last executing test programs:

16.692475856s ago: executing program 3 (id=1352):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0x4020940d, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f00004a0000/0x4000)=nil, 0x0, 0x0})

15.62503915s ago: executing program 3 (id=1358):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000100))
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={0x10000c, 0x0, 0x100000, {r4}}, 0x20)
clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)

15.362961925s ago: executing program 3 (id=1360):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10)
r2 = syz_io_uring_setup(0x6a4e, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000400), &(0x7f0000000140))
syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0)

15.091084018s ago: executing program 3 (id=1362):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04020f9e3194d7423862db03e9a105880400"], 0x12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x90)
memfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
syz_emit_ethernet(0x69, &(0x7f0000000500)={@link_local, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {}, {0x3ff}, {0x3}, {0x7}], @llc={@llc={0x7e, 0x42, '<{', "b6570b6a66b028c6e96d648317312df112a280c40b82bf54f6ba458849486e214a64a99ecde5ec2d5403a53caf8ec81261e7d88006a6109d636427"}}}}}}, 0x0)
pipe2(&(0x7f0000000000), 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044)
r5 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @tid=r5}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x3c}}, 0x0)

8.610861134s ago: executing program 4 (id=1388):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x13)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x34, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(0x0, 0x22)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0affffffffffff004fe2fb"], 0xd)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd)
syz_emit_vhci(0x0, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080440c80002a895d1a32f0b805ee219f1928a251118516ee2d612506d8294ff7efb4b249f9f7b7346d1b3f0cded8f6310b489b44f62d27b707135f8c813c5670df4a981e6d58308de71bc7546731173a848b3b9e9ddad50f232afcd754ee610"], 0x7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02cb0012000e00050014000a0000000700ffff00000700"], 0x17)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)

7.342121685s ago: executing program 4 (id=1393):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000), &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
r6 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r6, &(0x7f0000000380)='/', 0x1, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc038563b, &(0x7f0000000000)={0x5})
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00\x14c\x00le\xf44\xed\x9f\x82Ew\x04\x00\x8cm\x00'/37}, 0x83)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r8)
r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r9, &(0x7f0000000680)=""/184, 0xb8)
lseek(r6, 0x0, 0x4)
sendfile(r6, r6, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
mknodat(r5, &(0x7f0000000080)='./file0\x00', 0x2, 0x3ff)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, 0x0], 0x2})
mlock(&(0x7f0000001000/0x1000)=nil, 0x1000)
bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0x1, 0x4004845, 0x0, 0x54)
syz_usb_connect(0x0, 0x24, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x8c, 0x5f, 0xa, 0x40, 0x2c7c, 0x312, 0x5ac7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x73, 0x72}}]}}]}}, 0x0)

6.577965781s ago: executing program 2 (id=1394):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x11, 0xa, 0x300)
r2 = socket$kcm(0x10, 0x3, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async, rerun: 64)
sendmsg$nl_route(r3, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(r2, 0x0, 0x0) (async)
r4 = fcntl$dupfd(r1, 0x0, r1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x47, r6}, './file1\x00'}) (async)
r7 = dup(r5)
write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0xfffffffffffffca6}}, 0x1006)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="7472796c6f63450e6e620000"], 0xc)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x3) (async, rerun: 32)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async, rerun: 32)
write$binfmt_script(r9, &(0x7f0000000080), 0x76e5467) (async)
socket$packet(0x11, 0x2, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
futex(&(0x7f0000001040)=0x1, 0x0, 0x1, &(0x7f0000001080), 0x0, 0x0) (rerun: 32)

6.19289168s ago: executing program 2 (id=1395):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = dup(r2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)

5.277722663s ago: executing program 2 (id=1397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x4}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05550000000000000000070000000c0004400000000001000000000000001100010000000000000000000000000a"], 0x48}}, 0x0)

5.141731133s ago: executing program 2 (id=1398):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
fchdir(0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x3000000, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r5, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x67e7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5fe3}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe96a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0xe875958f435366c2)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0}, &(0x7f00000000c0)=0x40)

4.972670524s ago: executing program 4 (id=1399):
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0xa, @in=@remote}]}]}, 0xfc}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, 0x0, 0x0, 0x4}, 0x20)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="266328fd9035106e50c0d544750452ff8295aa0cfad5716265ce3a3a5ea6acfad01adf32aba2a06c9e3fd542b8288f39b37f74a7156e337d9f4af765b3dcb9c391784daa534222769d698d66a8550fb65ec6130951676f9ec34c57c20e06cdf2e269e17b73efa7694a03bfe07d7b5283bdf395d8ca693e4a2433e0086b75777eab2c1cfab93ede8dd828a4084887446f406083b147cec48798", 0x99}, {&(0x7f0000000440)="82cce78cb20179f235b3e436177e886cbcecd9d8126d1fcd4355473ff181eb64446514716b2332d6bf82baf8da1b2f073a9080ae8b538ad6822a52f160efb9b7f2fe85cf70ee24e9f30177eb68bd1de2861b7474b14c5f46cd4f4e56d142ddfd766a038f9f24f1a3bf837c", 0x6b}, {&(0x7f0000000640)="7506e7db502686b1dd8054f1298e12a0d56db7216cee8d9bf45169f59fe8de3220b1dda74ce5a03b2152b09fe94590d3e71ff76d66d442824f0b16f90a78d9507f0788237437b8cba2005e7e763b6a52e609b98d911809d60baae4ca48e57f6a5dcb6da38fc1d575e943fbea77d7c6962318428a0a59e9df50a7686a66a76079b78e27d2313edfc4e3220d1b395cdc3e2b7a5980fc0b19", 0x97}], 0x3, &(0x7f0000000240)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x0, 0xfe, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback, @loopback]}}}], 0x58}}], 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELCHAIN={0x368, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0xec, 0xc, "38f9d16bc1e93ba3eb4da28a65c431cb8ea05f9bfc5dc0857c9ad84d35291a888cc98c26a593cc44dbc2b0ddbb682db5a1f98e6fc5e2c2c9af163667e7389bb043b7b714838524efe1c1c9d43d309fea9a8d6f5ad7b55e9ceb885e79a70c1550552b3aebb1b2a49ede8a6a05efbd2ea30e8630aba87f8787e2b663c339da45d9a1279b16dc74cc270046daffdf2160f07d854a8a98222f7df45e772653ab03c0b11e4385fd0a0e750b284f5c2e6c8efebc4164f44b55c6c9f4e289b212b254b6ddb7bfcd92fa84044069b9e00659cc18d10751035e976d10fa4f208ee662af7edf5867fa994caabc"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xb9, 0xc, "9455e837e1320d514097a8a8f86954d38f6b7e5eca92d3fe7e0ff5b2939798efbd2250e5dffefbbed9a0e795fc0a2322d02b8ae1ea02507b27082098b0749d2af5c591ee7096e9581000d61faca2e0d05b847b83c70685988b0739d6d5c411b18128052dc16b760ec6310ae1a23b1c017b148e01bb1815d252506f178dd249468cbc8af74a092d458adf742fa940a19f3b38ede8cd55729c486f11480b95d9741b097c93f97abef1da9fa717d811e3df4d241d71ac"}, @NFTA_CHAIN_USERDATA={0xdd, 0xc, "818a350ca96b33b8ae684b2bc84df00335067385606fba550261e8fc276dd2f7031f6eaf0350041a93864dd22ab4b112ffd898485b65efbfdb7827912b4207d424e03827c42a7484e27f7cdff0a51b06ced5b403908d33652df8630032abd88321577f7fad2ddad96dcf4e288be9c778c287c6d7b3b3c7c7b8589d551391c99a12e204b2f53b1b2120de419d72ba71e07f70a41db10808d03707742e1aadf85e94087f102eca88ae4faf3236a5d53072cfa730d39abccbf17a64f5dbd2f8fd998102d6185e3b9a0a9c93654bfb6dd9fbe11af9eed9580066ba"}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6974d69}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56d47ff4}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65505b61}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xde4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x390}}, 0x0)

4.744601792s ago: executing program 2 (id=1402):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x13)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x34, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(0x0, 0x22)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0affffffffffff004fe2fb"], 0xd)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd)
syz_emit_vhci(0x0, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080440c80002a895d1a32f0b805ee219f1928a251118516ee2d612506d8294ff7efb4b249f9f7b7346d1b3f0cded8f6310b489b44f62d27b707135f8c813c5670df4a981e6d58308de71bc7546731173a848b3b9e9ddad50f232afcd754ee610"], 0x7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02cb0012000e00050014000a0000000700ffff00000700"], 0x17)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)

4.685564081s ago: executing program 4 (id=1403):
socket$alg(0x26, 0x5, 0x0)
r0 = syz_usbip_server_init(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mbind(&(0x7f0000596000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x5, 0x2)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
msgget$private(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00c458c0f70000005c000000"])
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_ts_info})
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000001da06d3e33827aeda72c61f040025f68f857cc2b4ee000000000040b6d728f3836a28"], 0x14}}, 0x0)
pipe(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000040000000000a000000d00001800c000280050001000000020014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064400000000060005"], 0xe4}}, 0x0)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

3.690915287s ago: executing program 0 (id=1405):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
socket$packet(0x11, 0x3, 0x300)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x6, 0x1000, 0x1, 0x2000}, 0x0, 0x0) (async)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x6, 0x1000, 0x1, 0x2000}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil) (async)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000598000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x20000000000000, 0x2)

3.581411609s ago: executing program 1 (id=1406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = dup(r2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)

3.37499221s ago: executing program 0 (id=1407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x4}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05550000000000000000070000000c0004400000000001000000000000001100010000000000000000000000000a"], 0x48}}, 0x0)

3.25442857s ago: executing program 0 (id=1408):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1bc0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x0, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x443)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x3)
syz_io_uring_setup(0x0, &(0x7f0000000400), 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2)
pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
pselect6(0x40, &(0x7f0000000080)={0xc, 0x4, 0x401, 0x5, 0x6, 0x81, 0x3, 0x400}, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0x4, 0xffffffff7fffffff, 0x20, 0x3, 0x9}, &(0x7f0000000140)={0x3, 0x5d, 0x4, 0x200000000000a070, 0x0, 0x141b, 0x5, 0x5}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffffffff]}, 0x8})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={<r3=>0x0})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r4, 0x3, r2, 0x6})
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x2}, 0x8)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000127bd7000fedbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="0c009900f9ffffff02000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000002780)={'batadv0\x00', 0x85})
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
close(r8)
syz_io_uring_setup(0x0, 0x0, &(0x7f00000004c0), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)

3.23282962s ago: executing program 2 (id=1409):
socket$l2tp(0x2, 0x2, 0x73)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x32, 0x0, 0x0)
pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x40, 0x11, 0xdd, {0xdd, 0x22, "03c130af340d478cb439a0821b6071fb02a19a32cdaf9dfec3dfd2934c6219221975c4b12f81b3ceefe8cf4cc3202112d685a26d11101287db8094bc49196ed1f82515f245c227562a93a24c8c78efbd132ebbc546405a2244fbcdbbffa948dfb355ce65e8d7ebec98e8d2b319667fb787e5a63942aac68152ef681b070483c956e215e5c4217b5663f4fa2944bba0285344526b18cd3a5a50502db88339aa9a2ef255a38a350e4a084a3ec9c12490ff5b68284ddc51b80e486d3cce2f39bac328860ca51c3a88f95a4a18d54de1e00bea46a2b822d3cf87ebc445"}}, &(0x7f0000000000)={0x0, 0x3, 0x75, @string={0x75, 0x3, "fcb44c32e47827b3d435e69cf76b4c6eccb0387240e69b3b729e7380168b95d62934aef3ab0eea93bca4b2d1ca23097dbf17742c711dfbc9a48b4ebb39ab67ca1ee23403ae8aec15e5c652e67f941794eed7ca7d1be8e3a3abdc3b45d797022f166ee9c11e23a0017fd45c154f52ecf3d6658b"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="200df0000000fbdfbaf255972194e1255d8a69349fb6e7f0f0b3017635382b3eed48ace17b9f291c3f4f90ed19a3b6c4d257a593b0a2c6d67061aaf4985c13a6c51c14170dfb0c583b43f11ecbd4b50e0defb9ea543addb64f691079b695488f66549018b298fa126d3ee04828f4f878ced7d98cd41a7fc69ae95a6bd3124e6618d43ef16b6c767e9b1eedcce4de97ff55441565c75d67fd4ab0a067f34b845e0e83b1e44a8c1d38830892f0e973f10b7a4b2cfceb035f4e9f9f5faf4fa5b91b0c2016a9dc774e8ec228abcb6679aed05ba1c0758efc2d93ab296f900e829bf6ae357c6f0422b8b705944d46a181f7b8900000000000"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xb9}, &(0x7f0000000440)={0x20, 0x0, 0x64, {0x62, "15bf77b300df8deb94cbbbb16461ba961288a2f296e573b4b9a9ed8257b92baba22034b5442520fa8ab069cef45225cc8a515fa274f4244a801c701464a8c8dcc8b623d24ac2efb6f3519404d4202ac71e82844c4049651a980b741d95c162bd1ed2"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x2e}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x93}})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r4, {0x7, 0x1f, 0x0, 0x199c28, 0x0, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
flock(r5, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000040), 0x4)

