last executing test programs:

1m46.614968828s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

1m18.20294595s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

56.691574518s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

43.661219119s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

34.183274032s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

16.158543428s ago: executing program 2 (id=273):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0)=@buf)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a2543f1248085c68b2ae09a2cf19386aeb325fbf7cc88fc6dbca477a59acc30ae27c61b9f8a60fdc69f116371eac98c8b35f70c9f45792b72e8ec6fed6d39e6c8675a9ab367e9fbe83b32fd29362a27d821c5631db3586def912cf203635c360ffe70a8b0a3bc17cae618ee242e2285be6a9b78014e63da383ed4d4723f1e12264406267dcb92445ee85a65c382f2b3ce28d0141b7585b7cbb99bac6c0d64cab9a80ec8487508f3a2dbf4cbbb4af", 0xae}, {&(0x7f00000004c0)="d35ffb3b1da328adbd1dc0376ab2f71103f8ab1d39c2ba7120a28ae96b7262953387d6222a754c72ff56c9fb8b014d66a346b599496d4387f89fac1cf6d9dd308d0fc2ebefd15a3025bb9ef3f00d31b888f4409f53b4f2b4012591c0296aaa0421c267078fd68f8d79a216dad279e0849e412ab31ab69372a235b30645ce3f169e0e4df7bd07577236a7935dbdb02a56cd6a128e7cea345239", 0x99}, {&(0x7f00000000c0)="dd2c484b6b70a954e5e8", 0xa}, {&(0x7f0000000580)="39aac0f183697210d9100471721d7abccb44978cfe917303c5ac28d7155d83655d88b59769c3cb41bbc0b7e9be146d0c60d2fa0a743e47f220f029538cfc598a6cc28cc12ea609fc717d2cfd72c213a88138dfdc02577b829493fa057decf24d592cdaf0388bb13e2e04afa2656f5a49a95d9fe546d07c0e2b88eff251edf20a3d591e51fced5dd404d22b56199cb2b4fb06d6448b8f40026544", 0x9a}], 0x4}}, {{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000006c0)="2b0e714e30c8d5465edf6f697de039db4e23015b4dd977b400e05a58f1f25880fb2a5a95852ed44c2b99bcdd7c79c2d5e9a2c573fa321b53bae630a17d937b3a3d7b391f5324fc89c82eff726a3b6371bfbb44a295f7ee8bce9c8b7db9b2b04e9b3c433d08c4f85b6e9cd1cf56d893374de8c13724f0", 0x76}, {&(0x7f0000000740)="0ed4bdbd5337b47f4e999c7b344d5f1d223c0ab0184aa0eca3330a37a59976fbb3f19d566ec81110b0885cff252f3eb0c35f2e4cb3b2db6cd5e3c8b76da33c023e860e9fcfbc822b4e81309c0f024b1e3569be42ebed45e95da790cd4e8107ab11de75084213374072996775884a8edf7a5f15bc2b86d2d4366d7bbcdd23ef25102c87ec95260bb446790b71ebb7c6050a6901294bde8424e92b32869a7bcc5761d71b86b6a2f44c6ec58b45b94bda493468317b1b67a4f3fa802390103021b3cfdf7176c5e7065de1417290f10bf98448f5f28d6d64d66a6236d71243322e4250", 0xe1}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}], 0x70, 0x10}}], 0x2, 0x4000840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
syz_emit_vhci(0x0, 0xec)

10.394087388s ago: executing program 4 (id=590):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000014000100000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200e0000002de000600010400000100"/28], 0x34}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001"], 0x3c}}, 0x0)
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @broadcast, @multicast1}, {0xa000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)

6.289860181s ago: executing program 1 (id=599):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1822000000000000b32000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.204206855s ago: executing program 1 (id=600):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x3, 0x101000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=<r1=>0xffffffffffffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0)

6.187494214s ago: executing program 3 (id=601):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a", 0x76}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

6.073945743s ago: executing program 1 (id=602):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff)
r3 = timerfd_create(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x1, &(0x7f0000000440)={{r4, r5+60000000}}, 0x0)
poll(&(0x7f0000000200)=[{r3, 0x2a}], 0x1, 0x8000)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0x800, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x10001, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf253400000008000300", @ANYRES32=r6, @ANYBLOB="140055000fe4a3c6a6f185f3f48f262c02bc23100a0034"], 0x44}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

6.073573696s ago: executing program 3 (id=603):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x600341, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x5c)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "ef93cfa9d40e9a3e2c2ab679"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4048010)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38)
r8 = socket$inet(0x2, 0xa, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8908040400", 0x5)
sendto$inet6(r7, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137)

5.148364552s ago: executing program 1 (id=606):
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfffffffffffffd25, 0x0, &(0x7f0000000000)="219a037439e1cf2608004c658808", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
setfsgid(0xee00)
setresgid(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x457)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

4.557834008s ago: executing program 3 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffff"], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001"], 0xb0}}, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000280), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x3f}, @local, 0xffffff00, 0xff000000, 0xc, 0x0, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xb3, 0xd, 0x8001, 0x3, 0x4, 0x2, 'macvtap0\x00', 'rose0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x6}}}}, {{@arp={@remote, @private=0xa010101, 0xff000000, 0xff, 0x7, 0x5, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x6, 0x3, 0x9, 0x5, 0xe, 0x5, 'vxcan1\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x7}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0xfffffffffffffffe}]})
r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)="892b9bdc24208d092b585af8f7367a52765362848cecdc92e73d65a3546a38727d2dba807f30b8e9eb0b0e199d0fe138c8087343d15077a8e288b403c0fe6e84d623f50ba11bc7cbcb992b55a11e3fc3dd8cdf2e3d3ad9664e01c4d8e79a82303bf3208b0fdf8f8b9faf8ab43922bbc1584ecbf0ce94e5f65b6916e47fc1d4480b399143460a7213da2d2073e0a5715984cdc0c79740c424e53930690d002b8645b0705f6181e33196fbc209060a3409eff88204913ae428b900520f34dceaae7b612566abecce1f2aeb16452e13b816e8390c20eaedb1012e108d6ef71df4d56a23f89ee48bc2aeb33c1542d4304866da2d9c4a3d9e1428e5", 0xf9}, {&(0x7f0000000200)="89cdd8a0170d0fbe3eb1192e003b16aa73871a1ddfbfe70c1341488fdc6e230c3b43f2b3dc0eb3ae4c2d7bc83b439738703d08985462433b21301ffe428b18c501cf49ad8640", 0x46}, {&(0x7f0000000400)="3705b08b1af858a32463acf0b07cf8fa149339f88a0d6deb319f6b38dda684a762e87fe540b509ab55a003e195a3b9b87e32191b922b083c4fb3b781f0ae254a5a8fe16f9e4f1591bf45524e00dc90d47b8b62d58d4f477242e71f66fee59bf5b901d033847cd6b29abacfd95ea99e0ffc0ab582953e559ddbd87fc036c8335b8a34c0622dafc79eacdfc46d3af29007d4bb09203c3e57000c6ec602d3da945aaf95a4c4b5bae25ab72c", 0xaa}], 0x3, 0x7d, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}})

4.374882488s ago: executing program 4 (id=608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003880010325bd7000fadbdb2504000000"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_ethernet(0x1c, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090001020003000000000000020000000900020073797a310000000005000100070000002c0007800c0001800800c340ffffffff0500070029000000060004404e99b7080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0xe, 0x6, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}})
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x3, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'vlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast1, 0xf}}}, {{@arp={@broadcast, @remote, 0xff000000, 0xff, 0xd, 0xb, {@mac=@link_local, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xeac0fa4642fd1a49]}}, 0x0, 0x6, 0x2, 0x2, 0xc, 0x1, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

4.362591438s ago: executing program 0 (id=609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x3a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0xffffffffffffffff, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0)
close(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4040800)

3.541948093s ago: executing program 0 (id=610):
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x801)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/pm_print_times', 0x1000, 0x84)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x20000000)
read$FUSE(r0, &(0x7f0000005e80)={0x2020}, 0x2020)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x0, @none, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x4, 0x0, 0x5, 0x0, 0xf9, 0x4}, 0xc)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x5a1a00, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
accept(r4, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x50009404, &(0x7f00000004c0)={0x9, 0x0, 0x3b})

3.54133685s ago: executing program 3 (id=611):
bpf$MAP_CREATE(0x0, &(0x7f0000019100)=ANY=[@ANYBLOB="1900000009000000080000000802000000000000a7a3b03ed890add99fdc28381011df994c635358049b61254e96c558d9092abd2d75a249ba55ceea26e8af95d917adfb69de3bed32d36c97e2b061268ebd6f5e10daaf5265533a08ce59a7ade6fecb91dd9567f971855258e5d4adb88247d0dc62ba3708a6f5c008641f2b4ccb9feafdec5997efecdb5de89531532202968a00721ce86e4355143fadb2e71a7e9cf979cc2734930fa7fb82753b73b192f3c99ba52e974f2966c39cc12d6e1e743504f75a787dbc4a138b197b2303a2c1ace35a7d6ae455d1fb205ec2888268f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

3.512199099s ago: executing program 4 (id=612):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'dvmrp0\x00'})
syz_io_uring_setup(0x45ed, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
prlimit64(0x0, 0xe, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x141010, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/49, 0x31}, 0x7ff}], 0x1, 0x60010020, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x0)
write(r4, &(0x7f0000000280), 0x0)

3.391582198s ago: executing program 0 (id=613):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a", 0x76}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd00017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28)

2.88163618s ago: executing program 0 (id=614):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='children\x00')
close(0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400080000000000000000000a400400", @ANYRES32=r4, @ANYBLOB="140002000001"], 0x2c}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x301, 0x80)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = dup(r8)
pread64(r7, &(0x7f0000000380)=""/103, 0x67, 0x3b6)
ioctl$PTP_EXTTS_REQUEST2(r9, 0xc0603d0f, &(0x7f0000000000)={0xa1b, 0xd})
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="c9e926bd7000fddbdf256900000008000300", @ANYRES32=0x0, @ANYBLOB="6ff30b7a39b497799879774a91e430492e7a57c6328d6631c614d8df3bf5e72056f6fb97454fa4910486b130d10c0a0f50055d973405c8b28a9cc89900000000000000000000000600000000000000f040a8ef8451940eed04890406a8365d65893ef0f233638589f007025b"], 0x1c}, 0x1, 0x0, 0x0, 0x9866e04d8b605b6d}, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0)
ioctl$TUNSETVNETBE(r10, 0x400454de, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xb}, &(0x7f0000000200)=0x8)

2.488508964s ago: executing program 1 (id=615):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffc})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
mmap(&(0x7f0000af7000/0x4000)=nil, 0x4000, 0x3000012, 0x2010, 0xffffffffffffffff, 0xffffb000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000005c0)={{&(0x7f000018e000/0x2000)=nil, 0x2000}, 0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000400080003b4be6113b0a129f2b6c7200000100e5030000181128af", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018150000", @ANYRES32=r0, @ANYBLOB="000000000000000080cf0100040000000020f4ff07000000851000000000000018110000", @ANYRES32, @ANYRESOCT=r3], &(0x7f00000001c0)='GPL\x00', 0x1, 0x89, &(0x7f0000000200)=""/137, 0x41001, 0x6, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x5, 0x7f, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6437, @void, @value}, 0x94)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000380))
request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000500)='*\x00', 0xfffffffffffffffc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_unlink_exit\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x103000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000240)={0xa, 0x0, 'client0\x00', 0x7, "6570aaa478409718", "27068d400636c68c3d7373ac931683859d1daca96ea7bbe8fee4816a03e21d5d", 0x1, 0x2})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @multicast}, 0x10)

2.456389156s ago: executing program 3 (id=616):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000300))
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={<r4=>0x0, 0x3, 0x7, [0x6, 0x2, 0x4, 0xa, 0x4, 0x8, 0x10]}, &(0x7f0000000340)=0x16)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r5=>r4, 0x98, 0x7, [0xf42, 0x9, 0xb, 0x0, 0x88e, 0xffff, 0x7]}, &(0x7f0000000080)=0x16)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x2}, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x246, 0x3, 0x7fffffff, 0x101, 0x4, 0x10, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x155}, &(0x7f00000005c0)=0x101, &(0x7f0000000680)=0x8215, 0x6, 0x3, 0xffffffffffffffff, 0x5, 0x10, 0x9}}], 0xb0, 0x404c8c5}, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x5, 0x62f04a14, 0xc0f3}, 0x10)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0x3, 0x3}, 0x6)
socket(0x80000000000000a, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x577b4314, 0x9, 0x210, r1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x9, @void, @value, @void, @value}, 0x50)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x27, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000f0c3f162828aa8a8b2a0c36d3cbe2ef26be439cc10fb5ad1d21ed6f194bfaec5081126f8bff12942fc0f904263aa1c1a5edea872aaf4c95de906cdd911507000000000000001227a8d4a22315f603c0044a3903e27d8a22b8a3782691a0995080bd0000ebc4042b173a1a749131de4b91aeab45ecc9b2bddca0f5104d1b3ef19b3dc75866b4191d1437f3ac92d4b6b250a9110fcb598043921304b8c6829e8ff5cddd88b03b98054fa36f4171aadce739efc494e5c9859e080000000000000076aa2ab58a14be872503", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r8, 0xc, 0x1, 0x401, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
unshare(0x22020600)

