces?
[ 2085.667470][ T5282] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2085.684348][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2085.700828][ T5282] usb 5-1: SerialNumber: syz
[ 2085.721437][ T5282] usb 5-1: config 0 descriptor??
[ 2085.758195][T17666] usb 4-1: USB disconnect, device number 58
[ 2086.128826][ T5282] usb 5-1: USB disconnect, device number 84
[ 2086.592504][T23296] usb 3-1: USB disconnect, device number 73
[ 2086.738534][ T5282] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 2086.943139][T27374] FAULT_INJECTION: forcing a failure.
[ 2086.943139][T27374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2086.965489][ T5282] usb 4-1: Using ep0 maxpacket: 16
[ 2086.972690][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2086.996113][ T5282] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2087.025190][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2087.042390][T27374] CPU: 1 UID: 0 PID: 27374 Comm: syz.2.6486 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2087.051484][ T5282] usb 4-1: Product: syz
[ 2087.052904][T27374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2087.067128][T27374] Call Trace:
[ 2087.070428][T27374]  <TASK>
[ 2087.073371][T27374]  dump_stack_lvl+0x16c/0x1f0
[ 2087.075507][ T5282] usb 4-1: Manufacturer: syz
[ 2087.078064][T27374]  should_fail_ex+0x497/0x5b0
[ 2087.087335][T27374]  _copy_from_user+0x30/0xf0
[ 2087.091958][T27374]  copy_msghdr_from_user+0x99/0x160
[ 2087.097198][T27374]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2087.103035][T27374]  ? find_held_lock+0x2d/0x110
[ 2087.105481][ T5282] usb 4-1: SerialNumber: syz
[ 2087.107808][T27374]  ? __pfx___lock_acquire+0x10/0x10
[ 2087.117601][T27374]  ___sys_sendmsg+0xff/0x1e0
[ 2087.122220][T27374]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2087.125129][ T5282] usb 4-1: config 0 descriptor??
[ 2087.127427][T27374]  ? ksys_write+0x21c/0x260
[ 2087.127459][T27374]  ? __fget_light+0x173/0x210
[ 2087.127495][T27374]  __sys_sendmsg+0x117/0x1f0
[ 2087.146184][T27374]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2087.151330][T27374]  do_syscall_64+0xcd/0x250
[ 2087.155880][T27374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2087.161801][T27374] RIP: 0033:0x7f6577377299
[ 2087.166235][T27374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2087.185862][T27374] RSP: 002b:00007f657809f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2087.194289][T27374] RAX: ffffffffffffffda RBX: 00007f6577505f80 RCX: 00007f6577377299
[ 2087.202248][T27374] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[ 2087.210214][T27374] RBP: 00007f657809f0a0 R08: 0000000000000000 R09: 0000000000000000
[ 2087.218189][T27374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2087.226168][T27374] R13: 000000000000000b R14: 00007f6577505f80 R15: 00007ffcf6dc33c8
[ 2087.234156][T27374]  </TASK>
[ 2087.237291][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2087.437541][T27388] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6490'.
[ 2088.148453][T27322] usb 4-1: USB disconnect, device number 59
[ 2089.025565][T17666] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 2089.225597][T17666] usb 3-1: Using ep0 maxpacket: 32
[ 2089.256141][T17666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2090.953662][T17666] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2091.014652][T17666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2091.025091][T17666] usb 3-1: Product: syz
[ 2091.035212][T17666] usb 3-1: Manufacturer: syz
[ 2091.044494][T17666] usb 3-1: SerialNumber: syz
[ 2091.059608][T17666] usb 3-1: config 0 descriptor??
[ 2091.094900][T17666] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2091.267159][T27322] usb 3-1: USB disconnect, device number 74
[ 2091.276893][T26237] usb 3-1: Failed to submit usb control message: -71
[ 2091.315570][T26237] usb 3-1: unable to send the bmi data to the device: -71
[ 2091.345717][T26237] usb 3-1: unable to get target info from device
[ 2091.352079][T26237] usb 3-1: could not get target info (-71)
[ 2091.398617][T26237] usb 3-1: could not probe fw (-71)
[ 2091.654624][T27150] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 2091.663724][T27150] Bluetooth: hci3: Injecting HCI hardware error event
[ 2091.673636][T16451] Bluetooth: hci3: hardware error 0x00
[ 2091.826732][T23296] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[ 2091.905496][T24032] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 2092.126853][T23296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2092.149230][T24032] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2092.182845][T24032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2092.184950][T23296] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2092.254505][T24032] usb 4-1: config 0 descriptor??
[ 2092.287963][T23296] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[ 2092.320840][T24032] usb 4-1: selecting invalid altsetting 1
[ 2092.354639][T24032] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2092.462374][T23296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2092.529874][T25865] usb 4-1: USB disconnect, device number 60
[ 2092.545468][T23296] usb 1-1: Product: syz
[ 2092.564819][T23296] usb 1-1: Manufacturer: syz
[ 2092.593908][T23296] usb 1-1: SerialNumber: syz
[ 2092.644623][T23296] usb 1-1: config 0 descriptor??
[ 2092.721637][T23296] usb 1-1: Found UVC 0.00 device syz (468c:90ea)
[ 2092.737830][T23296] usb 1-1: No valid video chain found.
[ 2093.232016][T27432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15115 sclass=netlink_route_socket pid=27432 comm=syz.3.6500
[ 2093.350057][T27436] FAULT_INJECTION: forcing a failure.
