last executing test programs:

5m47.770032172s ago: executing program 0 (id=1196):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x24}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x2, 0xe4}, 0x10)

5m46.026854282s ago: executing program 0 (id=1202):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0xfffffffffffffffe, 0x17)

5m45.859331262s ago: executing program 0 (id=1204):
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6000002", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

5m45.413561969s ago: executing program 0 (id=1207):
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000dc0)="801904460f0836440fc76e0a6766470fc730f083ac9f054900000048b836a6fe72000000000f23d00f21f8352000000e0f23f866baf80cb828bd708bef66bafc0c66ed43dfbf2f000000410f01cac46179294e00", 0x54}], 0x1, 0x0, 0x0, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000e40), 0x80002, 0x0)
ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5m40.862997189s ago: executing program 0 (id=1217):
getrandom(&(0x7f0000000040)=""/32, 0x20, 0x2)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0xfdef)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0x4000890)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc, @void, @value}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0x10}}], 0x1, 0x12040, 0x0)
statx(r3, &(0x7f0000000300)='./file0\x00', 0x400, 0x10, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4)

5m40.559511483s ago: executing program 0 (id=1219):
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="52e345fa394419a856287739216e84ff4ebbce6fb7333b4eaa8fde73d8652c933b9c3f584c358f46b5cc3331f864c90aa355ac0a883cfd8cc6db453ffd4403fc8c420ddfe73011343bddd02ef41d7dad419aa61dbd3f25f1cfebfdcc4113acd76ca08108281bbd0998e84a016b3aa0a404339f32ebc1e1a826de879c3d1447c1fea438ca7bd934022d62b3add318031d5b2c0fc1af70d81e901f2339f3fc7d487309846ef29127e1c7bdf35e59e6d68fa5dc75d5d2198cea9fd9b15662921dc86dc00a456435", 0xc6}, {0x0}], 0x2}}], 0x1, 0x20000810)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0)

2m14.14770625s ago: executing program 2 (id=1290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

23.824237615s ago: executing program 1 (id=1707):
unshare(0x400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}}}, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0xffffffe1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000280)=0xc)
msgsnd(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="0300"], 0x401, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000040)={{0x2, r2, 0xee00, r2, r3, 0xc2, 0x2}, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1b, 0xfffc})
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x107382)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000003c0)={r5, 0x0, {0x0, 0x0, 0x0, 0x400003d, 0x9, 0x0, 0x0, 0x8, 0x1c, "a5bff80066ef507540a2a54fcaf1860b5a61f8e207db0000930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49227900", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "11a8f5dde4baff9dd544f59b58040051b9dd0fe9ca443e8ae600", [0xfffffffffffffffd]}})
read$FUSE(r5, &(0x7f0000002180)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000000740)={{0x1, 0x0, 0x0, r6, 0x0, 0xb8, 0x7}, 0x0, 0x0, 0xb6b, 0x3, 0x2, 0x60, 0x4, 0xfffc, 0x6, 0x6})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
tgkill(0x0, 0x0, 0x0)
unshare(0x20000600)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="ab070000000000005f65"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = epoll_create1(0x0)
fcntl$dupfd(r8, 0x2, 0xffffffffffffffff)
syz_usb_connect(0x5, 0x4ab, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0xb0, 0x46, 0xf2, 0xff, 0x1c9e, 0x9800, 0x130c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x499, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfd, 0x7, 0xe, 0xff, 0xbf, 0x1e, 0x44, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8c8f746df6b6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x2, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0x1, 0xf7, 0x100, 0x20}, @acm={0x4, 0x24, 0x2, 0x15}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x200, 0x0, 0x64, 0x7, 0xf8}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x10, 0x4feb}, @acm={0x4, 0x24, 0x2, 0xc}, @dmm={0x7, 0x24, 0x14, 0x1}]}], [{{0x9, 0x5, 0xe, 0x2, 0x40, 0x4, 0x3, 0x7, [@generic={0x62, 0x2, "f4958850026cf7ad6876069a4ca4a44b5a39634ea54f73de2d3216132fd5bffb29a808d8e4db5885ead40c207891dae901d97ded699463c84278a7022e8812799d465a46a7c8ec9746db7690a5a763036f971d65e9f9b4680635330706819113"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x3, 0x80, 0x5, [@generic={0xf1, 0xb, "5a52043e36e0478352c8457f3c9dbbdade12f5c2dcf2874976c2704c192493f52c6d0b83a5d3a7a3d5bb5d666f9d2c2459a0d917631fb6daf7465a88795bdef78366725270c5e76bbccd5f360cca2d9cebc68280d8251effec1f3ab96516d0288d0448bc841c0268e207a051680cbc0db16f0c891c65da39b553a3189e81d193fd5a8d323a931aff7336831ab36971a0a88b2fd4ea64cccc55e519f59c6afe7383e33247ed8e6b474b04bd305d22dc80b5298e006d73defd47c2683f14225499816831f44b23e557b5d4845be02fe006b6380084391e5ef214bec8ce8c69e5780a567c27963893c0e18a064053bd69"}]}}, {{0x9, 0x5, 0x8, 0x1c, 0x10, 0x1, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x6, 0x6, [@generic={0x18, 0x2, "0699101a30dc0740fa7a2037ca9b81b98cc06ce78b2d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xdc, 0x1, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x8, 0x6}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x2, 0x8, 0x2, [@generic={0xaf, 0x23, "6564f0045bc0dbf9b034f8f2cc9fd343a25c6d67e8fb6dc2b20542ea78559bc5cc6086a1e057354c84f473e5fe59b2e722c1d45075b73108232fadedaf24f93fb8621428c5cc341d5aca5b54c94fa6efb6490269fbc6429bf989b8bc93c4afab6c231ea5bcc28d80ed4a3671cd2879c97809749578070f47a1b5e5d35e4b2baa24e78641a6ce709b8a248d61953fa2d01cdbc99ef13a9515bb65775c2beb579c64bf6f170a561a46c219c53927"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x7, 0x5, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x4, 0xa}}, {{0x9, 0x5, 0x2, 0x0, 0x440, 0x7, 0x2, 0xff}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0x91, 0x7, [@generic={0xa3, 0xc, "58adff7e2739501750a1b7eac0109aabace7a724467c7b6c2af9f62b9a910b7213ac3841f95544f5b1e296595725dd4d4ed4eaa3767ebe474825ef04315160ea73f274ef271ed9c718b1bac6f455202dd65c2f8708a857c6488d242feb5ec7a0d108a2b4b721af01b4f16e46afc2f7c647a3c1ff16198fb061fcaa96a8719ad895e6435b3b46d056f6321a7e713101052198fc9cde49362dbd74f260325d93cdf8"}, @generic={0xb, 0x7, "cde77a1cfc614db0c9"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x9, 0xce, [@generic={0x5e, 0x21, "6e790bc5a6fe76c5a4e8338c1e0c990e75b3d00789c6638550dd8591f92fcb22366ee331e5f5bcfa9fdc5f9a675fba22aaf6ce54648bd19ce04349b25b3f0233014b4994848993543d071a4f901fb33e2e716ce46f803656d8d2994d"}, @generic={0x5b, 0x22, "605ba787e176f6129f282b90184d881a3abc5b3c3392730683159b45d777d9c52b4d4a44504f0049b7f39b0a33c4f0ae5e7745a19d4bea633c6f288c70cfbb3839062560306647d008e2d41cbfc01b28e929ace25b7b8493b0"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xa7, 0x5, 0x0, [@generic={0x27, 0x24, "16c8d7eb5fceba0c5dc40725bf0593a32077a5ad1b49bec5461396bb8fd3f3205f9fba78c5"}]}}, {{0x9, 0x5, 0x10, 0x10, 0x200, 0x7, 0x3, 0xb}}]}}]}}]}}, 0x0)

18.805665789s ago: executing program 1 (id=1713):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/73, 0x49)
syz_open_dev$MSR(&(0x7f0000000080), 0x7ff, 0x0)
socket$inet6(0xa, 0x800, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030ec0a4"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x7c, &(0x7f0000000680)=ANY=[], 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x4000000)
socket$packet(0x11, 0x4000000000002, 0x300)
sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34343459}})
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9a4a, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7fff, 0x4, {0x1, @raw_data="e675d8b1efc7679c5e785c036288673871066a8f41b3eb556f3755ef4204bbaa996e61205fd38d93f86cd841252e67dc6e6b9b713a22cea1fc1edac8484818349fc400c156f5ecfdf0a8d4117f5b21dc94cbb06b9595ee9749a14f647243d7c1072f10f50442bef21a67d8b8cb587eb2bffde63beba2dc478e9d68ffc40019f5ae42349ae6dd4524060f5b7cb0d435d45c1a3d9965706a507cd9fe631a6f1a7bfd9c8cf4676347298c27579902fcf788bfcd806d7891482152aa6ad76d8ef3ae5e2a7ec629a34099"}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfe}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x44)
socket$inet6(0xa, 0x3, 0x87)

15.588524275s ago: executing program 1 (id=1723):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000df6000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d281", 0x2}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x18}}], 0x2, 0x4404c000)
r5 = socket(0x2b, 0x1, 0x0)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000080))
listen(r5, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, &(0x7f0000000000)=""/73, 0x49)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

14.853536216s ago: executing program 3 (id=1725):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x90ff, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

13.865032175s ago: executing program 2 (id=1540):
socket$packet(0x11, 0x2, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b00010062726964676500"], 0x6c}}, 0x0)

13.395682675s ago: executing program 3 (id=1727):
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="52e345fa394419a856287739216e84ff4ebbce6fb7333b4eaa8fde73d8652c933b9c3f584c358f46b5cc3331f864c90aa355ac0a883cfd8cc6db453ffd4403fc8c420ddfe73011343bddd02ef41d7dad419aa61dbd3f25f1cfebfdcc4113acd76ca08108281bbd0998e84a016b3aa0a404339f32ebc1e1a826de879c3d1447c1fea438ca7bd934022d62b3add318031d5b2c0fc1af70d81e901f2339f3fc7d487309846ef29127e1c7bdf35e59e6d68fa5dc75d5d2198cea9fd9b15662921dc86dc00a456435", 0xc6}, {0x0}], 0x2}}], 0x1, 0x20000810)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r0, 0x0, 0x0)

10.336060553s ago: executing program 3 (id=1729):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/249, 0x0, 0xf9, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x92625986ec4e61b2})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r3, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x2, 0x10, 0x100, 0x2, 0x3e, 0x1ff, 0x3a, 0x40, 0x27, 0x400, 0x5, 0x38, 0x2, 0x8, 0x2fc1, 0xf7}, [{0x1, 0x9, 0x4, 0xe40, 0x3, 0x3, 0x5a, 0x2}]}, 0x78)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc)
sendto$inet6(r3, &(0x7f0000000240)="1a", 0x19ff4, 0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0408040e"], 0x7)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x7d3, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x140e, 0x1, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x30}, 0x2844)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x925c, 0x401, 0x6, 0x40, r0, 0x6fbe, '\x00', 0x0, r5, 0x4, 0x0, 0x4, 0x2000000f, @void, @value, @void, @value}, 0x50)

9.054558772s ago: executing program 4 (id=1731):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(0x0, r0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0])
getgroups(0x3, &(0x7f0000005080)=[0xee00, 0xffffffffffffffff, <r6=>0xee00])
syz_clone3(&(0x7f0000005280)={0x30010000, &(0x7f0000005100), &(0x7f0000005140)=<r7=>0x0, &(0x7f0000005180), {0x2a}, &(0x7f00000051c0)=""/47, 0x2f, &(0x7f0000005200)=""/63, &(0x7f0000005240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000080}}, {{&(0x7f0000004a80)=@abs={0x3, 0x0, 0x4e20}, 0x6e, &(0x7f0000004d80), 0x0, &(0x7f0000004e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0xa0, 0xc0}}, {{&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8, 0x8000}}], 0x3, 0x80c0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000056c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb0ff}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

8.750991655s ago: executing program 4 (id=1732):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r4, 0x0, 0x100000000, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='(x\x00', @ANYRES16=r10, @ANYBLOB="070000000000000000000200000014000180050002001000000008000300ac1414aa"], 0x28}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

8.681704514s ago: executing program 1 (id=1733):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000", 0x1c}], 0x1)

7.99092897s ago: executing program 3 (id=1734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r2, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
recvmmsg(r3, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10162, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000ff0f00005b0000000400000080000000", @ANYRES32, @ANYBLOB="5d071a7a30e0c4c3ee0112000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000005000000040000000c00"/27], 0x48)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000023c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x6c4f78fe3b84ce2a, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x34, 0x6, "ce4c73181559e30a1d9dc83f3e49685bcfab9c55bee499bbf13b0e4f0f5852e63d557e124e9da60b47f042af85279cbd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}, 0x1, 0x0, 0x0, 0x400c044}, 0x20000094)
socket$packet(0x11, 0xa, 0x300)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x23ff, r1, &(0x7f0000002540)="ddf087e7cace6b1bc9c345434488fbf0dc13a2cbd1e4d809d91891ada657879b90bf445ec9da578f9331813a68bd3ea9e96af56fdfdfc02e0cadcfec6a3840e36b105d2fbbccff6840a116040c010310301872de2c43539f83399990ab876de831d1061f263e657b6b99d4056e9552791370caa48c21b9927e0ac8810500000045e2aa2b83e7192eca0377c4c1491042f9e0fe96cf26468d967d8257a2a9192116692180cef32c33c98bc60c31a7aa10d360600ef99c7010168352c6e26625230d7f0d2495c44a568287cb981009610008d4c919c321cf793836292bfcf3325a8672282bf7d8d71022afebe47bd10855e85035358cd1089af9", 0xf9, 0x0, 0x0, 0x118286e623c4f7ff}, &(0x7f0000002500))
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0)
timerfd_create(0x3, 0x80800)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