2.412245097s ago: executing program 4 (id=617):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
r5 = fanotify_init(0x4, 0x0)
r6 = dup(r4)
fanotify_mark(r5, 0x201, 0x48001003, r6, 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
write$FUSE_GETXATTR(r3, &(0x7f0000000500)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="b900"], 0xb8)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
read$FUSE(r7, 0x0, 0x30)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r9 = socket$inet(0x2, 0x2, 0x0)
read$hidraw(r7, &(0x7f00000000c0)=""/32, 0x20)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_int(r10, 0x0, 0x2)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000140)="5e22ab96348e8f21409b68d0a56380e6477f371a16b9063405737da0856a8b", &(0x7f00000006c0)=@tcp6=r3}, 0x20)

2.333853197s ago: executing program 0 (id=618):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/252, 0xfc}], 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7}, 0x10}}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x6, 0x11, 0x2, 0xfff})
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xea5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x0, 0x30}}}}}]}}]}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/252, 0xfc}], 0x1) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7}, 0x10}}, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x6, 0x11, 0x2, 0xfff}) (async)
ioctl$TCFLSH(r0, 0x400455c8, 0x1) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c1f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x40, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xea5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x0, 0x30}}}}}]}}]}}, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x18) (async)

2.223102595s ago: executing program 4 (id=619):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="d00000000000000007010000050000003fd84470aaa1e2f33cbd6864ffe32c13482dc406787bda9510bcb4bbfca8ba9acdb9b947a61eda73b945e304fa95f9e473e9e287cbc510a26d68600854f0fa9a514ec697264ba095a69a1f80d7c16a5f5df59e956508d48c79be9a21dfa9826a0cceac69bd813ed6220cea10014904acb354c8044e1157574b1d592d7f9e61a8c55e2421ec17190888922a2166669d556118965f4698b78ea059873711ba5e93596d9390881398762d84aa79c739d2eaa967f7adee2cda2e0cb0b400000000c00000003500000000110000000300000061268a71857560e62b59ca5e0697f4608c966d177c4310ddd6965045c13f2b2506c964fd7b2b31f9e19ed7e0ea06fce8c6bb2e73a26890818f596707f9ade034ea4d4e502a7a55f2ed797e0523137a30fc8ba9bd67fb2c505a064bc389ca0b6d6e215438dffda7c8e7be145b0376d75b2d3069f138531bedad1fafb2afb82942e8c2c7ca1f8c42776f1a62a25316187acbea6f9ff6c61737800a3ea6753a955d1ed163511ed2a95c458500000000000000c00000000000000084000000080000000b393743cf19a42c1fe7e75a8f73ebbd80d357eb83085dc49de2c1cacd131512d1262a40d475fc6f696f9a5aa1620d4fef24d3149d76a009da4ddc5ccf6ba8abac1942c008efdd8070302088aff916ce49bf643207946ae01af53f69954630b44d709843fa262ed58d642e655624e4a65d2f972371a73c00000000590d40408259b977c8427e2b2101bf2d0c24c276a23ed0cd82df5e2c5b6c125f323af287ca4b00e7173ed549be1de9945d70da0000e000000000000000100100000500000080da46cfbfc4065538c8baf353b4797087c547e234b3d5b02372390ae9c6c69dd62da42e633cffb7475fd24df4f80bb78852d39edbf22b80aecf441ef1152a6dda861e4ec78d432aff3fd14c107438f91cbe8ea8a0321cb6b9fb2bf8e485b2267833cd335796b0fc2676c524a637b2c4686563d8694c76e0696a9b04cf776ee71a20a771cfce567fa9444c7398ce1a33f27792bbae62466cbc44a585bf4177dffb166ffcc85dc5dacdf28f02060c58721ed85ad6b3d635995c3ec534d4fce5f3f67d6bde6feabbe7396ba19d11f297c1365832772b7a0bc4c892c7b52051cfd849367321d46bca9bf3008e83fc4f18d91cfaec70d9aee86f724ceb2bc003ebefd83d96fa2195c24577f1126e1d9a741b7bb29d4c3444f3f41ad118c34378784c1f47337d776804fc64fa4cbf71937fbd8c3181498377c7126d4f27f9d439d8b1ab589092aaf442602f15fcfdc8848e1e8847295c59a869c8350d51fc9f2ec9db1ed7ed8a5c468041"], 0x330}, 0x4040000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000061cb5210eda50fedea43d3afed495275ce908815b67d9f51b8ed1088426bbfda57f07faf1c59f27c663dcd8922cc9e1857a5eb83150018ae5eb2ea0205b38708adfc67259643561b0d480fb001000000000000804efa1b3974630c1a6e79087323fe1f1754750cb7bad4e6a527c7c270e4d3f59e410a3dc5bf35473faded317cf101b257c96cc314c30a37fc051a3060ae94faf0f696bd8acb15594e5354d70dcf5f3d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18)
getpid()
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000006c0)={0x8, 0x0, 0x3, 0x75af07fa, 0x0, [0xf663, 0x2304e9c9, 0x20000000, 0x1c000]})
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x9000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0xa000000007e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioperm(0xa891, 0x20, 0x80007ff)

2.175140045s ago: executing program 1 (id=620):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x330}, 0x4040000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000061cb5210eda50fedea43d3afed495275ce908815b67d9f51b8ed1088426bbfda57f07faf1c59f27c663dcd8922cc9e1857a5eb83150018ae5eb2ea0205b38708adfc67259643561b0d480fb001000000000000804efa1b3974630c1a6e79087323fe1f1754750cb7bad4e6a527c7c270e4d3f59e410a3dc5bf35473faded317cf101b257c96cc314c30a37fc051a3060ae94faf0f696bd8acb15594e5354d70dcf5f3d67bbbc4e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18)
getpid()
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000006c0)={0x8, 0x0, 0x3, 0x75af07fa, 0x0, [0xf663, 0x2304e9c9, 0x20000000, 0x1c000]})
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x9000000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0xa000000007e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioperm(0xa891, 0x20, 0x80007ff)

1.168318096s ago: executing program 4 (id=621):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c2d000000dd0001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="d199132788341219f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000050)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x1d, 0xffffffffffffffff}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f0000000180), 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0xa, 0x0)

149.894074ms ago: executing program 0 (id=622):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000005, 0x7, 0x0, 0x0, 0x6, 0xd, "89753015410000df6afb245518580ce0ff7f0000ca41f31c108938fcffff3ef569e0bcf244bb4b23555e8dc6c56602b994e361916b228ad896fa67a07696defa", "8b609009aaa722687f3f3e13d754f688a9e306020000003f02e1b6e26ec889fe000027cc7d24fdc201000000ffffffffffffff7f03e47463b969e400", "ca1b97448abe996b48956570128218a0d22915216f08000000000007ff00", [0x1000000006, 0x2]})

0s ago: executing program 3 (id=623):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)='-6', 0x2}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010008000000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x4d, &(0x7f0000000200)="ea06604ef704778aa2c2ff26c8d77991e0ccbb3cd6464ab1aa02a9b711bc059175ca5ebefaf07dd33060effc0a4da560517df94b5a8b70abd0d16e88ea9f90afe3346420008e8e2d5487c4446e"})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000003c0), 0x204080, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2b, 0x0, {0x2}}, 0x14}}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="318300000000000000001900000018000180140002006e656d3000"/38], 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