3.187633029s ago: executing program 4 (id=1410):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], 0x0}, 0x90)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="e971e38dd32dce2274dbb8a6b1b10b5e1cb8514f3ddfa843e9c6e5de9dbb0e25d4fa4bab5db6eb8208770856231b46df24b1863090ff22b02ee5c5b77713a153adb3600e825293d4767b5861c5545537ba995470c8aa4bc6643b8f7646ef0590276594ecb4e21f56e4c117e08c73f25a123fefa67f3ac0454f0282f6886224ceeb2926f6cc26dc80acec971635de6db038b62cdd0c27f621cb08b8ce5a3fcf3f08e5347d23fb0b8f2442df273a99f5f9293c7801a0f9f9e252a273fbc6318da2e017fb1945e7192ff9bbec6dae5a1c13742e3d4a9bca3f177b2657bcb126955df470d0c0d1588f5be4886d265e4d1fdfb5c0ff7a", 0xf4}], 0x1}, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
close(r2)

2.741501082s ago: executing program 1 (id=1411):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd000})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000190a01"], 0x20}}, 0x0)
capset(0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x2002100, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0)

2.433462872s ago: executing program 1 (id=1412):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1070, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x42)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0)
creat(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64)
madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x10, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48)

2.218343006s ago: executing program 4 (id=1413):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x92, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), 0x0}, 0x20)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001020104000000002f2c00000a0000003c0002802c000180140003002001000000000000000000000000000014000400fe880000000000210000000000000001040002"], 0x50}}, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0xea60}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010027bd700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000d849e96c6dff8868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000300000000000c00150000000000ffff00"], 0xc4}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x0)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r5)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f000000c3c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0xffffffffffffffda, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd2537c0dd811bcba2c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331337c3592a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128be2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb79cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6b62a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01e84ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be348604f315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df7ffc6430ec58955fdf1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5c66da0586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa7", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000080)='./file0\x00', 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r0, 0x80047437, 0x1000000000000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="130100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b24"], 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

2.2086821s ago: executing program 0 (id=1414):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x262}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
io_submit(0x0, 0x0, &(0x7f0000000640))
r3 = socket(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0xb, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15)
set_mempolicy(0x6, 0x0, 0xe0)
unshare(0x0)
unshare(0x26020280)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)

1.510910953s ago: executing program 3 (id=1363):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000190001"], 0x54}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0x1000, &(0x7f0000000cc0)=""/4096}, {0x0, 0x5, &(0x7f0000000240)=""/5}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_vhci(&(0x7f0000002540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x5, 0x3}}}}, 0x8)
gettid()
inotify_init1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}]}, 0x30}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x39c6}, 0x90)

1.382915467s ago: executing program 1 (id=1415):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002003040000000000000002000020d3"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00')
read$FUSE(r3, &(0x7f00000099c0)={0x2020}, 0x2020)
read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006980)={0x2020}, 0x2020)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000004001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x0)

1.19529199s ago: executing program 0 (id=1416):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x2, 0xd4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38)

1.181297814s ago: executing program 1 (id=1417):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x4}})
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05550000000000000000070000000c0004400000000001000000000000001100010000000000000000000000000a"], 0x48}}, 0x0)

991.243293ms ago: executing program 1 (id=1418):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x13)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x34, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(0x0, 0x22)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043b0affffffffffff004fe2fb"], 0xd)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd)
syz_emit_vhci(0x0, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080440c80002a895d1a32f0b805ee219f1928a251118516ee2d612506d8294ff7efb4b249f9f7b7346d1b3f0cded8f6310b489b44f62d27b707135f8c813c5670df4a981e6d58308de71bc7546731173a848b3b9e9ddad50f232afcd754ee6109933d86c16c68a661e665a4580c12535"], 0x7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02cb0012000e00050014000a0000000700ffff00000700"], 0x17)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)

433.737062ms ago: executing program 3 (id=1419):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000)
close(r0)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000180), 0x2, r6})
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x2}, 0x18)
r7 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0)
dup3(r0, r1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

0s ago: executing program 0 (id=1420):
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0xe31, 0x0, 0x0, {{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0xa, @in=@remote}]}]}, 0xfc}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, 0x0, 0x0, 0x4}, 0x20)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="266328fd9035106e50c0d544750452ff8295aa0cfad5716265ce3a3a5ea6acfad01adf32aba2a06c9e3fd542b8288f39b37f74a7156e337d9f4af765b3dcb9c391784daa534222769d698d66a8550fb65ec6130951676f9ec34c57c20e06cdf2e269e17b73efa7694a03bfe07d7b5283bdf395d8ca693e4a2433e0086b75777eab2c1cfab93ede8dd828a4084887446f406083b147cec48798", 0x99}, {&(0x7f0000000440)="82cce78cb20179f235b3e436177e886cbcecd9d8126d1fcd4355473ff181eb64446514716b2332d6bf82baf8da1b2f073a9080ae8b538ad6822a52f160efb9b7f2fe85cf70ee24e9f30177eb68bd1de2861b7474b14c5f46cd4f4e56d142ddfd766a038f9f24f1a3bf837c", 0x6b}, {&(0x7f0000000640)="7506e7db502686b1dd8054f1298e12a0d56db7216cee8d9bf45169f59fe8de3220b1dda74ce5a03b2152b09fe94590d3e71ff76d66d442824f0b16f90a78d9507f0788237437b8cba2005e7e763b6a52e609b98d911809d60baae4ca48e57f6a5dcb6da38fc1d575e943fbea77d7c6962318428a0a59e9df50a7686a66a76079b78e27d2313edfc4e3220d1b395cdc3e2b7a5980fc0b19", 0x97}], 0x3, &(0x7f0000000240)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x0, 0xfe, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback, @loopback]}}}], 0x58}}], 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