6.874109828s ago: executing program 4 (id=1735):
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa2e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x3, 0x2, 0x0, 0x8, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xe1, &(0x7f00000005c0)=""/225, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x3, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x2, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "41331062655e414d4b58352b76fced1a601975ad12e2bc2063754491ca9f8f0d9573ce08eb44a06351a623b4848d965c34211640dd8a6dad4380ad6f25791e407facd9c871dd169eda3a6a8e3d22216962d03ac0080d29e2978e011211961429178de7def02450"}, 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000780)='balance_dirty_pages\x00', r1, 0x0, 0x7}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000580)=ANY=[@ANYRES16])
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'hsr0\x00'}, 0x18)

4.598900792s ago: executing program 1 (id=1736):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r6, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000740)=0xa0000)
r8 = dup(r7)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7cb, &(0x7f0000000100)={&(0x7f0000001100)={{@local}, {@hyper}, 0x400, "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"}, 0x418})
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

4.49392165s ago: executing program 2 (id=1737):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x2800021, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080))
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0xffff, 0x0, {0x2, 0x85}, {0x20, 0x2}, @cond=[{0x1, 0x1}, {0x200, 0x34, 0x0, 0x5cba}]})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, &(0x7f0000000140))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
dup(r6)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2778)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000900))
sched_setscheduler(0xffffffffffffffff, 0x3, 0x0)
lseek(r7, 0x0, 0x4)

4.381130851s ago: executing program 3 (id=1738):
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1)
sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="52e345fa394419a856287739216e84ff4ebbce6fb7333b4eaa8fde73d8652c933b9c3f584c358f46b5cc3331f864c90aa355ac0a883cfd8cc6db453ffd4403fc8c420ddfe73011343bddd02ef41d7dad419aa61dbd3f25f1cfebfdcc4113acd76ca08108281bbd0998e84a016b3aa0a404339f32ebc1e1a826de879c3d1447c1fea438ca7bd934022d62b3add318031d5b2c0fc1af70d81e901f2339f3fc7d487309846ef29127e1c7bdf35e59e6d68fa5dc75d5d2198cea9fd9b15662921dc86dc00a456435", 0xc6}, {0x0}], 0x2}}], 0x1, 0x20000810)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r0, 0x0, 0x0)

3.19908745s ago: executing program 1 (id=1739):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000003c0)={0x2b})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292}}, 0x50)
read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, <r2=>0x0}, 0x2020)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efe0200000022d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6b70baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d646200", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r2}, 0x50)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)

2.221773403s ago: executing program 2 (id=1740):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r2, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)

1.670092251s ago: executing program 4 (id=1741):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ppoll(&(0x7f0000000380)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0)

1.074068518s ago: executing program 3 (id=1742):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000df6000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r4, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d281", 0x2}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x18}}], 0x2, 0x4404c000)
r5 = socket(0x2b, 0x1, 0x0)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000080))
listen(r5, 0x0)
accept4$nfc_llcp(r5, 0x0, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r7, &(0x7f0000000000)=""/73, 0x49)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

901.81894ms ago: executing program 2 (id=1743):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ppoll(&(0x7f0000000380)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1)

702.612915ms ago: executing program 4 (id=1744):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r1 = fanotify_init(0x10, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
getdents(r0, &(0x7f0000000380)=""/197, 0xc5) (async)
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async)
close_range(r2, r3, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) (rerun: 64)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@empty, 0x4e21, 0x0, 0x0, 0xa16b, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x1}}, 0xe8)
listen(0xffffffffffffffff, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async, rerun: 64)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYRES64=r6], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071c17500000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00430f0000000b449bab5917a0e90dbe0b0f4399cb"], 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)

137.780228ms ago: executing program 4 (id=1745):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x1)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\f'], 0xaf)

0s ago: executing program 2 (id=1746):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000", 0x1c}], 0x1)

kernel console output (not intermixed with test programs):