etlink: 8 bytes leftover after parsing attributes in process `syz.4.406'.
[  157.279761][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.300726][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.320204][ T7403] bridge_slave_1: entered allmulticast mode
[  157.327332][ T7403] bridge_slave_1: entered promiscuous mode
[  157.354588][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.374498][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.408303][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.421217][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.455729][ T7403] team0: Port device team_slave_0 added
[  157.463577][ T7403] team0: Port device team_slave_1 added
[  157.486670][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.495572][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.653790][   T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  157.662086][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.729891][ T5931] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  157.737828][ T7486] program syz.3.410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.738434][ T5822] Bluetooth: hci0: command tx timeout
[  157.747894][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.792524][ T7488] program syz.3.410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  158.016105][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.042100][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.051267][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.140069][ T5931] usb 1-1: Using ep0 maxpacket: 16
[  158.140874][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  158.146482][ T5931] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  158.159761][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.193576][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.195397][ T7403] hsr_slave_0: entered promiscuous mode
[  158.209720][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  158.218769][ T5931] usb 1-1: SerialNumber: syz
[  158.229172][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  158.249202][ T7403] hsr_slave_1: entered promiscuous mode
[  158.255842][   T10] usb 5-1: config 1 has no interface number 1
[  158.260160][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.262461][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  158.269822][ T7403] Cannot create hsr debugfs directory
[  158.286651][   T10] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  158.376581][   T10] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  158.397896][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  158.412105][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.449670][   T10] usb 5-1: Product: syz
[  158.454050][   T10] usb 5-1: Manufacturer: syz
[  158.458817][   T10] usb 5-1: SerialNumber: syz
[  158.460379][ T5931] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  158.507467][ T5931] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  158.542983][   T30] audit: type=1400 audit(1743834483.828:430): avc:  denied  { create } for  pid=7493 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  158.605580][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  158.638900][ T7498] FAULT_INJECTION: forcing a failure.
[  158.638900][ T7498] name failslab, interval 1, probability 0, space 0, times 0
[  158.654096][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.1.413 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  158.654121][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  158.654134][ T7498] Call Trace:
[  158.654140][ T7498]  <TASK>
[  158.654146][ T7498]  dump_stack_lvl+0x16c/0x1f0
[  158.654171][ T7498]  should_fail_ex+0x512/0x640
[  158.654187][ T7498]  ? fs_reclaim_acquire+0xae/0x150
[  158.654211][ T7498]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  158.654234][ T7498]  should_failslab+0xc2/0x120
[  158.654250][ T7498]  __kmalloc_noprof+0xd2/0x510
[  158.654271][ T7498]  tomoyo_realpath_from_path+0xc2/0x6e0
[  158.654295][ T7498]  ? tomoyo_profile+0x47/0x60
[  158.654310][ T7498]  tomoyo_path_number_perm+0x245/0x580
[  158.654324][ T7498]  ? tomoyo_path_number_perm+0x237/0x580
[  158.654341][ T7498]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  158.654358][ T7498]  ? find_held_lock+0x2b/0x80
[  158.654393][ T7498]  ? find_held_lock+0x2b/0x80
[  158.654410][ T7498]  ? hook_file_ioctl_common+0x145/0x410
[  158.654429][ T7498]  ? __fget_files+0x20e/0x3c0
[  158.654447][ T7498]  security_file_ioctl+0x9b/0x240
[  158.654466][ T7498]  __x64_sys_ioctl+0xb7/0x200
[  158.654488][ T7498]  do_syscall_64+0xcd/0x260
[  158.654508][ T7498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.654520][ T7498] RIP: 0033:0x7f9b64b8d169
[  158.654532][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.654545][ T7498] RSP: 002b:00007f9b65a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  158.654558][ T7498] RAX: ffffffffffffffda RBX: 00007f9b64da6080 RCX: 00007f9b64b8d169
[  158.654566][ T7498] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000006
[  158.654574][ T7498] RBP: 00007f9b65a17090 R08: 0000000000000000 R09: 0000000000000000
[  158.654581][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.654589][ T7498] R13: 0000000000000000 R14: 00007f9b64da6080 R15: 00007ffccacebfd8
[  158.654607][ T7498]  </TASK>
[  158.858404][ T7472] overlayfs: missing 'lowerdir'
[  159.417628][ T5931] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  159.430395][ T5931] usb 1-1: USB disconnect, device number 10
[  159.437704][ T7498] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.449564][   T30] audit: type=1400 audit(1743834484.358:431): avc:  denied  { map } for  pid=7471 comm="syz.4.406" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  159.621047][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  159.627354][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  159.632566][ T5911] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  159.646549][ T5911] usb 4-1: config 0 has no interface number 0
[  159.653051][ T5911] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  159.666931][ T7403] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.668799][ T5911] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  159.689769][ T5911] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  159.701349][ T5911] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  159.714859][   T30] audit: type=1400 audit(1743834484.988:432): avc:  denied  { ioctl } for  pid=7503 comm="syz.1.415" path="socket:[15574]" dev="sockfs" ino=15574 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  159.714939][ T7505] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  159.750060][ T5911] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  159.761120][ T7505] netlink: 232 bytes leftover after parsing attributes in process `syz.0.414'.
[  159.764514][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.785884][ T5911] usb 4-1: config 0 descriptor??
[  159.796335][ T5911] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  159.809017][ T7403] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.825663][ T5822] Bluetooth: hci0: command tx timeout
[  159.917685][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  159.937160][ T7403] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.947509][   T10] usb 5-1: MIDIStreaming interface descriptor not found
[  159.957384][ T5931] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  160.012982][ T5822] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  160.127177][   T30] audit: type=1326 audit(1743834485.408:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  160.169993][   T10] usb 5-1: USB disconnect, device number 10
[  160.186692][ T7491] capability: warning: `syz.3.411' uses deprecated v2 capabilities in a way that may be insecure
[  160.200827][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  160.288114][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.496394][ T5931] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  160.527011][ T7403] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.621720][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.700612][   T30] audit: type=1326 audit(1743834485.408:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  160.723723][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.731219][   T30] audit: type=1326 audit(1743834485.408:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  160.761427][ T5931] usb 2-1: config 0 descriptor??
[  160.967989][   T10] usb 4-1: USB disconnect, device number 10
[  160.978917][   T30] audit: type=1326 audit(1743834485.408:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  161.086486][ T7525] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  161.394019][ T5931] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  161.521072][ T5931] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  161.650217][ T5931] hid-steam 0003:28DE:1102.0002: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  161.972346][ T5931] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' connected
[  161.982449][ T5822] Bluetooth: hci0: command tx timeout
[  162.212552][ T5931] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0002/input/input6
[  162.361333][   T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  162.369252][   T30] audit: type=1326 audit(1743834485.408:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.394234][   T30] audit: type=1326 audit(1743834485.408:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.418406][   T30] audit: type=1326 audit(1743834485.408:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.444114][   T30] audit: type=1326 audit(1743834485.408:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.508675][ T7403] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  162.546200][ T7403] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  162.554505][ T5931] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0
[  162.564639][ T5931] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0
[  162.581188][   T30] audit: type=1326 audit(1743834485.408:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.616279][ T5931] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  162.631956][   T30] audit: type=1326 audit(1743834485.408:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.709693][ T5931] usb 2-1: USB disconnect, device number 8
[  162.738574][   T30] audit: type=1326 audit(1743834485.408:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.766974][   T30] audit: type=1326 audit(1743834485.408:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7509 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedf8d169 code=0x7ffc0000
[  162.873999][ T7403] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  162.933503][   T30] audit: type=1400 audit(1743834485.408:445): avc:  denied  { allowed } for  pid=7490 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  162.953441][   T30] audit: type=1400 audit(1743834485.468:446): avc:  denied  { create } for  pid=7490 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  163.003778][ T7403] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  163.017675][ T5931] hid-steam 0003:28DE:1102.0002: Steam Controller 'XXXXXXXXXX' disconnected
[  163.035606][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  163.048790][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  163.061420][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  163.073966][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  163.086639][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  163.099233][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7546 comm=syz.0.422
[  164.249976][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.288621][ T7403] 8021q: adding VLAN 0 to HW filter on device team0
[  164.325714][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.332928][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.379800][ T5822] Bluetooth: hci1: unexpected event for opcode 0x200c
[  164.431780][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.438936][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.694392][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout
[  166.156160][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.621538][ T7403] veth0_vlan: entered promiscuous mode
[  166.755160][ T7403] veth1_vlan: entered promiscuous mode
[  166.874357][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'.
[  166.986503][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  167.014684][ T7626] erspan0 speed is unknown, defaulting to 1000
[  167.164571][ T7403] veth0_macvtap: entered promiscuous mode
[  167.189813][ T5931] usb 5-1: Using ep0 maxpacket: 8
[  167.207328][ T5931] usb 5-1: config index 0 descriptor too short (expected 1316, got 36)
[  167.273003][ T5931] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  167.315065][ T5931] usb 5-1: config 179 has no interface number 0
[  167.323521][ T7403] veth1_macvtap: entered promiscuous mode
[  167.337204][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  167.382054][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  167.390893][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.412757][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  167.417673][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.437986][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.440861][ T5931] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  167.545889][ T5931] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  167.563600][ T5931] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  167.567539][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.589081][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.624824][ T7619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  168.654332][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.675529][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.686344][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.697358][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.707933][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.745175][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7
[  168.769817][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.789040][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.799959][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.814698][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.499707][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  169.577799][ T5931] usb 5-1: USB disconnect, device number 11
[  169.583811][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  169.583856][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  169.612695][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.625563][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.636343][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.666446][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.677041][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.689335][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.709311][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.743918][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.759947][   T10] usb 1-1: Using ep0 maxpacket: 8
[  169.777033][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.795972][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.806603][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  169.831142][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.850352][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.850867][ T5931] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  169.879878][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.898870][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.918288][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8
[  169.930999][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.942231][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  169.942245][   T30] audit: type=1400 audit(1743834495.228:463): avc:  denied  { bind } for  pid=7656 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  169.950351][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.974976][   T30] audit: type=1400 audit(1743834495.258:464): avc:  denied  { read } for  pid=7656 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  169.995309][   T10] usb 1-1: Product: syz
[  170.001941][   T10] usb 1-1: Manufacturer: syz
[  170.006532][   T10] usb 1-1: SerialNumber: syz
[  170.013740][   T10] usb 1-1: config 0 descriptor??
[  170.021296][   T10] usbtest 1-1:0.0: Linux user mode ISO test driver
[  170.027814][   T10] usbtest 1-1:0.0: high-speed {control iso-in} tests (+alt)
[  170.043990][ T7403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.055546][ T7403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.064731][ T7403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.066202][ T7657] ceph: No mds server is up or the cluster is laggy
[  170.073440][ T7403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.095550][   T24] libceph: connect (1)[c::]:6789 error -101
[  170.107879][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  170.156732][ T6748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.205199][ T6748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.287088][ T5871] usb 1-1: USB disconnect, device number 11
[  170.328283][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.334816][ T5822] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  170.338411][   T30] audit: type=1400 audit(1743834495.608:465): avc:  denied  { map } for  pid=7664 comm="syz.4.449" path="pipe:[15278]" dev="pipefs" ino=15278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  170.345763][ T5822] Bluetooth: hci2: unexpected event for opcode 0x2062
[  170.373732][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.386836][   T30] audit: type=1400 audit(1743834495.608:466): avc:  denied  { execute } for  pid=7664 comm="syz.4.449" path="pipe:[15278]" dev="pipefs" ino=15278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  170.527745][ T7670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49132 sclass=netlink_route_socket pid=7670 comm=syz.4.450