_slab_alloc+0x58/0xa0
[  284.865740][ T9837]  ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0
[  284.871801][ T9837]  kmem_cache_alloc_noprof+0x1c1/0x2a0
[  284.877266][ T9837]  __kvm_mmu_topup_memory_cache+0x1e3/0x6b0
[  284.883170][ T9837]  kvm_mmu_load+0x115/0x26e0
[  284.887759][ T9837]  ? __mutex_unlock_slowpath+0x21d/0x750
[  284.893390][ T9837]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  284.899374][ T9837]  ? __pfx_kvm_mmu_load+0x10/0x10
[  284.904397][ T9837]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  284.910378][ T9837]  ? __asan_memset+0x23/0x50
[  284.914961][ T9837]  ? vmx_flush_tlb_guest+0x1e5/0x310
[  284.920242][ T9837]  ? __pfx_vmx_flush_tlb_guest+0x10/0x10
[  284.925868][ T9837]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  284.931845][ T9837]  ? kvm_apic_has_interrupt+0x9d4/0xa70
[  284.937396][ T9837]  vcpu_run+0x6b72/0x87f0
[  284.941788][ T9837]  ? __pfx_vcpu_run+0x10/0x10
[  284.946461][ T9837]  ? __local_bh_enable_ip+0x168/0x200
[  284.951828][ T9837]  ? lockdep_hardirqs_on+0x99/0x150
[  284.957029][ T9837]  ? __pfx_lock_acquire+0x10/0x10
[  284.962042][ T9837]  ? fpu_swap_kvm_fpstate+0x82/0x460
[  284.967318][ T9837]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  284.973030][ T9837]  ? xfd_validate_state+0x6e/0x150
[  284.978136][ T9837]  ? rcu_is_watching+0x15/0xb0
[  284.982904][ T9837]  ? rcu_is_watching+0x15/0xb0
[  284.987664][ T9837]  kvm_arch_vcpu_ioctl_run+0xa7e/0x1920
[  284.993214][ T9837]  ? mark_lock+0x9a/0x350
[  284.997547][ T9837]  ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920
[  285.003259][ T9837]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  285.009251][ T9837]  ? __pfx_lock_acquire+0x10/0x10
[  285.014266][ T9837]  ? get_task_pid+0x23/0x310
[  285.018853][ T9837]  ? __pfx_lock_release+0x10/0x10
[  285.023865][ T9837]  ? kvm_vcpu_ioctl+0x1d9/0xd00
[  285.028725][ T9837]  ? get_task_pid+0x23/0x310
[  285.033312][ T9837]  kvm_vcpu_ioctl+0x7f5/0xd00
[  285.037995][ T9837]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  285.043205][ T9837]  ? __fget_files+0x29/0x470
[  285.047795][ T9837]  ? __fget_files+0x3f6/0x470
[  285.052462][ T9837]  ? __fget_files+0x29/0x470
[  285.057135][ T9837]  ? bpf_lsm_file_ioctl+0x9/0x10
[  285.062063][ T9837]  ? security_file_ioctl+0x87/0xb0
[  285.067165][ T9837]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  285.072357][ T9837]  __se_sys_ioctl+0xfc/0x170
[  285.076948][ T9837]  do_syscall_64+0xf3/0x230
[  285.081451][ T9837]  ? clear_bhb_loop+0x35/0x90
[  285.086128][ T9837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.092028][ T9837] RIP: 0033:0x7f31cef75bd9
[  285.096437][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.116034][ T9837] RSP: 002b:00007f31cfde8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.124440][ T9837] RAX: ffffffffffffffda RBX: 00007f31cf103f60 RCX: 00007f31cef75bd9
[  285.132403][ T9837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  285.140368][ T9837] RBP: 00007f31cfde80a0 R08: 0000000000000000 R09: 0000000000000000
[  285.148333][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  285.156293][ T9837] R13: 000000000000000b R14: 00007f31cf103f60 R15: 00007f31cf22fa78
[  285.164274][ T9837]  </TASK>
[  285.175122][ T5101] Bluetooth: hci2: command tx timeout
[  285.233292][ T5091] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  285.246467][ T2902] bridge_slave_1: left allmulticast mode
[  285.252132][ T2902] bridge_slave_1: left promiscuous mode
[  285.259707][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.270209][ T2902] bridge_slave_0: left allmulticast mode
[  285.280127][ T2902] bridge_slave_0: left promiscuous mode
[  285.286248][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.324374][   T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  285.486068][ T5101] Bluetooth: hci1: command tx timeout
[  285.513946][   T25] usb 5-1: Using ep0 maxpacket: 32
[  285.530669][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  285.561378][   T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=ca.76
[  285.576167][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.584774][   T25] usb 5-1: Product: syz
[  285.588951][   T25] usb 5-1: Manufacturer: syz
[  285.593532][   T25] usb 5-1: SerialNumber: syz
[  285.600973][   T25] usb 5-1: config 0 descriptor??
[  285.612241][   T25] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  285.760474][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.772311][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.783274][ T2902] bond0 (unregistering): Released all slaves
[  285.817012][ T4531] bcm5974 5-1:0.0: could not read from device
[  285.837595][ T4531] bcm5974 5-1:0.0: could not read from device
[  285.887232][   T25] usb 5-1: USB disconnect, device number 16
[  285.903997][ T4531] bcm5974 5-1:0.0: could not read from device
[  286.284119][ T5091] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT)
[  286.305820][ T5091] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  286.408570][ T9808] chnl_net:caif_netlink_parms(): no params data found
[  286.464657][ T9864] netlink: 'syz.1.980': attribute type 3 has an invalid length.
[  286.485533][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  286.628354][ T2902] hsr_slave_0: left promiscuous mode
[  286.654710][ T2902] hsr_slave_1: left promiscuous mode
[  286.662038][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.678798][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.701679][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.710012][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.757567][ T2902] veth1_macvtap: left promiscuous mode
[  286.764426][ T2902] veth0_macvtap: left promiscuous mode
[  286.770212][ T2902] veth1_vlan: left promiscuous mode
[  286.776458][ T2902] veth0_vlan: left promiscuous mode
[  286.992711][   T25] usb 4-1: USB disconnect, device number 21
[  287.254611][ T5101] Bluetooth: hci2: command tx timeout
[  287.497200][ T2902] team0 (unregistering): Port device team_slave_1 removed
[  287.540744][ T2902] team0 (unregistering): Port device team_slave_0 removed
[  287.563855][ T5101] Bluetooth: hci1: command tx timeout
[  288.028376][ T9869] netlink: 'syz.1.980': attribute type 4 has an invalid length.
[  288.054238][ T9871] netlink: 'syz.4.981': attribute type 10 has an invalid length.
[  288.070546][ T9871] bond0: (slave netdevsim0): Releasing backup interface
[  288.084817][ T9871] team0: Port device netdevsim0 added
[  288.169515][ T9872] netlink: 'syz.1.980': attribute type 4 has an invalid length.
[  288.183146][ T9873] netlink: 'syz.4.981': attribute type 10 has an invalid length.
[  288.214698][ T9873] team0: Port device netdevsim0 removed
[  288.229655][ T9873] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  288.242023][ T9878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.982'.
[  288.655112][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.662490][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.676971][ T9808] bridge_slave_0: entered allmulticast mode
[  288.689744][ T9808] bridge_slave_0: entered promiscuous mode
[  288.749069][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.763239][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.793983][ T9808] bridge_slave_1: entered allmulticast mode
[  288.816743][ T9808] bridge_slave_1: entered promiscuous mode
[  288.985034][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.009334][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.097150][ T2902] IPVS: stop unused estimator thread 0...
[  289.105931][ T9808] team0: Port device team_slave_0 added
[  289.145223][ T9808] team0: Port device team_slave_1 added
[  289.203727][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.210828][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.242235][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.254313][   T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  289.306007][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.333502][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.368802][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.381516][ T9736] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  289.438337][ T9736] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  289.452202][ T9736] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  289.473848][   T25] usb 5-1: Using ep0 maxpacket: 16
[  289.491849][ T9736] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  289.547490][ T9808] hsr_slave_0: entered promiscuous mode
[  289.563523][ T9808] hsr_slave_1: entered promiscuous mode
[  289.644176][ T5101] Bluetooth: hci1: command tx timeout
[  289.826958][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'.
[  290.328109][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.399700][ T9736] 8021q: adding VLAN 0 to HW filter on device team0
[  290.468863][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.476234][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.513458][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.520716][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.532135][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'.
[  290.827378][ T9808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  290.882771][ T9808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  290.960439][ T9808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  290.971091][   T25] usb 5-1: unable to get BOS descriptor or descriptor too short
[  290.991521][   T25] usb 5-1: unable to read config index 0 descriptor/start: -71
[  291.003242][ T9808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  291.010916][   T25] usb 5-1: can't read configurations, error -71
[  291.132909][ T9736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.144034][ T5146] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  291.289506][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.320752][ T9736] veth0_vlan: entered promiscuous mode
[  291.335843][ T5146] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  291.358824][ T9808] 8021q: adding VLAN 0 to HW filter on device team0
[  291.365847][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.389801][ T5146] usb 4-1: config 0 descriptor??
[  291.397215][ T9736] veth1_vlan: entered promiscuous mode
[  291.415422][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.422577][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.457713][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.464942][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.568812][ T9736] veth0_macvtap: entered promiscuous mode
[  291.615184][ T9736] veth1_macvtap: entered promiscuous mode
[  291.689252][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.700010][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.723420][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.739996][ T5101] Bluetooth: hci1: command tx timeout
[  291.766814][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.789487][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.814322][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.826445][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.848704][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.859563][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.875456][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.900009][ T5146] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  291.907960][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.918262][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.933799][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.951279][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.987981][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.008666][ T9736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.030096][ T9736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.057323][ T9736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.083852][ T9736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.272785][ T9808] veth0_vlan: entered promiscuous mode
[  292.353059][ T9808] veth1_vlan: entered promiscuous mode
[  292.363386][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.385074][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.403968][ T5494] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  292.471784][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.482988][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.511916][ T9808] veth0_macvtap: entered promiscuous mode
[  292.548633][ T9808] veth1_macvtap: entered promiscuous mode
[  292.595921][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.624251][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.630045][ T5494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.640721][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.663717][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.678475][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.682943][ T5494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.691365][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.738211][ T5494] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  292.754927][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.769576][ T5494] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.782297][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.802500][ T5494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.836519][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.855210][ T5494] usb 2-1: config 0 descriptor??
[  292.874214][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.898286][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.925491][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.927652][ T5146] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT)
[  292.946634][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.957648][ T5146] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  292.983729][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.018264][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.041397][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.070733][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.083011][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.100554][ T9808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.123736][ T9808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.141187][ T9808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.160371][ T9808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.188619][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.996'.
[  293.305288][ T5494] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  293.324972][ T5494] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  293.383957][ T5494] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  293.458262][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.497646][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.572732][ T5139] usb 2-1: USB disconnect, device number 24
[  293.625050][ T2792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.646281][ T5091] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  293.647873][ T2792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.771381][  T929] usb 4-1: USB disconnect, device number 22
[  293.836873][ T5091] usb 3-1: Using ep0 maxpacket: 16
[  293.857074][ T5091] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  293.934343][ T5091] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  293.944025][ T5091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.952037][ T5091] usb 3-1: Product: syz
[  293.962193][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  293.983692][ T5091] usb 3-1: Manufacturer: syz
[  293.988320][ T5091] usb 3-1: SerialNumber: syz
[  294.022709][ T5091] usb 3-1: config 0 descriptor??
[  294.047158][ T5091] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  294.078912][ T5091] usb 3-1: Detected FT232R
[  294.154968][    T9] usb 5-1: Using ep0 maxpacket: 16
[  294.188594][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  294.214934][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  294.232707][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  294.286783][ T5091] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  294.294797][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  294.314224][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  294.333977][    T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  294.377399][    T9] usb 5-1: string descriptor 0 read error: -22
[  294.393988][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  294.444314][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.455665][T10001] input: syz0 as /devices/virtual/input/input12
[  294.514938][    T9] usb 5-1: 0:2 : does not exist
[  294.519940][    T9] usb 5-1: unit 0 not found!
[  294.526838][ T9982] fuse: Bad value for 'user_id'
[  294.596664][ T5091] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  294.667780][ T5091] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  294.751485][ T5091] usb 3-1: USB disconnect, device number 31
[  294.809579][ T5091] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  294.886717][ T5091] ftdi_sio 3-1:0.0: device disconnected
[  295.345487][ T5494] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  295.514045][ T5494] usb 4-1: device descriptor read/64, error -71
[  295.817134][ T5494] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  295.990621][T10061] netlink: 'syz.1.1009': attribute type 29 has an invalid length.
[  296.008501][ T5494] usb 4-1: device descriptor read/64, error -71
[  296.037734][T10061] netlink: 'syz.1.1009': attribute type 29 has an invalid length.
[  296.071937][T10061] netlink: 'syz.1.1009': attribute type 29 has an invalid length.
[  296.129859][T10061] program syz.1.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  296.143945][ T5494] usb usb4-port1: attempt power cycle
[  296.483866][   T25] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  296.552093][ T5141] usb 5-1: USB disconnect, device number 19
[  296.584228][ T5494] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  296.656032][ T5494] usb 4-1: device descriptor read/8, error -71
[  296.674009][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  296.691739][T10078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  296.698281][T10078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  296.709658][T10078] vhci_hcd vhci_hcd.0: Device attached
[  296.725320][   T25] usb 2-1: no configurations
[  296.739505][   T25] usb 2-1: can't read configurations, error -22
[  296.778657][T10079] usbip_core: unknown command
[  296.792280][T10079] vhci_hcd: unknown pdu 3020988904
[  296.808651][T10079] usbip_core: unknown command
[  296.813946][ T2792] vhci_hcd: stop threads
[  296.818238][ T2792] vhci_hcd: release socket
[  296.833325][ T2792] vhci_hcd: disconnect device
[  296.841030][ T9999] ALSA: mixer_oss: invalid OSS volume ''
[  296.893122][    T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  296.913215][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.927640][   T25] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  296.935728][ T5494] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  296.965288][    T9] usb 3-1: config 0 descriptor??
[  296.996078][ T5494] usb 4-1: device descriptor read/8, error -71
[  297.003502][T10083] program syz.4.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.134000][ T5494] usb usb4-port1: unable to enumerate USB device
[  297.145401][   T25] usb 2-1: no configurations
[  297.162459][   T25] usb 2-1: can't read configurations, error -22
[  297.181001][   T25] usb usb2-port1: attempt power cycle
[  297.345752][T10078] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1011'.
[  297.355181][T10078] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1011'.
[  297.371967][T10078] netlink: 'syz.4.1011': attribute type 5 has an invalid length.
[  297.380376][T10078] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1011'.
