last executing test programs:

23m13.252878742s ago: executing program 0 (id=651):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$join(0x1, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x18)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

23m11.597127691s ago: executing program 0 (id=657):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0xd)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
statfs(0x0, 0x0)
read$FUSE(r2, &(0x7f00000062c0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000016910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048080}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x0)
add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7})
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r6})
preadv(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=""/4098, 0x1d}], 0x63, 0x0, 0x0)

23m9.51745029s ago: executing program 0 (id=660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x30}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9}, 0xffff, 0x4, 0x0, 0x0, 0x9, 0x353, 0x0, 0x8, 0x0, &(0x7f0000000300)="b614e2b1bdb2a487d9593362b2bde4c233b791c29e9429fb45a3d367eada5b265ae3d710cdb0f4e7d001abf5dbbe746cd762da79af5d5f36b8ed6f2f657ebda586997ab3d793f5cd313e18275c7bd408b8fa566cbf2a19bb94d6dbb745636fca15f1d0e5fd938f39261abade3f27ae4247964152dec4167774fd"})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000000)='./file1\x00', 0x0, 0x28, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
r7 = socket$netlink(0x10, 0x3, 0x10)
openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

23m7.126775059s ago: executing program 0 (id=662):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x10}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x0, 0x1, @scatter={0x5, 0x0, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f00000018c0)=""/214, 0xd6}, {&(0x7f00000019c0)=""/185, 0xb9}, {&(0x7f0000001b80)=""/4096, 0x1000}]}, &(0x7f00000002c0), 0x0, 0xfffffffd, 0x10000, 0x2, 0x0})
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10)
mkdirat(r3, &(0x7f0000000200)='./bus/file0\x00', 0x152)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x2000008})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x6})
fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x6})
renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r5 = getpid()
r6 = gettid()
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x394, 0x14, 0x10, 0x70bd28, 0x25dfdbfd, {0x43c96f6c3a4a8686, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x52, 0x1, "db9ccf9e88a7aab3b4bf0d1f3a0e350ed92f06624eb481ffc2d7029c35b3fa8e3fd2bf222fd5f1f2ec1f9781a002a975a043b28717b3ef7b8b97b5fe072e9f6ff20ca570ce29f4d6fe985ec3b930"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "6f21fb8b15c425a1fd4848e039a6f46796020d7be53caf15e8422af2c88f6e80a302dc6145a5d4e970d629551c59e8a24884caf5182155cc695a55f8d85918203bdb96686a3b685273b02c0b717f087b1428aa3eaac6696bd8bce5dd0a4e362d32edb8abc3ee75ea7f70020f246e0e18e3e8a780e41d42a45e6b58e6318630dc1b222e0b2877a1c1a57bbdfe739f25a69e399677bd825d29958463ba9f75cd3bd97dad66e812a48f860acf3b670409dbdf2707b8175ffb5bb7a365be6d4cefdf869750fc78a75d45243083c4d5079b18fda74830"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "e241f808e77e28bb68b9d5ca1a271a727aa8912b72ff1bdd117f03e82b4e9eae21cf3fb3babb51331f298d190f0c4a3f57e648412156bfdc447560d1026572235097ae63342b6844aa33a0d10a0d4e672134ae78a43ca11dbf66c6d3dd1528dede6677203be372141d44b6425a53f40ec280a717ef47bd4645da7b34efc38f6d45b57f24662d2b2ea9453ef41510c1352e5380f14c24df86a3d4bb7f480a29fe9d44f0b55079f9402af7c1d6"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "d95799fec435421816a3bc5c736d3e54df2a8191f48885b99a645d42b9786991d848b2261fa17597fd5066a4ddfd7a9248b72467429a74f6dde1a5415a91705560510b89aafc56fc37d521d488056569472ab34a1e27f25d920173f236cd48b9f4f2ee3058e6bc239a6b35381c70b8283cb63a0131cf53bdd89cdc59a6990decbbefaaed163fc1e0c2f8f84688366a495ceed8dab4f85f7b46df5d7a9e"}]}, 0x394}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX, @ANYRES64=r4, @ANYRES16=r7], 0x7c}}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x0)
close(r9)
rt_tgsigqueueinfo(r5, r6, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x9})
r10 = signalfd4(r7, &(0x7f00000003c0)={[0xffffffffffffffff]}, 0x8, 0x0)
readv(r10, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1)