[  170.868702][   T30] audit: type=1400 audit(1743834496.148:467): avc:  denied  { write } for  pid=7672 comm="syz.3.451" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  170.991464][   T30] audit: type=1400 audit(1743834496.268:468): avc:  denied  { execute } for  pid=7677 comm="syz.0.452" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  171.019609][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  171.764667][ T7688] FAULT_INJECTION: forcing a failure.
[  171.764667][ T7688] name failslab, interval 1, probability 0, space 0, times 0
[  171.778283][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.3.454 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  171.778306][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  171.778316][ T7688] Call Trace:
[  171.778322][ T7688]  <TASK>
[  171.778328][ T7688]  dump_stack_lvl+0x16c/0x1f0
[  171.778355][ T7688]  should_fail_ex+0x512/0x640
[  171.778373][ T7688]  ? fs_reclaim_acquire+0xae/0x150
[  171.778398][ T7688]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  171.778423][ T7688]  should_failslab+0xc2/0x120
[  171.778442][ T7688]  __kmalloc_noprof+0xd2/0x510
[  171.778465][ T7688]  tomoyo_realpath_from_path+0xc2/0x6e0
[  171.778491][ T7688]  ? tomoyo_profile+0x47/0x60
[  171.778510][ T7688]  tomoyo_path_number_perm+0x245/0x580
[  171.778529][ T7688]  ? tomoyo_path_number_perm+0x237/0x580
[  171.778550][ T7688]  ? __pfx_kasan_record_aux_stack+0x4/0x10
[  171.778574][ T7688]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  171.778594][ T7688]  ? __sysvec_irq_work+0x87/0x400
[  171.778644][ T7688]  ? find_held_lock+0x2b/0x80
[  171.778665][ T7688]  ? hook_file_ioctl_common+0x145/0x410
[  171.778687][ T7688]  ? __fget_files+0x20e/0x3c0
[  171.778703][ T7688]  ? update_triggers+0x4d0/0x5a0
[  171.778731][ T7688]  security_file_ioctl+0x9b/0x240
[  171.778756][ T7688]  __x64_sys_ioctl+0xb7/0x200
[  171.778782][ T7688]  do_syscall_64+0xcd/0x260
[  171.778805][ T7688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.778822][ T7688] RIP: 0033:0x7fc942f8d169
[  171.778836][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.778851][ T7688] RSP: 002b:00007fc943e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.778867][ T7688] RAX: ffffffffffffffda RBX: 00007fc9431a6160 RCX: 00007fc942f8d169
[  171.778878][ T7688] RDX: 0000200000000180 RSI: 000000000000541c RDI: 0000000000000003
[  171.778888][ T7688] RBP: 00007fc943e3d090 R08: 0000000000000000 R09: 0000000000000000
[  171.778898][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.778907][ T7688] R13: 0000000000000001 R14: 00007fc9431a6160 R15: 00007ffca86c6268
[  171.778930][ T7688]  </TASK>
[  171.989078][    C0] vkms_vblank_simulate: vblank timer overrun
[  172.010333][ T7688] ERROR: Out of memory at tomoyo_realpath_from_path.
[  173.340457][   T30] audit: type=1400 audit(1743834498.278:469): avc:  denied  { read } for  pid=7683 comm="syz.3.454" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  173.390893][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  173.406000][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.416619][    T9] usb 5-1: Product: syz
[  173.421130][    T9] usb 5-1: Manufacturer: syz
[  173.425746][    T9] usb 5-1: SerialNumber: syz
[  173.646910][   T30] audit: type=1400 audit(1743834498.928:470): avc:  denied  { ioctl } for  pid=7677 comm="syz.0.452" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  173.671237][    C0] vkms_vblank_simulate: vblank timer overrun
[  173.690844][    T9] usb 5-1: can't set config #1, error -71
[  173.698030][    T9] usb 5-1: USB disconnect, device number 12
[  173.705549][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'.
[  174.215746][   T30] audit: type=1400 audit(1743834499.488:471): avc:  denied  { read } for  pid=7694 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  174.236023][    C0] vkms_vblank_simulate: vblank timer overrun
[  174.242925][   T30] audit: type=1400 audit(1743834499.488:472): avc:  denied  { getopt } for  pid=7694 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  174.746939][ T5822] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  174.755930][ T5822] Bluetooth: hci2: Injecting HCI hardware error event
[  174.765273][ T5822] Bluetooth: hci2: hardware error 0x00
[  175.006905][ T7708] overlayfs: failed to resolve './bus/file0': -2
[  175.298131][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.470355][    T9] IPVS: starting estimator thread 0...
[  175.670597][ T7725] IPVS: using max 44 ests per chain, 105600 per kthread
[  175.702929][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[  175.714668][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.725597][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.733412][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[  175.743406][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.751296][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.907407][   T30] audit: type=1400 audit(1743834501.188:473): avc:  denied  { ioctl } for  pid=7733 comm="syz.3.464" path="socket:[16172]" dev="sockfs" ino=16172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  175.958051][   T30] audit: type=1326 audit(1743834501.188:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  175.985918][   T30] audit: type=1326 audit(1743834501.188:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b64b8bad0 code=0x7ffc0000
[  176.071832][ T7721] erspan0 speed is unknown, defaulting to 1000
[  176.107491][   T30] audit: type=1326 audit(1743834501.188:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b64b8e997 code=0x7ffc0000
[  176.362210][   T30] audit: type=1326 audit(1743834501.188:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  176.385389][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.570092][   T30] audit: type=1326 audit(1743834501.188:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9b64b8e997 code=0x7ffc0000
[  176.597130][   T30] audit: type=1326 audit(1743834501.188:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b64b8bdca code=0x7ffc0000
[  176.621367][ T7745] process 'syz.4.467' launched './file0' with NULL argv: empty string added
[  176.648343][   T30] audit: type=1326 audit(1743834501.188:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  176.680276][ T7745] FAULT_INJECTION: forcing a failure.
[  176.680276][ T7745] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  176.709677][   T30] audit: type=1326 audit(1743834501.188:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  176.732973][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.4.467 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  176.732994][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.733002][ T7745] Call Trace:
[  176.733007][ T7745]  <TASK>
[  176.733013][ T7745]  dump_stack_lvl+0x16c/0x1f0
[  176.733037][ T7745]  should_fail_ex+0x512/0x640
[  176.733056][ T7745]  should_fail_alloc_page+0xe7/0x130
[  176.733073][ T7745]  prepare_alloc_pages+0x3c2/0x610
[  176.733099][ T7745]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  176.733118][ T7745]  ? stack_trace_save+0x8e/0xc0
[  176.733146][ T7745]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  176.733162][ T7745]  ? __lock_acquire+0xaa4/0x1ba0
[  176.733185][ T7745]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  176.733203][ T7745]  ? policy_nodemask+0xea/0x4e0
[  176.733223][ T7745]  alloc_pages_mpol+0x1fb/0x550
[  176.733241][ T7745]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  176.733264][ T7745]  alloc_pages_noprof+0x131/0x390
[  176.733283][ T7745]  pgd_alloc+0x3b/0x4e0
[  176.733307][ T7745]  mm_init+0x6f4/0x1370
[  176.733323][ T7745]  ? mm_alloc+0x1c/0xc0
[  176.733343][ T7745]  mm_alloc+0x9f/0xc0
[  176.733363][ T7745]  alloc_bprm+0x2ab/0xdd0
[  176.733386][ T7745]  ? strncpy_from_user+0x203/0x2e0
[  176.733404][ T7745]  do_execveat_common.isra.0+0x1ce/0x610
[  176.733433][ T7745]  __x64_sys_execve+0x8e/0xb0
[  176.733449][ T7745]  do_syscall_64+0xcd/0x260
[  176.733472][ T7745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.733489][ T7745] RIP: 0033:0x7f3bfd78d169
[  176.733503][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.733518][ T7745] RSP: 002b:00007f3bfb5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  176.733537][ T7745] RAX: ffffffffffffffda RBX: 00007f3bfd9a5fa0 RCX: 00007f3bfd78d169
[  176.733547][ T7745] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0
[  176.733557][ T7745] RBP: 00007f3bfb5f6090 R08: 0000000000000000 R09: 0000000000000000
[  176.733566][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.733576][ T7745] R13: 0000000000000000 R14: 00007f3bfd9a5fa0 R15: 00007ffda146d218
[  176.733597][ T7745]  </TASK>
[  176.960582][   T30] audit: type=1326 audit(1743834501.188:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7735 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  177.013291][ T5822] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  177.222196][ T7747] erspan0 speed is unknown, defaulting to 1000
[  177.314072][ T7758] FAULT_INJECTION: forcing a failure.
[  177.314072][ T7758] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  177.337116][ T7721] chnl_net:caif_netlink_parms(): no params data found
[  177.385247][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.1.472 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  177.385272][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  177.385282][ T7758] Call Trace:
[  177.385287][ T7758]  <TASK>
[  177.385294][ T7758]  dump_stack_lvl+0x16c/0x1f0
[  177.385321][ T7758]  should_fail_ex+0x512/0x640
[  177.385343][ T7758]  _copy_to_user+0x32/0xd0
[  177.385364][ T7758]  simple_read_from_buffer+0xcb/0x170
[  177.385393][ T7758]  proc_fail_nth_read+0x197/0x270
[  177.385419][ T7758]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.385446][ T7758]  ? rw_verify_area+0xcf/0x680
[  177.385467][ T7758]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  177.385493][ T7758]  vfs_read+0x1de/0xc70
[  177.385511][ T7758]  ? __pfx___mutex_lock+0x10/0x10
[  177.385532][ T7758]  ? __pfx_vfs_read+0x10/0x10
[  177.385562][ T7758]  ? __fget_files+0x20e/0x3c0
[  177.385586][ T7758]  ksys_read+0x12a/0x240
[  177.385600][ T7758]  ? __pfx_ksys_read+0x10/0x10
[  177.385613][ T7758]  ? rcu_is_watching+0x12/0xc0
[  177.385640][ T7758]  do_syscall_64+0xcd/0x260
[  177.385663][ T7758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.385680][ T7758] RIP: 0033:0x7f9b64b8bb7c
[  177.385693][ T7758] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  177.385708][ T7758] RSP: 002b:00007f9b65a38030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  177.385724][ T7758] RAX: ffffffffffffffda RBX: 00007f9b64da5fa0 RCX: 00007f9b64b8bb7c
[  177.385735][ T7758] RDX: 000000000000000f RSI: 00007f9b65a380a0 RDI: 0000000000000004
[  177.385745][ T7758] RBP: 00007f9b65a38090 R08: 0000000000000000 R09: 0000000000000000
[  177.385754][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  177.385763][ T7758] R13: 0000000000000000 R14: 00007f9b64da5fa0 R15: 00007ffccacebfd8
[  177.385785][ T7758]  </TASK>
[  177.800693][ T5822] Bluetooth: hci0: command tx timeout
[  177.824013][ T7771] netlink: 'syz.3.477': attribute type 1 has an invalid length.
[  177.841246][ T7771] netlink: 244 bytes leftover after parsing attributes in process `syz.3.477'.
[  177.869640][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.889096][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.918756][ T7721] bridge_slave_0: entered allmulticast mode
[  177.950828][ T7721] bridge_slave_0: entered promiscuous mode
[  177.968505][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.999846][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.013253][ T7777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  178.035724][ T7721] bridge_slave_1: entered allmulticast mode
[  178.056110][ T7721] bridge_slave_1: entered promiscuous mode
[  178.101669][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.119022][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.184692][ T7721] team0: Port device team_slave_0 added
[  178.192270][ T7721] team0: Port device team_slave_1 added
[  178.238635][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.252350][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.278738][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.299316][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.306971][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  178.315088][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.353049][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.356154][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  178.428795][ T7721] hsr_slave_0: entered promiscuous mode
[  178.435034][ T7721] hsr_slave_1: entered promiscuous mode
[  178.445811][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.453409][ T7721] Cannot create hsr debugfs directory
[  178.511587][    T9] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  178.529518][   T10] usb 4-1: Using ep0 maxpacket: 8
[  178.534635][    T9] usb 2-1: config 5 has no interface number 0
[  178.546282][    T9] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  178.561869][    T9] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65280, setting to 64
[  178.574266][    T9] usb 2-1: config 5 interface 123 has no altsetting 0
[  178.583058][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  178.595505][   T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40
[  178.610835][    T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  178.630063][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.638157][   T10] usb 4-1: Product: syz
[  178.649532][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.670104][    T9] usb 2-1: Product: syz
[  178.674295][    T9] usb 2-1: Manufacturer: syz
[  178.683221][   T10] usb 4-1: Manufacturer: Ñ„
[  178.699359][   T10] usb 4-1: SerialNumber: syz
[  178.711746][    T9] usb 2-1: SerialNumber: syz
[  178.741385][ T7777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  178.763453][ T7721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.851304][ T7721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.938623][ T7721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.979731][ T5874] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  178.985450][    T9] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  179.075968][    T9] usb 2-1: USB disconnect, device number 9
[  179.129698][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  179.221899][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  179.340511][ T7721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.347518][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  179.373725][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.391864][ T5874] usb 1-1: Product: syz
[  179.405016][ T5874] usb 1-1: Manufacturer: syz
[  179.424414][ T5874] usb 1-1: SerialNumber: syz
[  179.438505][ T5874] usb 1-1: config 0 descriptor??
[  179.459932][ T5874] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  179.472162][ T5874] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  179.600572][ T7721] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  179.614748][ T7721] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  179.633887][ T7721] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  179.649128][ T7721] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  179.828187][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.847652][ T7721] 8021q: adding VLAN 0 to HW filter on device team0
[  179.870324][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.877476][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.879568][ T5822] Bluetooth: hci0: command tx timeout
[  179.908597][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.915765][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.012518][ T7721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.102133][ T7807] tipc: Started in network mode
[  180.107396][ T7807] tipc: Node identity 7f000001, cluster identity 4711
[  180.116927][ T5874] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  180.123028][ T7807] tipc: Enabled bearer <udp:syz2>, priority 10
[  180.323116][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.483715][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  180.532100][ T7721] veth0_vlan: entered promiscuous mode
[  180.553016][ T7721] veth1_vlan: entered promiscuous mode
[  180.693567][ T5871] usb 5-1: Using ep0 maxpacket: 8
[  180.702105][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  180.718872][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.737304][ T7721] veth0_macvtap: entered promiscuous mode
[  180.755125][ T7721] veth1_macvtap: entered promiscuous mode
[  180.777378][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.778197][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  180.788005][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.788019][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.815446][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  180.855080][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.864695][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.883778][ T5871] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  180.902903][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.918650][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.929267][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.941761][ T5871] usb 5-1: Product: syz
[  180.947886][ T5871] usb 5-1: Manufacturer: syz
[  180.953113][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.965568][ T5871] usb 5-1: SerialNumber: syz
[  180.974036][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.989026][ T5871] usb 5-1: config 0 descriptor??
[  180.996674][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.007882][ T7812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  181.015198][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.030757][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.044113][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.073828][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.087842][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.108149][   T10] usbhid 4-1:1.0: can't add hid device: -71
[  181.119302][   T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  181.129315][   T92] tipc: Node number set to 2130706433
[  181.142441][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.158783][   T10] usb 4-1: USB disconnect, device number 11