[  297.560113][    T9] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  297.596594][   T25] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  297.634943][   T25] usb 2-1: no configurations
[  297.640242][   T25] usb 2-1: can't read configurations, error -22
[  297.814120][   T25] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  297.858245][   T25] usb 2-1: no configurations
[  297.862887][   T25] usb 2-1: can't read configurations, error -22
[  297.879329][   T25] usb usb2-port1: unable to enumerate USB device
[  298.604457][    T9] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT)
[  298.613173][    T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110
[  299.377649][  T784] usb 3-1: USB disconnect, device number 32
[  299.627516][T10139] usb usb8: usbfs: process 10139 (syz.2.1029) did not claim interface 0 before use
[  299.741611][ T9808] syz-executor (9808) used greatest stack depth: 18128 bytes left
[  299.967800][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.195702][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.236476][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'.
[  300.329236][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.507679][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.900235][   T12] bridge_slave_1: left allmulticast mode
[  300.915264][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.941904][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.951813][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.954222][   T12] bridge_slave_1: left promiscuous mode
[  300.969280][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.992056][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  300.993949][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.010635][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.042110][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  301.108309][   T12] bridge_slave_0: left allmulticast mode
[  301.121849][   T12] bridge_slave_0: left promiscuous mode
[  301.136114][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.263865][    T9] usb 3-1: Using ep0 maxpacket: 8
[  301.287424][    T9] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b
[  301.333850][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.377919][    T9] usb 3-1: config 0 descriptor??
[  301.903775][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  301.928822][T10123] ALSA: mixer_oss: invalid OSS volume ''
[  302.070064][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'.
[  302.158720][    T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  302.170721][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.192850][    T9] usb 2-1: config 0 descriptor??
[  302.256219][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.268479][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.285177][   T12] bond0 (unregistering): Released all slaves
[  302.685055][   T25] usb 3-1: USB disconnect, device number 33
[  302.926248][    T9] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  303.094739][ T5101] Bluetooth: hci1: command tx timeout
[  303.112867][T10196] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  303.351420][   T12] hsr_slave_0: left promiscuous mode
[  303.401362][   T12] hsr_slave_1: left promiscuous mode
[  303.435956][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.448335][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.470612][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.490191][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.634777][   T12] veth1_macvtap: left promiscuous mode
[  303.648453][   T12] veth0_macvtap: left promiscuous mode
[  303.678621][   T12] veth1_vlan: left promiscuous mode
[  303.684334][   T12] veth0_vlan: left promiscuous mode
[  303.917989][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.966177][    T9] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT)
[  303.976413][    T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110
[  304.125770][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.139383][T10216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1047'.
[  304.209004][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.224326][   T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  304.316894][T10217] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1047'.
[  304.329415][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.361828][   T12] team0 (unregistering): Port device team_slave_1 removed
[  304.403376][   T12] team0 (unregistering): Port device team_slave_0 removed
[  304.425970][   T25] usb 3-1: Using ep0 maxpacket: 8
[  304.434404][   T25] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  304.443470][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.471565][   T25] usb 3-1: config 0 descriptor??
[  304.597851][    T9] usb 2-1: USB disconnect, device number 29
[  304.701210][   T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  304.968241][T10158] chnl_net:caif_netlink_parms(): no params data found
[  305.026830][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'.
[  305.049452][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  305.163931][ T5101] Bluetooth: hci1: command tx timeout
[  305.238204][    T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  305.257713][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.268650][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  305.283877][T10158] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.298054][T10158] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.302904][    T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  305.332118][   T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  305.341168][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.348541][T10158] bridge_slave_0: entered allmulticast mode
[  305.366417][    T9] usb 2-1: Product: syz
[  305.382068][T10158] bridge_slave_0: entered promiscuous mode
[  305.382436][   T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  305.388392][    T9] usb 2-1: Manufacturer: syz
[  305.427344][T10158] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.436732][    T9] usb 2-1: SerialNumber: syz
[  305.445485][   T25] asix 3-1:0.0: probe with driver asix failed with error -71
[  305.455774][T10158] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.474911][    T9] usb 2-1: config 0 descriptor??
[  305.481721][T10158] bridge_slave_1: entered allmulticast mode
[  305.493319][   T25] usb 3-1: USB disconnect, device number 34
[  305.511294][    T9] usb-storage 2-1:0.0: USB Mass Storage device detected
[  305.526044][T10158] bridge_slave_1: entered promiscuous mode
[  305.574033][    T9] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  305.604017][ T5146] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  305.606567][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.666050][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.777364][T10158] team0: Port device team_slave_0 added
[  305.808733][T10158] team0: Port device team_slave_1 added
[  305.824580][ T5146] usb 4-1: Using ep0 maxpacket: 16
[  305.835985][ T5146] usb 4-1: unable to get BOS descriptor or descriptor too short
[  305.859271][ T5146] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  305.878346][ T5146] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  305.914889][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.952537][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.961503][ T5146] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  305.972158][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.012535][ T5146] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  306.028498][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.041776][ T5146] usb 4-1: string descriptor 0 read error: -22
[  306.053866][ T5146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.091906][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.099015][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.116381][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.156074][ T5146] usb 4-1: 0:2 : does not exist
[  306.159972][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.160983][ T5146] usb 4-1: unit 0 not found!
[  306.283238][T10158] hsr_slave_0: entered promiscuous mode
[  306.299963][T10158] hsr_slave_1: entered promiscuous mode
[  306.565013][ T5146] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  306.775451][ T5146] usb 3-1: no configurations
[  306.783554][ T5146] usb 3-1: can't read configurations, error -22
[  306.974256][ T5146] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  306.987575][T10269] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  307.184960][T10158] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  307.189322][ T5146] usb 3-1: no configurations
[  307.198944][T10158] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  307.211812][T10158] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  307.212878][ T5146] usb 3-1: can't read configurations, error -22
[  307.233256][ T5146] usb usb3-port1: attempt power cycle
[  307.253949][ T5101] Bluetooth: hci1: command tx timeout
[  307.261199][T10158] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  307.423057][T10158] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.451798][T10158] 8021q: adding VLAN 0 to HW filter on device team0
[  307.467231][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.474425][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.513225][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.520347][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.688646][ T5146] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  307.724312][    T9] usb 2-1: USB disconnect, device number 30
[  307.748331][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.766920][ T5146] usb 3-1: no configurations
[  307.781210][ T5146] usb 3-1: can't read configurations, error -22
[  307.789321][T10283] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  307.892288][T10158] veth0_vlan: entered promiscuous mode
[  307.922769][T10158] veth1_vlan: entered promiscuous mode
[  307.965124][ T5146] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  307.999935][T10158] veth0_macvtap: entered promiscuous mode
[  308.035882][ T5146] usb 3-1: no configurations
[  308.037452][T10158] veth1_macvtap: entered promiscuous mode
[  308.043521][ T5146] usb 3-1: can't read configurations, error -22
[  308.094137][ T5146] usb usb3-port1: unable to enumerate USB device
[  308.101480][ T5101] Bluetooth: hci0: Malformed Event: 0x02
[  308.112430][T10293] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  308.156750][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.172892][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.196832][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.214742][ T5146] usb 4-1: USB disconnect, device number 27
[  308.221858][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.245109][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.259165][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.289088][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.335508][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.381929][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.438278][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.486965][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.528467][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.563004][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.583893][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.594834][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.611091][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.628589][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.651954][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.685799][T10158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.712744][T10158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.727326][T10158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.748827][T10158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.923176][T10324] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  308.929708][T10324] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  308.937510][ T5101] Bluetooth: hci0: ACL packet for unknown connection handle 203
[  308.945264][T10324] vhci_hcd vhci_hcd.0: Device attached
[  309.000024][T10325] usbip_core: unknown command
[  309.005011][T10325] vhci_hcd: unknown pdu 3020988904
[  309.011832][T10325] usbip_core: unknown command
[  309.042553][   T35] vhci_hcd: stop threads
[  309.066313][   T35] vhci_hcd: release socket
[  309.082365][   T35] vhci_hcd: disconnect device
[  309.131347][T10333] program syz.3.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  309.144233][  T784] vhci_hcd: vhci_device speed not set
[  309.192268][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.253666][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.288173][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1064'.
[  309.334708][T10337] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1064'.
[  309.338269][ T5101] Bluetooth: hci1: command tx timeout
[  309.349361][T10337] netlink: 'syz.3.1064': attribute type 5 has an invalid length.
[  309.392625][T10337] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1064'.
[  309.461147][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.484367][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.853753][   T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  310.065761][   T25] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  310.080151][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.120839][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  310.177727][   T25] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  310.216703][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.255749][   T25] usb 3-1: Product: syz
[  310.259974][   T25] usb 3-1: Manufacturer: syz
[  310.285396][  T784] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  310.299977][   T25] usb 3-1: SerialNumber: syz
[  310.317339][  T784] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  310.345072][   T25] usb 3-1: config 0 descriptor??
[  310.372088][   T25] usb-storage 3-1:0.0: USB Mass Storage device detected
[  310.426469][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'.
[  310.440199][   T25] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  311.105381][  T784] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  311.295506][T10390] FAULT_INJECTION: forcing a failure.
[  311.295506][T10390] name failslab, interval 1, probability 0, space 0, times 0
[  311.323381][T10390] CPU: 0 PID: 10390 Comm: syz.0.1074 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  311.328021][  T784] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  311.333552][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  311.333601][T10390] Call Trace:
[  311.355936][T10390]  <TASK>
[  311.358860][T10390]  dump_stack_lvl+0x241/0x360
[  311.363540][T10390]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.368735][T10390]  ? __pfx__printk+0x10/0x10
[  311.373337][T10390]  ? __pfx___might_resched+0x10/0x10
[  311.378637][T10390]  should_fail_ex+0x3b0/0x4e0
[  311.383317][T10390]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  311.389032][T10390]  should_failslab+0x9/0x20
[  311.393551][T10390]  __kmalloc_noprof+0xd8/0x400
[  311.398316][T10390]  ? kfree+0x4e/0x360
[  311.402312][T10390]  tomoyo_realpath_from_path+0xcf/0x5e0
[  311.407872][T10390]  tomoyo_path_number_perm+0x23a/0x880
[  311.413334][T10390]  ? tomoyo_path_number_perm+0x208/0x880
[  311.418974][T10390]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  311.424981][T10390]  ? __fget_files+0x29/0x470
[  311.429568][T10390]  ? __fget_files+0x3f6/0x470
[  311.434237][T10390]  ? __fget_files+0x29/0x470
[  311.438828][T10390]  security_file_ioctl+0x75/0xb0
[  311.443765][T10390]  __se_sys_ioctl+0x47/0x170
[  311.448348][T10390]  do_syscall_64+0xf3/0x230
[  311.452850][T10390]  ? clear_bhb_loop+0x35/0x90
[  311.457524][T10390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.463427][T10390] RIP: 0033:0x7f9420175bd9
[  311.467834][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.487519][T10390] RSP: 002b:00007f9421005048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  311.495928][T10390] RAX: ffffffffffffffda RBX: 00007f9420303f60 RCX: 00007f9420175bd9
[  311.503904][T10390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  311.511869][T10390] RBP: 00007f94210050a0 R08: 0000000000000000 R09: 0000000000000000
[  311.519834][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.527796][T10390] R13: 000000000000000b R14: 00007f9420303f60 R15: 00007f942042fa78
[  311.535773][T10390]  </TASK>
[  311.541689][  T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.554037][  T784] usb 2-1: config 0 descriptor??
[  311.562257][  T784] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  311.597398][T10390] ERROR: Out of memory at tomoyo_realpath_from_path.
[  311.615726][    T9] usb 3-1: USB disconnect, device number 39
[  311.623913][ T5143] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  311.744409][ T5091] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  311.806427][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  311.823717][ T5143] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  311.860115][  T784] usb 2-1: USB disconnect, device number 31
[  311.870003][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.898871][ T5143] usb 4-1: config 0 descriptor??
[  311.926154][ T5091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  311.949198][ T5091] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  311.977961][ T5091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.013908][ T5091] usb 5-1: config 0 descriptor??
[  312.218097][ T5101] Bluetooth: hci1: ACL packet for unknown connection handle 203
[  312.307698][ T5143] ath6kl: Failed to submit usb control message: -71
[  312.331187][ T5143] ath6kl: unable to send the bmi data to the device: -71
[  312.357418][ T5143] ath6kl: Unable to send get target info: -71
[  312.376080][ T5143] ath6kl: Failed to init ath6kl core: -71
[  312.399187][ T5143] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  312.468902][ T5143] usb 4-1: USB disconnect, device number 28
[  312.545996][ T5091] ath6kl: Failed to submit usb control message: -71
[  312.572880][ T5091] ath6kl: unable to send the bmi data to the device: -71
[  312.589312][ T5091] ath6kl: Unable to send get target info: -71
[  312.611292][ T5091] ath6kl: Failed to init ath6kl core: -71
[  312.622386][ T5091] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  312.675689][ T5091] usb 5-1: USB disconnect, device number 20
[  312.952749][T10427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  312.959287][T10427] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  312.998493][T10427] vhci_hcd vhci_hcd.0: Device attached
[  313.097599][T10427] program syz.3.1081 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.123186][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1081'.
[  313.133042][T10427] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1081'.
[  313.155039][T10427] netlink: 'syz.3.1081': attribute type 5 has an invalid length.
[  313.169134][T10427] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1081'.
[  313.325113][ T5143] usb 15-1: new high-speed USB device number 6 using vhci_hcd
[  313.372327][ T5101] Bluetooth: hci0: Malformed Event: 0x02
[  313.445952][T10428] vhci_hcd: connection reset by peer
[  313.459785][   T12] vhci_hcd: stop threads
[  313.475026][   T12] vhci_hcd: release socket
[  313.479575][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.505124][   T12] vhci_hcd: disconnect device
[  313.563397][T10437] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  313.626843][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.699191][T10448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.757145][T10447] rtc_cmos 00:00: Alarms can be up to one day in the future
[  313.996968][ T5101] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  314.124875][ T5101] Bluetooth: hci1: command 0x0406 tx timeout