23m3.689055386s ago: executing program 0 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setresuid(0x0, 0xee00, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x100)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r4, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/131, 0x83}], 0x1)

23m2.047282801s ago: executing program 0 (id=673):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x58}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

23m0.817597284s ago: executing program 32 (id=673):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x58}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

16m12.4331575s ago: executing program 2 (id=1607):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1)
rt_sigaction(0x19, &(0x7f0000000000)={0xffffffffffffffff, 0x44000006, 0x0}, 0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000a00)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\x00\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6i\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5)
fallocate(r1, 0x0, 0x400000000000000, 0x7)

16m9.100356764s ago: executing program 2 (id=1610):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2e00000010008188e6b62a4e1c72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000100)="5c3585910fb124a731566193776bd89d0ec70512ae35022418ccf07480c9ddce81936e069e32d2d2195ee9527541e56a3d3e8b75a8e03c54e22b1d39ca348537fb3b05cc9ad0df60dca8508c5ebc770c0e8a29f1959daa9659d2984f1ad1ad33c051ad436da512763b019fced09ffde6d6ed1dbeb4c6689b6a0fbe5150e51d67c3b04322f42d7c273f83e46ed178a5aae352ef86c9dfa520043c27ada34455fb5999e9242ca9437d07a42ea28efd48e8a080949cac4d032131e7b5b05fb095883cba48bf787315f168c018dc762a", 0xce}, {&(0x7f0000000200)="6649bb1ad8e6ad89309ba7fdf7be408f2938423a404a9d2249f44445d30aca45db2f15a7444095415414d2e1f5d2a69c07aec5a2aed33b62810df9ccf577ab9ce6f49bd6b56b6361fe8c3c09cd49f6f4b6dbf2cb3721484daf6301df6564c31915088d48cfb4f416337685f19297d028a90cc3abc13037dba7c2e430ed3b22f8d11dc52a842d113cdbf93900dfbd6f802879103463629661bc5a425ddb09284f88827d839d83", 0xa6}, {&(0x7f0000000040)="44d8c9610b89de1548ac2b3c1de0f1fd26c5fec20ba1fa50bb9bf871565b627b50b660499eb2fdecc1f8d3", 0x2b}, {&(0x7f00000002c0)="ccabd15796f689044e0318e391418835beb84ad85ba3a9dde099724c3b5c0f6cb8b0573cb4eaf2c90ee278e2492b6913f19d13c16840dbe1706140e811fb2339d1649f43a7ed8e1be995423ee2baa59ba1a50e936aa75c5e5dcc1e3e7d2b74ddbf080e411e074d214fea56555bb18a", 0x6f}], 0x5}, 0x0)

16m8.067149243s ago: executing program 2 (id=1614):
timer_create(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x80000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) (fail_nth: 2)

16m7.004479752s ago: executing program 2 (id=1617):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0xffffffff}, @my=0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x2})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

16m5.356531276s ago: executing program 2 (id=1619):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0xa8702)
ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4)
write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0xa2, 0x0, 0x5}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001200010a00000000000000000a0000007f33a3f83a"], 0x26}}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x480)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x8000, @empty}, 0x1c)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

16m3.133439077s ago: executing program 2 (id=1623):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace(0x10, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x1ff, 0xfff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200080015"], 0x54}}, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x5, 0xfb3, {"ce7013f15f7f7f0bbfa14526fbc8fabb"}, 0x4, 0x6f2a, 0xb0}}}, 0x90)

15m47.74681421s ago: executing program 33 (id=1623):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace(0x10, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x1ff, 0xfff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200080015"], 0x54}}, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x5, 0xfb3, {"ce7013f15f7f7f0bbfa14526fbc8fabb"}, 0x4, 0x6f2a, 0xb0}}}, 0x90)