ce team_slave_1 added
[  907.956457][T10207] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  908.040092][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  908.054619][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  909.753625][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  909.784375][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  909.801330][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  909.836613][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  910.085731][ T7377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.678806][T10207] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  910.985854][T10207] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  911.153011][ T7377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.295622][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.312804][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.205127][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.499819][ T7377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.586307][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.628992][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.699030][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.841810][T10339] hsr_slave_0: entered promiscuous mode
[  912.886387][T10339] hsr_slave_1: entered promiscuous mode
[  912.939417][T10339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  912.947487][T10339] Cannot create hsr debugfs directory
[  913.102153][ T7377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.487378][T10395] hsr_slave_0: entered promiscuous mode
[  913.514699][T10395] hsr_slave_1: entered promiscuous mode
[  916.649374][T10395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  916.657096][T10395] Cannot create hsr debugfs directory
[  916.849044][T10581] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  918.562690][ T7377] bridge_slave_1: left allmulticast mode
[  918.568597][ T7377] bridge_slave_1: left promiscuous mode
[  918.598484][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.699253][ T7377] bridge_slave_0: left allmulticast mode
[  918.704986][ T7377] bridge_slave_0: left promiscuous mode
[  918.730531][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.584368][ T7377] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  921.693776][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.754565][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  921.787224][ T7377] bond0 (unregistering): Released all slaves
[  922.656596][ T7377] tipc: Disabling bearer <udp:syz2>
[  922.687283][ T7377] tipc: Left network mode
[  925.953553][T10690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  925.969134][T10690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  925.981208][T10690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  926.011129][T10690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  926.019879][T10690] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  926.048124][T10690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  926.096794][ T7377] hsr_slave_0: left promiscuous mode
[  926.116510][ T7377] hsr_slave_1: left promiscuous mode
[  926.166504][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  926.174412][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  926.193211][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  926.202755][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  926.410513][T10702] Bluetooth: MGMT ver 1.23
[  927.611252][ T7377] veth1_macvtap: left promiscuous mode
[  927.659334][ T7377] veth0_macvtap: left promiscuous mode
[  927.665290][ T7377] veth1_vlan: left promiscuous mode
[  927.679734][ T7377] veth0_vlan: left promiscuous mode
[  928.148957][T10690] Bluetooth: hci0: command tx timeout
[  929.308242][ T7377] team0 (unregistering): Port device team_slave_1 removed
[  929.382308][ T7377] team0 (unregistering): Port device team_slave_0 removed
[  930.233905][T10690] Bluetooth: hci0: command tx timeout
[  930.277418][T10712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'.
[  930.287099][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  930.306558][T10714] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  933.136011][T10690] Bluetooth: hci0: command tx timeout
[  933.333609][T10339] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  933.353834][T10339] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  933.393747][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1401'.
[  933.418426][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'.
[  933.649353][T10339] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  933.788621][T10339] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  933.937440][T10686] chnl_net:caif_netlink_parms(): no params data found
[  934.239100][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1404'.
[  934.248216][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'.
[  934.556526][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'.
[  934.566493][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1405'.
[  934.577590][T10762] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.585020][T10762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.593303][T10762] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.600715][T10762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.768599][T10686] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.795264][T10686] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.806955][T10686] bridge_slave_0: entered allmulticast mode
[  934.816135][T10686] bridge_slave_0: entered promiscuous mode
[  934.827305][T10686] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.836561][T10686] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.849868][T10686] bridge_slave_1: entered allmulticast mode
[  935.092418][T10686] bridge_slave_1: entered promiscuous mode
[  935.448817][T10690] Bluetooth: hci0: command tx timeout
[  935.622476][T10771] Device name cannot be null; rc = [-22]
[  936.321569][ T7377] bridge_slave_1: left allmulticast mode
[  936.327293][ T7377] bridge_slave_1: left promiscuous mode
[  936.352426][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.520328][ T7377] bridge_slave_0: left allmulticast mode
[  936.526815][ T7377] bridge_slave_0: left promiscuous mode
[  936.540241][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.197078][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  937.205829][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  938.088487][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.102757][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.115589][ T7377] bond0 (unregistering): Released all slaves
[  938.293557][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  938.342753][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.451488][ T7377] hsr_slave_0: left promiscuous mode
[  938.469426][ T7377] hsr_slave_1: left promiscuous mode
[  938.479384][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.509985][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  939.237410][ T7377] team0 (unregistering): Port device team_slave_1 removed
[  939.335993][ T7377] team0 (unregistering): Port device team_slave_0 removed
[  940.034821][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1413'.
[  940.165429][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'.
[  940.279016][T10395] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  941.008107][T10686] team0: Port device team_slave_0 added
[  941.057309][T10686] team0: Port device team_slave_1 added
[  941.127585][T10395] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  941.363209][T10395] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  941.430836][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.470106][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.498077][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.533268][T10395] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  941.556047][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.823117][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.951348][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.621904][T10339] 8021q: adding VLAN 0 to HW filter on device bond0
[  942.978197][T10686] hsr_slave_0: entered promiscuous mode
[  943.227356][T10686] hsr_slave_1: entered promiscuous mode
[  943.290358][T10686] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  943.326821][T10686] Cannot create hsr debugfs directory
[  943.348275][T10339] 8021q: adding VLAN 0 to HW filter on device team0
[  943.594148][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.601576][ T7371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.096114][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.103656][ T7373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  944.982383][T10827] Device name cannot be null; rc = [-22]
[  946.624568][T10395] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.875041][T10395] 8021q: adding VLAN 0 to HW filter on device team0
[  947.132107][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state
[  947.139794][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  947.164191][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.171999][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  947.277524][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1424'.
[  947.309847][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'.
[  950.236787][ T4608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  950.252963][ T4608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  950.262867][ T4608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  950.289314][ T4608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  950.298179][ T4608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  950.307186][ T4608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  950.626622][T10686] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  951.189516][ T5273] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  951.709500][T10877] Device name cannot be null; rc = [-22]
[  951.851672][ T5273] usb 5-1: Using ep0 maxpacket: 32
[  951.900548][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  951.974796][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  952.009319][T10686] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  952.047489][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  952.111374][T10686] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  952.149028][ T5273] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  952.202108][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.264656][ T5273] usb 5-1: config 0 descriptor??
[  952.379341][T10690] Bluetooth: hci2: command tx timeout
[  952.558855][T10686] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  952.820382][ T5273] hid (null): unknown global tag 0xe
[  952.938538][ T5273] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0010/input/input36
[  953.081470][ T5273] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0010/input/input37
[  953.300010][ T5273] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[  953.633580][ T4608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  953.652715][ T4608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  953.665096][ T4608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  953.705681][ T4608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  953.730908][ T4608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  953.747708][ T4608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  954.126489][    C1] kye 0003:0458:5011.0010: usb_submit_urb(ctrl) failed: -1
[  954.465041][T10690] Bluetooth: hci2: command tx timeout
[  954.559203][ T5273] usb 5-1: reset high-speed USB device number 21 using dummy_hcd
[  955.161448][ T7374] bridge_slave_1: left allmulticast mode
[  955.167911][ T7374] bridge_slave_1: left promiscuous mode
[  955.176017][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.194714][ T7374] bridge_slave_0: left allmulticast mode
[  955.213928][ T7374] bridge_slave_0: left promiscuous mode
[  955.220561][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.336888][T10907] mmap: syz.3.1432 (10907): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  955.496445][   T29] audit: type=1400 audit(2000000302.850:442): avc:  denied  { ioctl } for  pid=10909 comm="syz.3.1433" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  955.817391][   T29] audit: type=1400 audit(2000000303.120:443): avc:  denied  { create } for  pid=10913 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  955.840243][T10690] Bluetooth: hci4: command tx timeout
[  956.024070][   T29] audit: type=1400 audit(2000000303.130:444): avc:  denied  { write } for  pid=10913 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  956.538887][T10690] Bluetooth: hci2: command tx timeout
[  956.609562][ T5598] usb 5-1: USB disconnect, device number 21
[  957.899549][T10690] Bluetooth: hci4: command tx timeout
[  958.619096][T10690] Bluetooth: hci2: command tx timeout
[  960.111629][T10690] Bluetooth: hci4: command tx timeout
[  961.012421][T10931] Device name cannot be null; rc = [-22]
[  961.181438][ T7374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  961.227485][ T7374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  961.251919][ T7374] bond0 (unregistering): Released all slaves
[  961.632739][ T7374] hsr_slave_0: left promiscuous mode
[  961.669793][ T7374] hsr_slave_1: left promiscuous mode
[  961.691920][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  961.707756][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  961.731447][   T29] audit: type=1400 audit(2000000309.110:445): avc:  denied  { setopt } for  pid=10933 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  961.772432][   T29] audit: type=1400 audit(2000000309.130:446): avc:  denied  { accept } for  pid=10933 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  962.145430][T10690] Bluetooth: hci4: command tx timeout
[  962.857458][ T7374] team0 (unregistering): Port device team_slave_1 removed
[  962.983891][ T7374] team0 (unregistering): Port device team_slave_0 removed
[  964.763004][T10686] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.769497][ T5297] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  964.929491][T10864] chnl_net:caif_netlink_parms(): no params data found
[  965.016691][ T5297] usb 4-1: Using ep0 maxpacket: 32
[  965.054049][ T5297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.098123][ T5297] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  965.123170][ T5297] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  965.141496][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  965.161121][ T5297] usb 4-1: Product: syz
[  965.165379][ T5297] usb 4-1: Manufacturer: syz
[  965.170300][ T5297] usb 4-1: SerialNumber: syz
[  965.192182][ T5297] usb 4-1: config 0 descriptor??
[  965.321576][T10686] 8021q: adding VLAN 0 to HW filter on device team0
[  965.686289][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.693622][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  965.708032][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  965.715393][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  966.379697][T10897] chnl_net:caif_netlink_parms(): no params data found
[  966.457384][ T4863] usb 4-1: USB disconnect, device number 24
[  966.469985][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.521884][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.587350][T10864] bridge_slave_0: entered allmulticast mode
[  966.621909][T10864] bridge_slave_0: entered promiscuous mode
[  967.178008][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.197824][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.219308][T10864] bridge_slave_1: entered allmulticast mode
[  967.247403][T10864] bridge_slave_1: entered promiscuous mode
[  967.422842][T10984] Device name cannot be null; rc = [-22]
[  968.407977][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.429980][ T5297] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  968.661294][ T5297] usb 4-1: Using ep0 maxpacket: 8
[  968.689712][ T5297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  968.723156][ T5297] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  968.758992][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.821294][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.891988][ T5297] usb 4-1: config 0 descriptor??
[  969.011427][T10897] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.032339][T10897] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.039976][T10897] bridge_slave_0: entered allmulticast mode
[  969.048839][T10897] bridge_slave_0: entered promiscuous mode
[  969.124217][ T5297] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  969.252854][T10864] team0: Port device team_slave_0 added
[  969.261846][T10897] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.273606][T10897] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.284241][T10897] bridge_slave_1: entered allmulticast mode
[  969.296655][T10897] bridge_slave_1: entered promiscuous mode
[  969.316089][   T29] audit: type=1400 audit(2000000316.690:447): avc:  denied  { create } for  pid=10998 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  969.410999][T10994] FAULT_INJECTION: forcing a failure.
[  969.410999][T10994] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  969.426140][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.3.1450 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[  969.437162][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  969.447620][T10994] Call Trace:
[  969.450933][T10994]  <TASK>
[  969.454865][T10994]  dump_stack_lvl+0x16c/0x1f0
[  969.459775][T10994]  should_fail_ex+0x497/0x5b0
[  969.464777][T10994]  _copy_to_user+0x30/0xc0
[  969.469350][T10994]  iowarrior_read+0x281/0xaa0
[  969.474607][T10994]  ? __pfx_iowarrior_read+0x10/0x10
[  969.480089][T10994]  ? avc_policy_seqno+0x9/0x20
[  969.485011][T10994]  ? __pfx_autoremove_wake_function+0x10/0x10
[  969.491341][T10994]  ? bpf_lsm_file_permission+0x9/0x10
[  969.497768][T10994]  ? security_file_permission+0x71/0x210
[  969.503659][T10994]  ? __pfx_iowarrior_read+0x10/0x10
[  969.509332][T10994]  vfs_read+0x1ce/0xbd0
[  969.514090][T10994]  ? __pfx_vfs_read+0x10/0x10
[  969.518994][T10994]  ? __fget_files+0x244/0x3f0
[  969.524529][T10994]  ? __fget_light+0x173/0x210
[  969.529637][T10994]  ksys_read+0x12f/0x260
[  969.534107][T10994]  ? __pfx_ksys_read+0x10/0x10
[  969.539227][T10994]  do_syscall_64+0xcd/0x250
[  969.544599][T10994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.550664][T10994] RIP: 0033:0x7f45fcf7def9
[  969.555397][T10994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  969.577255][T10994] RSP: 002b:00007f45fcdf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  969.586071][T10994] RAX: ffffffffffffffda RBX: 00007f45fd135f80 RCX: 00007f45fcf7def9
[  969.594452][T10994] RDX: 0000000000000049 RSI: 0000000020000000 RDI: 0000000000000004
[  969.602496][T10994] RBP: 00007f45fcdf9090 R08: 0000000000000000 R09: 0000000000000000
[  969.611121][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  969.619114][T10994] R13: 0000000000000000 R14: 00007f45fd135f80 R15: 00007ffda92df1f8
[  969.627588][T10994]  </TASK>
[  969.661643][ T5598] usb 4-1: USB disconnect, device number 25
[  969.666375][T10864] team0: Port device team_slave_1 added
[  969.673372][ T5598] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[  969.878159][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  969.906636][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  969.924767][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  969.954267][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  969.994219][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  970.127025][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  970.134601][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  970.162097][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  970.244240][T10897] team0: Port device team_slave_0 added
[  970.270373][T10897] team0: Port device team_slave_1 added