[  314.248195][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  314.270417][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  314.288765][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  314.305703][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  314.331137][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[  314.682290][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  314.682302][   T29] audit: type=1326 audit(1720915942.342:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.0.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9420175bd9 code=0x0
[  315.480174][T10490] program syz.4.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  315.505975][T10490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1100'.
[  315.527925][T10490] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1100'.
[  315.538187][T10490] netlink: 'syz.4.1100': attribute type 5 has an invalid length.
[  315.548114][T10490] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1100'.
[  316.060541][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'.
[  316.202066][T10510] bridge_slave_1: left allmulticast mode
[  316.202095][T10510] bridge_slave_1: left promiscuous mode
[  316.202466][T10510] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.221887][T10510] bridge_slave_0: left allmulticast mode
[  316.221912][T10510] bridge_slave_0: left promiscuous mode
[  316.222211][T10510] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.727189][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.900475][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.931639][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1111'.
[  316.992817][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.079825][T10527] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1111'.
[  317.129646][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.200267][T10537] program syz.4.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  317.231494][T10537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1114'.
[  317.241558][T10537] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1114'.
[  317.250936][T10537] netlink: 'syz.4.1114': attribute type 5 has an invalid length.
[  317.279949][   T29] audit: type=1326 audit(1720915944.942:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.299373][T10537] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1114'.
[  317.341205][   T29] audit: type=1326 audit(1720915944.942:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.383793][   T29] audit: type=1326 audit(1720915944.972:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.408485][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  317.418998][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  317.430226][   T29] audit: type=1326 audit(1720915944.972:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.535681][  T784] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  317.563524][  T784] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  317.577397][   T29] audit: type=1326 audit(1720915944.972:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.603861][  T784] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  317.622183][  T784] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  317.651953][  T784] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  317.661959][   T29] audit: type=1326 audit(1720915944.972:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.732358][   T29] audit: type=1326 audit(1720915944.972:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.784259][ T5146] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  317.838822][   T29] audit: type=1326 audit(1720915944.972:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  317.861628][ T5494] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  317.950822][   T29] audit: type=1326 audit(1720915944.972:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7ffc0000
[  318.024391][ T5146] usb 4-1: Using ep0 maxpacket: 8
[  318.045594][ T5146] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  318.078615][ T5494] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  318.091336][ T5494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.111691][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.119934][ T5494] usb 1-1: Product: syz
[  318.119955][ T5494] usb 1-1: Manufacturer: syz
[  318.119970][ T5494] usb 1-1: SerialNumber: syz
[  318.124499][ T5100] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  318.143441][ T5100] Bluetooth: hci0: Injecting HCI hardware error event
[  318.152933][ T5100] Bluetooth: hci0: hardware error 0x00
[  318.169483][ T5494] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  318.186474][  T784] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  318.230370][ T5146] usb 4-1: config 0 descriptor??
[  318.464233][ T5143] vhci_hcd: vhci_device speed not set
[  318.864133][ T5146] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  318.906836][ T5146] asix 4-1:0.0: probe with driver asix failed with error -61
[  319.143887][   T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  319.243872][  T784] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  319.252707][  T784] ath9k_htc: Failed to initialize the device
[  319.314259][  T784] usb 1-1: ath9k_htc: USB layer deinitialized
[  319.374631][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  319.419697][T10579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.435961][   T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  319.460179][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.476769][T10579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.515356][   T25] usb 3-1: config 0 descriptor??
[  319.528664][T10577] program syz.4.1130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.578031][T10577] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1130'.
[  319.587388][T10577] netlink: 'syz.4.1130': attribute type 5 has an invalid length.
[  319.952380][T10587] lo: Master is either lo or non-ether device
[  319.990049][   T25] ath6kl: Failed to submit usb control message: -71
[  320.030829][   T25] ath6kl: unable to send the bmi data to the device: -71
[  320.045044][   T25] ath6kl: Unable to send get target info: -71
[  320.072086][   T25] ath6kl: Failed to init ath6kl core: -71
[  320.079395][   T25] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  320.123015][   T25] usb 3-1: USB disconnect, device number 40
[  320.214511][ T5100] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  320.344836][ T5143] usb 1-1: USB disconnect, device number 30
[  320.555675][   T25] usb 4-1: USB disconnect, device number 29
[  321.121702][T10619] syzkaller1: entered promiscuous mode
[  321.139494][T10619] syzkaller1: entered allmulticast mode
[  321.143865][ T5091] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  321.224432][T10622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  321.230972][T10622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  321.249482][T10625] FAULT_INJECTION: forcing a failure.
[  321.249482][T10625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.266347][T10625] CPU: 0 PID: 10625 Comm: syz.3.1144 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  321.275816][T10622] vhci_hcd vhci_hcd.0: Device attached
[  321.276503][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  321.292005][T10625] Call Trace:
[  321.295294][T10625]  <TASK>
[  321.298234][T10625]  dump_stack_lvl+0x241/0x360
[  321.302933][T10625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.308136][T10625]  ? __pfx__printk+0x10/0x10
[  321.312727][T10625]  ? __pfx_lock_release+0x10/0x10
[  321.317745][T10625]  should_fail_ex+0x3b0/0x4e0
[  321.322420][T10625]  _copy_from_user+0x2f/0xe0
[  321.327004][T10625]  memdup_user+0x64/0xc0
[  321.331236][T10625]  kvm_arch_vm_ioctl+0x808/0x1710
[  321.336255][T10625]  ? mark_lock+0x9a/0x350
[  321.340577][T10625]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  321.346029][T10625]  ? __lock_acquire+0x1346/0x1fd0
[  321.351065][T10625]  ? __pfx_lock_acquire+0x10/0x10
[  321.356076][T10625]  ? is_bpf_text_address+0x26/0x2a0
[  321.361268][T10625]  ? __pfx_lock_release+0x10/0x10
[  321.366281][T10625]  ? deref_stack_reg+0x1c7/0x260
[  321.371219][T10625]  ? is_bpf_text_address+0x285/0x2a0
[  321.376491][T10625]  ? is_bpf_text_address+0x26/0x2a0
[  321.381765][T10625]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  321.387915][T10625]  ? kernel_text_address+0xa7/0xe0
[  321.393021][T10625]  ? __kernel_text_address+0xd/0x40
[  321.398215][T10625]  ? unwind_get_return_address+0x91/0xc0
[  321.403839][T10625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.409899][T10625]  ? arch_stack_walk+0x16d/0x1b0
[  321.414839][T10625]  ? stack_trace_save+0x118/0x1d0
[  321.419858][T10625]  ? __pfx_stack_trace_save+0x10/0x10
[  321.425227][T10625]  ? stack_depot_save_flags+0x29/0x830
[  321.430686][T10625]  ? kasan_save_track+0x51/0x80
[  321.435522][T10625]  ? kasan_save_track+0x3f/0x80
[  321.440360][T10625]  ? kasan_save_free_info+0x40/0x50
[  321.445543][T10625]  ? poison_slab_object+0xe0/0x150
[  321.450671][T10625]  ? __kasan_slab_free+0x37/0x60
[  321.455598][T10625]  ? kfree+0x149/0x360
[  321.459657][T10625]  ? tomoyo_path_number_perm+0x68d/0x880
[  321.465280][T10625]  ? security_file_ioctl+0x75/0xb0
[  321.470381][T10625]  ? __se_sys_ioctl+0x47/0x170
[  321.475139][T10625]  ? do_syscall_64+0xf3/0x230
[  321.479809][T10625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.485973][T10625]  ? do_vfs_ioctl+0xf0e/0x2e50
[  321.490748][T10625]  kvm_vm_ioctl+0x84c/0xd30
[  321.495255][T10625]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  321.500283][T10625]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  321.506604][T10625]  ? tomoyo_path_number_perm+0x208/0x880
[  321.512233][T10625]  ? __pfx_lock_release+0x10/0x10
[  321.517255][T10625]  ? kfree+0x149/0x360
[  321.521323][T10625]  ? tomoyo_path_number_perm+0x71a/0x880
[  321.526953][T10625]  ? tomoyo_path_number_perm+0x208/0x880
[  321.532580][T10625]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  321.538581][T10625]  ? __fget_files+0x29/0x470
[  321.543166][T10625]  ? __fget_files+0x3f6/0x470
[  321.547858][T10625]  ? __fget_files+0x29/0x470
[  321.552474][T10625]  ? bpf_lsm_file_ioctl+0x9/0x10
[  321.557412][T10625]  ? security_file_ioctl+0x87/0xb0
[  321.562520][T10625]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  321.567537][T10625]  __se_sys_ioctl+0xfc/0x170
[  321.572129][T10625]  do_syscall_64+0xf3/0x230
[  321.576635][T10625]  ? clear_bhb_loop+0x35/0x90
[  321.581307][T10625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.587200][T10625] RIP: 0033:0x7f3ac2f75bd9
[  321.591614][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.611230][T10625] RSP: 002b:00007f3ac3d10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.619646][T10625] RAX: ffffffffffffffda RBX: 00007f3ac3103f60 RCX: 00007f3ac2f75bd9
[  321.627613][T10625] RDX: 00000000200003c0 RSI: 000000008208ae63 RDI: 0000000000000004
[  321.635582][T10625] RBP: 00007f3ac3d100a0 R08: 0000000000000000 R09: 0000000000000000
[  321.643544][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.651504][T10625] R13: 000000000000000b R14: 00007f3ac3103f60 R15: 00007f3ac322fa78
[  321.659477][T10625]  </TASK>
[  321.662504][    C0] vkms_vblank_simulate: vblank timer overrun
[  321.713704][ T5091] usb 5-1: Using ep0 maxpacket: 32
[  321.745882][ T5091] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.767907][ T5091] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.803928][ T5091] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  321.813399][ T5091] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  321.823737][   T25] usb 11-1: new high-speed USB device number 4 using vhci_hcd
[  321.824789][ T5091] usb 5-1: Product: syz
[  321.867675][ T5091] usb 5-1: Manufacturer: syz
[  321.875349][T10629] use of bytesused == 0 is deprecated and will be removed in the future,
[  321.889266][T10629] use the actual size instead.
[  321.896510][ T5091] hub 5-1:4.0: USB hub found
[  321.944224][T10627] program syz.1.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.002326][T10627] __nla_validate_parse: 3 callbacks suppressed
[  322.002346][T10627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1143'.
[  322.018044][T10627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1143'.
[  322.027395][T10627] netlink: 'syz.1.1143': attribute type 5 has an invalid length.
[  322.035244][T10627] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1143'.
[  322.107152][ T5091] hub 5-1:4.0: 2 ports detected
[  322.148485][T10623] vhci_hcd: connection reset by peer
[  322.154781][  T138] vhci_hcd: stop threads
[  322.159052][  T138] vhci_hcd: release socket
[  322.182976][  T138] vhci_hcd: disconnect device
[  322.283959][ T5100] Bluetooth: hci0: Opcode 0x206c failed: -110
[  322.696792][  T784] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  322.715716][  T784] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  322.727728][  T784] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  322.747182][  T784] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  322.785352][  T784] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  322.983903][ T9957] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  323.197620][ T9957] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  323.218823][ T9957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.231632][ T9957] usb 3-1: Product: syz
[  323.236624][ T9957] usb 3-1: Manufacturer: syz
[  323.249288][ T9957] usb 3-1: SerialNumber: syz
[  323.272481][ T9957] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  323.299085][  T784] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  323.326233][ T5091] hub 5-1:4.0: hub_hub_status failed (err = -32)
[  323.366189][ T5091] hub 5-1:4.0: config failed, can't get hub status (err -32)
[  323.542488][T10669] syzkaller1: entered promiscuous mode
[  323.566761][T10669] syzkaller1: entered allmulticast mode
[  323.689623][ T9957] usb 5-1: USB disconnect, device number 21
[  323.978808][T10673] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1158'.
[  324.179928][T10682] IPv6: NLM_F_REPLACE set, but no existing node found!
[  324.338740][T10686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  324.345289][T10686] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  324.359305][T10686] vhci_hcd vhci_hcd.0: Device attached
[  324.374483][ T5100] Bluetooth: hci0: Opcode 0x2046 failed: -110
[  324.388520][  T784] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  324.403125][  T784] ath9k_htc: Failed to initialize the device
[  324.419812][T10687] usbip_core: unknown command
[  324.440057][T10687] vhci_hcd: unknown pdu 3020988904
[  324.445616][  T784] usb 3-1: ath9k_htc: USB layer deinitialized
[  324.463934][ T9957] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  324.477059][T10687] usbip_core: unknown command
[  324.517650][T10689] program syz.4.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  324.546332][ T1043] vhci_hcd: stop threads
[  324.559090][ T1043] vhci_hcd: release socket
[  324.565175][ T1043] vhci_hcd: disconnect device
[  324.579003][T10689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1164'.
[  324.589694][T10689] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1164'.
[  324.590041][T10691] usb usb1: usbfs: process 10691 (syz.0.1165) did not claim interface 0 before use
[  324.605793][T10689] netlink: 'syz.4.1164': attribute type 5 has an invalid length.
[  324.620209][T10689] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1164'.
[  324.635902][    T9] usb 17-1: new high-speed USB device number 8 using vhci_hcd
[  324.644525][    T9] usb 17-1: enqueue for inactive port 0
[  324.675473][ T9957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  324.692129][ T9957] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  324.701607][ T9957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.722943][ T9957] usb 4-1: config 0 descriptor??
[  324.733886][    T9] vhci_hcd: vhci_device speed not set
[  325.023821][ T5091] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  325.100608][ T9957] ath6kl: Failed to submit usb control message: -71
[  325.121562][ T9957] ath6kl: unable to send the bmi data to the device: -71
[  325.129724][ T9957] ath6kl: Unable to send get target info: -71
[  325.141838][ T9957] ath6kl: Failed to init ath6kl core: -71
[  325.149227][ T9957] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  325.166652][ T9957] usb 4-1: USB disconnect, device number 30
[  325.194011][ T5091] usb 1-1: device descriptor read/64, error -71
[  325.465467][ T5091] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  325.633728][ T5091] usb 1-1: device descriptor read/64, error -71
[  325.641504][ T9957] usb 3-1: USB disconnect, device number 41
[  325.754043][ T5091] usb usb1-port1: attempt power cycle
[  326.173741][ T5091] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  326.219234][ T5091] usb 1-1: device descriptor read/8, error -71
[  326.272577][T10726] IPv6: NLM_F_REPLACE set, but no existing node found!
[  326.448605][T10735] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  326.455153][T10735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  326.476570][T10735] vhci_hcd vhci_hcd.0: Device attached
[  326.495702][T10737] usbip_core: unknown command
[  326.500408][T10737] vhci_hcd: unknown pdu 3020988904
[  326.504340][ T5091] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  326.523083][T10737] usbip_core: unknown command
[  326.538044][   T35] vhci_hcd: stop threads
[  326.546596][ T5091] usb 1-1: device descriptor read/8, error -71
[  326.546890][   T35] vhci_hcd: release socket
[  326.569772][   T35] vhci_hcd: disconnect device
[  326.653398][T10743] program syz.2.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  326.689156][ T5091] usb usb1-port1: unable to enumerate USB device
[  326.703433][T10743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1177'.
[  326.714443][T10743] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1177'.
[  326.726487][T10743] netlink: 'syz.2.1177': attribute type 5 has an invalid length.
[  326.735741][T10743] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1177'.
[  326.924083][   T25] vhci_hcd: vhci_device speed not set
[  327.301011][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  327.301029][   T29] audit: type=1326 audit(1720915954.962:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7fc00000
[  327.614886][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.657518][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.680702][T10773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1190'.
[  327.706603][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.736790][T10773] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1190'.
[  327.776137][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.854084][T10781] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1192'.
[  328.029640][   T29] audit: type=1326 audit(1720915955.682:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.3.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac2f75bd9 code=0x7fc00000
[  328.155140][T10790] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  328.277915][T10791] program syz.0.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  328.291444][T10791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1195'.
[  328.306327][T10791] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1195'.
[  328.316142][T10791] netlink: 'syz.0.1195': attribute type 5 has an invalid length.
[  328.336062][T10791] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1195'.
[  328.553339][ T1043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.702640][ T1043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.852383][ T1043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.982889][T10805] usb usb1: usbfs: process 10805 (syz.1.1202) did not claim interface 0 before use