[ 2093.350057][T27436] name failslab, interval 1, probability 0, space 0, times 0
[ 2093.432306][T27436] CPU: 0 UID: 0 PID: 27436 Comm: syz.4.6501 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2093.442756][T27436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2093.452802][T27436] Call Trace:
[ 2093.456068][T27436]  <TASK>
[ 2093.458993][T27436]  dump_stack_lvl+0x16c/0x1f0
[ 2093.463669][T27436]  should_fail_ex+0x497/0x5b0
[ 2093.468340][T27436]  ? fs_reclaim_acquire+0xae/0x160
[ 2093.473450][T27436]  should_failslab+0xc2/0x120
[ 2093.478123][T27436]  __kmalloc_noprof+0xcb/0x400
[ 2093.482881][T27436]  iovec_from_user.part.0+0xf3/0x130
[ 2093.488172][T27436]  __import_iovec+0xdc/0x6e0
[ 2093.492783][T27436]  import_iovec+0x108/0x140
[ 2093.497282][T27436]  vfs_writev+0x198/0xde0
[ 2093.501610][T27436]  ? __pfx_vfs_writev+0x10/0x10
[ 2093.506454][T27436]  ? __fget_files+0x24c/0x400
[ 2093.511133][T27436]  ? do_writev+0x137/0x370
[ 2093.515542][T27436]  do_writev+0x137/0x370
[ 2093.519789][T27436]  ? __pfx_do_writev+0x10/0x10
[ 2093.524549][T27436]  do_syscall_64+0xcd/0x250
[ 2093.529050][T27436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2093.534935][T27436] RIP: 0033:0x7f3d4b777299
[ 2093.539338][T27436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2093.558936][T27436] RSP: 002b:00007f3d4c4cd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 2093.567424][T27436] RAX: ffffffffffffffda RBX: 00007f3d4b905f80 RCX: 00007f3d4b777299
[ 2093.575379][T27436] RDX: 0000000000000018 RSI: 0000000020000800 RDI: 0000000000000003
[ 2093.583333][T27436] RBP: 00007f3d4c4cd0a0 R08: 0000000000000000 R09: 0000000000000000
[ 2093.591286][T27436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2093.599240][T27436] R13: 000000000000000b R14: 00007f3d4b905f80 R15: 00007ffdbfbc36d8
[ 2093.607198][T27436]  </TASK>
[ 2093.610351][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2093.866265][T16451] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 2093.964557][T27439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'.
[ 2094.026050][T27282] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 2094.277994][T27282] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[ 2094.324061][T27282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2094.383986][T27282] usb 2-1: config 0 descriptor??
[ 2094.402519][T27282] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2094.458112][T27282] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1
[ 2094.746038][ T5282] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 2099.405334][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.412264][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.686362][ T5282] usb 5-1: Using ep0 maxpacket: 16
[ 2100.270454][    T9] usb 2-1: USB disconnect, device number 81
[ 2100.436408][ T5282] usb 5-1: device descriptor read/all, error -71
[ 2100.515653][T27282] usb 1-1: USB disconnect, device number 39
[ 2100.566917][T27454] FAULT_INJECTION: forcing a failure.
[ 2100.566917][T27454] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2100.615519][T27454] CPU: 0 UID: 0 PID: 27454 Comm: syz.4.6506 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2100.625947][T27454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2100.635992][T27454] Call Trace:
[ 2100.639258][T27454]  <TASK>
[ 2100.642176][T27454]  dump_stack_lvl+0x16c/0x1f0
[ 2100.646846][T27454]  should_fail_ex+0x497/0x5b0
[ 2100.651524][T27454]  _copy_from_user+0x30/0xf0
[ 2100.656106][T27454]  copy_msghdr_from_user+0x99/0x160
[ 2100.661300][T27454]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2100.667111][T27454]  ? find_held_lock+0x2d/0x110
[ 2100.671909][T27454]  ? __pfx___lock_acquire+0x10/0x10
[ 2100.677110][T27454]  ___sys_sendmsg+0xff/0x1e0
[ 2100.681719][T27454]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2100.686912][T27454]  ? ksys_write+0x21c/0x260
[ 2100.691403][T27454]  ? __fget_light+0x173/0x210
[ 2100.696091][T27454]  __sys_sendmsg+0x117/0x1f0
[ 2100.700688][T27454]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2100.705818][T27454]  do_syscall_64+0xcd/0x250
[ 2100.710319][T27454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2100.716214][T27454] RIP: 0033:0x7f3d4b777299
[ 2100.720621][T27454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2100.740217][T27454] RSP: 002b:00007f3d4c4cd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2100.748616][T27454] RAX: ffffffffffffffda RBX: 00007f3d4b905f80 RCX: 00007f3d4b777299
[ 2100.757628][T27454] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2100.765592][T27454] RBP: 00007f3d4c4cd0a0 R08: 0000000000000000 R09: 0000000000000000
[ 2100.773559][T27454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2100.781525][T27454] R13: 000000000000000b R14: 00007f3d4b905f80 R15: 00007ffdbfbc36d8
[ 2100.789492][T27454]  </TASK>
[ 2100.977679][T27457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6507'.