13.651713432s ago: executing program 6 (id=3819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x30}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9}, 0xffff, 0x4, 0x0, 0x0, 0x9, 0x353, 0x0, 0x8, 0x0, &(0x7f0000000300)="b614e2b1bdb2a487d9593362b2bde4c233b791c29e9429fb45a3d367eada5b265ae3d710cdb0f4e7d001abf5dbbe746cd762da79af5d5f36b8ed6f2f657ebda586997ab3d793f5cd313e18275c7bd408b8fa566cbf2a19bb94d6dbb745636fca15f1d0e5fd938f39261abade3f27ae4247964152dec4167774fd"})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000000)='./file1\x00', 0x0, 0x28, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
setuid(0xee00)
openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

12.100842376s ago: executing program 6 (id=3821):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0)
ptrace(0x10, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x1ff, 0xfff)
prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x8000000000000001}, &(0x7f00000000c0))
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0)
dup(r1)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200080015"], 0x54}}, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

10.372347354s ago: executing program 6 (id=3824):
syz_usb_connect(0x4, 0x3d, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX], 0x0)
r0 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
socket$inet_dccp(0x2, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
r2 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
syz_io_uring_setup(0x1de6, &(0x7f0000000480)={0x0, 0xffffffff, 0x8, 0x0, 0x34f, 0x0, r4}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40000)
r5 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f00000000c0)={0x5d, "b2dbe57609a498c9c3b17f314336be5ab926306152c6ed251d06f138a2bc9a95dd2402bf2613eec0f31c2a12344b958c2600af7e1ab3674721f4bc0fadb57f95c137612729dfdc14f26d0a4f9c03def8be9a9f42a4b5a5ad16c942630bab6b60b1e34115017735222afcf1291ff23e661a20ee3ad5d0e638925440ee87130b53"})
write$proc_mixer(0xffffffffffffffff, 0x0, 0x59)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_connect(0x1, 0x8b1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2225], &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x0, 0x5, 0x20, 0x4}, 0xf5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]})
ioctl$int_in(r6, 0x40000000af01, 0x0)

10.155505024s ago: executing program 5 (id=3826):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x21, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
close_range(r0, r1, 0x0)
unshare(0x54020400)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2542, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xed)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(0xffffffffffffffff, 0x3)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xb52, 0x0, &(0x7f0000000100)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
unshare(0x22020600)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})

7.794336551s ago: executing program 5 (id=3830):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7df3000000000000006a7c16e04460a9037e6c72016cb78bb734f83134f54630bad826557c0e2dfb171fd69a48"], 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r3=>0x0, 0x7f20, 0x7800, 0x1000, 0x7, {{0xe, 0x4, 0x0, 0x20, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0xa9, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0xd2, 0x0, 0x6, [0x8a7, 0x1]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xd3, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf2517000000180001801400020070696d72656730000000000000000000300001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000200767863616e3100000000000000000000300001800800030002000000140002007866726d30000000000000000000000008000300", @ANYRES32=r4, @ANYBLOB="751a52c4437bdf95a65fa058ae56ca3fcc54e7bebb1b32094c89e165c00d42e2"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x15)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8)
fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
syz_clone3(&(0x7f00000006c0)={0x380020100, 0x0, &(0x7f0000000380), 0x0, {0x13}, 0x0, 0x0, &(0x7f0000000400)=""/9, 0x0, 0x0, {r8}}, 0x58)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000080)={0x18, r6})

6.937921601s ago: executing program 6 (id=3831):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0xfff)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r7}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_misc(r4, &(0x7f0000000200), 0xfffffecc)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
splice(r3, 0x0, r6, 0x0, 0x100000006, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

6.916017576s ago: executing program 4 (id=3832):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x80000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
clock_gettime(0x0, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=<r2=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@userptr={0x4baf783a, 0x2, 0x4, 0x0, 0x4, {r0, r1/1000+60000}, {0x4, 0x0, 0x2, 0x2, 0xc1, 0xf, "f12de414"}, 0x6, 0x2, {&(0x7f0000000280)}, 0x9, 0x0, r2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000740)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2401)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xa98)
statx(0xffffffffffffffff, 0x0, 0x100, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}}}, &(0x7f0000000680)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
mount$fuseblk(&(0x7f0000000400), &(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000500), 0x220080, &(0x7f0000000a00)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xe7}}, {@blksize={'blksize', 0x3d, 0x100}}], [{@flag='posixacl'}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '.#'}}, {@appraise}, {@fowner_gt={'fowner>', r8}}, {@flag='ro'}, {@uid_lt}]}})
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r10, <r11=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]})