[  329.135662][ T1043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.251846][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'.
[  329.362641][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  329.370111][   T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  329.380794][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  329.388980][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  329.397717][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  329.405488][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  329.412723][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  329.468666][ T1043] bridge_slave_1: left allmulticast mode
[  329.476018][T10820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.507100][ T1043] bridge_slave_1: left promiscuous mode
[  329.558743][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.566509][   T25] usb 2-1: device descriptor read/64, error -71
[  329.578828][ T1043] bridge_slave_0: left allmulticast mode
[  329.584709][ T1043] bridge_slave_0: left promiscuous mode
[  329.592535][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.602872][ T5100] Bluetooth: hci1: ACL packet for unknown connection handle 203
[  329.696745][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.707920][T10825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1208'.
[  329.785062][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.805105][T10826] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1208'.
[  329.824958][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.843811][   T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  330.033910][   T25] usb 2-1: device descriptor read/64, error -71
[  330.125730][ T9957] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  330.154299][   T25] usb usb2-port1: attempt power cycle
[  330.313739][ T9957] usb 5-1: Using ep0 maxpacket: 16
[  330.330099][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.330931][ T9957] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  330.360659][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.385030][ T1043] bond0 (unregistering): Released all slaves
[  330.399179][ T9957] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  330.423660][ T9957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.431671][ T9957] usb 5-1: Product: syz
[  330.442586][ T9957] usb 5-1: Manufacturer: syz
[  330.458973][ T9957] usb 5-1: SerialNumber: syz
[  330.496836][ T9957] usb 5-1: config 0 descriptor??
[  330.510454][ T9957] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  330.530817][ T9957] usb 5-1: Detected FT232R
[  330.615038][   T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  330.664247][   T25] usb 2-1: device descriptor read/8, error -71
[  330.710928][ T9957] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  330.728874][ T5100] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  330.891934][ T5100] Bluetooth: hci1: unexpected event for opcode 0x202a
[  330.930401][T10828] fuse: Unknown parameter 'group_id0x0000000000000005'
[  330.957620][   T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  330.991362][ T9957] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  331.017466][   T25] usb 2-1: device descriptor read/8, error -71
[  331.050577][ T9957] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  331.077618][ T9957] usb 5-1: USB disconnect, device number 22
[  331.098533][ T1043] hsr_slave_0: left promiscuous mode
[  331.102557][ T9957] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  331.123197][ T9957] ftdi_sio 5-1:0.0: device disconnected
[  331.164374][   T25] usb usb2-port1: unable to enumerate USB device
[  331.173411][ T1043] hsr_slave_1: left promiscuous mode
[  331.227294][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.246632][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.271487][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.283856][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.342297][ T1043] veth1_macvtap: left promiscuous mode
[  331.348108][ T1043] veth0_macvtap: left promiscuous mode
[  331.361063][ T1043] veth1_vlan: left promiscuous mode
[  331.368023][ T1043] veth0_vlan: left promiscuous mode
[  331.484045][ T5100] Bluetooth: hci4: command tx timeout
[  332.519868][ T1043] team0 (unregistering): Port device team_slave_1 removed
[  332.583808][ T1043] team0 (unregistering): Port device team_slave_0 removed
[  332.846436][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.032636][T10890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.049194][T10890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1221'.
[  333.106978][T10891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.171074][T10891] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1221'.
[  333.188099][T10891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.245606][T10888] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01)
[  333.272087][T10821] chnl_net:caif_netlink_parms(): no params data found
[  333.286208][T10888] wlan1: send auth to 50:50:50:50:50:50 (try 1/3)
[  333.322112][ T2902] wlan1: send auth to 50:50:50:50:50:50 (try 2/3)
[  333.347287][ T2902] wlan1: send auth to 50:50:50:50:50:50 (try 3/3)
[  333.381472][ T2902] wlan1: authentication with 50:50:50:50:50:50 timed out
[  333.563980][ T5100] Bluetooth: hci4: command tx timeout
[  333.651163][T10821] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.696899][T10821] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.723212][T10821] bridge_slave_0: entered allmulticast mode
[  333.789689][T10821] bridge_slave_0: entered promiscuous mode
[  333.908935][T10821] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.957388][T10920] usb usb1: usbfs: process 10920 (syz.2.1226) did not claim interface 0 before use
[  333.978241][T10821] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.002650][T10821] bridge_slave_1: entered allmulticast mode
[  334.027580][T10821] bridge_slave_1: entered promiscuous mode
[  334.066208][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'.
[  334.253770][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.292935][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.326661][  T929] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  334.373300][T10821] team0: Port device team_slave_0 added
[  334.421135][T10821] team0: Port device team_slave_1 added
[  334.494084][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.509093][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.548129][  T929] usb 3-1: device descriptor read/64, error -71
[  334.597073][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.635089][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.642640][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.692616][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.796568][T10821] hsr_slave_0: entered promiscuous mode
[  334.819117][T10821] hsr_slave_1: entered promiscuous mode
[  334.832694][T10821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  334.840923][T10821] Cannot create hsr debugfs directory
[  334.867014][  T929] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  334.924030][ T5100] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  334.938243][ T5100] Bluetooth: hci1: Injecting HCI hardware error event
[  334.947881][ T5101] Bluetooth: hci1: hardware error 0x00
[  335.024139][  T929] usb 3-1: device descriptor read/64, error -71
[  335.164781][  T929] usb usb3-port1: attempt power cycle
[  335.603800][  T929] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  335.644574][ T5100] Bluetooth: hci4: command tx timeout
[  335.667133][  T929] usb 3-1: device descriptor read/8, error -71
[  335.832147][T10821] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  335.869118][T10821] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  335.912347][T10821] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  335.961349][T10821] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  335.985410][  T929] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  336.034560][  T929] usb 3-1: device descriptor read/8, error -71
[  336.155465][  T929] usb usb3-port1: unable to enumerate USB device
[  336.209271][T10821] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.260875][T10821] 8021q: adding VLAN 0 to HW filter on device team0
[  336.301359][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.308483][ T5494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.369514][ T5494] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.376720][ T5494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.519436][T10821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.652886][T10821] veth0_vlan: entered promiscuous mode
[  336.688899][T10821] veth1_vlan: entered promiscuous mode
[  336.789258][T10821] veth0_macvtap: entered promiscuous mode
[  336.828734][T10821] veth1_macvtap: entered promiscuous mode
[  336.908988][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.956899][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.999061][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.014013][ T5101] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  337.075421][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.140492][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.166408][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.196025][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.232568][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.282285][T10821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.326920][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.347366][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.387695][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.411806][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.422354][ T5494] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  337.451004][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.465587][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.477888][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.506717][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.532390][T10821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.586660][T10821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.615088][T10821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.630028][T10821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.642160][ T5494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  337.662789][T10821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.682008][ T5494] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  337.702432][ T5494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.717717][ T5494] usb 3-1: config 0 descriptor??
[  337.725252][ T5101] Bluetooth: hci4: command tx timeout
[  337.980351][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.036166][ T2792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.044463][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.071336][ T2792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.208636][ T5494] ath6kl: Failed to submit usb control message: -71
[  338.240349][ T5494] ath6kl: unable to send the bmi data to the device: -71
[  338.270713][ T5494] ath6kl: Unable to send get target info: -71
[  338.290253][ T5494] ath6kl: Failed to init ath6kl core: -71
[  338.306783][ T5494] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  338.366185][ T5494] usb 3-1: USB disconnect, device number 46
[  338.547429][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'.
[  338.722162][T11047] usb usb1: usbfs: process 11047 (syz.0.1250) did not claim interface 0 before use
[  338.914306][ T5101] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  339.087151][ T5139] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  339.293851][ T5139] usb 1-1: Using ep0 maxpacket: 16
[  339.305798][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  339.331936][ T5139] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  339.349942][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.392639][ T5139] usb 1-1: config 0 descriptor??
[  339.467866][ T5101] Bluetooth: hci4: ACL packet for unknown connection handle 203
[  339.850606][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.877912][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.940553][ T5139] hid (null): bogus close delimiter
[  339.978768][ T5139] hid (null): unknown global tag 0xc
[  340.019320][ T5139] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1
[  340.066545][ T5139] hid-generic 0003:0158:0100.0013: unexpected long global item
[  340.115543][ T5139] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22
[  340.206934][ T5139] usb 1-1: USB disconnect, device number 35
[  340.273746][   T29] audit: type=1326 audit(1720915967.932:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.322519][   T29] audit: type=1326 audit(1720915967.932:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.486089][   T29] audit: type=1326 audit(1720915967.932:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.563868][  T929] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  340.580395][   T29] audit: type=1326 audit(1720915967.932:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.666014][   T29] audit: type=1326 audit(1720915967.932:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.704293][   T29] audit: type=1326 audit(1720915967.932:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.748284][   T29] audit: type=1326 audit(1720915967.932:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.781321][  T929] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  340.821025][   T29] audit: type=1326 audit(1720915967.932:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.843722][  T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.857648][  T929] usb 2-1: config 0 descriptor??
[  340.867697][   T29] audit: type=1326 audit(1720915967.932:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  340.900811][  T929] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  340.952304][  T929] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  340.993821][   T29] audit: type=1326 audit(1720915967.932:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cef75bd9 code=0x7ffc0000
[  341.130754][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'.
[  341.180242][ T5139] usb 2-1: USB disconnect, device number 36
[  341.204755][ T5139] ftdi_sio 2-1:0.0: device disconnected
[  341.234597][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1263'.
[  341.331097][T11108] kernel read not supported for file / 
 (pid: 11108 comm: syz.0.1262)
[  341.593026][T11120] ipt_ECN: cannot use operation on non-tcp rule
[  341.647933][ T5101] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  342.148779][T11139] kernel read not supported for file / 
 (pid: 11139 comm: syz.3.1270)
[  342.163817][ T5139] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  342.366032][ T5139] usb 2-1: Using ep0 maxpacket: 16
[  342.377886][ T5139] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  342.393886][T11143] usb usb1: usbfs: process 11143 (syz.0.1272) did not claim interface 0 before use
[  342.444968][ T5139] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  342.461733][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.472599][ T5139] usb 2-1: Product: syz
[  342.505590][ T5139] usb 2-1: Manufacturer: syz
[  342.510220][ T5139] usb 2-1: SerialNumber: syz
[  342.548402][ T5139] usb 2-1: config 0 descriptor??
[  342.562242][ T5139] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  342.591479][ T5139] usb 2-1: Detected FT232R
[  342.698862][T11147] xt_cluster: node mask cannot exceed total number of nodes
[  342.767999][ T5139] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  342.804736][ T9957] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  342.923795][  T929] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  342.993761][ T9957] usb 1-1: Using ep0 maxpacket: 16
[  343.011287][ T9957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  343.022905][ T9957] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  343.043786][ T9957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.054194][T11137] fuse: Unknown parameter 'group_i0x0000000000000005'
[  343.091641][ T9957] usb 1-1: config 0 descriptor??
[  343.093506][ T5139] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  343.097054][ T5101] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  343.106864][  T929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.113081][ T5101] Bluetooth: hci2: Injecting HCI hardware error event
[  343.130494][ T5101] Bluetooth: hci2: hardware error 0x00
[  343.184679][  T929] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  343.194217][ T5139] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  343.212694][ T5139] usb 2-1: USB disconnect, device number 37
[  343.222671][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.309988][ T5139] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  343.320267][  T929] usb 5-1: config 0 descriptor??
[  343.332980][  T929] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  343.405197][ T5139] ftdi_sio 2-1:0.0: device disconnected
[  343.443856][  T929] usb 5-1: No valid video chain found.
[  343.554235][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.562958][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.628798][ T9957] hid (null): bogus close delimiter
[  343.644008][ T9957] hid (null): unknown global tag 0xc
[  343.655932][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.672769][ T9957] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1
[  343.700653][ T9957] hid-generic 0003:0158:0100.0014: unexpected long global item
[  343.706656][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.737966][ T9957] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22
[  343.812695][ T5139] usb 1-1: USB disconnect, device number 36
[  343.939417][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.959219][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.231339][   T25] usb 5-1: USB disconnect, device number 23
[  344.296163][ T9957] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  344.489340][ T9957] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  344.498728][ T9957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.511842][ T9957] usb 4-1: config 0 descriptor??
[  344.520073][ T9957] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  344.532605][ T9957] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  344.778376][ T9957] usb 4-1: USB disconnect, device number 31
[  344.794778][ T9957] ftdi_sio 4-1:0.0: device disconnected
[  345.143738][  T929] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  345.328381][  T929] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  345.333727][ T5101] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  345.343212][  T929] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  345.396343][  T929] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.409347][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.447486][  T929] usb 5-1: config 0 descriptor??
[  345.481779][  T929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  346.054088][T11202] usb usb1: usbfs: process 11202 (syz.0.1292) did not claim interface 0 before use
[  346.071617][ T5091] usb 5-1: USB disconnect, device number 24
[  346.414728][   T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  346.614233][   T25] usb 1-1: Using ep0 maxpacket: 16
[  346.637467][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  346.652666][   T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  346.663069][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.688007][   T25] usb 1-1: config 0 descriptor??
[  347.118210][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  347.118227][   T29] audit: type=1326 audit(1720915974.782:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.156366][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.196818][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.210646][   T29] audit: type=1326 audit(1720915974.822:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.257738][   T29] audit: type=1326 audit(1720915974.832:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.261011][   T25] hid (null): bogus close delimiter