[ 2101.045687][   T29] audit: type=1400 audit(1722102580.359:972): avc:  denied  { ioctl } for  pid=27456 comm="syz.2.6508" path="socket:[116761]" dev="sockfs" ino=116761 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2101.523902][   T29] audit: type=1400 audit(1722102580.829:973): avc:  denied  { setopt } for  pid=27468 comm="syz.4.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2102.726231][T27322] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2102.876389][   T29] audit: type=1400 audit(1722102582.189:974): avc:  denied  { read } for  pid=27479 comm="syz.2.6515" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2102.923309][T27481] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 2102.937536][T27322] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2102.971344][T27322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.982016][   T29] audit: type=1400 audit(1722102582.189:975): avc:  denied  { open } for  pid=27479 comm="syz.2.6515" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2103.037357][T27322] usb 4-1: config 0 descriptor??
[ 2103.061096][T27322] usb 4-1: selecting invalid altsetting 1
[ 2103.071093][   T29] audit: type=1400 audit(1722102582.189:976): avc:  denied  { ioctl } for  pid=27479 comm="syz.2.6515" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 2103.185582][T23296] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2103.226721][T27322] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2103.343588][T27322] usb 4-1: USB disconnect, device number 61
[ 2104.020859][T23296] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[ 2104.055509][T23296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2104.085448][T23296] usb 5-1: Product: syz
[ 2104.114296][T23296] usb 5-1: Manufacturer: syz
[ 2104.130777][T23296] usb 5-1: SerialNumber: syz
[ 2104.171995][T23296] usb 5-1: config 0 descriptor??
[ 2104.188426][T23296] ums-usbat 5-1:0.0: USB Mass Storage device detected
[ 2104.285685][ T5253] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 2104.517007][ T5253] usb 1-1: Using ep0 maxpacket: 32
[ 2104.660709][ T5253] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2104.718643][ T5253] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2104.726331][ T5282] usb 5-1: USB disconnect, device number 87
[ 2104.768664][ T5253] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2104.827690][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2104.879217][ T5253] usb 1-1: Product: syz
[ 2104.883423][ T5253] usb 1-1: Manufacturer: syz
[ 2104.928921][ T5253] usb 1-1: SerialNumber: syz
[ 2104.958108][ T5253] usb 1-1: config 0 descriptor??
[ 2105.139490][T23296] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 2105.405537][T23296] usb 3-1: Using ep0 maxpacket: 32
[ 2105.423861][T23296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2105.477997][T23296] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2105.521453][T23296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2105.586561][T23296] usb 3-1: Product: syz
[ 2105.590775][T23296] usb 3-1: Manufacturer: syz
[ 2105.677464][T23296] usb 3-1: SerialNumber: syz
[ 2105.729072][T23296] usb 3-1: config 0 descriptor??
[ 2105.790628][T23296] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2106.836786][T26703] usb 3-1: Failed to submit usb control message: -110
[ 2106.860162][T26703] usb 3-1: unable to send the bmi data to the device: -110
[ 2107.082349][T27282] usb 1-1: USB disconnect, device number 40
[ 2107.091318][T26703] usb 3-1: unable to get target info from device
[ 2107.572606][T26703] usb 3-1: could not get target info (-110)
[ 2107.591735][T26703] usb 3-1: could not probe fw (-110)
[ 2108.126527][   T29] audit: type=1400 audit(1722102587.439:977): avc:  denied  { map } for  pid=27518 comm="syz.0.6521" path="socket:[116723]" dev="sockfs" ino=116723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 2108.261096][ T5253] usb 3-1: USB disconnect, device number 75
[ 2113.315613][   T29] audit: type=1400 audit(1722102592.619:978): avc:  denied  { accept } for  pid=27525 comm="syz.0.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2113.523470][T27528] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6527'.
[ 2113.580411][T27532] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 2114.118224][T27322] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 2114.331200][T27322] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2114.367623][T27322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2114.434141][T27322] usb 3-1: config 0 descriptor??
[ 2114.485893][T27322] usb 3-1: selecting invalid altsetting 1
[ 2114.545702][ T5253] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 2114.905527][ T5253] usb 2-1: Using ep0 maxpacket: 32
[ 2115.865101][T15987] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[ 2117.474384][ T5253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2117.524463][ T5253] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2117.641128][ T5253] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2117.651547][T27322] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2117.695583][ T5253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2117.802061][ T5253] usb 2-1: Product: syz
[ 2117.831911][T27322] usb 3-1: USB disconnect, device number 76
[ 2117.857715][ T5253] usb 2-1: Manufacturer: syz
[ 2117.862348][ T5253] usb 2-1: SerialNumber: syz
[ 2117.956732][ T5253] usb 2-1: config 0 descriptor??
[ 2118.035277][T15987] usb 1-1: device descriptor read/all, error -71
[ 2119.107281][T17666] usb 2-1: USB disconnect, device number 82
[ 2119.737674][T15987] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 2120.024210][T27569] netlink: 25 bytes leftover after parsing attributes in process `syz.2.6538'.
[ 2120.477260][T15987] usb 4-1: device descriptor read/64, error -71
[ 2120.785670][T15987] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 2124.563983][T16451] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 2124.572852][T16451] Bluetooth: hci4: Injecting HCI hardware error event
[ 2124.583254][T16451] Bluetooth: hci4: hardware error 0x00
[ 2124.655606][T15987] usb 4-1: device descriptor read/64, error -71
[ 2124.826812][T15987] usb usb4-port1: attempt power cycle
[ 2125.515347][   T29] audit: type=1400 audit(1722102604.819:979): avc:  denied  { ioctl } for  pid=27584 comm="syz.4.6544" path="socket:[117866]" dev="sockfs" ino=117866 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 2126.905880][T16451] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 2127.076199][T27591] netlink: 'syz.2.6545': attribute type 1 has an invalid length.