[  970.486672][   T29] audit: type=1400 audit(2000000317.850:448): avc:  denied  { create } for  pid=11016 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  970.562977][   T29] audit: type=1400 audit(2000000317.890:449): avc:  denied  { setopt } for  pid=11016 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  971.068879][T11025] FAULT_INJECTION: forcing a failure.
[  971.068879][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.082363][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.3.1453 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[  971.092853][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  971.103066][T11025] Call Trace:
[  971.106384][T11025]  <TASK>
[  971.109349][T11025]  dump_stack_lvl+0x16c/0x1f0
[  971.114431][T11025]  should_fail_ex+0x497/0x5b0
[  971.119185][T11025]  _copy_from_user+0x30/0xf0
[  971.123966][T11025]  copy_msghdr_from_user+0x99/0x160
[  971.129258][T11025]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  971.135509][T11025]  ? __pfx___lock_acquire+0x10/0x10
[  971.140812][T11025]  ___sys_sendmsg+0xff/0x1e0
[  971.145483][T11025]  ? __pfx____sys_sendmsg+0x10/0x10
[  971.150841][T11025]  ? find_held_lock+0x2d/0x110
[  971.155684][T11025]  ? ksys_write+0x21c/0x260
[  971.160265][T11025]  ? __fget_light+0x173/0x210
[  971.165007][T11025]  __sys_sendmsg+0x117/0x1f0
[  971.169681][T11025]  ? __pfx___sys_sendmsg+0x10/0x10
[  971.174900][T11025]  do_syscall_64+0xcd/0x250
[  971.179460][T11025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.185422][T11025] RIP: 0033:0x7f45fcf7def9
[  971.189898][T11025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  971.209918][T11025] RSP: 002b:00007f45fcdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  971.218499][T11025] RAX: ffffffffffffffda RBX: 00007f45fd136130 RCX: 00007f45fcf7def9
[  971.226519][T11025] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000005
[  971.234537][T11025] RBP: 00007f45fcdb7090 R08: 0000000000000000 R09: 0000000000000000
[  971.243086][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.251187][T11025] R13: 0000000000000000 R14: 00007f45fd136130 R15: 00007ffda92df1f8
[  971.259238][T11025]  </TASK>
[  971.670912][   T29] audit: type=1400 audit(2000000319.020:450): avc:  denied  { bind } for  pid=11027 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  971.693688][T10864] hsr_slave_0: entered promiscuous mode
[  971.740823][T10864] hsr_slave_1: entered promiscuous mode
[  971.765829][   T29] audit: type=1400 audit(2000000319.030:451): avc:  denied  { setopt } for  pid=11027 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  971.816479][T10864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  971.849352][T10864] Cannot create hsr debugfs directory
[  972.038518][   T29] audit: type=1400 audit(2000000319.410:452): avc:  denied  { connect } for  pid=11027 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  972.049200][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.091136][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  972.378478][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.628977][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  973.635994][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  973.681283][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  974.385634][ T7374] bridge_slave_1: left allmulticast mode
[  974.392894][ T7374] bridge_slave_1: left promiscuous mode
[  974.424277][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.719472][T11051] Device name cannot be null; rc = [-22]
[  978.252840][ T7374] bridge_slave_0: left allmulticast mode
[  978.312717][ T7374] bridge_slave_0: left promiscuous mode
[  978.389474][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.834000][ T5598] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  979.039449][ T5598] usb 4-1: Using ep0 maxpacket: 32
[  979.047665][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  979.059138][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  979.070486][ T5598] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  979.088018][ T5598] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  979.098022][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.119795][ T5598] usb 4-1: config 0 descriptor??
[  979.338651][ T7374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  979.367145][ T7374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.383742][ T7374] bond0 (unregistering): Released all slaves
[  979.616607][T10897] hsr_slave_0: entered promiscuous mode
[  979.633681][T10897] hsr_slave_1: entered promiscuous mode
[  979.652892][ T5598] hid (null): unknown global tag 0xe
[  979.678478][T10897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  979.684971][ T5598] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0011/input/input38
[  979.715103][T10897] Cannot create hsr debugfs directory
[  979.794959][ T7374] hsr_slave_0: left promiscuous mode
[  979.816380][ T7374] hsr_slave_1: left promiscuous mode
[  979.837813][ T5598] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0011/input/input39
[  979.872545][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.929982][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.983383][ T5598] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  980.804001][    C1] kye 0003:0458:5011.0011: usb_submit_urb(ctrl) failed: -1
[  981.994252][ T7374] team0 (unregistering): Port device team_slave_1 removed
[  982.073204][T11082] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  982.116855][ T7374] team0 (unregistering): Port device team_slave_0 removed
[  982.313802][ T5598] usb 4-1: USB disconnect, device number 26
[  983.103938][ T4608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  983.128643][ T4608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  983.163470][ T4608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  983.174796][ T4608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  983.197620][ T4608] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  983.206016][ T4608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  985.259228][T10690] Bluetooth: hci6: command tx timeout
[  985.890813][ T5598] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  985.996773][T11084] chnl_net:caif_netlink_parms(): no params data found
[  986.083310][ T5598] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  986.099645][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.124208][ T5598] usb 5-1: config 0 descriptor??
[  986.362572][   T29] audit: type=1400 audit(2000000333.740:453): avc:  denied  { ioctl } for  pid=11118 comm="syz.4.1470" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42986 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  986.526669][ T5598] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  986.549969][ T5598] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  986.571915][ T5598] [drm:udl_init] *ERROR* Selecting channel failed
[  986.685531][ T5598] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  986.708935][ T5598] [drm] Initialized udl on minor 2
[  986.739158][ T5598] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  986.776066][ T5598] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  986.789314][ T5297] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  986.806311][ T5297] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  986.813676][ T5598] usb 5-1: USB disconnect, device number 22
[  986.993314][T11084] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.021290][T11084] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.028578][T11084] bridge_slave_0: entered allmulticast mode
[  987.046246][T11084] bridge_slave_0: entered promiscuous mode
[  987.079503][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.097390][T11084] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.129078][T11084] bridge_slave_1: entered allmulticast mode
[  987.137712][T11084] bridge_slave_1: entered promiscuous mode
[  987.339304][T10690] Bluetooth: hci6: command tx timeout
[  987.399551][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'.
[  987.419468][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1473'.
[  987.496101][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  987.579478][ T5297] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  987.625953][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  987.788929][ T5297] usb 5-1: Using ep0 maxpacket: 8
[  987.797716][ T5297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  987.814164][ T5297] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  987.824723][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.865133][ T5297] usb 5-1: config 0 descriptor??
[  987.900382][ T7374] bridge_slave_1: left allmulticast mode
[  987.906745][ T7374] bridge_slave_1: left promiscuous mode
[  987.927715][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.008423][ T7374] bridge_slave_0: left allmulticast mode
[  988.018442][ T7374] bridge_slave_0: left promiscuous mode
[  988.025866][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.208904][   T29] audit: type=1400 audit(2000000335.580:454): avc:  denied  { setattr } for  pid=11148 comm="syz.4.1474" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  988.328988][   T29] audit: type=1400 audit(2000000335.700:455): avc:  denied  { read } for  pid=11148 comm="syz.4.1474" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  988.369239][   T29] audit: type=1400 audit(2000000335.700:456): avc:  denied  { open } for  pid=11148 comm="syz.4.1474" path="/346/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  988.405462][ T5297] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  988.537963][   T29] audit: type=1800 audit(2000000335.910:457): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1474" name="/" dev="9p" ino=2 res=0 errno=0
[  989.221182][ T7374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.235956][ T7374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.253652][ T7374] bond0 (unregistering): Released all slaves
[  989.276055][T10897] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  989.290973][T10897] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  989.336673][T11084] team0: Port device team_slave_0 added
[  989.369130][T11084] team0: Port device team_slave_1 added
[  989.419094][T10690] Bluetooth: hci6: command tx timeout
[  989.463527][T10897] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  989.490464][T10897] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  989.548793][ T7374] hsr_slave_0: left promiscuous mode
[  989.558444][ T7374] hsr_slave_1: left promiscuous mode
[  989.576070][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  989.882001][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  990.485568][   T29] audit: type=1400 audit(2000000337.860:458): avc:  denied  { unmount } for  pid=6180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  990.499302][ T5297] usb 5-1: USB disconnect, device number 23
[  990.551961][ T5297] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  991.397499][ T7374] team0 (unregistering): Port device team_slave_1 removed
[  991.522429][T10690] Bluetooth: hci6: command tx timeout
[  991.522737][ T7374] team0 (unregistering): Port device team_slave_0 removed
[  992.727277][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.742960][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  993.020646][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  994.273226][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  994.336184][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  994.391246][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  995.997212][T11084] hsr_slave_0: entered promiscuous mode
[  996.021363][T11084] hsr_slave_1: entered promiscuous mode
[  996.036870][T11084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  996.058977][T11084] Cannot create hsr debugfs directory
[  996.090341][T10864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  996.186593][T10864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  996.295063][T10864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  996.324874][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  996.392883][T10864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  996.512726][    T9] usb 5-1: Using ep0 maxpacket: 8
[  996.533873][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  996.552861][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  996.562886][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.599332][    T9] usb 5-1: config 0 descriptor??
[  996.841512][    T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  997.121662][T10897] 8021q: adding VLAN 0 to HW filter on device bond0
[  997.157644][T10897] 8021q: adding VLAN 0 to HW filter on device team0
[  997.294910][ T5598] usb 5-1: USB disconnect, device number 24
[  997.331101][ T5598] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  997.357206][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.364531][ T7377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  997.541371][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.548666][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  998.260405][T10864] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.626903][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  998.633950][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  999.693830][T11084] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  999.760594][T10864] 8021q: adding VLAN 0 to HW filter on device team0
[  999.921857][T11084] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1000.154609][T11084] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1000.486772][T11084] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1000.660973][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.668515][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1000.861423][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.869152][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.305104][T10897] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1001.984470][T10897] veth0_vlan: entered promiscuous mode
[ 1002.062453][ T5598] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1002.073728][T10897] veth1_vlan: entered promiscuous mode
[ 1002.222911][T11084] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1002.258816][ T5598] usb 4-1: Using ep0 maxpacket: 8
[ 1002.271933][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1002.286471][ T5598] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1002.296651][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.338257][ T5598] usb 4-1: config 0 descriptor??
[ 1002.357562][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'.
[ 1002.378389][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1494'.
[ 1002.455233][T11084] 8021q: adding VLAN 0 to HW filter on device team0
[ 1002.597580][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1002.631906][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.639355][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1002.642519][ T5598] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1002.762250][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.769793][ T7383] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1002.814161][T10897] veth0_macvtap: entered promiscuous mode
[ 1003.259905][   T29] audit: type=1400 audit(2000000350.600:459): avc:  denied  { create } for  pid=11276 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1003.967280][   T29] audit: type=1400 audit(2000000350.620:460): avc:  denied  { listen } for  pid=11276 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1003.991561][   T29] audit: type=1400 audit(2000000350.620:461): avc:  denied  { setopt } for  pid=11276 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1003.997419][T10897] veth1_macvtap: entered promiscuous mode
[ 1004.059345][   T29] audit: type=1400 audit(2000000350.630:462): avc:  denied  { accept } for  pid=11276 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1004.539872][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.559241][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.579692][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.627473][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.733148][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.753750][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.895202][T10897] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1005.034294][ T4863] usb 4-1: USB disconnect, device number 27
[ 1005.300222][ T4863] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[ 1005.350578][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.439139][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.514505][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.534657][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.545772][T10897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.567894][T10897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.582291][T10897] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.607788][T10864] veth0_vlan: entered promiscuous mode
[ 1005.715304][T10897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.759089][T10897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.768229][T10897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.809013][T10897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.863561][T10864] veth1_vlan: entered promiscuous mode
[ 1005.939526][T11319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'.
[ 1005.953736][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'.
[ 1006.174947][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1007.071298][T10864] veth0_macvtap: entered promiscuous mode
[ 1007.124727][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'.
[ 1007.230956][ T7385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.285158][ T7385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.372432][T10864] veth1_macvtap: entered promiscuous mode
[ 1007.587423][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.632351][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.647109][T11084] veth0_vlan: entered promiscuous mode
[ 1007.675443][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'.
[ 1007.700623][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1502'.
[ 1007.812810][T11084] veth1_vlan: entered promiscuous mode
[ 1008.183007][T11084] veth0_macvtap: entered promiscuous mode
[ 1008.268279][T11084] veth1_macvtap: entered promiscuous mode
[ 1008.436647][T11351] FAULT_INJECTION: forcing a failure.
[ 1008.436647][T11351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1008.796124][T11351] CPU: 1 UID: 0 PID: 11351 Comm: syz.4.1504 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1008.806633][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1008.816919][T11351] Call Trace:
[ 1008.820241][T11351]  <TASK>
[ 1008.823225][T11351]  dump_stack_lvl+0x16c/0x1f0
[ 1008.827971][T11351]  should_fail_ex+0x497/0x5b0
[ 1008.832735][T11351]  _copy_from_iter+0x2a1/0x1550
[ 1008.837676][T11351]  ? __alloc_skb+0x1fe/0x380
[ 1008.842339][T11351]  ? __pfx__copy_from_iter+0x10/0x10
[ 1008.847795][T11351]  ? __virt_addr_valid+0x5e/0x590
[ 1008.852891][T11351]  ? __phys_addr_symbol+0x30/0x80
[ 1008.857993][T11351]  ? __check_object_size+0x497/0x720
[ 1008.863320][T11351]  netlink_sendmsg+0x813/0xd70
[ 1008.868416][T11351]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1008.873726][T11351]  ? __import_iovec+0x1fd/0x6e0
[ 1008.878658][T11351]  ____sys_sendmsg+0xaaf/0xc90
[ 1008.883484][T11351]  ? copy_msghdr_from_user+0x10b/0x160
[ 1008.889097][T11351]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1008.894464][T11351]  ? __pfx___lock_acquire+0x10/0x10
[ 1008.900072][T11351]  ___sys_sendmsg+0x135/0x1e0
[ 1008.905103][T11351]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1008.910436][T11351]  ? find_held_lock+0x2d/0x110
[ 1008.915370][T11351]  ? ksys_write+0x21c/0x260
[ 1008.919941][T11351]  ? __fget_light+0x173/0x210
[ 1008.924654][T11351]  __sys_sendmsg+0x117/0x1f0
[ 1008.929284][T11351]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1008.934454][T11351]  do_syscall_64+0xcd/0x250
[ 1008.939014][T11351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.944987][T11351] RIP: 0033:0x7f222ed7def9