6.828298616s ago: executing program 3 (id=3833):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$unix(0x1, 0x5, 0x0)
accept$unix(r1, &(0x7f0000000300), &(0x7f0000000440)=0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
syz_emit_ethernet(0x3b6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x5c, 0x3)
io_uring_setup(0x6cbf, &(0x7f0000000180)={0x0, 0x7565, 0x20, 0x2, 0x3e8})
syz_io_uring_setup(0x1f8a, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050700004000040000000100200004000180400002800c00018008000100060000000c09000000000100030000000c00018008000100050000000c00018008000100070000000c00"], 0x58}}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)=0x9)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000102505a8a440000102030109021b000101e74f01090400300107010301090501022000050608"], &(0x7f0000000740)={0x0, 0x0, 0x135, 0x0})
syz_io_uring_submit(r2, r3, 0x0)
ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

6.766632864s ago: executing program 5 (id=3834):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 2)

5.509763923s ago: executing program 4 (id=3836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000001400078008001340000000000800"], 0x5c}}, 0x0)

5.360143397s ago: executing program 5 (id=3837):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setsig(r0, 0xa, 0x800000002a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020323000000000000000000000000000800010001"], 0x1c}}, 0x0)
mlockall(0x1)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')

5.308391316s ago: executing program 4 (id=3838):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x48, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x5396ebcf8cd913b0}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=<r9=>r8, @ANYBLOB], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050629bd7000fbdbdf250800000008002a0b0200000008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x12, &(0x7f0000000540)=@raw=[@ringbuf_output, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000000600)='syzkaller\x00', 0x80000000, 0xd5, &(0x7f0000000640)=""/213, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x10, 0x10, 0xc}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x5, 0x7}, {0x2, 0x7, 0x6, 0x9}, {0x3, 0x5, 0x5, 0xc}, {0x3, 0x4, 0x3, 0xb}, {0x1, 0x4, 0x1, 0x1}, {0x1, 0x2, 0x1, 0xb}, {0x5, 0x3, 0x6}], 0x10, 0x800, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r12=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r12, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r13 = syz_clone(0x9040000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
pipe2(&(0x7f0000000040)={<r14=>0xffffffffffffffff}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r14, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={0x0, 0x53, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYRES8=r9, @ANYRES32=r13], 0x48}, 0x1, 0x0, 0x0, 0xf36187960da9ab0c}, 0xc000)
syz_io_uring_setup(0x186, &(0x7f0000000140)={0x0, 0x4e00, 0x20, 0x0, 0x330}, &(0x7f0000000100), &(0x7f0000000080))

4.50206461s ago: executing program 4 (id=3841):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0xfff)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r7}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_misc(r4, &(0x7f0000000200), 0xfffffecc)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
splice(r3, 0x0, r6, 0x0, 0x100000006, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.31304565s ago: executing program 6 (id=3842):
syz_usb_connect(0x4, 0x3d, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX], 0x0)
r0 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
socket$inet_dccp(0x2, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
r2 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
close(r2)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
syz_io_uring_setup(0x1de6, &(0x7f0000000480)={0x0, 0xffffffff, 0x8, 0x0, 0x34f, 0x0, r4}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40000)
r5 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f00000000c0)={0x5d, "b2dbe57609a498c9c3b17f314336be5ab926306152c6ed251d06f138a2bc9a95dd2402bf2613eec0f31c2a12344b958c2600af7e1ab3674721f4bc0fadb57f95c137612729dfdc14f26d0a4f9c03def8be9a9f42a4b5a5ad16c942630bab6b60b1e34115017735222afcf1291ff23e661a20ee3ad5d0e638925440ee87130b53"})
write$proc_mixer(0xffffffffffffffff, 0x0, 0x59)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_connect(0x1, 0x8b1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2225], &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x0, 0x5, 0x20, 0x4}, 0xf5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="050ff5000403100b0a1003000100819b4d000a100302000009030400d910042c21474bd400a10b5dd6a0b0fa57499ecefbb3572fe4c3adfe1228be538a3f6f5c55893977bbbf3dc1890e968910d012c698dfdf7d9010e273ef0647e710d8309d33610003c2f9e83e1951f8462178a10a19013cf05275bb0e74d259b5920bd67320d40ce7518c58e1597011f168c92f42f6d895039a380ecb4feb703819ef8e7eaaa1b77571aad638de4812aab2f5994dc9c35eb1215666c80ff4fecf750ca9f2a24f4118065ea6548c8809eca0d7984e5f51661b91a2283d2b9d93226185173213233353212249e876b09c4c43a7a53432526ec24b510f2fed01bb959400000000"]})
ioctl$int_in(r6, 0x40000000af01, 0x0)