[ 2127.084161][T27591] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.6545'.
[ 2127.095433][T27591] netlink: 'syz.2.6545': attribute type 1 has an invalid length.
[ 2128.575664][T27322] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 2128.785517][T27322] usb 2-1: Using ep0 maxpacket: 32
[ 2128.839106][T27322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2128.881105][T27322] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2129.012692][T27611] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6549'.
[ 2129.780714][T27322] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2129.804945][T27322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2129.838058][T27322] usb 2-1: Product: syz
[ 2129.842255][T27322] usb 2-1: Manufacturer: syz
[ 2129.865610][T15987] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 2129.878995][T27322] usb 2-1: SerialNumber: syz
[ 2129.943578][T27322] usb 2-1: config 0 descriptor??
[ 2130.087484][T15987] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2130.125148][T15987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2130.145700][T15987] usb 1-1: config 0 descriptor??
[ 2130.164144][T15987] usb 1-1: selecting invalid altsetting 1
[ 2130.205489][ T5282] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 2130.250201][T15987] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2130.392898][ T5253] usb 1-1: USB disconnect, device number 43
[ 2130.405557][ T5282] usb 5-1: Using ep0 maxpacket: 16
[ 2130.425860][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2130.478205][ T5282] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2130.521665][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2130.552924][ T5282] usb 5-1: Product: syz
[ 2130.584073][ T5282] usb 5-1: Manufacturer: syz
[ 2130.621473][ T5282] usb 5-1: SerialNumber: syz
[ 2130.663079][ T5282] usb 5-1: config 0 descriptor??
[ 2130.668750][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2130.720657][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2130.789578][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2130.810522][T27619] binder: 27617:27619 ioctl c0306201 0 returned -14
[ 2130.895578][   T29] audit: type=1400 audit(1722102610.199:980): avc:  denied  { listen } for  pid=27617 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2131.159728][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.403861][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.428009][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.437920][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.451698][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.563796][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.609249][T25865] usb 2-1: USB disconnect, device number 83
[ 2131.641814][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.675746][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.704671][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.744215][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.775787][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.793480][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.823202][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.851659][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.864227][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.877534][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.889749][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.904722][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.924685][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.955119][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.970875][T27282] usb 5-1: USB disconnect, device number 88
[ 2131.979167][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2131.995538][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.009160][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.021408][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.054121][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.099033][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.129231][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.149296][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.165476][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.237342][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.276091][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.318771][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.352250][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.390784][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.411142][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.422297][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.440205][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.462158][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.472272][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.500758][T15987] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0
[ 2132.521486][T15987] hid-generic 0000:0000:0000.00C6: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 2132.662490][T27630] netlink: 'syz.1.6555': attribute type 3 has an invalid length.
[ 2132.736194][T27630] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6555'.
[ 2132.878459][   T29] audit: type=1400 audit(1722102612.189:981): avc:  denied  { getopt } for  pid=27635 comm="syz.3.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2139.717455][T27322] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 2141.518224][T27322] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 2141.562057][T27322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2141.620961][T27322] usb 3-1: config 0 descriptor??
[ 2141.638695][T27322] usb 3-1: selecting invalid altsetting 1
[ 2141.764818][T27322] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2142.736420][T27322] usb 3-1: USB disconnect, device number 77
[ 2142.882649][T27666] overlay: ./file0 is not a directory
[ 2142.983292][T17666] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 2143.196940][T17666] usb 1-1: Using ep0 maxpacket: 32
[ 2143.249762][T17666] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2143.289888][T17666] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2143.390057][T17666] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2143.444968][T17666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2143.555450][T17666] usb 1-1: Product: syz
[ 2143.583212][T17666] usb 1-1: Manufacturer: syz
[ 2143.596472][T27680] FAULT_INJECTION: forcing a failure.
[ 2143.596472][T27680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2143.633618][T17666] usb 1-1: SerialNumber: syz
[ 2143.656250][T27680] CPU: 0 UID: 0 PID: 27680 Comm: syz.3.6569 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2143.666696][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2143.676744][T27680] Call Trace:
[ 2143.680014][T27680]  <TASK>
[ 2143.682931][T27680]  dump_stack_lvl+0x16c/0x1f0
[ 2143.687604][T27680]  should_fail_ex+0x497/0x5b0
[ 2143.692274][T27680]  _copy_to_user+0x30/0xc0
[ 2143.696680][T27680]  simple_read_from_buffer+0xd0/0x160
[ 2143.702045][T27680]  proc_fail_nth_read+0x1b0/0x290
[ 2143.707059][T27680]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2143.712597][T27680]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2143.718131][T27680]  vfs_read+0x1d4/0xbd0
[ 2143.722274][T27680]  ? __fdget_pos+0xeb/0x180
[ 2143.726764][T27680]  ? __pfx_vfs_read+0x10/0x10
[ 2143.731425][T27680]  ? __pfx___mutex_lock+0x10/0x10
[ 2143.736445][T27680]  ? __fget_files+0x256/0x400
[ 2143.741117][T27680]  ksys_read+0x12f/0x260
[ 2143.745342][T27680]  ? __pfx_ksys_read+0x10/0x10
[ 2143.750093][T27680]  do_syscall_64+0xcd/0x250
[ 2143.754590][T27680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2143.760472][T27680] RIP: 0033:0x7fd2c7d75d7c
[ 2143.764873][T27680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[ 2143.784466][T27680] RSP: 002b:00007fd2c8b50040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2143.792866][T27680] RAX: ffffffffffffffda RBX: 00007fd2c7f06058 RCX: 00007fd2c7d75d7c
[ 2143.800825][T27680] RDX: 000000000000000f RSI: 00007fd2c8b500b0 RDI: 0000000000000006
[ 2143.808781][T27680] RBP: 00007fd2c8b500a0 R08: 0000000000000000 R09: 0000000000000000
[ 2143.816739][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2143.824697][T27680] R13: 000000000000006e R14: 00007fd2c7f06058 R15: 00007fff7a029a18
[ 2143.832658][T27680]  </TASK>
[ 2143.835811][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2143.858594][T17666] usb 1-1: config 0 descriptor??