[  347.280107][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.285993][   T29] audit: type=1326 audit(1720915974.832:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.313939][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.341231][   T29] audit: type=1326 audit(1720915974.832:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.364472][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.384522][   T29] audit: type=1326 audit(1720915974.832:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.424879][   T25] hid (null): unknown global tag 0xc
[  347.449086][   T25] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1
[  347.470078][   T29] audit: type=1326 audit(1720915974.832:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.474796][   T25] hid-generic 0003:0158:0100.0015: unexpected long global item
[  347.532772][   T29] audit: type=1326 audit(1720915974.832:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.563159][   T25] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22
[  347.574611][ T9957] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  347.582480][   T29] audit: type=1326 audit(1720915974.832:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.613764][   T29] audit: type=1326 audit(1720915974.832:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718c575bd9 code=0x7ffc0000
[  347.707018][   T25] usb 1-1: USB disconnect, device number 37
[  347.766335][ T9957] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  347.775773][ T9957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.809067][ T9957] usb 4-1: config 0 descriptor??
[  347.818762][ T9957] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  347.827855][ T9957] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  348.193519][   T25] usb 4-1: USB disconnect, device number 32
[  348.213018][   T25] ftdi_sio 4-1:0.0: device disconnected
[  350.010576][T11288] usb usb1: usbfs: process 11288 (syz.3.1311) did not claim interface 0 before use
[  350.313828][ T5091] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  350.524603][ T5091] usb 4-1: Using ep0 maxpacket: 16
[  350.556258][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  350.634818][ T5091] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  350.697981][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.738877][ T5091] usb 4-1: config 0 descriptor??
[  351.172931][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.214147][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.259353][ T5091] hid (null): bogus close delimiter
[  351.307029][ T5091] hid (null): unknown global tag 0xc
[  351.352400][ T5091] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1
[  351.415938][ T5091] hid-generic 0003:0158:0100.0016: unexpected long global item
[  351.448933][ T5091] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22
[  351.496918][ T5091] usb 4-1: USB disconnect, device number 33
[  352.397303][ T5139] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  352.599756][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  352.679481][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.699671][ T5139] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  352.769939][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.823355][ T5139] usb 5-1: config 0 descriptor??
[  352.847477][T11336] netlink: 528 bytes leftover after parsing attributes in process `syz.2.1325'.
[  352.950123][   T25] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  353.023997][   T25] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  353.041216][   T25] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  353.065142][   T25] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  353.098668][   T25] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  353.125137][  T929] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  353.326684][  T929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  353.336912][  T784] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  353.352046][  T929] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  353.373994][  T929] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  353.427505][  T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.441609][  T929] usb 1-1: config 0 descriptor??
[  353.465255][  T929] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  353.495988][ T5139] hid-led 0003:1D34:000A.0018: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0
[  353.517990][ T5139] hid-led 0003:1D34:000A.0018: Dream Cheeky Webmail Notifier initialized
[  353.545869][  T784] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  353.612493][  T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.651375][  T784] usb 3-1: Product: syz
[  353.667120][  T784] usb 3-1: Manufacturer: syz
[  353.691134][  T784] usb 3-1: SerialNumber: syz
[  353.717655][  T784] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  353.757293][ T5494] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  354.114974][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  354.114993][   T29] audit: type=1326 audit(1720915981.782:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11314 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4226775bd9 code=0x7ffc0000
[  354.155002][   T29] audit: type=1326 audit(1720915981.782:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11314 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4226775bd9 code=0x7ffc0000
[  354.258638][   T29] audit: type=1326 audit(1720915981.902:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11314 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f4226775bd9 code=0x7ffc0000
[  354.332248][   T29] audit: type=1326 audit(1720915981.902:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11314 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4226775bd9 code=0x7ffc0000
[  354.358700][   T29] audit: type=1326 audit(1720915981.902:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11314 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4226775bd9 code=0x7ffc0000
[  354.569842][T11358] netlink: 'syz.3.1329': attribute type 3 has an invalid length.
[  354.579868][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'.
[  354.609335][T11358] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1329'.
[  354.668537][T11359] netlink: 'syz.3.1329': attribute type 4 has an invalid length.
[  354.858318][ T5494] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  354.904374][ T5494] ath9k_htc: Failed to initialize the device
[  354.945895][ T5494] usb 3-1: ath9k_htc: USB layer deinitialized
[  354.959831][T11363] sock: sock_timestamping_bind_phc: sock not bind to device
[  355.422816][ T5139] usb 5-1: USB disconnect, device number 25
[  355.908313][ T5139] usb 1-1: USB disconnect, device number 38
[  355.968354][ T5494] usb 3-1: USB disconnect, device number 47
[  356.147358][   T29] audit: type=1326 audit(1720915983.752:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.0.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9420175bd9 code=0x7ffc0000
[  356.178070][   T29] audit: type=1326 audit(1720915983.752:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.0.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9420175bd9 code=0x7ffc0000
[  356.205237][   T29] audit: type=1326 audit(1720915983.782:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.0.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9420175bd9 code=0x7ffc0000
[  356.238613][   T29] audit: type=1326 audit(1720915983.782:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.0.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9420175bd9 code=0x7ffc0000
[  356.262745][   T29] audit: type=1326 audit(1720915983.782:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.0.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9420175bd9 code=0x7ffc0000
[  356.533718][ T5139] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  356.724125][ T5139] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  356.735417][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.777011][ T5139] usb 1-1: config 0 descriptor??
[  356.804578][ T5139] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  356.837907][ T5139] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  357.009100][ T5139] usb 1-1: USB disconnect, device number 39
[  357.021340][ T5139] ftdi_sio 1-1:0.0: device disconnected
[  357.222015][T11402] sock: sock_timestamping_bind_phc: sock not bind to device
[  357.603455][T11410] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1345'.
[  357.684980][T11408] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.692703][T11408] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.718961][ T5091] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  357.772998][ T5091] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  357.805185][ T5091] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  357.829801][ T5091] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  357.859506][ T5091] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  358.003732][   T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  358.212871][   T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  358.235874][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.259110][   T25] usb 1-1: Product: syz
[  358.272963][   T25] usb 1-1: Manufacturer: syz
[  358.287942][   T25] usb 1-1: SerialNumber: syz
[  358.321655][   T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  358.355208][ T9957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  358.892667][T11439] sock: sock_timestamping_bind_phc: sock not bind to device
[  359.086012][T11442] netlink: 'syz.4.1355': attribute type 3 has an invalid length.
[  359.096654][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'.
[  359.148575][T11442] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1355'.
[  359.205819][T11447] netlink: 'syz.4.1355': attribute type 4 has an invalid length.
[  359.483969][ T9957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  359.512324][ T9957] ath9k_htc: Failed to initialize the device
[  359.571929][ T9957] usb 1-1: ath9k_htc: USB layer deinitialized
[  359.733747][ T5091] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  359.965386][ T5091] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  360.007579][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.059675][ T5091] usb 3-1: config 0 descriptor??
[  360.362765][ T2902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.530326][ T5091] [drm:udl_init] *ERROR* Selecting channel failed
[  360.578940][ T2902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.611174][ T5494] usb 1-1: USB disconnect, device number 40
[  360.709439][ T5091] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  360.782108][ T5091] [drm] Initialized udl on minor 2
[  360.833748][ T5091] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  360.892997][ T2902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.914704][ T5091] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  360.935329][  T929] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  360.998401][ T5091] usb 3-1: USB disconnect, device number 48
[  361.009866][  T929] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  361.054069][  T929] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  361.102042][ T2902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.247759][T11470] sock: sock_timestamping_bind_phc: sock not bind to device
[  361.297462][T11473] netlink: 'syz.0.1368': attribute type 10 has an invalid length.
[  361.374567][T11473] team0: Port device netdevsim0 added
[  361.437106][T11477] netlink: 'syz.0.1368': attribute type 10 has an invalid length.
[  361.552190][T11477] team0: Port device netdevsim0 removed
[  361.623890][T11477] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  361.687145][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.696747][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.707399][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.718346][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.726388][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  361.734565][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.989195][ T2902] bridge_slave_1: left allmulticast mode
[  362.006732][ T2902] bridge_slave_1: left promiscuous mode
[  362.013370][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.039194][ T2902] bridge_slave_0: left allmulticast mode
[  362.048304][ T2902] bridge_slave_0: left promiscuous mode
[  362.054487][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.055129][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1370'.
[  362.255903][T11490] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1374'.
[  362.383251][  T784] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  362.417733][  T784] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  362.428759][  T784] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  362.451970][  T784] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  362.478291][  T784] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  362.693694][   T25] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  362.866692][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.888106][   T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  362.897759][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.908480][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.917328][   T25] usb 1-1: Product: syz
[  362.924197][   T25] usb 1-1: Manufacturer: syz
[  362.930291][   T25] usb 1-1: SerialNumber: syz
[  362.932170][ T2902] bond0 (unregistering): Released all slaves
[  362.950589][   T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  362.994946][  T784] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  363.803976][ T5101] Bluetooth: hci4: command tx timeout
[  363.937769][ T2902] hsr_slave_0: left promiscuous mode
[  363.971920][ T2902] hsr_slave_1: left promiscuous mode
[  363.988885][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.019366][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.054545][  T784] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  364.077231][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.088513][  T784] ath9k_htc: Failed to initialize the device
[  364.105450][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.157956][  T784] usb 1-1: ath9k_htc: USB layer deinitialized
[  364.259735][ T2902] veth1_macvtap: left promiscuous mode
[  364.283613][ T2902] veth0_macvtap: left promiscuous mode
[  364.316679][ T2902] veth1_vlan: left promiscuous mode
[  364.338257][ T2902] veth0_vlan: left promiscuous mode
[  365.331149][ T9957] usb 1-1: USB disconnect, device number 41
[  365.479625][ T2902] team0 (unregistering): Port device team_slave_1 removed
[  365.528980][ T2902] team0 (unregistering): Port device team_slave_0 removed
[  365.883748][ T5101] Bluetooth: hci4: command tx timeout
[  366.160541][T11555] netlink: 'syz.0.1385': attribute type 3 has an invalid length.
[  366.173124][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'.
[  366.281700][T11534] netlink: 'syz.4.1380': attribute type 10 has an invalid length.
[  366.331799][T11534] bond0: (slave netdevsim0): Releasing backup interface
[  366.369189][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'.
[  366.392664][T11534] team0: Port device netdevsim0 added
[  366.415027][T11536] netlink: 'syz.4.1380': attribute type 10 has an invalid length.
[  366.430265][T11536] team0: Port device netdevsim0 removed
[  366.450066][T11536] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  366.589259][T11556] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1385'.
[  366.633766][T11558] netlink: 'syz.0.1385': attribute type 4 has an invalid length.
[  366.932335][T11483] chnl_net:caif_netlink_parms(): no params data found
[  367.432012][T11483] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.466126][T11483] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.473484][T11483] bridge_slave_0: entered allmulticast mode
[  367.484426][T11483] bridge_slave_0: entered promiscuous mode
[  367.503085][T11483] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.563886][T11483] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.575827][T11483] bridge_slave_1: entered allmulticast mode
[  367.590539][T11483] bridge_slave_1: entered promiscuous mode
[  367.805310][T11483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.827740][T11483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.966868][ T5101] Bluetooth: hci4: command tx timeout
[  368.000232][T11599] netlink: 528 bytes leftover after parsing attributes in process `syz.1.1392'.
[  368.093305][T11483] team0: Port device team_slave_0 added
[  368.116071][T11483] team0: Port device team_slave_1 added
[  368.186846][ T5494] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  368.218002][ T5494] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  368.235802][T11483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.248649][ T5494] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  368.265118][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.291950][ T5494] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  368.324417][ T5494] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  368.345092][T11483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.414628][T11483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.439951][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.486770][ T5141] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  368.526849][T11483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.633008][  T929] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  368.657822][T11483] hsr_slave_0: entered promiscuous mode
[  368.679717][T11483] hsr_slave_1: entered promiscuous mode
[  368.695657][T11483] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.710747][ T5141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  368.741050][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.762933][T11483] Cannot create hsr debugfs directory
[  368.789889][ T5141] usb 2-1: Product: syz
[  368.806923][ T5141] usb 2-1: Manufacturer: syz
[  368.824725][ T5141] usb 2-1: SerialNumber: syz
[  368.859594][ T5141] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  368.890935][ T9957] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  368.901137][  T929] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0312, bcdDevice=5a.c7
[  368.969574][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.071037][  T929] usb 5-1: config 0 descriptor??
[  369.100115][  T929] option 5-1:0.0: GSM modem (1-port) converter detected
[  369.445447][  T929] usb 5-1: USB disconnect, device number 26
[  369.480837][  T929] option 5-1:0.0: device disconnected
[  369.976584][ T9957] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  370.025522][ T9957] ath9k_htc: Failed to initialize the device
[  370.045138][ T5101] Bluetooth: hci4: command tx timeout
[  370.143135][ T9957] usb 2-1: ath9k_htc: USB layer deinitialized
[  370.750368][T11483] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  370.835541][T11659] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  370.842093][T11659] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  370.910532][T11659] vhci_hcd vhci_hcd.0: Device attached
[  370.939519][T11483] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  371.054713][  T929] usb 2-1: USB disconnect, device number 38
[  371.149107][T11483] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  371.174990][T11672] program syz.4.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  371.199862][ T5139] usb 17-1: new high-speed USB device number 9 using vhci_hcd
[  371.212741][T11483] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  371.287879][T11659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1403'.
[  371.328125][T11659] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1403'.