[ 1008.949730][T11351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1008.969403][T11351] RSP: 002b:00007f222fa8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1008.977878][T11351] RAX: ffffffffffffffda RBX: 00007f222ef36058 RCX: 00007f222ed7def9
[ 1008.985912][T11351] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[ 1008.994116][T11351] RBP: 00007f222fa8e090 R08: 0000000000000000 R09: 0000000000000000
[ 1009.002237][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1009.010260][T11351] R13: 0000000000000001 R14: 00007f222ef36058 R15: 00007ffcc4812ae8
[ 1009.018373][T11351]  </TASK>
[ 1009.896907][T11345] dccp_close: ABORT with 196 bytes unread
[ 1009.951298][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1010.020131][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.058840][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1010.109058][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.148791][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1010.196707][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.248218][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1010.297883][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.324844][T11084] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1010.367228][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1010.401083][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1010.436668][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1010.464387][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1010.473897][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1010.481755][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1010.643575][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'.
[ 1010.692738][T11369] Bluetooth: hci3: invalid len left 7, exp >= 119
[ 1010.713511][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[ 1010.824340][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1010.847919][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.864209][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1010.894014][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.912950][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1010.932742][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1010.948322][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1010.967222][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1011.011121][T11084] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1011.099820][ T5598] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1011.450752][T11383] FAULT_INJECTION: forcing a failure.
[ 1011.450752][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1011.455382][T11084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.526171][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.4.1511 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1011.528065][T11084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.537627][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1011.537652][T11383] Call Trace:
[ 1011.537665][T11383]  <TASK>
[ 1011.537679][T11383]  dump_stack_lvl+0x16c/0x1f0
[ 1011.537724][T11383]  should_fail_ex+0x497/0x5b0
[ 1011.537775][T11383]  _copy_from_user+0x30/0xf0
[ 1011.537829][T11383]  copy_msghdr_from_user+0x99/0x160
[ 1011.537881][T11383]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1011.537939][T11383]  ? __lock_acquire+0x1620/0x3cb0
[ 1011.538011][T11383]  ___sys_sendmsg+0xff/0x1e0
[ 1011.538064][T11383]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1011.538113][T11383]  ? find_held_lock+0x2d/0x110
[ 1011.538194][T11383]  ? __pfx___might_resched+0x10/0x10
[ 1011.538231][T11383]  ? __might_fault+0xe3/0x190
[ 1011.538285][T11383]  __sys_sendmmsg+0x1a1/0x450
[ 1011.538340][T11383]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1011.538389][T11383]  ? vfs_write+0x14d/0x1140
[ 1011.538447][T11383]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1011.538505][T11383]  ? fput+0x30/0x390
[ 1011.538553][T11383]  ? ksys_write+0x1ab/0x260
[ 1011.538593][T11383]  ? __pfx_ksys_write+0x10/0x10
[ 1011.538641][T11383]  __x64_sys_sendmmsg+0x9c/0x100
[ 1011.538692][T11383]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1011.538747][T11383]  do_syscall_64+0xcd/0x250
[ 1011.538787][T11383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.538841][T11383] RIP: 0033:0x7f222ed7def9
[ 1011.538870][T11383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1011.538904][T11383] RSP: 002b:00007f222faaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1011.538938][T11383] RAX: ffffffffffffffda RBX: 00007f222ef35f80 RCX: 00007f222ed7def9
[ 1011.538969][T11383] RDX: 0400000000000026 RSI: 0000000020001cc0 RDI: 0000000000000004
[ 1011.538993][T11383] RBP: 00007f222faaf090 R08: 0000000000000000 R09: 0000000000000000
[ 1011.539016][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1011.539038][T11383] R13: 0000000000000000 R14: 00007f222ef35f80 R15: 00007ffcc4812ae8
[ 1011.539084][T11383]  </TASK>
[ 1011.775335][T11084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.785072][T11084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.152923][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'.
[ 1012.167542][T11387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1512'.
[ 1012.632265][T10690] Bluetooth: hci0: command tx timeout
[ 1013.829252][T11400] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1516'.
[ 1014.709222][T10690] Bluetooth: hci0: command tx timeout
[ 1015.502655][   T29] audit: type=1326 audit(2000000362.880:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.1.1518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd402d7def9 code=0x0
[ 1015.572130][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'.
[ 1015.585049][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'.
[ 1015.739116][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1015.792586][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1016.518529][   T29] audit: type=1400 audit(2000000363.790:464): avc:  denied  { write } for  pid=11417 comm="syz.4.1520" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1016.717343][ T7377] bridge_slave_1: left allmulticast mode
[ 1016.731615][ T7377] bridge_slave_1: left promiscuous mode
[ 1016.737653][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.832487][ T7377] bridge_slave_0: left allmulticast mode
[ 1016.842429][ T7377] bridge_slave_0: left promiscuous mode
[ 1016.848455][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.940781][T10690] Bluetooth: hci0: command tx timeout
[ 1017.168852][ T5272] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1017.354300][T10172] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[ 1017.398790][ T5272] usb 4-1: Using ep0 maxpacket: 32
[ 1017.407371][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1017.434981][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1017.450913][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1017.478383][ T5272] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1017.508205][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.548175][ T5272] usb 4-1: config 0 descriptor??
[ 1017.559545][T10172] usb 5-1: device descriptor read/64, error -71
[ 1017.832484][T10172] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[ 1018.010414][T10172] usb 5-1: device descriptor read/64, error -71
[ 1018.072097][ T5272] hid (null): unknown global tag 0xe
[ 1018.078552][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1018.119215][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1018.139920][T10172] usb usb5-port1: attempt power cycle
[ 1018.141327][ T5272] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0012/input/input40
[ 1018.164852][ T7377] bond0 (unregistering): Released all slaves
[ 1018.282600][   T29] audit: type=1400 audit(2000000365.660:465): avc:  denied  { connect } for  pid=11419 comm="syz.3.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1018.356774][ T5272] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0012/input/input41
[ 1018.598991][T10172] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[ 1018.666518][ T5272] kye 0003:0458:5011.0012: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1018.680449][T10172] usb 5-1: device descriptor read/8, error -71
[ 1018.890059][ T7377] hsr_slave_0: left promiscuous mode
[ 1018.904537][ T7377] hsr_slave_1: left promiscuous mode
[ 1018.918612][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1018.929949][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.948953][T10172] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[ 1018.989845][T10172] usb 5-1: device descriptor read/8, error -71
[ 1019.019380][T10690] Bluetooth: hci0: command tx timeout
[ 1019.048747][ T7377] veth1_macvtap: left promiscuous mode
[ 1019.061324][ T7377] veth0_macvtap: left promiscuous mode
[ 1019.073525][ T7377] veth1_vlan: left promiscuous mode
[ 1019.108172][ T7377] veth0_vlan: left promiscuous mode
[ 1019.117111][T10172] usb usb5-port1: unable to enumerate USB device
[ 1019.329268][    C1] kye 0003:0458:5011.0012: usb_submit_urb(ctrl) failed: -1
[ 1020.235887][T10172] usb 4-1: USB disconnect, device number 28
[ 1021.375288][ T7377] team0 (unregistering): Port device team_slave_1 removed
[ 1021.457541][ T7377] team0 (unregistering): Port device team_slave_0 removed
[ 1022.312469][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1022.322484][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1022.388864][T11450] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1527'.
[ 1022.426910][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1528'.
[ 1022.472331][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'.
[ 1023.594309][T11359] chnl_net:caif_netlink_parms(): no params data found
[ 1025.224087][T11478] tipc: Started in network mode
[ 1025.299158][T11478] tipc: Node identity ac1414aa, cluster identity 4711
[ 1025.322751][T11478] tipc: New replicast peer: 100.1.1.1
[ 1025.340890][T11478] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1033.763913][ T5598] tipc: Node number set to 2886997162
[ 1034.163939][T11503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'.
[ 1034.229060][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'.
[ 1034.309078][T11359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.317537][T11359] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.380962][T11359] bridge_slave_0: entered allmulticast mode
[ 1034.415227][T11359] bridge_slave_0: entered promiscuous mode
[ 1034.513610][T11359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1034.587001][T11359] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1034.653066][T11359] bridge_slave_1: entered allmulticast mode
[ 1034.717975][T11359] bridge_slave_1: entered promiscuous mode
[ 1036.107965][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1036.200424][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1037.935708][T11359] team0: Port device team_slave_0 added
[ 1038.080733][T11359] team0: Port device team_slave_1 added
[ 1038.225140][ T4608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1038.250433][ T4608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1038.269066][ T4608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1038.297163][ T4608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1038.330142][ T4608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1038.350565][ T4608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1038.416007][T11359] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1038.635234][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.298488][T11359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1039.460939][T11359] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1039.467960][T11359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.642813][T11359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1039.800459][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1546'.
[ 1039.819963][   T29] audit: type=1400 audit(2000000387.150:466): avc:  denied  { create } for  pid=11539 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1040.158316][   T29] audit: type=1400 audit(2000000387.170:467): avc:  denied  { write } for  pid=11539 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1040.470527][ T4608] Bluetooth: hci2: command tx timeout
[ 1041.816738][T11359] hsr_slave_0: entered promiscuous mode
[ 1041.964006][T11359] hsr_slave_1: entered promiscuous mode
[ 1042.003750][T11359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1042.076109][T11359] Cannot create hsr debugfs directory
[ 1042.548848][ T4608] Bluetooth: hci2: command tx timeout
[ 1044.553482][T11565] dccp_close: ABORT with 196 bytes unread
[ 1044.628906][ T4608] Bluetooth: hci2: command tx timeout
[ 1044.685500][T11567] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1551'.
[ 1045.117981][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.485816][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.963010][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.701798][ T4608] Bluetooth: hci2: command tx timeout
[ 1047.791640][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.073026][   T29] audit: type=1400 audit(2000000395.450:468): avc:  denied  { module_request } for  pid=11537 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1048.095480][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1048.379549][T11537] chnl_net:caif_netlink_parms(): no params data found
[ 1048.518297][ T4863] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1048.589704][T11613] overlayfs: failed to resolve './file0': -2
[ 1048.708923][ T4863] usb 5-1: Using ep0 maxpacket: 8
[ 1048.724289][ T4863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1048.781961][ T4863] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1048.829450][ T4863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.882910][ T4863] usb 5-1: config 0 descriptor??
[ 1048.909657][   T11] bridge_slave_1: left allmulticast mode
[ 1048.915452][   T11] bridge_slave_1: left promiscuous mode
[ 1048.921695][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.941288][   T11] bridge_slave_0: left allmulticast mode
[ 1048.947141][   T11] bridge_slave_0: left promiscuous mode
[ 1048.954104][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.347923][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1051.397093][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1051.434993][   T11] bond0 (unregistering): Released all slaves
[ 1051.720795][ T4863] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1051.813358][ T4863] usb 5-1: USB disconnect, device number 29
[ 1051.858214][   T11] tipc: Disabling bearer <udp:syz2>
[ 1051.878862][ T4863] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1051.882333][   T11] tipc: Left network mode
[ 1052.031676][T11537] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1052.072945][T11537] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.101667][T11537] bridge_slave_0: entered allmulticast mode
[ 1052.139122][T11537] bridge_slave_0: entered promiscuous mode
[ 1052.382555][T11537] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.401741][T11537] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.431776][T11537] bridge_slave_1: entered allmulticast mode
[ 1052.461312][T11537] bridge_slave_1: entered promiscuous mode
[ 1053.072233][T11648] xt_CT: No such helper "syz0"
[ 1053.173383][T11537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.473946][T11537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.723149][T11359] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1053.782096][   T11] hsr_slave_0: left promiscuous mode
[ 1054.390604][   T11] hsr_slave_1: left promiscuous mode
[ 1054.675393][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1054.713068][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1054.743841][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1054.782282][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1055.065336][   T11] veth1_macvtap: left promiscuous mode
[ 1055.201192][   T11] veth0_macvtap: left promiscuous mode
[ 1055.279674][   T11] veth1_vlan: left promiscuous mode
[ 1055.440680][   T11] veth0_vlan: left promiscuous mode
[ 1056.708823][ T5302] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1056.959393][ T5302] usb 2-1: Using ep0 maxpacket: 32
[ 1056.971624][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.008847][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1057.040097][ T5302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1057.078814][ T5302] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1057.088046][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.132630][ T5302] usb 2-1: config 0 descriptor??
[ 1057.614083][ T5302] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0013/input/input42
[ 1057.678600][ T5302] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0013/input/input43
[ 1057.810449][ T5302] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1057.811799][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1058.262526][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1058.793721][    C0] kye 0003:0458:5011.0013: usb_submit_urb(ctrl) failed: -1
[ 1058.819030][T10172] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1058.981598][ T5302] usb 2-1: reset high-speed USB device number 16 using dummy_hcd
[ 1059.001267][T10172] usb 5-1: Using ep0 maxpacket: 8
[ 1059.013356][T10172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1059.057722][T10172] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1059.068011][T10172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.100921][T10172] usb 5-1: config 0 descriptor??
[ 1059.164064][ T5302] usb 2-1: device descriptor read/64, error -32
[ 1059.402166][   T29] audit: type=1400 audit(2000000406.780:469): avc:  denied  { name_connect } for  pid=11712 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1059.443094][ T5302] usb 2-1: reset high-speed USB device number 16 using dummy_hcd
[ 1059.451560][   T29] audit: type=1400 audit(2000000406.800:470): avc:  denied  { accept } for  pid=11712 comm="syz.4.1582" lport=32946 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1059.501662][T10172] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1059.619272][ T5302] usb 2-1: device descriptor read/64, error -32
[ 1059.651352][T11537] team0: Port device team_slave_0 added
[ 1059.670997][T11359] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1059.694776][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[ 1059.724700][T11691] netlink: 'syz.1.1581': attribute type 9 has an invalid length.
[ 1059.749925][T11537] team0: Port device team_slave_1 added
[ 1059.760991][T11359] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1059.803945][T11359] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1060.016488][T11537] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1060.029945][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1060.057128][T11537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1060.083469][T11537] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1060.090818][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1060.110499][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.123792][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.157669][T11537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1060.501967][T11537] hsr_slave_0: entered promiscuous mode
[ 1060.534568][T11537] hsr_slave_1: entered promiscuous mode
[ 1060.554577][T11537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1060.570650][T11537] Cannot create hsr debugfs directory
[ 1060.584236][ T5271] usb 2-1: USB disconnect, device number 16
[ 1061.378974][   T29] audit: type=1400 audit(2000000408.750:471): avc:  denied  { create } for  pid=11741 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1061.534038][   T29] audit: type=1400 audit(2000000408.750:472): avc:  denied  { getopt } for  pid=11741 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1062.017014][ T5302] usb 5-1: USB disconnect, device number 30
[ 1062.112497][   T29] audit: type=1400 audit(2000000408.970:473): avc:  denied  { read } for  pid=11741 comm="syz.1.1590" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1062.224938][ T5302] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected
[ 1062.339366][   T29] audit: type=1400 audit(2000000408.980:474): avc:  denied  { open } for  pid=11741 comm="syz.1.1590" path="/32/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1062.454664][T11745] block device autoloading is deprecated and will be removed.
[ 1062.551447][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'.
[ 1062.576158][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'.
[ 1062.880690][T11359] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1063.829230][T11359] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.977060][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.984614][ T7383] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1064.205887][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.215209][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1064.771853][ T4863] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1064.991862][ T4863] usb 2-1: Using ep0 maxpacket: 32
[ 1065.004166][ T4863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1065.016519][ T4863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.027167][ T4863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1065.041511][ T4863] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1065.052382][ T4863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.065400][ T4863] usb 2-1: config 0 descriptor??
[ 1065.519857][T11774] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1065.559696][T11774] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1065.595560][ T4863] hid (null): bogus close delimiter
[ 1065.638009][T11774] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1065.649296][T11774] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1065.691696][T11774] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1065.727306][ T4863] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0014/input/input44
[ 1065.767871][T11774] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1065.868079][ T4863] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0014/input/input45
[ 1066.044397][ T4863] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1067.321394][T11793] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1602'.
[ 1067.418468][    C1] kye 0003:0458:5011.0014: usb_submit_urb(ctrl) failed: -1
[ 1067.579783][T11797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1603'.
[ 1067.601466][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'.
[ 1067.893634][T11774] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1067.909627][T11774] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1067.973541][T11537] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1068.132615][T11774] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1068.139098][T11537] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1068.167047][T11774] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1068.217377][T11537] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1068.281891][    T9] usb 2-1: USB disconnect, device number 17
[ 1068.319096][T11537] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1068.590371][T11774] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1068.626985][T11774] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1070.403656][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1070.580182][T10690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1070.596548][T10690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1070.612601][T10690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1070.629302][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1070.638352][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1070.663165][T10690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1070.678893][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1070.688238][T10690] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1070.697453][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.706310][T10690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1070.761349][    T9] usb 2-1: config 0 descriptor??
[ 1070.767114][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1070.775711][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1070.784690][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1070.795630][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1070.811069][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1070.819085][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1070.852221][T11537] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1071.041041][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1071.270413][T11830] vhci_hcd: invalid port number 0
[ 1071.805683][T11537] 8021q: adding VLAN 0 to HW filter on device team0
[ 1072.744542][T11848] input: syz0 as /devices/virtual/input/input46
[ 1072.762955][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.770281][ T7377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1072.868894][ T4608] Bluetooth: hci0: command tx timeout
[ 1072.917195][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.917469][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1072.924030][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'.
[ 1072.924080][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'.
[ 1073.476995][ T5271] usb 2-1: USB disconnect, device number 18
[ 1073.487989][ T5271] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[ 1073.995936][T11870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1074.118765][   T29] audit: type=1400 audit(2000000421.410:475): avc:  denied  { bind } for  pid=11868 comm="syz.1.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1074.939528][ T4608] Bluetooth: hci0: command tx timeout
[ 1077.020796][ T4608] Bluetooth: hci0: command tx timeout
[ 1079.118886][ T4608] Bluetooth: hci0: command tx timeout
[ 1079.212340][ T7371] bridge_slave_1: left allmulticast mode
[ 1079.219352][ T7371] bridge_slave_1: left promiscuous mode
[ 1079.232941][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.531572][   T29] audit: type=1400 audit(2000000421.410:476): avc:  denied  { name_bind } for  pid=11868 comm="syz.1.1616" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1080.606159][ T7371] bridge_slave_0: left allmulticast mode
[ 1080.633335][ T7371] bridge_slave_0: left promiscuous mode
[ 1080.665139][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.680647][   T29] audit: type=1400 audit(2000000421.420:477): avc:  denied  { node_bind } for  pid=11868 comm="syz.1.1616" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[ 1080.728938][   T29] audit: type=1400 audit(2000000421.420:478): avc:  denied  { name_connect } for  pid=11868 comm="syz.1.1616" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1084.212102][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1084.236792][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.286043][ T7371] bond0 (unregistering): Released all slaves
[ 1084.354293][T11537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1084.404344][T11537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1084.591681][ T7371] hsr_slave_0: left promiscuous mode
[ 1084.619119][ T7371] hsr_slave_1: left promiscuous mode
[ 1084.626035][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1084.644187][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1085.126574][ T7371] team0 (unregistering): Port device team_slave_1 removed
[ 1085.204991][ T7371] team0 (unregistering): Port device team_slave_0 removed
[ 1086.111289][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'.
[ 1086.127202][T11881] vlan0: entered promiscuous mode
[ 1086.147703][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'.
[ 1086.189760][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'.
[ 1086.508795][ T5273] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1086.692524][T11831] chnl_net:caif_netlink_parms(): no params data found
[ 1087.059121][ T5273] usb 4-1: Using ep0 maxpacket: 8
[ 1087.118607][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1087.205477][ T5273] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1087.947499][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.960115][ T5273] usb 4-1: config 0 descriptor??
[ 1088.332716][ T5273] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1089.651514][   T29] audit: type=1400 audit(2000000437.030:479): avc:  denied  { read } for  pid=11932 comm="syz.1.1629" name="mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1089.693816][T11831] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.707903][   T29] audit: type=1400 audit(2000000437.030:480): avc:  denied  { open } for  pid=11932 comm="syz.1.1629" path="/dev/input/mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1089.783572][T11831] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.801016][T11831] bridge_slave_0: entered allmulticast mode
[ 1089.823557][T11831] bridge_slave_0: entered promiscuous mode
[ 1089.844477][T11831] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.871337][T11831] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.911239][T11831] bridge_slave_1: entered allmulticast mode
[ 1089.951740][T11831] bridge_slave_1: entered promiscuous mode
[ 1090.194559][T11948] FAULT_INJECTION: forcing a failure.
[ 1090.194559][T11948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1090.252439][T11948] CPU: 1 UID: 0 PID: 11948 Comm: syz.4.1630 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1090.263294][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1090.274068][T11948] Call Trace:
[ 1090.277407][T11948]  <TASK>
[ 1090.280472][T11948]  dump_stack_lvl+0x16c/0x1f0
[ 1090.285222][T11948]  should_fail_ex+0x497/0x5b0
[ 1090.290070][T11948]  _copy_from_user+0x30/0xf0
[ 1090.294724][T11948]  copy_msghdr_from_user+0x99/0x160
[ 1090.300083][T11948]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1090.306234][T11948]  ? __pfx___lock_acquire+0x10/0x10
[ 1090.311689][T11948]  ___sys_sendmsg+0xff/0x1e0
[ 1090.316437][T11948]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1090.321680][T11948]  ? find_held_lock+0x2d/0x110
[ 1090.326498][T11948]  ? ksys_write+0x21c/0x260
[ 1090.331141][T11948]  ? __fget_light+0x173/0x210
[ 1090.335967][T11948]  __sys_sendmsg+0x117/0x1f0
[ 1090.340813][T11948]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1090.346121][T11948]  do_syscall_64+0xcd/0x250
[ 1090.350667][T11948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1090.356699][T11948] RIP: 0033:0x7f222ed7def9
[ 1090.361393][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1090.381663][T11948] RSP: 002b:00007f222fa8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1090.390127][T11948] RAX: ffffffffffffffda RBX: 00007f222ef36058 RCX: 00007f222ed7def9
[ 1090.398383][T11948] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000e
[ 1090.406381][T11948] RBP: 00007f222fa8e090 R08: 0000000000000000 R09: 0000000000000000
[ 1090.414379][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1090.422376][T11948] R13: 0000000000000000 R14: 00007f222ef36058 R15: 00007ffcc4812ae8
[ 1090.430400][T11948]  </TASK>
[ 1090.524569][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'.
[ 1090.538835][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'.
[ 1090.611496][T11831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1090.650793][ T5274] usb 4-1: USB disconnect, device number 29
[ 1090.656050][T11831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1090.667605][ T5274] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[ 1091.096017][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1631'.
[ 1091.117990][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'.
[ 1091.138262][T11958] netlink: 'syz.4.1631': attribute type 10 has an invalid length.
[ 1091.174048][T11958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.182225][T11958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.248560][T11831] team0: Port device team_slave_0 added
[ 1091.277658][T11831] team0: Port device team_slave_1 added
[ 1091.304791][T11933] netlink: 'syz.1.1629': attribute type 4 has an invalid length.
[ 1091.333251][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'.
[ 1091.371964][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'.
[ 1093.433427][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.605798][T11831] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1093.626671][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1093.743569][T11831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1093.761303][T11831] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1093.768401][T11831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1093.801494][T11831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1094.386719][ T5274] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1094.639553][ T5274] usb 4-1: Using ep0 maxpacket: 8
[ 1094.659966][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1094.673563][ T5274] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1094.683562][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.700327][ T5274] usb 4-1: config 0 descriptor??
[ 1094.801416][T11831] hsr_slave_0: entered promiscuous mode
[ 1094.859788][T11831] hsr_slave_1: entered promiscuous mode
[ 1094.931741][T11831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1095.020530][T11831] Cannot create hsr debugfs directory
[ 1095.043957][ T5274] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1096.469682][   T29] audit: type=1400 audit(2000000443.830:481): avc:  denied  { setopt } for  pid=11998 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1096.517586][   T29] audit: type=1400 audit(2000000443.830:482): avc:  denied  { shutdown } for  pid=11998 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1096.784666][T12009] FAULT_INJECTION: forcing a failure.
[ 1096.784666][T12009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1096.800449][T12009] CPU: 1 UID: 0 PID: 12009 Comm: syz.4.1642 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1096.810936][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1096.821044][T12009] Call Trace:
[ 1096.824366][T12009]  <TASK>
[ 1096.827359][T12009]  dump_stack_lvl+0x16c/0x1f0
[ 1096.832097][T12009]  should_fail_ex+0x497/0x5b0
[ 1096.836851][T12009]  _copy_from_iter+0x2a1/0x1550
[ 1096.841781][T12009]  ? __pfx__copy_from_iter+0x10/0x10
[ 1096.847137][T12009]  ? __check_heap_object+0x79/0x110
[ 1096.852422][T12009]  ? __phys_addr_symbol+0x30/0x80
[ 1096.857507][T12009]  ? __check_object_size+0x497/0x720
[ 1096.862864][T12009]  netlink_sendmsg+0x813/0xd70
[ 1096.867696][T12009]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1096.873033][T12009]  ? __import_iovec+0x1fd/0x6e0
[ 1096.877981][T12009]  ____sys_sendmsg+0xaaf/0xc90
[ 1096.882809][T12009]  ? copy_msghdr_from_user+0x10b/0x160
[ 1096.888339][T12009]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1096.893700][T12009]  ? __pfx___lock_acquire+0x10/0x10
[ 1096.899070][T12009]  ___sys_sendmsg+0x135/0x1e0
[ 1096.903823][T12009]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1096.909082][T12009]  ? find_held_lock+0x2d/0x110
[ 1096.913923][T12009]  ? ksys_write+0x21c/0x260
[ 1096.918497][T12009]  ? __fget_light+0x173/0x210
[ 1096.923235][T12009]  __sys_sendmsg+0x117/0x1f0
[ 1096.927893][T12009]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1096.933111][T12009]  do_syscall_64+0xcd/0x250
[ 1096.937755][T12009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.943737][T12009] RIP: 0033:0x7f222ed7def9
[ 1096.948200][T12009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1096.967955][T12009] RSP: 002b:00007f222e7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1096.976519][T12009] RAX: ffffffffffffffda RBX: 00007f222ef36130 RCX: 00007f222ed7def9
[ 1096.984545][T12009] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000005
[ 1096.992562][T12009] RBP: 00007f222e7ff090 R08: 0000000000000000 R09: 0000000000000000
[ 1097.000577][T12009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1097.008602][T12009] R13: 0000000000000000 R14: 00007f222ef36130 R15: 00007ffcc4812ae8
[ 1097.016643][T12009]  </TASK>
[ 1097.315779][T10172] usb 4-1: USB disconnect, device number 30
[ 1097.472369][T10172] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[ 1097.635838][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'.
[ 1097.680280][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[ 1097.708747][T10690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1097.736791][T10690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1097.747375][T10690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1097.772395][T10690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1097.794425][T10690] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1097.809451][T10690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1097.813061][   T29] audit: type=1400 audit(2000000445.190:483): avc:  denied  { getopt } for  pid=12018 comm="syz.4.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1097.966444][   T29] audit: type=1400 audit(2000000445.220:484): avc:  denied  { create } for  pid=12018 comm="syz.4.1645" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1098.037432][T12016] can: request_module (can-proto-0) failed.
[ 1098.076844][   T29] audit: type=1400 audit(2000000445.240:485): avc:  denied  { append } for  pid=12018 comm="syz.4.1645" name="file0" dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1098.148649][   T29] audit: type=1400 audit(2000000445.240:486): avc:  denied  { open } for  pid=12018 comm="syz.4.1645" path="/412/file0" dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1098.197859][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1645'.
[ 1098.225809][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'.
[ 1099.236669][T12029] netlink: 'syz.4.1645': attribute type 10 has an invalid length.
[ 1099.418025][   T29] audit: type=1400 audit(2000000446.790:487): avc:  denied  { unlink } for  pid=6180 comm="syz-executor" name="file0" dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1100.089197][T10690] Bluetooth: hci2: command tx timeout
[ 1102.139234][T10690] Bluetooth: hci2: command tx timeout
[ 1102.519650][ T5274] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1102.627177][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1654'.
[ 1102.683885][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'.
[ 1102.718796][ T5274] usb 5-1: Using ep0 maxpacket: 8
[ 1102.730863][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1102.766087][ T5274] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1102.798998][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.829291][ T5274] usb 5-1: config 0 descriptor??
[ 1103.085795][ T5274] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1103.446993][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1656'.
[ 1103.467513][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'.
[ 1104.183049][T12072] netlink: 'syz.3.1656': attribute type 10 has an invalid length.
[ 1104.220735][T10690] Bluetooth: hci2: command tx timeout
[ 1104.333428][ T5272] usb 5-1: USB disconnect, device number 31
[ 1104.349114][ T5272] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1104.849804][T12088] ebt_among: src integrity fail: 30a
[ 1104.881698][T12088] netlink: 'syz.3.1658': attribute type 1 has an invalid length.
[ 1105.146387][ T7377] bridge_slave_1: left allmulticast mode
[ 1105.163851][ T7377] bridge_slave_1: left promiscuous mode
[ 1105.183663][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.229803][ T7377] bridge_slave_0: left allmulticast mode
[ 1105.236651][ T7377] bridge_slave_0: left promiscuous mode
[ 1105.268739][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.552197][T12103] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1659'.
[ 1106.308545][T10690] Bluetooth: hci2: command tx timeout
[ 1107.117463][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1107.150072][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1107.173940][ T7377] bond0 (unregistering): Released all slaves
[ 1108.370679][ T7377] hsr_slave_0: left promiscuous mode
[ 1108.499216][ T7377] hsr_slave_1: left promiscuous mode