[ 2144.248155][T27683] netlink: 'syz.3.6570': attribute type 3 has an invalid length.
[ 2144.273364][T27282] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 2144.303805][T27683] netlink: 'syz.3.6570': attribute type 3 has an invalid length.
[ 2145.258256][T17666] usb 1-1: USB disconnect, device number 44
[ 2151.764210][T27709] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6576'.
[ 2151.880944][T27705] netlink: 'syz.1.6577': attribute type 4 has an invalid length.
[ 2156.092690][T17666] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2156.092756][T16451] Bluetooth: hci5: command 0x0406 tx timeout
[ 2156.323060][T17666] usb 4-1: device descriptor read/64, error -71
[ 2156.772511][T17666] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2157.920734][T27735] FAULT_INJECTION: forcing a failure.
[ 2157.920734][T27735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2158.012015][T27735] CPU: 1 UID: 0 PID: 27735 Comm: syz.4.6587 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2158.022466][T27735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2158.032509][T27735] Call Trace:
[ 2158.035777][T27735]  <TASK>
[ 2158.038693][T27735]  dump_stack_lvl+0x16c/0x1f0
[ 2158.043371][T27735]  should_fail_ex+0x497/0x5b0
[ 2158.048063][T27735]  _copy_from_user+0x30/0xf0
[ 2158.052652][T27735]  copy_msghdr_from_user+0x99/0x160
[ 2158.057844][T27735]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2158.063646][T27735]  ? find_held_lock+0x2d/0x110
[ 2158.068405][T27735]  ? __pfx___lock_acquire+0x10/0x10
[ 2158.073593][T27735]  ___sys_sendmsg+0xff/0x1e0
[ 2158.078173][T27735]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2158.083362][T27735]  ? ksys_write+0x21c/0x260
[ 2158.087852][T27735]  ? __fget_light+0x173/0x210
[ 2158.092522][T27735]  __sys_sendmsg+0x117/0x1f0
[ 2158.097104][T27735]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2158.102210][T27735]  do_syscall_64+0xcd/0x250
[ 2158.106711][T27735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2158.112679][T27735] RIP: 0033:0x7f3d4b777299
[ 2158.117081][T27735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2158.136677][T27735] RSP: 002b:00007f3d4c4cd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2158.145077][T27735] RAX: ffffffffffffffda RBX: 00007f3d4b905f80 RCX: 00007f3d4b777299
[ 2158.153039][T27735] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 2158.160996][T27735] RBP: 00007f3d4c4cd0a0 R08: 0000000000000000 R09: 0000000000000000
[ 2158.168955][T27735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2158.176912][T27735] R13: 000000000000000b R14: 00007f3d4b905f80 R15: 00007ffdbfbc36d8
[ 2158.184872][T27735]  </TASK>
[ 2158.727415][T27748] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6591'.
[ 2158.827259][   T29] audit: type=1400 audit(1722102638.139:982): avc:  denied  { create } for  pid=27738 comm="syz.1.6590" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2158.925175][   T29] audit: type=1400 audit(1722102638.199:983): avc:  denied  { setattr } for  pid=27738 comm="syz.1.6590" name="file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2159.039562][   T29] audit: type=1400 audit(1722102638.229:984): avc:  denied  { connect } for  pid=27750 comm="syz.0.6592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 2159.419638][T27757] netlink: 'syz.4.6593': attribute type 4 has an invalid length.
[ 2160.846759][ T1259] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.853139][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[ 2161.036069][T27772] FAULT_INJECTION: forcing a failure.