[  371.337640][T11659] netlink: 'syz.4.1403': attribute type 5 has an invalid length.
[  371.358387][T11659] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1403'.
[  371.385861][T11483] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.478943][T11483] 8021q: adding VLAN 0 to HW filter on device team0
[  371.502150][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.509349][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.566842][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.574078][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.593816][T11662] vhci_hcd: connection reset by peer
[  371.609639][ T2902] vhci_hcd: stop threads
[  371.614721][ T2902] vhci_hcd: release socket
[  371.663721][ T2902] vhci_hcd: disconnect device
[  371.672430][T11483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  371.698804][T11483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.843475][T11483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.029756][T11483] veth0_vlan: entered promiscuous mode
[  372.053001][T11483] veth1_vlan: entered promiscuous mode
[  372.153373][T11483] veth0_macvtap: entered promiscuous mode
[  372.187678][T11698] ipt_ECN: cannot use operation on non-tcp rule
[  372.215807][T11483] veth1_macvtap: entered promiscuous mode
[  372.285746][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.313682][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.324562][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.339761][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.349789][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.376045][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.396548][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.421838][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.477399][T11483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.484904][ T5494] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  372.535839][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.566722][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.603367][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.642680][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'.
[  372.644600][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.685269][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.695870][ T5494] usb 3-1: Using ep0 maxpacket: 8
[  372.708277][ T5494] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  372.723474][ T5494] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  372.734514][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.758278][ T5494] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  372.763885][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.779119][ T5494] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  372.800601][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.809303][ T5494] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  372.827608][T11483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.836803][ T5494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.894802][T11483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.925081][T11483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.956129][T11483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.972808][T11483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.068899][ T5494] usb 3-1: GET_CAPABILITIES returned 0
[  373.091189][ T5494] usbtmc 3-1:16.0: can't read capabilities
[  373.345676][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'.
[  373.359992][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.380087][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.427559][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.464890][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.631214][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.663238][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.023692][ T5494] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  374.224583][ T5494] usb 5-1: too many configurations: 65, using maximum allowed: 8
[  374.289824][ T5494] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  374.310919][ T5494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.352046][ T5494] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  374.375055][ T5494] usb 5-1: No valid video chain found.
[  375.218502][T11785] sctp: [Deprecated]: syz.2.1409 (pid 11785) Use of int in max_burst socket option deprecated.
[  375.218502][T11785] Use struct sctp_assoc_value instead
[  375.405146][    C0] ------------[ cut here ]------------
[  375.411124][    C0] WARNING: CPU: 0 PID: 10158 at net/ipv4/route.c:1241 ip_rt_bug+0x2a/0x110
[  375.419756][    C0] Modules linked in:
[  375.423690][    C0] CPU: 0 PID: 10158 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  375.434050][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  375.444134][    C0] RIP: 0010:ip_rt_bug+0x2a/0x110
[  375.449106][    C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b 91 b3 f7 66 90 e8 44 91 b3 f7 48 89 df be 02 00 00 00 e8 37 c2 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e
[  375.468789][    C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286
[  375.474932][    C0] RAX: d97477f46cd9fd00 RBX: ffff888019bed780 RCX: ffffffff8172daca
[  375.482904][    C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c202900
[  375.490926][    C0] RBP: 0000000000000001 R08: ffffffff92fad617 R09: 1ffffffff25f5ac2
[  375.498966][    C0] R10: dffffc0000000000 R11: fffffbfff25f5ac3 R12: dffffc0000000000
[  375.506994][    C0] R13: dffffc0000000000 R14: ffff888065bd5640 R15: ffff8880177f0d00
[  375.515010][    C0] FS:  000055555619c500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  375.523981][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  375.530565][    C0] CR2: 000000002006e000 CR3: 000000002ca6e000 CR4: 00000000003526f0
[  375.538550][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  375.546560][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  375.554573][    C0] Call Trace:
[  375.557858][    C0]  <IRQ>
[  375.560690][    C0]  ? __warn+0x163/0x4e0
[  375.564863][    C0]  ? ip_rt_bug+0x2a/0x110
[  375.569187][    C0]  ? report_bug+0x2b3/0x500
[  375.573708][    C0]  ? ip_rt_bug+0x2a/0x110
[  375.578036][    C0]  ? handle_bug+0x3e/0x70
[  375.582353][    C0]  ? exc_invalid_op+0x1a/0x50
[  375.587061][    C0]  ? asm_exc_invalid_op+0x1a/0x20
[  375.592108][    C0]  ? mark_lock+0x9a/0x350
[  375.596471][    C0]  ? ip_rt_bug+0x2a/0x110
[  375.600794][    C0]  ip_push_pending_frames+0xbf/0x150
[  375.606097][    C0]  __icmp_send+0xf89/0x14e0
[  375.610601][    C0]  ? __icmp_send+0x59c/0x14e0
[  375.615301][    C0]  ? __pfx___icmp_send+0x10/0x10
[  375.620228][    C0]  ? validate_chain+0x11e/0x5900
[  375.625188][    C0]  ? mark_lock+0x9a/0x350
[  375.629506][    C0]  ? look_up_lock_class+0x77/0x160
[  375.634637][    C0]  ? mark_lock+0x9a/0x350
[  375.638966][    C0]  ipv4_link_failure+0x62f/0xa10
[  375.643940][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  375.649389][    C0]  ? do_raw_write_lock+0x148/0x4f0
[  375.654524][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  375.659989][    C0]  arp_error_report+0x114/0x160
[  375.664878][    C0]  neigh_invalidate+0x244/0x470
[  375.669732][    C0]  neigh_timer_handler+0x8a5/0xfd0
[  375.674860][    C0]  call_timer_fn+0x18e/0x650
[  375.679441][    C0]  ? call_timer_fn+0xc0/0x650
[  375.684131][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  375.689752][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  375.694894][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  375.700516][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  375.706155][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  375.711774][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.717012][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  375.722210][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  375.727885][    C0]  __run_timer_base+0x66a/0x8e0
[  375.732731][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  375.738138][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  375.744514][    C0]  run_timer_softirq+0xb7/0x170
[  375.749374][    C0]  handle_softirqs+0x2c4/0x970
[  375.754158][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  375.758914][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  375.764215][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  375.769415][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  375.775452][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  375.780656][    C0]  irq_exit_rcu+0x9/0x30
[  375.784923][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  375.790552][    C0]  </IRQ>
[  375.793469][    C0]  <TASK>
[  375.796409][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  375.802405][    C0] RIP: 0010:preempt_count_add+0x34/0x190
[  375.808122][    C0] Code: fb 48 c7 c0 e0 56 7a 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d 3c ba 14 13 00 <75> 07 65 8b 05 1b 38 9e 7e 65 01 1d 14 38 9e 7e 48 c7 c0 e0 56 7a
[  375.827767][    C0] RSP: 0018:ffffc9000971f1c0 EFLAGS: 00000246
[  375.833880][    C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff947a5603
[  375.841863][    C0] RDX: 0000000000000000 RSI: 0000000000071226 RDI: 0000000000000001
[  375.849878][    C0] RBP: ffff88823ffef000 R08: ffffffff8207d35f R09: 1ffffd4000389130
[  375.857983][    C0] R10: dffffc0000000000 R11: fffff94000389131 R12: dffffc0000000000
[  375.865995][    C0] R13: 0000000000071226 R14: 1ffff920012e3e50 R15: dffffc0000000000
[  375.873990][    C0]  ? pfn_valid+0x3f/0x450
[  375.878316][    C0]  pfn_valid+0xef/0x450
[  375.882472][    C0]  page_table_check_set+0x25/0x550
[  375.887604][    C0]  __page_table_check_ptes_set+0x30f/0x410
[  375.893404][    C0]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  375.899757][    C0]  ? __folio_rmap_sanity_checks+0x125/0x350
[  375.905667][    C0]  copy_pmd_range+0x4728/0x84c0
[  375.910526][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  375.915753][    C0]  ? look_up_lock_class+0x77/0x160
[  375.920871][    C0]  ? register_lock_class+0x102/0x980
[  375.926184][    C0]  ? mark_lock+0x9a/0x350
[  375.930506][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  375.936148][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  375.942120][    C0]  ? mark_lock+0x9a/0x350
[  375.946461][    C0]  ? __lock_acquire+0x1346/0x1fd0
[  375.951487][    C0]  copy_page_range+0x99f/0xe90
[  375.956281][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  375.961560][    C0]  ? __pfx_up_write+0x10/0x10
[  375.966253][    C0]  ? __asan_memset+0x23/0x50
[  375.970834][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  375.977623][    C0]  ? vma_interval_tree_insert_after+0x259/0x2b0
[  375.983899][    C0]  copy_mm+0x128d/0x2020
[  375.988165][    C0]  ? __pfx_copy_mm+0x10/0x10
[  375.992767][    C0]  ? __init_rwsem+0x122/0x160
[  375.997467][    C0]  ? copy_signal+0x549/0x670
[  376.002052][    C0]  copy_process+0x187a/0x3dc0
[  376.006748][    C0]  ? mark_lock+0x9a/0x350
[  376.011091][    C0]  ? copy_process+0xa03/0x3dc0
[  376.015892][    C0]  ? __pfx_copy_process+0x10/0x10
[  376.020913][    C0]  kernel_clone+0x226/0x8f0
[  376.025464][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  376.030514][    C0]  __x64_sys_clone+0x258/0x2a0
[  376.035351][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  376.040652][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  376.046675][    C0]  ? exc_page_fault+0x590/0x8c0
[  376.051527][    C0]  ? do_syscall_64+0xb6/0x230
[  376.056246][    C0]  do_syscall_64+0xf3/0x230
[  376.060765][    C0]  ? clear_bhb_loop+0x35/0x90
[  376.065453][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.071336][    C0] RIP: 0033:0x7f942016c4d3
[  376.075760][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  376.095388][    C0] RSP: 002b:00007f942042fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  376.103849][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942016c4d3
[  376.111814][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  376.119799][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  376.127785][    C0] R10: 000055555619c7d0 R11: 0000000000000246 R12: 0000000000000000
[  376.135774][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  376.143795][    C0]  </TASK>
[  376.146802][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  376.154062][    C0] CPU: 0 PID: 10158 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0
[  376.164367][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  376.174405][    C0] Call Trace:
[  376.177668][    C0]  <IRQ>
[  376.180502][    C0]  dump_stack_lvl+0x241/0x360
[  376.185172][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.190356][    C0]  ? __pfx__printk+0x10/0x10
[  376.194934][    C0]  ? vscnprintf+0x5d/0x90
[  376.199246][    C0]  panic+0x349/0x860
[  376.203127][    C0]  ? __warn+0x172/0x4e0
[  376.207271][    C0]  ? __pfx_panic+0x10/0x10
[  376.211687][    C0]  __warn+0x346/0x4e0
[  376.215657][    C0]  ? ip_rt_bug+0x2a/0x110
[  376.219974][    C0]  report_bug+0x2b3/0x500
[  376.224286][    C0]  ? ip_rt_bug+0x2a/0x110
[  376.228598][    C0]  handle_bug+0x3e/0x70
[  376.232736][    C0]  exc_invalid_op+0x1a/0x50
[  376.237220][    C0]  asm_exc_invalid_op+0x1a/0x20
[  376.242074][    C0] RIP: 0010:ip_rt_bug+0x2a/0x110
[  376.246997][    C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b 91 b3 f7 66 90 e8 44 91 b3 f7 48 89 df be 02 00 00 00 e8 37 c2 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e
[  376.266588][    C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286
[  376.272641][    C0] RAX: d97477f46cd9fd00 RBX: ffff888019bed780 RCX: ffffffff8172daca
[  376.280618][    C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c202900
[  376.288575][    C0] RBP: 0000000000000001 R08: ffffffff92fad617 R09: 1ffffffff25f5ac2
[  376.296532][    C0] R10: dffffc0000000000 R11: fffffbfff25f5ac3 R12: dffffc0000000000
[  376.304490][    C0] R13: dffffc0000000000 R14: ffff888065bd5640 R15: ffff8880177f0d00
[  376.312449][    C0]  ? mark_lock+0x9a/0x350
[  376.316772][    C0]  ip_push_pending_frames+0xbf/0x150
[  376.322043][    C0]  __icmp_send+0xf89/0x14e0
[  376.326539][    C0]  ? __icmp_send+0x59c/0x14e0
[  376.331196][    C0]  ? __pfx___icmp_send+0x10/0x10
[  376.336121][    C0]  ? validate_chain+0x11e/0x5900
[  376.341050][    C0]  ? mark_lock+0x9a/0x350
[  376.345363][    C0]  ? look_up_lock_class+0x77/0x160
[  376.350467][    C0]  ? mark_lock+0x9a/0x350
[  376.354795][    C0]  ipv4_link_failure+0x62f/0xa10
[  376.359725][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  376.365169][    C0]  ? do_raw_write_lock+0x148/0x4f0
[  376.370266][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  376.375710][    C0]  arp_error_report+0x114/0x160
[  376.380548][    C0]  neigh_invalidate+0x244/0x470
[  376.385390][    C0]  neigh_timer_handler+0x8a5/0xfd0
[  376.390486][    C0]  call_timer_fn+0x18e/0x650
[  376.395059][    C0]  ? call_timer_fn+0xc0/0x650
[  376.399714][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  376.405343][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  376.410481][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  376.416119][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  376.421734][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  376.427346][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.432534][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  376.437734][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  376.443370][    C0]  __run_timer_base+0x66a/0x8e0
[  376.448233][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  376.453603][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  376.459943][    C0]  run_timer_softirq+0xb7/0x170
[  376.464784][    C0]  handle_softirqs+0x2c4/0x970
[  376.469535][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  376.474286][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  376.479557][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  376.484747][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  376.489324][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  376.494518][    C0]  irq_exit_rcu+0x9/0x30
[  376.498757][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  376.504379][    C0]  </IRQ>
[  376.507302][    C0]  <TASK>
[  376.510229][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  376.516217][    C0] RIP: 0010:preempt_count_add+0x34/0x190
[  376.521879][    C0] Code: fb 48 c7 c0 e0 56 7a 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d 3c ba 14 13 00 <75> 07 65 8b 05 1b 38 9e 7e 65 01 1d 14 38 9e 7e 48 c7 c0 e0 56 7a
[  376.541498][    C0] RSP: 0018:ffffc9000971f1c0 EFLAGS: 00000246
[  376.547694][    C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff947a5603
[  376.555668][    C0] RDX: 0000000000000000 RSI: 0000000000071226 RDI: 0000000000000001
[  376.563645][    C0] RBP: ffff88823ffef000 R08: ffffffff8207d35f R09: 1ffffd4000389130
[  376.571605][    C0] R10: dffffc0000000000 R11: fffff94000389131 R12: dffffc0000000000
[  376.579561][    C0] R13: 0000000000071226 R14: 1ffff920012e3e50 R15: dffffc0000000000
[  376.587522][    C0]  ? pfn_valid+0x3f/0x450
[  376.591842][    C0]  pfn_valid+0xef/0x450
[  376.595980][    C0]  page_table_check_set+0x25/0x550
[  376.601080][    C0]  __page_table_check_ptes_set+0x30f/0x410
[  376.606897][    C0]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  376.613269][    C0]  ? __folio_rmap_sanity_checks+0x125/0x350
[  376.619176][    C0]  copy_pmd_range+0x4728/0x84c0
[  376.624045][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[  376.629234][    C0]  ? look_up_lock_class+0x77/0x160
[  376.634334][    C0]  ? register_lock_class+0x102/0x980
[  376.639605][    C0]  ? mark_lock+0x9a/0x350
[  376.643924][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  376.649539][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  376.655509][    C0]  ? mark_lock+0x9a/0x350
[  376.659827][    C0]  ? __lock_acquire+0x1346/0x1fd0
[  376.664842][    C0]  copy_page_range+0x99f/0xe90
[  376.669598][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  376.674869][    C0]  ? __pfx_up_write+0x10/0x10
[  376.679535][    C0]  ? __asan_memset+0x23/0x50
[  376.684106][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  376.690852][    C0]  ? vma_interval_tree_insert_after+0x259/0x2b0
[  376.697080][    C0]  copy_mm+0x128d/0x2020
[  376.701314][    C0]  ? __pfx_copy_mm+0x10/0x10
[  376.705897][    C0]  ? __init_rwsem+0x122/0x160
[  376.710560][    C0]  ? copy_signal+0x549/0x670
[  376.715144][    C0]  copy_process+0x187a/0x3dc0
[  376.719823][    C0]  ? mark_lock+0x9a/0x350
[  376.724144][    C0]  ? copy_process+0xa03/0x3dc0
[  376.728894][    C0]  ? __pfx_copy_process+0x10/0x10
[  376.733906][    C0]  kernel_clone+0x226/0x8f0
[  376.738399][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  376.743416][    C0]  __x64_sys_clone+0x258/0x2a0
[  376.748179][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  376.753472][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  376.759444][    C0]  ? exc_page_fault+0x590/0x8c0
[  376.764283][    C0]  ? do_syscall_64+0xb6/0x230
[  376.768944][    C0]  do_syscall_64+0xf3/0x230
[  376.773432][    C0]  ? clear_bhb_loop+0x35/0x90
[  376.778106][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.783985][    C0] RIP: 0033:0x7f942016c4d3
[  376.788379][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  376.807972][    C0] RSP: 002b:00007f942042fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  376.816382][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942016c4d3
[  376.824346][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  376.832301][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  376.840257][    C0] R10: 000055555619c7d0 R11: 0000000000000246 R12: 0000000000000000
[  376.848211][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[  376.856179][    C0]  </TASK>
[  376.859430][    C0] Kernel Offset: disabled
[  376.863855][    C0] Rebooting in 86400 seconds..