2.846758992s ago: executing program 1 (id=3844):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7df3000000000000006a7c16e04460a9037e6c72016cb78bb734f83134f54630bad826557c0e2dfb171fd69a48"], 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r3=>0x0, 0x7f20, 0x7800, 0x1000, 0x7, {{0xe, 0x4, 0x0, 0x20, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0xa9, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0xd2, 0x0, 0x6, [0x8a7, 0x1]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xd3, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf2517000000180001801400020070696d72656730000000000000000000300001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000200767863616e3100000000000000000000300001800800030002000000140002007866726d30000000000000000000000008000300", @ANYRES32=r4, @ANYBLOB="751a52c4437bdf95a65fa058ae56ca3fcc54e7bebb1b32094c89e165c00d42e2"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x15)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r6=>0x0})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8)
fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
syz_clone3(&(0x7f00000006c0)={0x380020100, 0x0, &(0x7f0000000380), 0x0, {0x13}, 0x0, 0x0, &(0x7f0000000400)=""/9, 0x0, 0x0, {r8}}, 0x58)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000080)={0x18, r6})

2.839601819s ago: executing program 3 (id=3845):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
inotify_rm_watch(0xffffffffffffffff, 0x0)

2.549559884s ago: executing program 3 (id=3846):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x80000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
clock_gettime(0x0, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=<r2=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@userptr={0x4baf783a, 0x2, 0x4, 0x0, 0x4, {r0, r1/1000+60000}, {0x4, 0x0, 0x2, 0x2, 0xc1, 0xf, "f12de414"}, 0x6, 0x2, {&(0x7f0000000280)}, 0x9, 0x0, r2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000740)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2401)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xa98)
statx(0xffffffffffffffff, 0x0, 0x100, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}}}, &(0x7f0000000680)=0xe8)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
mount$fuseblk(&(0x7f0000000400), &(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000500), 0x220080, &(0x7f0000000a00)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xe7}}, {@blksize={'blksize', 0x3d, 0x100}}], [{@flag='posixacl'}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '.#'}}, {@appraise}, {@fowner_gt={'fowner>', r8}}, {@flag='ro'}, {@uid_lt}]}})
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r10, <r11=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]})