[  181.174985][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.209245][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.225340][ T5874] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  181.228464][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.236241][ T5874] em28xx 1-1:0.0: board has no eeprom
[  181.255465][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.266596][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.277931][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.289121][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.299517][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.310600][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.321271][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.332240][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.339689][ T5874] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  181.342683][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.349911][ T5874] em28xx 1-1:0.0: dvb set to bulk mode.
[  181.362514][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.373880][ T5828] em28xx 1-1:0.0: Binding DVB extension
[  181.379006][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.399258][ T5871] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  181.409902][ T5874] usb 1-1: USB disconnect, device number 12
[  181.411061][ T5871] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  181.416622][ T5874] em28xx 1-1:0.0: Disconnecting em28xx
[  181.445109][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.464714][    C0] powermate: config urb returned -71
[  181.470774][    C0] powermate: config urb returned -71
[  181.476157][    C0] powermate: config urb returned -71
[  181.482779][    C0] powermate: config urb returned -71
[  181.487852][ T5828] em28xx 1-1:0.0: Registering input extension
[  181.494485][ T5871] usb 5-1: USB disconnect, device number 13
[  181.494537][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  181.509851][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  181.539740][ T5874] em28xx 1-1:0.0: Closing input extension
[  181.560550][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.595400][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.610780][ T5874] em28xx 1-1:0.0: Freeing device
[  181.617447][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.663004][ T7721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.668603][ T7820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  181.685391][ T7721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.696641][ T7721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.710095][ T7721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.725110][   T10] usb 4-1: Using ep0 maxpacket: 8
[  181.733546][   T10] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[  181.746656][   T10] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config
[  181.760101][   T10] usb 4-1: config 0 has no interface number 0
[  181.767577][   T10] usb 4-1: too many endpoints for config 0 interface 151 altsetting 55: 53, using maximum allowed: 30
[  181.779233][   T10] usb 4-1: config 0 interface 151 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  181.792874][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  181.792886][   T30] audit: type=1400 audit(1743834507.078:514): avc:  denied  { bind } for  pid=7819 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  181.833458][   T10] usb 4-1: config 0 interface 151 has no altsetting 0
[  181.843425][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  181.855022][   T30] audit: type=1400 audit(1743834507.128:515): avc:  denied  { write } for  pid=7819 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  181.876812][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.901688][   T10] usb 4-1: config 0 descriptor??
[  181.912350][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.945019][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.960020][ T5822] Bluetooth: hci0: command tx timeout
[  181.984843][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.004668][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.101487][   T30] audit: type=1326 audit(1743834507.388:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd78d169 code=0x7fc00000
[  182.126557][ T7827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.492'.
[  182.214796][   T30] audit: type=1326 audit(1743834507.388:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd78d169 code=0x7fc00000
[  182.242033][   T30] audit: type=1326 audit(1743834507.388:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd78d169 code=0x7fc00000
[  182.300220][   T30] audit: type=1400 audit(1743834507.468:519): avc:  denied  { create } for  pid=7815 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  182.344910][   T30] audit: type=1400 audit(1743834507.478:520): avc:  denied  { bind } for  pid=7815 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  182.371204][   T30] audit: type=1400 audit(1743834507.488:521): avc:  denied  { read } for  pid=7824 comm="syz.4.493" path="socket:[17628]" dev="sockfs" ino=17628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  182.402622][   T30] audit: type=1326 audit(1743834507.558:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.4.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd78d169 code=0x7fc00000
[  182.440497][   T30] audit: type=1400 audit(1743834507.578:523): avc:  denied  { mounton } for  pid=7721 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  183.688766][   T10] usb 4-1: string descriptor 0 read error: -71
[  183.729688][   T10] gspca_main: vc032x-2.14.0 probing 046d:0892
[  183.741762][   T10] gspca_vc032x: reg_r err -71
[  183.799563][   T10] vc032x 4-1:0.151: probe with driver vc032x failed with error -71
[  183.811574][   T10] usb 4-1: USB disconnect, device number 12
[  183.825510][ T7841] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  184.600502][ T7850] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  186.171718][ T5911] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  186.194650][ T5911] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  186.231548][ T5911] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  186.355093][ T7860] ubi31: attaching mtd0
[  186.368978][ T7860] ubi31: scanning is finished
[  186.381337][ T7860] ubi31: empty MTD device detected
[  186.408093][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.421301][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.429702][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.438927][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.447038][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.519911][ T5911] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  186.523373][ T7860] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  186.533941][ T7872] erspan0 speed is unknown, defaulting to 1000
[  186.554037][ T7860] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  186.566223][ T7860] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  186.581531][ T7860] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  186.593649][ T7860] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  186.633034][ T7860] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  186.645865][ T7860] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2221307214
[  186.657630][ T7860] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  186.672206][ T7875] ubi31: background thread "ubi_bgt31d" started, PID 7875
[  186.710878][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.725403][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  186.747983][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.769344][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  186.786859][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  186.802161][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  186.812576][ T5911] usb 4-1: Manufacturer: syz
[  186.826353][ T5911] usb 4-1: config 0 descriptor??
[  186.912288][ T7872] chnl_net:caif_netlink_parms(): no params data found
[  187.112478][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.129974][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.137230][ T7872] bridge_slave_0: entered allmulticast mode
[  187.161717][ T7872] bridge_slave_0: entered promiscuous mode
[  187.176410][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.191163][ T5911] rc_core: IR keymap rc-hauppauge not found
[  187.199341][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.207429][ T5911] Registered IR keymap rc-empty
[  187.219093][ T7872] bridge_slave_1: entered allmulticast mode
[  187.225414][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.240843][ T7872] bridge_slave_1: entered promiscuous mode
[  187.254309][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  187.254323][   T30] audit: type=1400 audit(1743834512.538:558): avc:  denied  { ioctl } for  pid=7888 comm="syz.4.508" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  187.269948][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.313950][   T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  187.325849][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  187.363455][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10
[  187.380074][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.392879][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.405996][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.441070][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.489941][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.507434][ T7872] team0: Port device team_slave_0 added
[  187.520228][  T874] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  187.522739][   T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  187.536782][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.547266][ T7872] team0: Port device team_slave_1 added
[  187.553354][   T10] usb 1-1: config 0 has no interface number 0
[  187.563679][   T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  187.573061][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.580829][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.588926][   T10] usb 1-1: Product: syz
[  187.593397][   T10] usb 1-1: Manufacturer: syz
[  187.598097][   T10] usb 1-1: SerialNumber: syz
[  187.605794][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.617221][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.627033][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.630999][   T10] usb 1-1: config 0 descriptor??
[  187.658597][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.664317][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  187.680145][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.681082][  T874] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  187.690089][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.706880][  T874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.720500][  T874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  187.733703][  T874] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  187.742807][  T874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.747559][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.762334][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.770590][  T874] usb 5-1: config 0 descriptor??
[  187.775722][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.809570][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  187.825928][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.853959][ T5911] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  187.867296][ T5911] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  187.871888][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  187.898292][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  187.918662][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  187.951121][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  187.963462][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.972779][ T5874] usb 2-1: Product: syz
[  187.980211][ T5874] usb 2-1: Manufacturer: syz
[  187.985047][ T5874] usb 2-1: SerialNumber: syz
[  188.004300][ T7872] hsr_slave_0: entered promiscuous mode
[  188.013291][ T5874] usb 2-1: config 0 descriptor??
[  188.035154][ T5874] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  188.042875][ T7872] hsr_slave_1: entered promiscuous mode
[  188.045576][ T5874] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  188.058343][ T7872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.066487][ T7872] Cannot create hsr debugfs directory
[  188.382997][  T874] usbhid 5-1:0.0: can't add hid device: -71
[  188.399592][  T874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  188.446223][ T7872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.447704][  T874] usb 5-1: USB disconnect, device number 14
[  188.519846][ T5822] Bluetooth: hci0: command tx timeout
[  188.545516][ T7872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.622742][ T7872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.639565][ T5874] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  188.658849][ T5874] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  188.673561][ T5874] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  188.739692][   T30] audit: type=1400 audit(1743834514.008:559): avc:  denied  { write } for  pid=7883 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  188.759193][ T5874] em28xx 2-1:0.0: No AC97 audio processor
[  188.795363][ T5874] usb 2-1: USB disconnect, device number 10
[  188.817847][ T5874] em28xx 2-1:0.0: Disconnecting em28xx
[  188.831839][ T5874] em28xx 2-1:0.0: Freeing device
[  188.872582][ T7872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.923047][   T10] usb 1-1: Firmware version (0.0) predates our first public release.
[  188.963038][   T10] usb 1-1: Please update to version 0.2 or newer
[  189.240992][ T7872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  189.267944][ T5911] usb 4-1: USB disconnect, device number 13
[  189.284759][ T7872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  189.350344][ T7872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  189.396226][ T7872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  189.584126][   T30] audit: type=1400 audit(1743834514.858:560): avc:  denied  { setopt } for  pid=7911 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  189.898099][ T5911] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  189.909096][   T30] audit: type=1400 audit(1743834515.198:561): avc:  denied  { node_bind } for  pid=7922 comm="syz.1.514" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  189.993633][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.069569][ T5911] usb 4-1: device descriptor read/64, error -71
[  190.199587][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  190.536933][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  190.564191][ T5874] usb 2-1: config 5 has an invalid interface number: 168 but max is 0
[  190.619791][ T5874] usb 2-1: config 5 has no interface number 0
[  190.633176][ T5822] Bluetooth: hci0: command tx timeout
[  190.772109][ T5874] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  190.787944][  T874] usb 1-1: USB disconnect, device number 13
[  190.939824][ T5874] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  191.086268][ T5874] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  191.136794][ T5874] usb 2-1: config 5 interface 168 has no altsetting 0
[  191.197476][ T5874] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  191.217655][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.245806][ T5874] usb 2-1: Product: syz
[  191.299851][ T5911] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  191.322769][ T5874] usb 2-1: Manufacturer: syz
[  191.343236][ T5874] usb 2-1: SerialNumber: syz
[  191.350542][ T7924] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  191.384993][ T7872] 8021q: adding VLAN 0 to HW filter on device team0
[  191.426408][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.433503][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.449859][ T5911] usb 4-1: device descriptor read/64, error -71
[  191.465322][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.472494][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.589750][ T5911] usb usb4-port1: attempt power cycle
[  191.621668][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.639723][   T24] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  191.667199][ T7872] veth0_vlan: entered promiscuous mode
[  191.681699][ T7872] veth1_vlan: entered promiscuous mode
[  191.710024][ T7872] veth0_macvtap: entered promiscuous mode
[  191.718813][ T7872] veth1_macvtap: entered promiscuous mode
[  191.736067][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.739654][  T874] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  191.747582][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.764905][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.775699][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.786858][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.799189][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.809035][   T24] usb 5-1: config 0 has an invalid interface number: 253 but max is 0
[  191.809061][   T24] usb 5-1: config 0 has no interface number 0
[  191.809095][   T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8731, bcdDevice=62.73
[  191.809114][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.842223][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.844490][   T24] usb 5-1: config 0 descriptor??
[  191.853122][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.868485][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.880982][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.891525][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.903792][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.913824][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.921833][  T874] usb 1-1: Using ep0 maxpacket: 32
[  191.925119][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.934490][  T874] usb 1-1: unable to get BOS descriptor or descriptor too short
[  191.939569][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.957914][ T5911] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  191.965959][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.978072][  T874] usb 1-1: config 128 has an invalid interface number: 6 but max is 2