[ 2161.036069][T27772] name failslab, interval 1, probability 0, space 0, times 0
[ 2161.048730][T27772] CPU: 1 UID: 0 PID: 27772 Comm: syz.2.6596 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2161.059141][T27772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2161.069200][T27772] Call Trace:
[ 2161.072468][T27772]  <TASK>
[ 2161.075390][T27772]  dump_stack_lvl+0x16c/0x1f0
[ 2161.080089][T27772]  should_fail_ex+0x497/0x5b0
[ 2161.084764][T27772]  ? fs_reclaim_acquire+0xae/0x160
[ 2161.089874][T27772]  should_failslab+0xc2/0x120
[ 2161.094546][T27772]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 2161.099912][T27772]  ? copy_fs_struct+0x49/0x340
[ 2161.104666][T27772]  copy_fs_struct+0x49/0x340
[ 2161.109254][T27772]  ksys_unshare+0x365/0x970
[ 2161.113747][T27772]  ? __pfx_ksys_unshare+0x10/0x10
[ 2161.118773][T27772]  ? ksys_write+0x1ab/0x260
[ 2161.123298][T27772]  __x64_sys_unshare+0x31/0x40
[ 2161.128055][T27772]  do_syscall_64+0xcd/0x250
[ 2161.132554][T27772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2161.138436][T27772] RIP: 0033:0x7f6577377299
[ 2161.142836][T27772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2161.162435][T27772] RSP: 002b:00007f6576dff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 2161.170852][T27772] RAX: ffffffffffffffda RBX: 00007f6577506130 RCX: 00007f6577377299
[ 2161.178899][T27772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400
[ 2161.186857][T27772] RBP: 00007f6576dff0a0 R08: 0000000000000000 R09: 0000000000000000
[ 2161.194813][T27772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2161.202773][T27772] R13: 000000000000006e R14: 00007f6577506130 R15: 00007ffcf6dc33c8
[ 2161.210734][T27772]  </TASK>
[ 2161.631250][   T29] audit: type=1400 audit(1722102640.909:985): avc:  denied  { unlink } for  pid=27153 comm="syz-executor" name="file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2163.160897][T27795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6602'.
[ 2163.224386][T27792] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2163.571470][T15987] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2163.769873][T15987] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=61.87
[ 2163.801059][T15987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2163.822314][T15987] usb 4-1: Product: syz
[ 2163.836379][T15987] usb 4-1: Manufacturer: syz
[ 2163.845502][T15987] usb 4-1: SerialNumber: syz
[ 2163.853779][T15987] usb 4-1: config 0 descriptor??
[ 2163.869648][T15987] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2164.057354][T27805] netlink: 'syz.1.6604': attribute type 8 has an invalid length.
[ 2164.100852][T15987] usb 4-1: USB disconnect, device number 67
[ 2164.551171][T26703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2164.746004][T27803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6604'.
[ 2165.013291][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6604'.
[ 2165.096532][T16451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2165.116498][T16451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2165.126162][T16451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2165.142315][T16451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2165.154275][T16451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2165.162039][T16451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2165.518024][T26703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2165.644193][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6609'.
[ 2166.033693][T26703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2166.531245][   T29] audit: type=1400 audit(1722102645.839:986): avc:  denied  { append } for  pid=27821 comm="syz.0.6611" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 2166.554566][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2166.604224][T26703] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2167.014185][T27810] chnl_net:caif_netlink_parms(): no params data found
[ 2167.230650][T16451] Bluetooth: hci1: command tx timeout
[ 2167.305516][ T5282] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[ 2167.354130][T27836] FAULT_INJECTION: forcing a failure.
[ 2167.354130][T27836] name failslab, interval 1, probability 0, space 0, times 0
[ 2167.482203][T27836] CPU: 1 UID: 0 PID: 27836 Comm: syz.0.6615 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2167.492662][T27836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2167.498025][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2167.502722][T27836] Call Trace:
[ 2167.516102][T27836]  <TASK>
[ 2167.517315][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2167.519027][T27836]  dump_stack_lvl+0x16c/0x1f0
[ 2167.536545][T27836]  should_fail_ex+0x497/0x5b0
[ 2167.541249][T27836]  ? fs_reclaim_acquire+0xae/0x160
[ 2167.546371][T27836]  should_failslab+0xc2/0x120
[ 2167.551040][T27836]  kmem_cache_alloc_noprof+0x6e/0x2f0
[ 2167.556404][T27836]  ? vm_area_dup+0x21/0x2f0
[ 2167.560901][T27836]  vm_area_dup+0x21/0x2f0
[ 2167.565220][T27836]  __split_vma+0x181/0x11c0
[ 2167.569717][T27836]  ? __pfx___split_vma+0x10/0x10
[ 2167.574645][T27836]  do_vmi_align_munmap+0x2bf/0x19c0
[ 2167.579834][T27836]  ? mtree_range_walk+0x715/0xbe0
[ 2167.584846][T27836]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 2167.590474][T27836]  do_vmi_munmap+0x231/0x410
[ 2167.595055][T27836]  mmap_region+0x17f/0x2760
[ 2167.599550][T27836]  ? mm_get_unmapped_area_vmflags+0x97/0xe0
[ 2167.605445][T27836]  ? __pfx_mmap_region+0x10/0x10
[ 2167.610395][T27836]  ? security_mmap_addr+0x8e/0xb0
[ 2167.615421][T27836]  ? __get_unmapped_area+0x271/0x3a0
[ 2167.620716][T27836]  do_mmap+0xbfb/0xfb0
[ 2167.624775][T27836]  ? security_mmap_file+0x192/0x1d0
[ 2167.629966][T27836]  vm_mmap_pgoff+0x1ba/0x360
[ 2167.634548][T27836]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2167.639652][T27836]  ksys_mmap_pgoff+0x332/0x5d0
[ 2167.644405][T27836]  ? __pfx_ksys_write+0x10/0x10
[ 2167.649241][T27836]  __x64_sys_mmap+0x125/0x190
[ 2167.653902][T27836]  do_syscall_64+0xcd/0x250
[ 2167.658399][T27836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2167.664282][T27836] RIP: 0033:0x7fa712377299
[ 2167.668734][T27836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2167.688332][T27836] RSP: 002b:00007fa713171048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2167.696732][T27836] RAX: ffffffffffffffda RBX: 00007fa712505f80 RCX: 00007fa712377299
[ 2167.704690][T27836] RDX: 000000000100000b RSI: 0000000000002000 RDI: 0000000020ffd000
[ 2167.712647][T27836] RBP: 00007fa7131710a0 R08: 0000000000000004 R09: 0000000000000000
[ 2167.720602][T27836] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000001
[ 2167.728558][T27836] R13: 000000000000000b R14: 00007fa712505f80 R15: 00007ffd474f73a8
[ 2167.736520][T27836]  </TASK>
[ 2167.777586][ T5282] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[ 2167.787500][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2167.812935][ T5282] usb 2-1: Product: syz
[ 2167.821938][ T5282] usb 2-1: Manufacturer: syz
[ 2167.833235][T26703] bridge_slave_1: left allmulticast mode
[ 2167.835546][ T5282] usb 2-1: SerialNumber: syz
[ 2167.839367][T26703] bridge_slave_1: left promiscuous mode
[ 2167.868577][T26703] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.878846][ T5282] usb 2-1: config 0 descriptor??