[ 1108.533140][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1108.569949][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1108.606955][   T29] audit: type=1400 audit(2000000455.970:488): avc:  denied  { read } for  pid=12120 comm="syz.3.1663" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1110.028766][ T5598] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1110.098816][ T4863] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[ 1110.249223][ T5598] usb 2-1: Using ep0 maxpacket: 8
[ 1110.258028][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1110.272696][ T7377] team0 (unregistering): Port device team_slave_1 removed
[ 1110.282031][ T5598] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1110.291681][ T4863] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[ 1110.314487][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.316629][ T4863] usb 5-1: config 7 has no interface number 0
[ 1110.330339][ T4863] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4
[ 1110.336399][ T5598] usb 2-1: config 0 descriptor??
[ 1110.349962][ T4863] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0
[ 1110.388745][ T4863] usb 5-1: config 7 interface 252 has no altsetting 0
[ 1110.403607][ T4863] usb 5-1: string descriptor 0 read error: -22
[ 1110.410613][ T4863] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1110.431076][ T4863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.476875][ T4863] idmouse 5-1:7.252: Unable to find bulk-in endpoint.
[ 1110.527126][ T7377] team0 (unregistering): Port device team_slave_0 removed
[ 1110.649507][ T5598] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1110.715961][   T29] audit: type=1400 audit(2000000458.090:489): avc:  denied  { read } for  pid=12138 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1110.739053][ T4863] usb 5-1: USB disconnect, device number 32
[ 1110.767158][   T29] audit: type=1400 audit(2000000458.090:490): avc:  denied  { write } for  pid=12138 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1112.686838][   T29] audit: type=1400 audit(2000000460.060:491): avc:  denied  { bind } for  pid=12144 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1113.120690][ T5273] usb 2-1: USB disconnect, device number 20
[ 1113.241094][ T5273] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[ 1114.139540][T12141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'.
[ 1114.151819][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[ 1114.439717][T12015] chnl_net:caif_netlink_parms(): no params data found
[ 1115.653554][T12164] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1115.771814][T11831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1116.703867][T11831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1116.889181][T11831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1117.024461][T11831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1117.308815][ T5274] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1117.370401][T12015] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.390028][T12015] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.417903][T12015] bridge_slave_0: entered allmulticast mode
[ 1117.441404][T12015] bridge_slave_0: entered promiscuous mode
[ 1117.481203][T12015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.497433][T12015] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.515058][ T5274] usb 4-1: Using ep0 maxpacket: 8
[ 1117.522578][T12015] bridge_slave_1: entered allmulticast mode
[ 1117.539288][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1117.560383][T12015] bridge_slave_1: entered promiscuous mode
[ 1117.566776][ T5274] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1117.589303][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.629761][ T5274] usb 4-1: config 0 descriptor??
[ 1117.740311][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1117.787775][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1117.859009][ T5598] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1117.953635][T12196] xt_policy: too many policy elements
[ 1118.008441][   T29] audit: type=1400 audit(2000000465.320:492): avc:  denied  { append } for  pid=12177 comm="syz.3.1678" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1118.062205][T12015] team0: Port device team_slave_0 added
[ 1118.110822][T12015] team0: Port device team_slave_1 added
[ 1118.330464][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1118.355192][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1118.389179][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1118.404970][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1118.412515][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1118.449317][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1118.484311][ T5598] usb 5-1: Using ep0 maxpacket: 8
[ 1118.674466][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1119.109949][T12200] netlink: 'syz.1.1680': attribute type 4 has an invalid length.
[ 1119.386652][T12015] hsr_slave_0: entered promiscuous mode
[ 1119.414736][T12015] hsr_slave_1: entered promiscuous mode
[ 1119.421799][ T5598] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1119.443126][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.456392][ T5598] usb 5-1: config 0 descriptor??
[ 1119.473345][T12015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1119.504380][T12015] Cannot create hsr debugfs directory
[ 1119.806059][ T5598] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1120.268541][T12210] tipc: Started in network mode
[ 1120.274030][T12210] tipc: Node identity ac1414aa, cluster identity 4711
[ 1120.281727][T12210] tipc: New replicast peer: 100.1.1.1
[ 1120.288253][T12210] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1120.384518][ T5274] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1120.400416][ T5274] usb 4-1: USB disconnect, device number 31
[ 1120.417481][ T5274] iowarrior 4-1:0.0: I/O-Warror #1 now disconnected
[ 1121.319099][ T5272] tipc: Node number set to 2886997162
[ 1121.508563][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.515586][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.702739][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'.
[ 1121.726485][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'.
[ 1121.751983][T11831] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1121.944235][   T29] audit: type=1400 audit(2000000469.310:493): avc:  denied  { mount } for  pid=12227 comm="syz.3.1685" name="/" dev="autofs" ino=50468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1122.013821][   T29] audit: type=1400 audit(2000000469.360:494): avc:  denied  { read } for  pid=12227 comm="syz.3.1685" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1122.087388][T11831] 8021q: adding VLAN 0 to HW filter on device team0
[ 1122.096575][   T29] audit: type=1400 audit(2000000469.360:495): avc:  denied  { open } for  pid=12227 comm="syz.3.1685" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1122.146188][   T29] audit: type=1400 audit(2000000469.370:496): avc:  denied  { ioctl } for  pid=12227 comm="syz.3.1685" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1122.175612][   T29] audit: type=1400 audit(2000000469.510:497): avc:  denied  { unmount } for  pid=6189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1122.459279][ T5274] usb 5-1: USB disconnect, device number 33
[ 1122.472907][ T5274] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1123.523768][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.531210][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.794897][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.802633][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1124.257888][T12263] netlink: 'syz.4.1691': attribute type 4 has an invalid length.
[ 1125.312542][T12015] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1125.374748][T12015] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1125.435122][T12015] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1125.514914][T12015] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1125.821371][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'.
[ 1125.856296][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'.
[ 1126.045527][T11831] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1126.336427][T12015] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.388319][T12293] Cannot find del_set index 0 as target
[ 1126.454535][T11831] veth0_vlan: entered promiscuous mode
[ 1126.486942][T12297] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1126.509532][ T5274] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1126.555633][T12015] 8021q: adding VLAN 0 to HW filter on device team0
[ 1126.615201][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.622556][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1126.708848][ T5274] usb 4-1: Using ep0 maxpacket: 8
[ 1126.729468][T11831] veth1_vlan: entered promiscuous mode
[ 1126.761703][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.767987][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1126.769016][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1126.816306][ T5274] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1126.874459][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.912352][ T5274] usb 4-1: config 0 descriptor??
[ 1127.163415][T11831] veth0_macvtap: entered promiscuous mode
[ 1127.201349][ T5274] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1127.203479][T12299] /dev/sg0: Can't lookup blockdev
[ 1127.305316][T11831] veth1_macvtap: entered promiscuous mode
[ 1129.264487][T11831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.353428][T11831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.409133][T11831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.472056][T11831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.488790][T11831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.539875][T11831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.592094][T11831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.678481][T10172] usb 4-1: USB disconnect, device number 32
[ 1129.684541][T11831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.703820][T10172] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[ 1129.741960][T11831] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1130.389010][ T5271] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1131.560259][ T5271] usb 2-1: Using ep0 maxpacket: 16
[ 1131.599109][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1131.629186][ T5271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.705801][T12338] netlink: 'syz.3.1701': attribute type 4 has an invalid length.
[ 1131.725336][ T5271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1131.942662][ T5271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1131.952503][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1131.963171][ T5271] usb 2-1: Product: syz
[ 1131.967436][ T5271] usb 2-1: Manufacturer: syz
[ 1131.972314][ T5271] usb 2-1: SerialNumber: syz
[ 1132.222553][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1132.236415][T12015] veth0_vlan: entered promiscuous mode
[ 1132.295591][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1132.324828][T12015] veth1_vlan: entered promiscuous mode
[ 1132.389213][ T5271] usb 2-1: 0:2 : does not exist
[ 1132.517373][ T5271] usb 2-1: USB disconnect, device number 21
[ 1132.538941][T12015] veth0_macvtap: entered promiscuous mode
[ 1132.613645][T12015] veth1_macvtap: entered promiscuous mode
[ 1132.709860][T12119] udevd[12119]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1132.795680][   T29] audit: type=1400 audit(2000000480.160:498): avc:  denied  { ioctl } for  pid=12352 comm="syz.4.1705" path="socket:[51728]" dev="sockfs" ino=51728 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1132.876543][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1132.894398][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1132.921310][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1132.945780][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1132.959059][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1132.968345][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1133.075997][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'.
[ 1133.142509][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'.
[ 1133.345329][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.428756][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.448953][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.478132][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.508053][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.521662][T11307] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1133.531112][   T29] audit: type=1400 audit(2000000480.910:499): avc:  denied  { setopt } for  pid=12370 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1133.563367][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.590190][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.606250][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.624067][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.654765][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.694962][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1133.722323][T11307] usb 5-1: Using ep0 maxpacket: 8
[ 1133.744886][T11307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1133.782102][T11307] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1133.818703][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.856293][T10172] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1133.944873][T11307] usb 5-1: config 0 descriptor??
[ 1134.019506][T10172] usb 2-1: device descriptor read/64, error -71
[ 1134.193927][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1134.238193][T11307] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1134.239554][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1134.288965][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1134.326795][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1134.339017][T10172] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1134.383813][T12381] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1134.391869][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1134.673330][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1136.009399][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1136.572573][ T4608] Bluetooth: hci0: command tx timeout
[ 1136.575567][ T5273] usb 5-1: USB disconnect, device number 34
[ 1136.584767][T10172] usb 2-1: device descriptor read/64, error -71
[ 1136.633994][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1136.646865][ T5273] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[ 1136.724003][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1136.729463][T10172] usb usb2-port1: attempt power cycle
[ 1137.988576][T12015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.009291][T12015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.039045][T12015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.048530][T12015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.121673][T12394] netlink: 'syz.3.1712': attribute type 4 has an invalid length.
[ 1138.499187][ T5598] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1138.507981][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'.
[ 1138.619587][ T4608] Bluetooth: hci0: command tx timeout
[ 1138.663956][ T5598] usb 2-1: device descriptor read/64, error -71
[ 1138.809349][T12404] 9pnet_fd: Insufficient options for proto=fd
[ 1138.990682][ T5598] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1139.162388][ T5598] usb 2-1: device descriptor read/64, error -71
[ 1139.408465][ T5598] usb usb2-port1: attempt power cycle
[ 1140.171681][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1140.234317][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1140.262704][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'.
[ 1140.306175][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'.
[ 1140.380994][ T7385] bridge_slave_1: left allmulticast mode
[ 1140.386723][ T7385] bridge_slave_1: left promiscuous mode
[ 1140.423719][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.466686][ T7385] bridge_slave_0: left allmulticast mode
[ 1140.484535][ T7385] bridge_slave_0: left promiscuous mode
[ 1140.510901][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.528962][   T29] audit: type=1400 audit(2000000487.900:500): avc:  denied  { append } for  pid=12439 comm="syz.3.1721" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1140.699728][ T4608] Bluetooth: hci0: command tx timeout
[ 1140.924858][ T5598] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1140.972457][ T5598] usb 2-1: device descriptor read/8, error -71
[ 1141.604182][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1141.616931][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1141.630170][ T7385] bond0 (unregistering): Released all slaves
[ 1141.681173][T12448] netlink: 'syz.4.1722': attribute type 4 has an invalid length.
[ 1141.871054][T12358] chnl_net:caif_netlink_parms(): no params data found
[ 1141.939444][ T5598] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1141.968820][ T7383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1141.976732][ T7383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.009849][ T5598] usb 2-1: Using ep0 maxpacket: 8
[ 1142.056325][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1142.108942][ T5598] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1142.385397][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.395019][ T7385] hsr_slave_0: left promiscuous mode
[ 1142.790402][ T4608] Bluetooth: hci0: command tx timeout
[ 1142.960782][ T5598] usb 2-1: config 0 descriptor??
[ 1142.983614][ T7385] hsr_slave_1: left promiscuous mode
[ 1143.033297][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1143.079437][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1143.173088][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.914366][ T5598] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1143.972143][ T7385] veth1_macvtap: left promiscuous mode
[ 1143.980905][ T7385] veth0_macvtap: left promiscuous mode
[ 1143.992112][ T7385] veth1_vlan: left promiscuous mode
[ 1144.099077][ T5302] usb 2-1: USB disconnect, device number 28
[ 1145.744103][ T7385] veth0_vlan: left promiscuous mode
[ 1145.774724][ T5302] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[ 1147.818729][   T29] audit: type=1400 audit(2000000495.170:501): avc:  denied  { ioctl } for  pid=12489 comm="syz.3.1729" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1150.889822][ T7385] team0 (unregistering): Port device team_slave_1 removed
[ 1151.042173][ T7385] team0 (unregistering): Port device team_slave_0 removed
[ 1152.030737][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1540'.
[ 1152.041699][T12473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1540'.
[ 1152.060085][T12508] netlink: 'syz.1.1733': attribute type 4 has an invalid length.
[ 1152.183810][T12520] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1734'.
[ 1152.281485][T12541] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[ 1154.715827][T12358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.732221][T12358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.751262][T12358] bridge_slave_0: entered allmulticast mode
[ 1154.773365][T12358] bridge_slave_0: entered promiscuous mode
[ 1155.091428][T12358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1155.405630][T12358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1155.417106][T12358] bridge_slave_1: entered allmulticast mode
[ 1155.483485][T12358] bridge_slave_1: entered promiscuous mode
[ 1155.770088][ T5598] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[ 1155.966631][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1156.011729][ T5598] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1156.020923][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1156.039141][ T5598] usb 2-1: config 179 has no interface number 0
[ 1156.060792][ T5598] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1156.103888][ T5598] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[ 1156.117559][T12577] FAULT_INJECTION: forcing a failure.