[  191.978210][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.994572][ T5911] usb 4-1: device descriptor read/8, error -71
[  192.006599][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.017558][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.023140][  T874] usb 1-1: config 128 has an invalid interface number: 8 but max is 2
[  192.028540][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.037845][  T874] usb 1-1: config 128 has an invalid interface number: 92 but max is 2
[  192.046688][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.065053][  T874] usb 1-1: config 128 has no interface number 0
[  192.065073][  T874] usb 1-1: config 128 has no interface number 1
[  192.065086][  T874] usb 1-1: config 128 has no interface number 2
[  192.065128][  T874] usb 1-1: config 128 interface 6 has no altsetting 0
[  192.065143][  T874] usb 1-1: config 128 interface 92 has no altsetting 0
[  192.067026][  T874] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42
[  192.072491][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.078764][   T24] usb 5-1: USB disconnect, device number 15
[  192.084715][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.101558][  T874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.110655][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.143794][  T874] usb 1-1: Product: syz
[  192.158071][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.168269][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.169747][  T874] usb 1-1: Manufacturer: syz
[  192.179204][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.187850][  T874] usb 1-1: SerialNumber: syz
[  192.194000][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.210445][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.221476][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.232208][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.242160][ T7872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.253252][ T7872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.264614][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.279918][ T5911] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  192.288664][ T7872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.298318][ T7872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.307402][ T7872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.318283][ T5911] usb 4-1: device descriptor read/8, error -71
[  192.324716][ T7872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.424373][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.443589][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.443801][ T5911] usb usb4-port1: unable to enumerate USB device
[  192.493235][  T874] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  192.501148][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.511059][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.516856][  T874] usb 1-1: selecting invalid altsetting 0
[  192.552063][ T2327] pvrusb2: Invalid write control endpoint
[  192.558301][  T874] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  192.598687][  T874] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  192.635028][  T874] usb 1-1: selecting invalid altsetting 0
[  192.692348][  T874] usb 1-1: USB disconnect, device number 14
[  192.698589][ T2327] pvrusb2: Invalid write control endpoint
[  192.742432][ T2327] pvrusb2: Invalid write control endpoint
[  192.758056][ T2327] pvrusb2: Invalid write control endpoint
[  192.767401][ T2327] pvrusb2: Invalid write control endpoint
[  192.773584][ T2327] pvrusb2: Invalid write control endpoint
[  192.779446][ T2327] pvrusb2: Invalid write control endpoint
[  192.828720][ T2327] pvrusb2: Invalid write control endpoint
[  192.842199][ T2327] pvrusb2: Invalid write control endpoint
[  192.888639][ T2327] pvrusb2: Invalid write control endpoint
[  192.893878][ T5874] pn533_usb 2-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint
[  192.899591][ T2327] pvrusb2: Invalid write control endpoint
[  192.930923][ T5874] usb 2-1: USB disconnect, device number 11
[  192.969980][   T30] audit: type=1400 audit(1743834518.258:562): avc:  denied  { write } for  pid=7945 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  193.000511][ T7946] overlayfs: failed to resolve '/â9Ã}¹PÕFÆŒ_x¨úµK…“káŽ)".Ì'¦j
[  193.000511][ T7946] é8yAØT…€AËo™™ë)rÎ(5LL¼OeO'â†&äâç~’¢²Ã': -2
[  193.050289][ T2327] pvrusb2: Invalid write control endpoint
[  193.056062][ T2327] pvrusb2: Invalid write control endpoint
[  193.076262][ T2327] pvrusb2: Invalid write control endpoint
[  193.082517][ T2327] pvrusb2: Invalid write control endpoint
[  193.088239][ T2327] pvrusb2: Invalid write control endpoint
[  193.093994][ T2327] pvrusb2: Invalid write control endpoint
[  193.100310][ T2327] pvrusb2: Invalid write control endpoint
[  193.106028][ T2327] pvrusb2: Invalid write control endpoint
[  193.112454][ T2327] pvrusb2: Invalid write control endpoint
[  193.118324][ T2327] pvrusb2: Invalid write control endpoint
[  193.119331][ T7946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7946 comm=syz.3.518
[  193.126097][ T2327] pvrusb2: Invalid write control endpoint
[  193.428507][ T2327] pvrusb2: Invalid write control endpoint
[  193.518523][ T2327] pvrusb2: Invalid write control endpoint
[  193.624435][ T2327] pvrusb2: Invalid write control endpoint
[  193.659334][ T2327] pvrusb2: Invalid write control endpoint
[  193.768027][ T2327] pvrusb2: Invalid write control endpoint
[  193.774548][ T2327] pvrusb2: Invalid write control endpoint
[  193.787977][ T2327] pvrusb2: Invalid write control endpoint
[  193.817521][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  193.823893][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  193.842805][ T2327] pvrusb2: Invalid write control endpoint
[  193.864724][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.879593][ T2327] pvrusb2: Invalid write control endpoint
[  193.914283][ T2327] pvrusb2: Invalid write control endpoint
[  193.920079][ T2327] pvrusb2: Invalid write control endpoint
[  193.927443][ T2327] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  193.966274][ T2327] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  193.973454][ T2327] pvrusb2: Invalid write control endpoint
[  193.979188][ T2327] pvrusb2: Invalid write control endpoint
[  193.985265][ T2327] pvrusb2: Invalid write control endpoint
[  193.993151][ T2327] pvrusb2: Invalid write control endpoint
[  193.998876][ T2327] pvrusb2: Invalid write control endpoint
[  194.005137][ T2327] pvrusb2: Invalid write control endpoint
[  194.010906][ T2327] pvrusb2: Invalid write control endpoint
[  194.016847][ T2327] pvrusb2: Invalid write control endpoint
[  194.022660][ T2327] pvrusb2: Invalid write control endpoint
[  194.028364][ T2327] pvrusb2: Invalid write control endpoint
[  194.034340][ T2327] pvrusb2: Invalid write control endpoint
[  194.040345][ T2327] pvrusb2: Invalid write control endpoint
[  194.046048][ T2327] pvrusb2: Invalid write control endpoint
[  194.053663][ T2327] pvrusb2: Invalid write control endpoint
[  194.059386][ T2327] pvrusb2: Invalid write control endpoint
[  194.065426][ T2327] pvrusb2: Invalid write control endpoint
[  194.071186][ T2327] pvrusb2: Invalid write control endpoint
[  194.076895][ T2327] pvrusb2: Invalid write control endpoint
[  194.082725][ T2327] pvrusb2: Invalid write control endpoint
[  194.088442][ T2327] pvrusb2: Invalid write control endpoint
[  194.094421][ T2327] pvrusb2: Invalid write control endpoint
[  194.102253][ T2327] pvrusb2: Attached sub-driver cs53l32a
[  194.124160][ T2327] pvrusb2: Invalid write control endpoint
[  194.130678][ T2327] pvrusb2: Invalid write control endpoint
[  194.136477][ T2327] pvrusb2: Invalid write control endpoint
[  194.142669][ T2327] pvrusb2: Invalid write control endpoint
[  194.148391][ T2327] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  194.166804][ T2327] pvrusb2: Device being rendered inoperable
[  194.172765][ T2327] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  194.188135][ T2327] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  194.208667][ T2327] pvrusb2: Invalid write control endpoint
[  194.237214][ T2327] pvrusb2: Invalid write control endpoint
[  194.243652][ T2327] pvrusb2: Invalid write control endpoint
[  194.249354][ T2327] pvrusb2: Invalid write control endpoint
[  194.257244][ T2327] pvrusb2: Invalid write control endpoint
[  194.263072][ T2327] pvrusb2: Invalid write control endpoint
[  194.268779][ T2327] pvrusb2: Invalid write control endpoint
[  194.275076][ T2327] pvrusb2: Invalid write control endpoint
[  194.283868][ T2327] pvrusb2: Invalid write control endpoint
[  194.289634][ T2327] pvrusb2: Invalid write control endpoint
[  194.295341][ T2327] pvrusb2: Invalid write control endpoint
[  194.301371][ T2327] pvrusb2: Invalid write control endpoint
[  194.307077][ T2327] pvrusb2: Invalid write control endpoint
[  194.312824][ T2327] pvrusb2: Invalid write control endpoint
[  194.318533][ T2327] pvrusb2: Invalid write control endpoint
[  194.324353][ T2327] pvrusb2: Invalid write control endpoint
[  194.330815][ T2327] pvrusb2: Invalid write control endpoint
[  194.336511][ T2327] pvrusb2: Invalid write control endpoint
[  194.342327][ T2327] pvrusb2: Invalid write control endpoint
[  194.348043][ T2327] pvrusb2: Invalid write control endpoint
[  194.353808][ T2327] pvrusb2: Invalid write control endpoint
[  194.361723][ T2327] pvrusb2: Invalid write control endpoint
[  194.367441][ T2327] pvrusb2: Invalid write control endpoint
[  194.373246][ T2327] pvrusb2: Invalid write control endpoint
[  194.378947][ T2327] pvrusb2: Invalid write control endpoint
[  194.384913][ T2327] pvrusb2: Invalid write control endpoint
[  194.390880][ T2327] pvrusb2: Invalid write control endpoint
[  194.396591][ T2327] pvrusb2: Invalid write control endpoint
[  194.402406][ T2327] pvrusb2: Invalid write control endpoint
[  194.408109][ T2327] pvrusb2: Invalid write control endpoint
[  194.413834][ T2327] pvrusb2: Invalid write control endpoint
[  194.419946][ T2327] pvrusb2: Invalid write control endpoint
[  194.425651][ T2327] pvrusb2: Invalid write control endpoint
[  194.433469][ T2327] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  194.473763][ T2327] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b)
[  194.480321][ T2327] pvrusb2: Invalid write control endpoint
[  194.486030][ T2327] pvrusb2: Invalid write control endpoint
[  194.492002][ T2327] pvrusb2: Invalid write control endpoint
[  194.497710][ T2327] pvrusb2: Invalid write control endpoint
[  194.503486][ T2327] pvrusb2: Invalid write control endpoint
[  194.509189][ T2327] pvrusb2: Invalid write control endpoint
[  194.515073][ T2327] pvrusb2: Invalid write control endpoint
[  194.557746][ T2327] pvrusb2: Invalid write control endpoint
[  194.586201][ T2327] pvrusb2: Invalid write control endpoint
[  194.610997][ T2327] pvrusb2: Invalid write control endpoint
[  194.616739][ T2327] pvrusb2: Invalid write control endpoint
[  194.723489][ T2327] pvrusb2: Invalid write control endpoint
[  194.729249][ T2327] pvrusb2: Invalid write control endpoint
[  194.735051][ T2327] pvrusb2: Invalid write control endpoint
[  194.750914][ T2327] pvrusb2: Invalid write control endpoint
[  194.756795][ T2327] pvrusb2: Invalid write control endpoint
[  194.764160][ T7970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'.
[  194.776340][ T7970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7970 comm=syz.0.522
[  194.821711][   T30] audit: type=1400 audit(1743834520.078:563): avc:  denied  { read } for  pid=7960 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  194.848628][ T2327] pvrusb2: Invalid write control endpoint
[  194.854887][ T2327] pvrusb2: Invalid write control endpoint
[  194.862839][ T2327] pvrusb2: Invalid write control endpoint
[  195.556803][ T5931] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  195.575930][ T2327] pvrusb2: Invalid write control endpoint
[  195.582951][ T2327] pvrusb2: Invalid write control endpoint
[  195.666108][ T7977] xt_NFQUEUE: number of total queues is 0
[  196.211061][ T2327] pvrusb2: Attached sub-driver cs53l32a
[  196.282182][ T5931] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  196.329765][ T5931] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  196.351827][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  196.356433][ T2327] pvrusb2: Invalid write control endpoint
[  196.366451][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  196.378365][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  196.404436][ T2327] pvrusb2: Invalid write control endpoint
[  196.434178][ T2327] pvrusb2: Invalid write control endpoint
[  196.452236][ T2327] pvrusb2: Invalid write control endpoint
[  196.469171][ T2327] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  196.535347][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  196.548402][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  196.557450][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.566966][ T2327] pvrusb2: Device being rendered inoperable
[  196.574569][ T2327] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  196.651573][ T7990] xt_NFQUEUE: number of total queues is 0
[  197.192479][ T5931] usb 4-1: config 0 descriptor??
[  197.291054][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.308256][ T2327] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  197.416954][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.426223][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.437499][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.445780][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.480143][ T7961] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  197.483452][ T7991] erspan0 speed is unknown, defaulting to 1000
[  197.511663][ T2327] pvrusb2: Invalid write control endpoint
[  197.585199][ T2327] pvrusb2: Invalid write control endpoint
[  197.599555][ T2327] pvrusb2: Invalid write control endpoint
[  197.606885][ T2327] pvrusb2: Invalid write control endpoint
[  197.613091][ T5931] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  197.616830][ T2327] pvrusb2: Invalid write control endpoint
[  197.629904][ T2327] pvrusb2: Invalid write control endpoint
[  197.663075][ T2327] pvrusb2: Invalid write control endpoint
[  197.685260][ T2327] pvrusb2: Invalid write control endpoint
[  197.709916][ T5931] usb 4-1: USB disconnect, device number 18
[  197.711750][ T7998] xt_l2tp: v2 tid > 0xffff: 262144
[  197.729085][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'.
[  197.732095][ T2327] pvrusb2: Invalid write control endpoint
[  197.766845][ T5931] usblp0: removed
[  197.778151][ T2327] pvrusb2: Invalid write control endpoint
[  197.808624][ T2327] pvrusb2: Invalid write control endpoint
[  197.841945][ T2327] pvrusb2: Invalid write control endpoint
[  197.847711][ T2327] pvrusb2: Invalid write control endpoint
[  197.919810][ T2327] pvrusb2: Invalid write control endpoint
[  197.964084][ T2327] pvrusb2: Invalid write control endpoint
[  198.021283][ T2327] pvrusb2: Invalid write control endpoint
[  198.038682][ T2327] pvrusb2: Invalid write control endpoint
[  198.087729][ T2327] pvrusb2: Invalid write control endpoint
[  198.321191][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[  198.368882][ T8008] syz_tun: entered promiscuous mode
[  198.507393][ T2327] pvrusb2: Invalid write control endpoint
[  198.513379][   T30] audit: type=1400 audit(1743834523.588:564): avc:  denied  { bind } for  pid=7999 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  198.513452][   T30] audit: type=1400 audit(1743834523.598:565): avc:  denied  { name_bind } for  pid=7999 comm="syz.1.533" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  198.513541][   T30] audit: type=1400 audit(1743834523.598:566): avc:  denied  { node_bind } for  pid=7999 comm="syz.1.533" saddr=100.1.1.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  198.883253][ T2327] pvrusb2: Invalid write control endpoint
[  198.889026][ T2327] pvrusb2: Invalid write control endpoint
[  198.894840][ T2327] pvrusb2: Invalid write control endpoint
[  199.080107][ T2327] pvrusb2: Invalid write control endpoint
[  199.140249][ T2327] pvrusb2: Invalid write control endpoint
[  199.159981][ T2327] pvrusb2: Invalid write control endpoint
[  199.189190][ T2327] pvrusb2: Invalid write control endpoint
[  199.204437][ T2327] pvrusb2: Invalid write control endpoint
[  199.247047][   T30] audit: type=1400 audit(1743834524.528:567): avc:  denied  { listen } for  pid=8019 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  199.249667][ T2327] pvrusb2: Invalid write control endpoint
[  199.369696][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'.
[  199.392803][   T30] audit: type=1400 audit(1743834524.678:568): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  199.412789][ T2327] pvrusb2: Invalid write control endpoint
[  199.435351][ T8020] erspan0 speed is unknown, defaulting to 1000
[  199.456864][ T2327] pvrusb2: Invalid write control endpoint
[  199.478789][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.538'.
[  199.487834][ T5835] Bluetooth: hci0: command tx timeout
[  199.504680][ T2327] pvrusb2: Invalid write control endpoint
[  199.519954][ T2327] pvrusb2: Invalid write control endpoint
[  199.521920][   T30] audit: type=1326 audit(1743834524.808:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  199.531841][ T2327] pvrusb2: Invalid write control endpoint
[  199.548890][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.590032][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'.
[  199.606806][ T7991] chnl_net:caif_netlink_parms(): no params data found
[  199.638956][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'.
[  199.658705][ T2327] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  199.725013][   T30] audit: type=1326 audit(1743834524.808:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  199.748245][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.769661][   T30] audit: type=1326 audit(1743834524.808:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc942f8bad0 code=0x7ffc0000
[  200.181859][ T2327] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c)
[  200.188260][ T2327] pvrusb2: Invalid write control endpoint