[ 2167.890884][ T5282] usb 2-1: Found UVC 0.00 device syz (468c:90ea)
[ 2167.927747][ T5282] usb 2-1: No valid video chain found.
[ 2167.947982][T26703] bridge_slave_0: left allmulticast mode
[ 2167.953653][T26703] bridge_slave_0: left promiscuous mode
[ 2167.986176][T26703] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2168.738856][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6614'.
[ 2169.155750][   T30] INFO: task syz.2.6433:27092 blocked for more than 143 seconds.
[ 2169.168047][   T30]       Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2169.197892][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2169.209995][T27854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6617'.
[ 2169.224404][   T30] task:syz.2.6433      state:D stack:26752 pid:27092 tgid:27090 ppid:25679  flags:0x00000004
[ 2169.305510][T16451] Bluetooth: hci1: command tx timeout
[ 2169.339560][   T30] Call Trace:
[ 2169.398635][   T30]  <TASK>
[ 2169.418212][   T30]  __schedule+0xe37/0x5490
[ 2169.444975][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 2169.483205][   T30]  ? mark_lock+0x21/0xc60
[ 2169.507825][   T30]  ? __pfx___schedule+0x10/0x10
[ 2169.548593][   T30]  ? schedule+0x298/0x350
[ 2169.571072][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2169.585525][   T30]  schedule+0xe7/0x350
[ 2169.591889][   T30]  io_schedule+0xbf/0x130
[ 2169.602927][   T30]  folio_wait_bit_common+0x3d8/0x9b0
[ 2169.613900][   T30]  ? folio_wait_bit_common+0x13c/0x9b0
[ 2169.623975][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 2169.646414][   T30]  ? __pfx_wake_page_function+0x10/0x10
[ 2169.651972][   T30]  ? __pfx___might_resched+0x10/0x10
[ 2169.676734][   T30]  ? folio_flags.constprop.0+0x56/0x150
[ 2169.682323][   T30]  truncate_inode_pages_range+0xb93/0xe80
[ 2169.725502][   T30]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 2169.731800][   T30]  ? mark_held_locks+0x9f/0xe0
[ 2169.765522][   T30]  ? _printk+0xc8/0x100
[ 2169.769724][   T30]  ? __pfx_invalidate_bh_lru+0x10/0x10
[ 2169.775209][   T30]  ? __pfx_has_bh_in_lru+0x10/0x10
[ 2169.826000][   T30]  set_blocksize+0x2b2/0x370
[ 2169.830653][   T30]  sb_set_blocksize+0x47/0x120
[ 2169.865858][   T30]  ufs_fill_super+0xaf0/0x6e20
[ 2169.892728][   T30]  ? do_raw_spin_lock+0x12d/0x2c0
[ 2169.905480][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2169.945931][   T30]  ? sb_set_blocksize+0xf6/0x120
[ 2169.950921][   T30]  ? __pfx_ufs_fill_super+0x10/0x10
[ 2169.991090][   T30]  mount_bdev+0x1e3/0x2d0
[ 2170.015491][   T30]  ? __pfx_mount_bdev+0x10/0x10
[ 2170.020347][   T30]  ? selinux_sb_eat_lsm_opts+0x594/0x700
[ 2170.065712][   T30]  ? cap_capable+0x1cf/0x240
[ 2170.070317][   T30]  ? __pfx_ufs_mount+0x10/0x10
[ 2170.075068][   T30]  legacy_get_tree+0x109/0x220
[ 2170.125903][   T30]  vfs_get_tree+0x8f/0x380
[ 2170.141386][   T30]  path_mount+0x14e6/0x1f20
[ 2170.147453][   T30]  ? __pfx_path_mount+0x10/0x10
[ 2170.152334][   T30]  ? putname+0x12e/0x170
[ 2170.175497][   T30]  ? putname+0x12e/0x170
[ 2170.179775][   T30]  __x64_sys_mount+0x294/0x320
[ 2170.205499][   T30]  ? __pfx___x64_sys_mount+0x10/0x10
[ 2170.210818][   T30]  do_syscall_64+0xcd/0x250
[ 2170.235484][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2170.241504][   T30] RIP: 0033:0x7f127d777299
[ 2170.275426][   T30] RSP: 002b:00007f127e4b6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2170.283877][   T30] RAX: ffffffffffffffda RBX: 00007f127d906058 RCX: 00007f127d777299
[ 2170.315657][   T30] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000000
[ 2170.323662][   T30] RBP: 00007f127d7e48e6 R08: 0000000020000240 R09: 0000000000000000
[ 2170.385427][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2170.405432][   T30] R13: 000000000000006e R14: 00007f127d906058 R15: 00007ffe43d782c8
[ 2170.436230][   T30]  </TASK>
[ 2170.439645][   T30] 
[ 2170.439645][   T30] Showing all locks held in the system:
[ 2170.465660][   T30] 1 lock held by khungtaskd/30:
[ 2170.485480][   T30]  #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[ 2170.515763][   T30] 2 locks held by getty/4965:
[ 2170.520452][   T30]  #0: ffff88802b7440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 2170.565425][   T30]  #1: ffffc90002ef62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490
[ 2170.585427][   T30] 3 locks held by kworker/1:3/5253:
[ 2170.590644][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2170.642613][   T30]  #1: ffffc900035f7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2170.665425][   T30]  #2: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0
[ 2170.674553][   T30] 3 locks held by kworker/1:0/17666:
[ 2170.695422][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2170.715642][   T30]  #1: ffffc90003397d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2170.775618][   T30]  #2: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 2170.795640][   T30] 2 locks held by syz.0.4893/20823:
[ 2170.810721][   T30] 3 locks held by kworker/u8:9/23882:
[ 2170.835556][   T30] 4 locks held by kworker/u8:12/26703:
[ 2170.841056][   T30]  #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40
[ 2170.875461][   T30]  #1: ffffc900033e7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40
[ 2170.955206][   T30]  #2: ffffffff8fa08490 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0
[ 2170.975616][   T30]  #3: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xbf0
[ 2171.005781][   T30] 1 lock held by syz.2.6433/27092:
[ 2171.010923][   T30]  #0: ffff88805f4b80e0 (&type->s_umount_key#82/1){+.+.}-{3:3}, at: alloc_super+0x23d/0xbd0
[ 2171.036873][   T30] 1 lock held by syz-executor/27810:
[ 2171.042189][   T30]  #0: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2171.105458][   T30] 1 lock held by syz.1.6614/27848:
[ 2171.110597][   T30]  #0: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x250
[ 2171.135450][   T30] 1 lock held by vhost-27848/27851:
[ 2171.140671][   T30]  #0: ffffffff8ddc09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0
[ 2171.185453][   T30] 1 lock held by syz.0.6617/27847:
[ 2171.190584][   T30]  #0: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2171.245473][   T30] 1 lock held by syz.0.6617/27850:
[ 2171.250636][   T30]  #0: ffffffff8fa1dbe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[ 2171.286884][   T30] 2 locks held by syz.0.6617/27855:
[ 2171.292107][   T30]  #0: ffff8880786b34b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x33/0x130
[ 2171.345467][   T30]  #1: ffffffff8ddc09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[ 2171.375710][   T30] 2 locks held by syz.3.6618/27852:
[ 2171.385836][T16451] Bluetooth: hci1: command tx timeout
[ 2171.417974][   T30] 
[ 2171.420297][   T30] =============================================
[ 2171.420297][   T30] 
[ 2171.495463][   T30] NMI backtrace for cpu 1
[ 2171.499805][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2171.509942][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2171.519982][   T30] Call Trace:
[ 2171.523244][   T30]  <TASK>
[ 2171.526162][   T30]  dump_stack_lvl+0x116/0x1f0
[ 2171.530830][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 2171.535777][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2171.541786][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 2171.547800][   T30]  watchdog+0xf4e/0x1280
[ 2171.552077][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2171.556769][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2171.561973][   T30]  ? __kthread_parkme+0x148/0x220
[ 2171.567020][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2171.571688][   T30]  kthread+0x2c1/0x3a0
[ 2171.575742][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2171.580929][   T30]  ? __pfx_kthread+0x10/0x10
[ 2171.585502][   T30]  ret_from_fork+0x45/0x80
[ 2171.589910][   T30]  ? __pfx_kthread+0x10/0x10
[ 2171.594483][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2171.599238][   T30]  </TASK>
[ 2171.602931][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 2171.608515][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20
[ 2171.799020][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 2171.805880][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0
[ 2171.816016][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2171.826054][   T30] Call Trace:
[ 2171.829319][   T30]  <TASK>
[ 2171.832237][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 2171.836819][   T30]  panic+0x6f5/0x7a0
[ 2171.840702][   T30]  ? __pfx_panic+0x10/0x10
[ 2171.845101][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2171.850457][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2171.856438][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2171.861832][   T30]  ? watchdog+0xd8a/0x1280
[ 2171.866274][   T30]  ? watchdog+0xd7d/0x1280
[ 2171.870705][   T30]  watchdog+0xd9b/0x1280
[ 2171.874961][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2171.879650][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2171.884861][   T30]  ? __kthread_parkme+0x148/0x220
[ 2171.889896][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2171.894585][   T30]  kthread+0x2c1/0x3a0
[ 2171.898654][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2171.903860][   T30]  ? __pfx_kthread+0x10/0x10
[ 2171.908450][   T30]  ret_from_fork+0x45/0x80
[ 2171.912878][   T30]  ? __pfx_kthread+0x10/0x10
[ 2171.917472][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2171.922248][   T30]  </TASK>
[ 2171.925469][   T30] Kernel Offset: disabled
[ 2171.929780][   T30] Rebooting in 86400 seconds..