[ 1156.117559][T12577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1156.131483][ T5598] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1156.163957][ T5598] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[ 1156.175195][T12577] CPU: 0 UID: 0 PID: 12577 Comm: syz.2.1743 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1156.175244][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1156.175264][T12577] Call Trace:
[ 1156.175276][T12577]  <TASK>
[ 1156.175290][T12577]  dump_stack_lvl+0x16c/0x1f0
[ 1156.175336][T12577]  should_fail_ex+0x497/0x5b0
[ 1156.175389][T12577]  _copy_from_user+0x30/0xf0
[ 1156.175444][T12577]  do_sys_poll+0x1d6/0xde0
[ 1156.175485][T12577]  ? hlock_class+0x4e/0x130
[ 1156.190799][ T5598] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1156.195990][T12577]  ? __pfx_mark_lock+0x10/0x10
[ 1156.200089][ T5598] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1156.202230][T12577]  ? __pfx_do_sys_poll+0x10/0x10
[ 1156.206907][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.211608][T12577]  ? __pfx___lock_acquire+0x10/0x10
[ 1156.211746][T12577]  ? __mutex_unlock_slowpath+0x164/0x650
[ 1156.228751][T12449] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1156.238492][T12577]  ? set_user_sigmask+0x217/0x2a0
[ 1156.288766][T12577]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1156.294785][T12577]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1156.300194][T12577]  __x64_sys_ppoll+0x25a/0x2d0
[ 1156.304997][T12577]  ? __pfx___x64_sys_ppoll+0x10/0x10
[ 1156.310315][T12577]  ? ksys_write+0x1ab/0x260
[ 1156.314848][T12577]  ? __pfx_ksys_write+0x10/0x10
[ 1156.319742][T12577]  do_syscall_64+0xcd/0x250
[ 1156.324278][T12577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.330312][T12577] RIP: 0033:0x7ff51bd7def9
[ 1156.334750][T12577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1156.354383][T12577] RSP: 002b:00007ff51cb53038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[ 1156.362918][T12577] RAX: ffffffffffffffda RBX: 00007ff51bf35f80 RCX: 00007ff51bd7def9
[ 1156.371002][T12577] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000380
[ 1156.379133][T12577] RBP: 00007ff51cb53090 R08: 0000000000000000 R09: 0000000000000000
[ 1156.387145][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1156.395135][T12577] R13: 0000000000000000 R14: 00007ff51bf35f80 R15: 00007ffe348b5e78
[ 1156.403145][T12577]  </TASK>
[ 1156.468487][T12566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1156.476547][T12566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1156.531333][T12358] team0: Port device team_slave_0 added
[ 1156.609055][T12449] usb 4-1: Using ep0 maxpacket: 8
[ 1156.626042][T12358] team0: Port device team_slave_1 added
[ 1156.637685][T12449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1156.689139][T12449] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1156.714222][T12449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.817767][T12449] usb 4-1: config 0 descriptor??
[ 1156.837373][ T5302] usb 2-1: USB disconnect, device number 29
[ 1156.837397][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1156.851659][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1156.861253][    C1] ==================================================================
[ 1156.869367][    C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x101f/0x1230
[ 1156.877710][    C1] Read of size 1 at addr ffff888054374891 by task udevd/4670
[ 1156.885144][    C1] 
[ 1156.887495][    C1] CPU: 1 UID: 0 PID: 4670 Comm: udevd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1156.897440][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1156.907546][    C1] Call Trace:
[ 1156.910873][    C1]  <IRQ>
[ 1156.913765][    C1]  dump_stack_lvl+0x116/0x1f0
[ 1156.918513][    C1]  print_report+0xc3/0x620
[ 1156.922996][    C1]  ? __virt_addr_valid+0x5e/0x590
[ 1156.928085][    C1]  ? __phys_addr+0xc6/0x150
[ 1156.932689][    C1]  kasan_report+0xd9/0x110
[ 1156.937160][    C1]  ? register_lock_class+0x101f/0x1230
[ 1156.942704][    C1]  ? register_lock_class+0x101f/0x1230
[ 1156.948319][    C1]  register_lock_class+0x101f/0x1230
[ 1156.953773][    C1]  ? __pfx_register_lock_class+0x10/0x10
[ 1156.959460][    C1]  ? __wake_up_klogd.part.0+0x99/0xf0
[ 1156.964955][    C1]  __lock_acquire+0x135/0x3cb0
[ 1156.969768][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1156.975005][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1156.980252][    C1]  lock_acquire+0x1b1/0x560
[ 1156.984794][    C1]  ? __wake_up+0x1c/0x60
[ 1156.989095][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1156.994157][    C1]  ? find_held_lock+0x2d/0x110
[ 1156.998938][    C1]  ? __usb_hcd_giveback_urb+0x466/0x6e0
[ 1157.004519][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1157.009567][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1157.014778][    C1]  _raw_spin_lock_irqsave+0x3a/0x60
[ 1157.020009][    C1]  ? __wake_up+0x1c/0x60
[ 1157.024365][    C1]  __wake_up+0x1c/0x60
[ 1157.028465][    C1]  usb_anchor_resume_wakeups+0xc2/0xe0
[ 1157.034020][    C1]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[ 1157.039547][    C1]  usb_hcd_giveback_urb+0x396/0x450
[ 1157.044870][    C1]  dummy_timer+0x17c3/0x38d0
[ 1157.049522][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1157.054759][    C1]  ? __hrtimer_run_queues+0x5a7/0xcc0
[ 1157.060149][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1157.065295][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1157.070258][    C1]  ? timerqueue_del+0x83/0x150
[ 1157.075042][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1157.080256][    C1]  __hrtimer_run_queues+0x20c/0xcc0
[ 1157.085658][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1157.091387][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[ 1157.097479][    C1]  hrtimer_interrupt+0x31b/0x800
[ 1157.103061][    C1]  __sysvec_apic_timer_interrupt+0x10f/0x450
[ 1157.109071][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[ 1157.115347][    C1]  </IRQ>
[ 1157.118299][    C1]  <TASK>
[ 1157.121255][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1157.127258][    C1] RIP: 0010:lock_acquire+0x1f2/0x560
[ 1157.132578][    C1] Code: c1 05 ea b0 98 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[ 1157.153786][    C1] RSP: 0018:ffffc90004487bf8 EFLAGS: 00000206
[ 1157.159876][    C1] RAX: dffffc0000000000 RBX: 1ffff92000890f81 RCX: 0000000000000001
[ 1157.167972][    C1] RDX: 0000000000000001 RSI: ffffffff8b4cddc0 RDI: ffffffff8bb118a0
[ 1157.175993][    C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d39ae2
[ 1157.184154][    C1] R10: ffffffff969cd717 R11: 0000000000000000 R12: 0000000000000001
[ 1157.192131][    C1] R13: 0000000000000000 R14: ffffffff8df3fa20 R15: 0000000000000000
[ 1157.200132][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1157.205184][    C1]  ? ___sys_recvmsg+0x127/0x1a0
[ 1157.210064][    C1]  fs_reclaim_acquire+0x102/0x160
[ 1157.215116][    C1]  ? kmem_cache_alloc_noprof+0x54/0x2f0
[ 1157.220686][    C1]  kmem_cache_alloc_noprof+0x54/0x2f0
[ 1157.226092][    C1]  ? getname_flags.part.0+0x4c/0x550
[ 1157.231402][    C1]  getname_flags.part.0+0x4c/0x550
[ 1157.236536][    C1]  getname+0x8d/0xe0
[ 1157.240527][    C1]  do_sys_openat2+0x104/0x1e0
[ 1157.245230][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1157.250447][    C1]  ? __pfx___sys_recvmsg+0x10/0x10
[ 1157.255600][    C1]  ? ktime_get_ts64+0x1ad/0x2a0
[ 1157.260506][    C1]  __x64_sys_openat+0x175/0x210
[ 1157.265667][    C1]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1157.271075][    C1]  do_syscall_64+0xcd/0x250
[ 1157.275592][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.281517][    C1] RIP: 0033:0x7fab28d169a4
[ 1157.285972][    C1] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 1157.305599][    C1] RSP: 002b:00007ffdd9d2b320 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1157.314020][    C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fab28d169a4
[ 1157.321997][    C1] RDX: 0000000000080000 RSI: 00007ffdd9d2b458 RDI: 00000000ffffff9c
[ 1157.330147][    C1] RBP: 00007ffdd9d2b458 R08: 0000000000000008 R09: 0000000000000001
[ 1157.338125][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
[ 1157.346104][    C1] R13: 000055fe1c524b42 R14: 0000000000000001 R15: 0000000000000000
[ 1157.354609][    C1]  </TASK>
[ 1157.357749][    C1] 
[ 1157.360256][    C1] Allocated by task 5598:
[ 1157.364580][    C1]  kasan_save_stack+0x33/0x60
[ 1157.369276][    C1]  kasan_save_track+0x14/0x30
[ 1157.373967][    C1]  __kasan_kmalloc+0xaa/0xb0
[ 1157.378576][    C1]  xpad_probe+0x27e/0x1f50
[ 1157.382996][    C1]  usb_probe_interface+0x309/0x9d0
[ 1157.388123][    C1]  really_probe+0x23e/0xa90
[ 1157.392655][    C1]  __driver_probe_device+0x1de/0x440
[ 1157.397953][    C1]  driver_probe_device+0x4c/0x1b0
[ 1157.403003][    C1]  __device_attach_driver+0x1df/0x310
[ 1157.408389][    C1]  bus_for_each_drv+0x157/0x1e0
[ 1157.413246][    C1]  __device_attach+0x1e8/0x4b0
[ 1157.418032][    C1]  bus_probe_device+0x17f/0x1c0
[ 1157.422902][    C1]  device_add+0x114b/0x1a70
[ 1157.427409][    C1]  usb_set_configuration+0x10cb/0x1c50
[ 1157.432886][    C1]  usb_generic_driver_probe+0xb1/0x110
[ 1157.438365][    C1]  usb_probe_device+0xec/0x3e0
[ 1157.443140][    C1]  really_probe+0x23e/0xa90
[ 1157.447655][    C1]  __driver_probe_device+0x1de/0x440
[ 1157.452952][    C1]  driver_probe_device+0x4c/0x1b0
[ 1157.457997][    C1]  __device_attach_driver+0x1df/0x310
[ 1157.463384][    C1]  bus_for_each_drv+0x157/0x1e0
[ 1157.468243][    C1]  __device_attach+0x1e8/0x4b0
[ 1157.473029][    C1]  bus_probe_device+0x17f/0x1c0
[ 1157.477890][    C1]  device_add+0x114b/0x1a70
[ 1157.482403][    C1]  usb_new_device+0xd90/0x1a10
[ 1157.487174][    C1]  hub_event+0x2d9a/0x4e10
[ 1157.491612][    C1]  process_one_work+0x9c5/0x1b40
[ 1157.496897][    C1]  worker_thread+0x6c8/0xf00
[ 1157.501922][    C1]  kthread+0x2c1/0x3a0
[ 1157.506008][    C1]  ret_from_fork+0x45/0x80
[ 1157.510447][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1157.515236][    C1] 
[ 1157.517553][    C1] Freed by task 5302:
[ 1157.521523][    C1]  kasan_save_stack+0x33/0x60
[ 1157.526216][    C1]  kasan_save_track+0x14/0x30
[ 1157.530932][    C1]  kasan_save_free_info+0x3b/0x60
[ 1157.535967][    C1]  poison_slab_object+0xf7/0x160
[ 1157.540927][    C1]  __kasan_slab_free+0x32/0x50
[ 1157.545695][    C1]  kfree+0x12a/0x3b0
[ 1157.549608][    C1]  xpad_disconnect+0x1cf/0x580
[ 1157.554380][    C1]  usb_unbind_interface+0x1e8/0x970
[ 1157.559597][    C1]  device_remove+0x122/0x170
[ 1157.564197][    C1]  device_release_driver_internal+0x44a/0x610
[ 1157.570281][    C1]  bus_remove_device+0x22f/0x420
[ 1157.575228][    C1]  device_del+0x396/0x9f0
[ 1157.579568][    C1]  usb_disable_device+0x36c/0x7f0
[ 1157.584610][    C1]  usb_disconnect+0x2e1/0x920
[ 1157.589292][    C1]  hub_event+0x1da5/0x4e10
[ 1157.593804][    C1]  process_one_work+0x9c5/0x1b40
[ 1157.598741][    C1]  worker_thread+0x6c8/0xf00
[ 1157.603341][    C1]  kthread+0x2c1/0x3a0
[ 1157.607417][    C1]  ret_from_fork+0x45/0x80
[ 1157.612022][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1157.616798][    C1] 
[ 1157.619115][    C1] The buggy address belongs to the object at ffff888054374800
[ 1157.619115][    C1]  which belongs to the cache kmalloc-1k of size 1024
[ 1157.633343][    C1] The buggy address is located 145 bytes inside of
[ 1157.633343][    C1]  freed 1024-byte region [ffff888054374800, ffff888054374c00)
[ 1157.647355][    C1] 
[ 1157.649682][    C1] The buggy address belongs to the physical page:
[ 1157.656113][    C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888054372800 pfn:0x54370
[ 1157.666189][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1157.674780][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1157.683288][    C1] page_type: 0xfdffffff(slab)
[ 1157.687977][    C1] raw: 00fff00000000240 ffff88801ac41dc0 ffffea0000c3d810 ffffea0001f8ea10
[ 1157.696654][    C1] raw: ffff888054372800 000000000010000a 00000001fdffffff 0000000000000000
[ 1157.705416][    C1] head: 00fff00000000240 ffff88801ac41dc0 ffffea0000c3d810 ffffea0001f8ea10
[ 1157.714091][    C1] head: ffff888054372800 000000000010000a 00000001fdffffff 0000000000000000
[ 1157.722783][    C1] head: 00fff00000000003 ffffea000150dc01 ffffffffffffffff 0000000000000000
[ 1157.731469][    C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 1157.740149][    C1] page dumped because: kasan: bad access detected
[ 1157.746580][    C1] page_owner tracks the page as allocated
[ 1157.752307][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 24, tgid 24 (ksoftirqd/1), ts 457294727870, free_ts 427382176891
[ 1157.772837][    C1]  post_alloc_hook+0x2d1/0x350
[ 1157.777635][    C1]  get_page_from_freelist+0x1351/0x2e50
[ 1157.783186][    C1]  __alloc_pages_noprof+0x22b/0x2460
[ 1157.788483][    C1]  alloc_slab_page+0x4e/0xf0
[ 1157.793168][    C1]  new_slab+0x84/0x260
[ 1157.797252][    C1]  ___slab_alloc+0xdac/0x1870
[ 1157.802040][    C1]  __slab_alloc.constprop.0+0x56/0xb0
[ 1157.807622][    C1]  __kmalloc_noprof+0x367/0x400
[ 1157.812485][    C1]  ieee802_11_parse_elems_full+0xea/0x1680
[ 1157.818390][    C1]  ieee80211_inform_bss+0xfd/0x1100
[ 1157.823597][    C1]  cfg80211_inform_single_bss_data+0x8f6/0x1de0
[ 1157.829843][    C1]  cfg80211_inform_bss_data+0x205/0x3ba0
[ 1157.835479][    C1]  cfg80211_inform_bss_frame_data+0x271/0x7a0
[ 1157.841550][    C1]  ieee80211_bss_info_update+0x311/0xab0
[ 1157.847241][    C1]  ieee80211_scan_rx+0x474/0xac0
[ 1157.852297][    C1]  ieee80211_rx_list+0x1be3/0x2e90
[ 1157.857421][    C1] page last free pid 5857 tgid 5857 stack trace:
[ 1157.863745][    C1]  free_unref_page+0x64a/0xe40
[ 1157.868511][    C1]  vfree+0x181/0x7a0
[ 1157.872409][    C1]  kcov_put+0x2a/0x40
[ 1157.876404][    C1]  kcov_close+0xd/0x20
[ 1157.880486][    C1]  __fput+0x3f6/0xb60
[ 1157.884482][    C1]  task_work_run+0x14e/0x250
[ 1157.889183][    C1]  do_exit+0xaa3/0x2bb0
[ 1157.893350][    C1]  do_group_exit+0xd3/0x2a0
[ 1157.897863][    C1]  get_signal+0x25fb/0x2770
[ 1157.902385][    C1]  arch_do_signal_or_restart+0x90/0x7e0
[ 1157.907939][    C1]  syscall_exit_to_user_mode+0x150/0x2a0
[ 1157.913591][    C1]  do_syscall_64+0xda/0x250
[ 1157.918098][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.924042][    C1] 
[ 1157.926383][    C1] Memory state around the buggy address:
[ 1157.932032][    C1]  ffff888054374780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1157.940206][    C1]  ffff888054374800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1157.948287][    C1] >ffff888054374880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1157.956343][    C1]                          ^
[ 1157.960925][    C1]  ffff888054374900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1157.968996][    C1]  ffff888054374980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1157.977069][    C1] ==================================================================
[ 1157.985126][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1157.992326][    C1] CPU: 1 UID: 0 PID: 4670 Comm: udevd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
[ 1158.002314][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1158.012383][    C1] Call Trace:
[ 1158.015673][    C1]  <IRQ>
[ 1158.018531][    C1]  dump_stack_lvl+0x3d/0x1f0
[ 1158.023137][    C1]  panic+0x6dc/0x7c0
[ 1158.027050][    C1]  ? __pfx_panic+0x10/0x10
[ 1158.031568][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1158.036351][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.041395][    C1]  ? check_panic_on_warn+0x1f/0xb0
[ 1158.046525][    C1]  check_panic_on_warn+0xab/0xb0
[ 1158.051482][    C1]  end_report+0x117/0x180
[ 1158.055915][    C1]  kasan_report+0xe9/0x110
[ 1158.060365][    C1]  ? register_lock_class+0x101f/0x1230
[ 1158.065900][    C1]  ? register_lock_class+0x101f/0x1230
[ 1158.071406][    C1]  register_lock_class+0x101f/0x1230
[ 1158.076753][    C1]  ? __pfx_register_lock_class+0x10/0x10
[ 1158.082430][    C1]  ? __wake_up_klogd.part.0+0x99/0xf0
[ 1158.088009][    C1]  __lock_acquire+0x135/0x3cb0
[ 1158.092838][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1158.098081][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1158.103325][    C1]  lock_acquire+0x1b1/0x560
[ 1158.107878][    C1]  ? __wake_up+0x1c/0x60
[ 1158.112160][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1158.117206][    C1]  ? find_held_lock+0x2d/0x110
[ 1158.122168][    C1]  ? __usb_hcd_giveback_urb+0x466/0x6e0
[ 1158.127740][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.132792][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1158.137998][    C1]  _raw_spin_lock_irqsave+0x3a/0x60
[ 1158.143277][    C1]  ? __wake_up+0x1c/0x60
[ 1158.147549][    C1]  __wake_up+0x1c/0x60
[ 1158.151659][    C1]  usb_anchor_resume_wakeups+0xc2/0xe0
[ 1158.157142][    C1]  __usb_hcd_giveback_urb+0x3b7/0x6e0
[ 1158.162556][    C1]  usb_hcd_giveback_urb+0x396/0x450
[ 1158.167836][    C1]  dummy_timer+0x17c3/0x38d0
[ 1158.172462][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1158.177880][    C1]  ? __hrtimer_run_queues+0x5a7/0xcc0
[ 1158.183294][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.188524][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1158.193495][    C1]  ? timerqueue_del+0x83/0x150
[ 1158.198282][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1158.203237][    C1]  __hrtimer_run_queues+0x20c/0xcc0
[ 1158.208460][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1158.214196][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[ 1158.220290][    C1]  hrtimer_interrupt+0x31b/0x800
[ 1158.225248][    C1]  __sysvec_apic_timer_interrupt+0x10f/0x450
[ 1158.231253][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[ 1158.236917][    C1]  </IRQ>
[ 1158.239866][    C1]  <TASK>
[ 1158.242798][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1158.248872][    C1] RIP: 0010:lock_acquire+0x1f2/0x560
[ 1158.254183][    C1] Code: c1 05 ea b0 98 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[ 1158.273977][    C1] RSP: 0018:ffffc90004487bf8 EFLAGS: 00000206
[ 1158.280237][    C1] RAX: dffffc0000000000 RBX: 1ffff92000890f81 RCX: 0000000000000001
[ 1158.288410][    C1] RDX: 0000000000000001 RSI: ffffffff8b4cddc0 RDI: ffffffff8bb118a0
[ 1158.296422][    C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2d39ae2
[ 1158.304507][    C1] R10: ffffffff969cd717 R11: 0000000000000000 R12: 0000000000000001
[ 1158.312606][    C1] R13: 0000000000000000 R14: ffffffff8df3fa20 R15: 0000000000000000
[ 1158.320602][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1158.325653][    C1]  ? ___sys_recvmsg+0x127/0x1a0
[ 1158.330701][    C1]  fs_reclaim_acquire+0x102/0x160
[ 1158.335746][    C1]  ? kmem_cache_alloc_noprof+0x54/0x2f0
[ 1158.341314][    C1]  kmem_cache_alloc_noprof+0x54/0x2f0
[ 1158.346805][    C1]  ? getname_flags.part.0+0x4c/0x550
[ 1158.352149][    C1]  getname_flags.part.0+0x4c/0x550
[ 1158.357284][    C1]  getname+0x8d/0xe0
[ 1158.361219][    C1]  do_sys_openat2+0x104/0x1e0
[ 1158.365944][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1158.371183][    C1]  ? __pfx___sys_recvmsg+0x10/0x10
[ 1158.376317][    C1]  ? ktime_get_ts64+0x1ad/0x2a0
[ 1158.381191][    C1]  __x64_sys_openat+0x175/0x210
[ 1158.386073][    C1]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1158.391478][    C1]  do_syscall_64+0xcd/0x250
[ 1158.396020][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.402028][    C1] RIP: 0033:0x7fab28d169a4
[ 1158.406455][    C1] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 1158.426445][    C1] RSP: 002b:00007ffdd9d2b320 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1158.434876][    C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fab28d169a4
[ 1158.442855][    C1] RDX: 0000000000080000 RSI: 00007ffdd9d2b458 RDI: 00000000ffffff9c
[ 1158.450834][    C1] RBP: 00007ffdd9d2b458 R08: 0000000000000008 R09: 0000000000000001
[ 1158.458899][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
[ 1158.466872][    C1] R13: 000055fe1c524b42 R14: 0000000000000001 R15: 0000000000000000
[ 1158.474857][    C1]  </TASK>
[ 1159.650793][    C1] Shutting down cpus with NMI
[ 1159.655817][    C1] Kernel Offset: disabled
[ 1159.660147][    C1] Rebooting in 86400 seconds..