[  200.197253][ T2327] pvrusb2: Invalid write control endpoint
[  200.206399][ T2327] pvrusb2: Invalid write control endpoint
[  200.214250][ T2327] pvrusb2: Invalid write control endpoint
[  200.220479][ T2327] pvrusb2: Invalid write control endpoint
[  200.226213][ T2327] pvrusb2: Invalid write control endpoint
[  200.232680][ T2327] pvrusb2: Invalid write control endpoint
[  200.238532][ T2327] pvrusb2: Invalid write control endpoint
[  200.244622][ T2327] pvrusb2: Invalid write control endpoint
[  200.247079][   T30] audit: type=1326 audit(1743834524.808:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc942f8e997 code=0x7ffc0000
[  200.273964][ T2327] pvrusb2: Invalid write control endpoint
[  200.273981][ T2327] pvrusb2: Invalid write control endpoint
[  200.273992][ T2327] pvrusb2: Invalid write control endpoint
[  200.274002][ T2327] pvrusb2: Invalid write control endpoint
[  200.274012][ T2327] pvrusb2: Invalid write control endpoint
[  200.274023][ T2327] pvrusb2: Invalid write control endpoint
[  200.274033][ T2327] pvrusb2: Invalid write control endpoint
[  200.274043][ T2327] pvrusb2: Invalid write control endpoint
[  200.274053][ T2327] pvrusb2: Invalid write control endpoint
[  200.274063][ T2327] pvrusb2: Invalid write control endpoint
[  200.274073][ T2327] pvrusb2: Invalid write control endpoint
[  200.274082][ T2327] pvrusb2: Invalid write control endpoint
[  200.310765][ T2327] pvrusb2: Attached sub-driver cs53l32a
[  200.316545][   T30] audit: type=1326 audit(1743834524.808:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8027 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  200.488058][ T2327] pvrusb2: Invalid write control endpoint
[  200.505045][ T2327] pvrusb2: Invalid write control endpoint
[  200.515597][ T2327] pvrusb2: Invalid write control endpoint
[  200.524126][ T2327] pvrusb2: Invalid write control endpoint
[  200.532836][ T2327] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  200.552513][ T2327] pvrusb2: Device being rendered inoperable
[  200.561371][ T2327] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  200.574545][ T2327] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  200.686404][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.723801][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.736549][ T7991] bridge_slave_0: entered allmulticast mode
[  200.744570][ T7991] bridge_slave_0: entered promiscuous mode
[  201.255251][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.332648][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.339951][ T7991] bridge_slave_1: entered allmulticast mode
[  201.347198][ T7991] bridge_slave_1: entered promiscuous mode
[  201.543281][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.569788][ T5835] Bluetooth: hci0: command tx timeout
[  201.586621][    C1] sd 0:0:1:0: [sda] tag#4484 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  201.597075][    C1] sd 0:0:1:0: [sda] tag#4484 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00
[  201.613324][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.744457][ T8062] netlink: 100 bytes leftover after parsing attributes in process `syz.4.547'.
[  201.875730][ T7991] team0: Port device team_slave_0 added
[  202.039795][ T7991] team0: Port device team_slave_1 added
[  202.926131][ T8066] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  202.947898][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.984792][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.084373][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.106896][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.114892][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.144365][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.639656][ T5835] Bluetooth: hci0: command tx timeout
[  204.271822][ T8076] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0
[  204.298530][ T7991] hsr_slave_0: entered promiscuous mode
[  204.305411][ T7991] hsr_slave_1: entered promiscuous mode
[  204.320138][ T7991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.327766][ T7991] Cannot create hsr debugfs directory
[  204.347418][ T8079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.552'.
[  204.451458][ T5871] libceph: connect (1)[c::]:6789 error -101
[  204.458184][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  204.730082][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  204.730097][   T30] audit: type=1400 audit(1743834530.008:603): avc:  denied  { shutdown } for  pid=8091 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.780765][ T5871] libceph: connect (1)[c::]:6789 error -101
[  204.787916][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  204.939664][  T874] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  204.986280][ T7991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.085056][ T7991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.113459][  T874] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  205.121533][  T874] usb 4-1: config 0 has no interface number 0
[  205.129891][  T874] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  205.139024][  T874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.147430][  T874] usb 4-1: Product: syz
[  205.151994][  T874] usb 4-1: Manufacturer: syz
[  205.165325][  T874] usb 4-1: SerialNumber: syz
[  205.168813][ T8080] ceph: No mds server is up or the cluster is laggy
[  205.186452][  T874] usb 4-1: config 0 descriptor??
[  205.224282][  T874] i2c-tiny-usb 4-1:0.2: version 6d.cc found at bus 004 address 019
[  205.249624][ T7991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.356328][ T7991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.421868][   T30] audit: type=1400 audit(1743834530.708:604): avc:  denied  { audit_write } for  pid=8086 comm="syz.3.555" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  205.719595][ T5835] Bluetooth: hci0: command tx timeout
[  206.036270][ T7991] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  206.053880][ T7991] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  206.067141][ T7991] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  206.085010][ T7991] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  206.129596][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  206.830547][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  206.864483][   T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  206.890371][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.897864][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.914711][   T10] usb 5-1: Product: syz
[  206.930429][   T10] usb 5-1: Manufacturer: syz
[  206.935113][   T10] usb 5-1: SerialNumber: syz
[  206.954867][   T10] usb 5-1: config 0 descriptor??
[  206.963435][ T7991] 8021q: adding VLAN 0 to HW filter on device team0
[  207.021597][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.028721][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.034754][   T30] audit: type=1326 audit(1743834532.318:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.065701][   T30] audit: type=1326 audit(1743834532.348:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.094884][   T30] audit: type=1326 audit(1743834532.348:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.110716][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.125222][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.125639][   T30] audit: type=1326 audit(1743834532.348:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.163317][   T30] audit: type=1326 audit(1743834532.348:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.222110][ T7991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.241665][  T874]  (null): failure setting delay to 10us
[  207.254742][   T30] audit: type=1326 audit(1743834532.348:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.305476][ T8108] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[  207.317743][ T8108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.560'.
[  207.329273][  T874] i2c-tiny-usb 4-1:0.2: probe with driver i2c-tiny-usb failed with error -5
[  207.388619][   T30] audit: type=1326 audit(1743834532.348:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.445944][   T30] audit: type=1326 audit(1743834532.348:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b64b8d169 code=0x7ffc0000
[  207.536486][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.563369][  T874] usb 4-1: USB disconnect, device number 19
[  207.642660][   T10] usb 5-1: USB disconnect, device number 16
[  208.781390][ T7991] veth0_vlan: entered promiscuous mode
[  208.795328][ T7991] veth1_vlan: entered promiscuous mode
[  208.889178][ T7991] veth0_macvtap: entered promiscuous mode
[  208.913224][ T7991] veth1_macvtap: entered promiscuous mode
[  208.947486][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.970827][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.013989][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.031300][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.044333][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.065244][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.077897][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.096881][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.110446][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.122209][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.139166][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.151071][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.172676][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.184818][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.197078][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.210253][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.220422][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.231484][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.243315][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.265344][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.276480][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.286398][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.297210][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.327426][ T8136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8136 comm=syz.4.567
[  209.345509][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.383913][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.416703][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.427434][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.439483][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.450550][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.460850][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.471439][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.481623][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.494985][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.506573][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.518079][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.528574][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.539135][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.550868][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.630181][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  209.737698][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'.
[  209.833108][   T10] usb 5-1: device descriptor read/64, error -71
[  210.011507][ T7991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.029015][ T7991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.054263][ T7991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.081356][ T7991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.109684][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  210.257117][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.279005][   T10] usb 5-1: device descriptor read/64, error -71
[  210.289041][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.325966][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  210.325981][   T30] audit: type=1326 audit(1743834535.608:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  210.367095][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.379668][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.510341][   T10] usb usb5-port1: attempt power cycle
[  210.516528][   T30] audit: type=1326 audit(1743834535.648:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  210.542780][   T30] audit: type=1326 audit(1743834535.648:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc942f8bad0 code=0x7ffc0000
[  210.566373][   T30] audit: type=1326 audit(1743834535.648:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc942f8e997 code=0x7ffc0000
[  210.879583][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  211.031539][   T30] audit: type=1326 audit(1743834535.648:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  211.071768][   T10] usb 5-1: device descriptor read/8, error -71
[  211.109073][   T30] audit: type=1400 audit(1743834535.648:663): avc:  denied  { create } for  pid=8149 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  211.130047][   T30] audit: type=1326 audit(1743834535.648:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc942f8e997 code=0x7ffc0000
[  211.232679][   T30] audit: type=1326 audit(1743834535.648:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc942f8bdca code=0x7ffc0000
[  211.276470][   T30] audit: type=1326 audit(1743834535.648:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  211.305326][   T30] audit: type=1326 audit(1743834535.648:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc942f8d169 code=0x7ffc0000
[  211.389950][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  211.410159][   T10] usb 5-1: device descriptor read/8, error -71
[  211.520837][   T10] usb usb5-port1: unable to enumerate USB device
[  212.135716][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  213.127523][  T874] Process accounting resumed
[  213.153600][ T8168] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[  213.222476][ T5835] Bluetooth: hci3: unexpected event for opcode 0x0401
[  213.234543][ T8176] FAULT_INJECTION: forcing a failure.
[  213.234543][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.251237][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.0.579 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  213.251259][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.251268][ T8176] Call Trace:
[  213.251273][ T8176]  <TASK>
[  213.251278][ T8176]  dump_stack_lvl+0x16c/0x1f0
[  213.251301][ T8176]  should_fail_ex+0x512/0x640
[  213.251320][ T8176]  _copy_from_iter+0x2a4/0x15b0
[  213.251339][ T8176]  ? __alloc_skb+0x200/0x380
[  213.251356][ T8176]  ? __pfx__copy_from_iter+0x10/0x10
[  213.251373][ T8176]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  213.251398][ T8176]  netlink_sendmsg+0x829/0xdd0
[  213.251420][ T8176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.251445][ T8176]  ____sys_sendmsg+0xa95/0xc70
[  213.251483][ T8176]  ? copy_msghdr_from_user+0x10a/0x160
[  213.251499][ T8176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.251528][ T8176]  ___sys_sendmsg+0x134/0x1d0
[  213.251546][ T8176]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.251589][ T8176]  __sys_sendmsg+0x16d/0x220
[  213.251606][ T8176]  ? __pfx___sys_sendmsg+0x10/0x10
[  213.251629][ T8176]  ? rcu_is_watching+0x12/0xc0
[  213.251653][ T8176]  do_syscall_64+0xcd/0x260
[  213.251674][ T8176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.251688][ T8176] RIP: 0033:0x7f9cedf8d169
[  213.251702][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.251715][ T8176] RSP: 002b:00007f9ceedc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.251730][ T8176] RAX: ffffffffffffffda RBX: 00007f9cee1a5fa0 RCX: 00007f9cedf8d169
[  213.251740][ T8176] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  213.251748][ T8176] RBP: 00007f9ceedc9090 R08: 0000000000000000 R09: 0000000000000000
[  213.251756][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.251765][ T8176] R13: 0000000000000000 R14: 00007f9cee1a5fa0 R15: 00007ffe33cf5b28
[  213.251790][ T8176]  </TASK>
[  213.452120][    C1] vkms_vblank_simulate: vblank timer overrun
[  213.499944][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.511907][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.520556][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.539656][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.561448][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  214.677838][ T8180] erspan0 speed is unknown, defaulting to 1000
[  215.361036][ T8193] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  216.336915][ T5822] Bluetooth: hci0: command tx timeout
[  216.735294][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  216.735309][   T30] audit: type=1400 audit(1743834542.018:691): avc:  denied  { mounton } for  pid=8200 comm="syz.3.586" path="/proc/420/task" dev="proc" ino=20800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  217.677061][ T8215] erspan0 speed is unknown, defaulting to 1000
[  217.826833][ T8225] xt_NFQUEUE: number of total queues is 0
[  218.820114][ T8230] xt_NFQUEUE: number of total queues is 0
[  219.026876][ T5835] Bluetooth: hci0: command tx timeout
[  220.192989][ T8180] chnl_net:caif_netlink_parms(): no params data found
[  220.218082][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'.
[  220.332701][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'.
[  220.419944][ T5872] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  220.629609][ T5872] usb 1-1: Using ep0 maxpacket: 16
[  220.662728][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 193, changing to 11
[  220.765340][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1281, setting to 1024
[  220.783793][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.838590][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.877065][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0
[  220.906787][ T8180] bridge_slave_0: entered allmulticast mode
[  220.956645][ T5872] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  221.014099][ T8180] bridge_slave_0: entered promiscuous mode
[  221.063768][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.090552][ T5835] Bluetooth: hci0: command tx timeout
[  221.160328][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.216792][ T5872] usb 1-1: config 0 descriptor??
[  221.238570][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.260329][ T8243] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  221.312849][ T8180] bridge_slave_1: entered allmulticast mode
[  221.410115][ T8180] bridge_slave_1: entered promiscuous mode
[  221.690573][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.731938][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.768860][ T5872] usbhid 1-1:0.0: can't add hid device: -71
[  221.774891][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  221.795276][ T5872] usb 1-1: USB disconnect, device number 15
[  221.817021][   T30] audit: type=1400 audit(1743834547.098:692): avc:  denied  { listen } for  pid=8260 comm="syz.3.603" lport=39568 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  221.867659][ T8180] team0: Port device team_slave_0 added
[  221.876312][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  221.889268][   T30] audit: type=1400 audit(1743834547.148:693): avc:  denied  { accept } for  pid=8260 comm="syz.3.603" lport=39568 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  221.918197][ T8180] team0: Port device team_slave_1 added
[  222.025061][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.044455][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.295032][ T8180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.309909][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.318767][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.400987][ T8180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.599026][ T8180] hsr_slave_0: entered promiscuous mode
[  222.637780][ T8180] hsr_slave_1: entered promiscuous mode
[  222.657821][ T8180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.665529][ T8180] Cannot create hsr debugfs directory
[  222.766867][ T8281] xt_NFQUEUE: number of total queues is 0
[  223.163956][ T5835] Bluetooth: hci0: command tx timeout
[  224.107637][ T8180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.307899][ T8180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.344187][   T30] audit: type=1400 audit(1743834805.633:694): avc:  denied  { ioctl } for  pid=8304 comm="syz.4.612" path="socket:[19728]" dev="sockfs" ino=19728 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  224.411217][   T30] audit: type=1400 audit(1743834805.633:695): avc:  denied  { setopt } for  pid=8304 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  224.577569][   T30] audit: type=1400 audit(1743834805.823:696): avc:  denied  { mount } for  pid=8304 comm="syz.4.612" name="/" dev="autofs" ino=19733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  225.085435][ T8180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.129287][   T30] audit: type=1400 audit(1743834806.413:697): avc:  denied  { read } for  pid=8320 comm="syz.0.614" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  225.189237][   T30] audit: type=1400 audit(1743834806.413:698): avc:  denied  { open } for  pid=8320 comm="syz.0.614" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  225.213053][   T30] audit: type=1400 audit(1743834806.463:699): avc:  denied  { ioctl } for  pid=8320 comm="syz.0.614" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  225.365549][   T30] audit: type=1400 audit(1743834806.653:700): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  225.426139][ T8180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.450793][   T30] audit: type=1400 audit(1743834806.743:701): avc:  denied  { read } for  pid=8328 comm="syz.0.618" path="socket:[21033]" dev="sockfs" ino=21033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  225.507581][ T8330] netfs: Couldn't get user pages (rc=-14)
[  225.514238][ T8330] netfs: Zero-sized read [R=1]
[  225.686407][ T8180] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  225.802639][ T1104] Bluetooth: Error in BCSP hdr checksum
[  225.862069][ T8180] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  225.899526][ T5828] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  225.967049][ T8340] xt_connbytes: Forcing CT accounting to be enabled
[  225.973872][ T8340] xt_NFQUEUE: number of total queues is 0
[  226.321412][   T12] Bluetooth: Error in BCSP hdr checksum
[  226.327539][ T8180] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  226.341724][ T8180] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  226.364197][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short
[  226.384405][ T5828] usb 1-1: unable to read config index 0 descriptor/start: -71
[  226.415797][ T5828] usb 1-1: can't read configurations, error -71
[  226.623607][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.693373][ T8180] 8021q: adding VLAN 0 to HW filter on device team0
[  226.732702][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.739860][ T8237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.766464][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.773614][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.063946][ T8346] xt_NFQUEUE: number of total queues is 0
[  227.200720][   T82] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  227.456132][   T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  227.497112][   T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.524543][   T82] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d9c, bcdDevice= 0.00
[  227.549513][   T82] usb 5-1: New USB device strings: Mfr=0, Product=221, SerialNumber=0
[  227.559637][ T5822] Bluetooth: hci5: command 0x1003 tx timeout
[  227.565935][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  227.567960][   T82] usb 5-1: Product: syz
[  227.615089][   T82] usb 5-1: config 0 descriptor??
[  227.666287][ T8352] loop6: detected capacity change from 0 to 524287999
[  227.679989][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  227.680003][   T30] audit: type=1400 audit(1743834808.953:704): avc:  denied  { append } for  pid=8351 comm="syz.0.622" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  227.718578][ T8180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.734157][    C1] blk_print_req_error: 58 callbacks suppressed
[  227.734175][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.749527][    C1] buffer_io_error: 56 callbacks suppressed
[  227.749539][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  227.777972][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.787175][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  227.830657][ T8353] loop6: detected capacity change from 524287999 to 0
[  227.839138][ T8353] 
[  227.841471][ T8353] ======================================================
[  227.848508][ T8353] WARNING: possible circular locking dependency detected
[  227.855508][ T8353] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted
[  227.862243][ T8353] ------------------------------------------------------
[  227.869234][ T8353] syz.0.622/8353 is trying to acquire lock:
[  227.875098][ T8353] ffffffff906963a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870
[  227.884825][ T8353] 
[  227.884825][ T8353] but task is already holding lock:
[  227.892169][ T8353] ffff888142fd5868 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  227.903375][ T8353] 
[  227.903375][ T8353] which lock already depends on the new lock.
[  227.903375][ T8353] 
[  227.913752][ T8353] 
[  227.913752][ T8353] the existing dependency chain (in reverse order) is:
[  227.922738][ T8353] 
[  227.922738][ T8353] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}:
[  227.931331][ T8353]        blk_alloc_queue+0x619/0x760
[  227.936619][ T8353]        blk_mq_alloc_queue+0x179/0x290
[  227.942163][ T8353]        __blk_mq_alloc_disk+0x29/0x120
[  227.947700][ T8353]        loop_add+0x496/0xb70
[  227.952364][ T8353]        loop_init+0x164/0x270
[  227.958441][ T8353]        do_one_initcall+0x120/0x6e0
[  227.963725][ T8353]        kernel_init_freeable+0x5c2/0x900
[  227.969431][ T8353]        kernel_init+0x1c/0x2b0
[  227.974271][ T8353]        ret_from_fork+0x45/0x80
[  227.979185][ T8353]        ret_from_fork_asm+0x1a/0x30
[  227.984456][ T8353] 
[  227.984456][ T8353] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  227.991648][ T8353]        fs_reclaim_acquire+0x102/0x150
[  227.997206][ T8353]        kmem_cache_alloc_node_noprof+0x57/0x3b0
[  228.003528][ T8353]        __alloc_skb+0x2b2/0x380
[  228.008446][ T8353]        alloc_uevent_skb+0x7d/0x210
[  228.013716][ T8353]        kobject_uevent_env+0xca4/0x1870
[  228.019347][ T8353]        kobject_synth_uevent+0x7d4/0x8a0
[  228.025073][ T8353]        bus_uevent_store+0x3d/0x90
[  228.030261][ T8353]        bus_attr_store+0x71/0xb0
[  228.035268][ T8353]        sysfs_kf_write+0xef/0x150
[  228.040366][ T8353]        kernfs_fop_write_iter+0x351/0x510
[  228.046154][ T8353]        vfs_write+0x5ba/0x1180
[  228.051161][ T8353]        ksys_write+0x12a/0x240
[  228.056010][ T8353]        do_syscall_64+0xcd/0x260
[  228.061036][ T8353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.067441][ T8353] 
[  228.067441][ T8353] -> #0 (uevent_sock_mutex){+.+.}-{4:4}:
[  228.075239][ T8353]        __lock_acquire+0x1173/0x1ba0
[  228.080590][ T8353]        lock_acquire+0x179/0x350
[  228.085594][ T8353]        __mutex_lock+0x199/0xb90
[  228.090603][ T8353]        kobject_uevent_env+0xb36/0x1870
[  228.096221][ T8353]        loop_set_status+0x9c7/0xb90
[  228.101485][ T8353]        lo_ioctl+0x729/0x26d0
[  228.106226][ T8353]        blkdev_ioctl+0x274/0x6d0
[  228.111235][ T8353]        __x64_sys_ioctl+0x190/0x200
[  228.116505][ T8353]        do_syscall_64+0xcd/0x260
[  228.121511][ T8353]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.127905][ T8353] 
[  228.127905][ T8353] other info that might help us debug this:
[  228.127905][ T8353] 
[  228.138109][ T8353] Chain exists of:
[  228.138109][ T8353]   uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#23
[  228.138109][ T8353] 
[  228.151821][ T8353]  Possible unsafe locking scenario:
[  228.151821][ T8353] 
[  228.159246][ T8353]        CPU0                    CPU1
[  228.164683][ T8353]        ----                    ----
[  228.170045][ T8353]   lock(&q->q_usage_counter(io)#23);
[  228.175433][ T8353]                                lock(fs_reclaim);
[  228.181922][ T8353]                                lock(&q->q_usage_counter(io)#23);
[  228.189900][ T8353]   lock(uevent_sock_mutex);
[  228.194486][ T8353] 
[  228.194486][ T8353]  *** DEADLOCK ***
[  228.194486][ T8353] 
[  228.202613][ T8353] 3 locks held by syz.0.622/8353:
[  228.207635][ T8353]  #0: ffff88802608b368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90
[  228.217015][ T8353]  #1: ffff888142fd5868 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  228.228654][ T8353]  #2: ffff888142fd58a0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  228.240556][ T8353] 
[  228.240556][ T8353] stack backtrace:
[  228.246428][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.0.622 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  228.246444][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  228.246451][ T8353] Call Trace:
[  228.246456][ T8353]  <TASK>
[  228.246460][ T8353]  dump_stack_lvl+0x116/0x1f0
[  228.246478][ T8353]  print_circular_bug+0x275/0x350
[  228.246499][ T8353]  check_noncircular+0x14c/0x170
[  228.246519][ T8353]  __lock_acquire+0x1173/0x1ba0
[  228.246534][ T8353]  lock_acquire+0x179/0x350
[  228.246545][ T8353]  ? kobject_uevent_env+0xb36/0x1870
[  228.246564][ T8353]  ? __pfx___might_resched+0x10/0x10
[  228.246588][ T8353]  __mutex_lock+0x199/0xb90
[  228.246604][ T8353]  ? kobject_uevent_env+0xb36/0x1870
[  228.246622][ T8353]  ? rcu_is_watching+0x12/0xc0
[  228.246638][ T8353]  ? kobject_uevent_env+0xb36/0x1870
[  228.246657][ T8353]  ? __pfx___mutex_lock+0x10/0x10
[  228.246674][ T8353]  ? __asan_memcpy+0x3c/0x60
[  228.246693][ T8353]  ? kobject_get_path+0x8e/0x2a0
[  228.246710][ T8353]  ? kobject_uevent_env+0xb36/0x1870
[  228.246728][ T8353]  kobject_uevent_env+0xb36/0x1870
[  228.246749][ T8353]  ? __asan_memcpy+0x3c/0x60
[  228.246767][ T8353]  loop_set_status+0x9c7/0xb90
[  228.246784][ T8353]  lo_ioctl+0x729/0x26d0
[  228.246798][ T8353]  ? __lock_acquire+0x5ca/0x1ba0
[  228.246810][ T8353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.246825][ T8353]  ? __pfx_lo_ioctl+0x10/0x10
[  228.246838][ T8353]  ? find_held_lock+0x2b/0x80
[  228.246853][ T8353]  ? avc_has_extended_perms+0x33a/0x1090
[  228.246867][ T8353]  ? avc_has_extended_perms+0x47c/0x1090
[  228.246886][ T8353]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  228.246900][ T8353]  ? blkdev_common_ioctl+0x1dd/0x2250
[  228.246920][ T8353]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  228.246933][ T8353]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  228.246951][ T8353]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  228.246970][ T8353]  ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450
[  228.246991][ T8353]  ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450
[  228.247011][ T8353]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  228.247033][ T8353]  ? __pfx_lo_ioctl+0x10/0x10
[  228.247046][ T8353]  blkdev_ioctl+0x274/0x6d0
[  228.247063][ T8353]  ? __pfx_blkdev_ioctl+0x10/0x10
[  228.247080][ T8353]  ? selinux_file_ioctl+0x180/0x270
[  228.247099][ T8353]  ? selinux_file_ioctl+0xb4/0x270
[  228.247118][ T8353]  ? __pfx_blkdev_ioctl+0x10/0x10
[  228.247135][ T8353]  __x64_sys_ioctl+0x190/0x200
[  228.247153][ T8353]  do_syscall_64+0xcd/0x260
[  228.247169][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.247181][ T8353] RIP: 0033:0x7f9cedf8d169
[  228.247192][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.247205][ T8353] RSP: 002b:00007f9ceeda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.247217][ T8353] RAX: ffffffffffffffda RBX: 00007f9cee1a6080 RCX: 00007f9cedf8d169
[  228.247225][ T8353] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000004
[  228.247233][ T8353] RBP: 00007f9cee00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  228.247240][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.247248][ T8353] R13: 0000000000000001 R14: 00007f9cee1a6080 R15: 00007ffe33cf5b28
[  228.247259][ T8353]  </TASK>
[  228.581297][ T8180] veth0_vlan: entered promiscuous mode
[  228.589063][ T8352] ldm_validate_partition_table(): Disk read failed.
[  228.589140][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.596111][ T8352] Dev loop6: unable to read RDB block 0
[  228.604783][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  228.609793][ T8180] veth1_vlan: entered promiscuous mode
[  228.625897][ T8352]  loop6: unable to read partition table
[  228.631993][ T8352] loop6: partition table beyond EOD, truncated
[  228.638875][ T8352] loop_reread_partitions: partition scan of loop6 (‰u0A) failed (rc=-5)
[  228.681461][ T8180] veth0_macvtap: entered promiscuous mode
[  228.702319][ T8180] veth1_macvtap: entered promiscuous mode
[  228.725453][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.749739][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.765042][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.775725][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.790420][   T82] hid-generic 0003:1E7D:2D9C.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  228.839619][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.850116][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.859942][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.871456][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.881300][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.891900][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.901757][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.912190][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.922021][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.932467][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.942345][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.952774][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.962617][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.974248][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.984090][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.996331][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.016363][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.038000][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.052127][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.062528][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.075029][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.084908][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.096771][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.106623][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.118217][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.128769][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.141230][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.151080][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.161651][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.171476][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.182754][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.192769][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.203207][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.213023][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.223447][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.233909][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.244394][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.255417][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.265599][ T8180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.276677][ T8180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.285387][ T8180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.294415][ T8180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.314709][ T8180] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht'
[  229.331758][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.332668][ T8180] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht'
[  229.349004][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.364307][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.372464][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.445770][   T82] usb 5-1: USB disconnect, device number 21