2.534058975s ago: executing program 4 (id=3847):
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x6, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000ed466401341000455960102030109024300140000000309002402020a00499cc3a9ab9688f796d70e24020104040962a0b49f2c3aae0c2402010101de001a6da27200"], 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '('}, {0x20, '/dev/adsp1\x00'}, {0x20, '\xeb\xf2/\x85\xeb\xafOfe!d\xee\x021u\xd4i>/\xdb&\xb67\"\xff\x96\xca\xe9\x90\x13U\xd5\xa3\x87\xf8+\xb4Q\x94\n^s\x03PJ\xd8\xb3\r|\xd1I\'\x99=\x1d\xc9!Aqs\x97\xa6\xe5\xf6\xe9\xeaeH;`\xf3\xddQ\xba\xa2\x16kW\x11\xfa\x1c\xc4\x95JT\xcb8\xdb\x88^%NT6\xfc\xe7.\xef\xc7P\xa6\xfd\xd0\xd6\x92U\xd2A\xcb\xd7\xb8\f%\xfc\xac\x1a\x0f\x8a=\xf0\xcc<g\xbe\xc6UZU\xe4x\xc6\xfd\xe0>\x7f\x06\x01:\xb0o\x9f\xef\xc6#z\x8e\xabWE\x9f'}, {0x20, '/dev/adsp1\x00'}, {0x20, 'R^\x01:+'}], 0xa, "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"}, 0x212)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000b00)={'#! ', './bus', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\x05\xdfn{q\xac\xca\'\xef\xb0*\x11\xdb\xecb\xfd$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9!\a\x12\xa9\x18\x93C\v79?L\x98e\f\xb5\x0f8\tH\xa8l\r\xfb\xd6>G\xf5\x0f\x04\x00\xc9ty\xdaJ\x00\x00\x00\x00\x00\x00\x00\x00\xb7kb%\x9b\x1c\xd3\xd2yb8\x99\x8d/WM\x0eL\x1b\xb7\xa0\xc4\xfb)\xf7J$\xa6O\x9d\xe7\x8c\x16s\xa8\xad\xc4\xd6\x94K\f\xb1U\xd2\'\xa3\xc3\x98~\x13X\x98X\x86\xdf\v\xf6\xf2\xa3\xc0#%b\x98r)\x83\xa2\x8b&\xbe-\x05\x89\x15l\x05.d\xe8h\xec\xd2\xc0\xa2\x99\xff]\xdd)A\x10\\\beM \xf0\x7f\"\x8c\xf0\xa6*\\WAV\x9d\x00\x15x\xe0~8\xfc\x95\x1eM\xe4JO\v\x18\xa9Z7\xb6\xa0{\x00)\'\xc3\x82@\x92\x97Q\xb1?\b\xdat\xae\xcc\xc3?\x96i\x17\xcf\x9f^\xf8!A4}\t\x97`\xe1\xf4\x05b\x8c\xb4\xa5\xd0\xfa\xeb;\x142\t\xbb\xbf\xf2\xa5D\xc6q\x10\xdb\xed\xe2\x85JWw\x13\xa1\xb0\x1b\xbe\x8a,C\x99\xd2K\xf3\xb2\x82\x99\x8e\xd4\x8e\xa2\xf2b\x15\xb4\x89\xbf\x8ao@\xab\xb9\xad\xd6\xcc\xa5\x84R\x1e\xb4\n\xe0\xec\xa9\x1d,X\xd3o\x8a\xd8\xa7Z\xe7\x82\xcc6\x04\vT\x1d\xd3\xd9\x94sw\b\xa5\x12\xb1\xa4\x0e\x00\x7fm6\x9b\x1cD$\xfd\xccF\xae\xc9\xde\t\x03\xcd\xed\x89\xc6\xe4\x12\xa8Q%\xe2\x8a\x96\xd3\x86\xe3\xb0\xbc\x06u\x15\xabO-+\x0fR\xfdO\xee\xd8\x19i\xf5\xf7\xbe\x19\xe1\xd0\x11\xe1\xc0I\xe8\x89KZ\x82\x04'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|hw\xd7z<\xe3\xaa\aKMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\x85\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h<!^\xe9I\xf2\n\xe1{B#uTb\xdb\xdc<\x00\x8d\xc6\xdc\x86)\xa5\xa9D5\xe9\x8a\xc3\xcc\xad\xa5\xd1\xef\xb3\xe7\x8cZ\xdb(\xbb\tV\xda%Kz\x04\xbe\xf1^\xe7%\x0e\xf1[|\x16f\x97\x8d\x02d\x96w\xb5\xd2\x9d\xb0GO\x06Q\x12F\xf9\xae\xda\xcbI\x16\xfbA\xe4\\\xba\x1c\xe7\xd2G\xdbC\x18\xbc'}, {0x20, 'ext4\x00\xf1\xecs\xfa8\x8b;\xaf\xe3\xf3\xa1\xb1\xf4\x81,\xd5\xce\xdf\xa2\xf0/\xb6\xa2\x8c\x7f\x0f\x1c|\x12\xc8@\xab\x11\x04\xdc\xae\xf5\xee\xb8\xbc\b$\x9fO\x84\x10\x99N\xb4W\xc4\x18\xb1\xa1\xfc\x93~\xe0.\x8b\x91\x0f\xc7\x95\x95\xcf\f\x02G\xba|6\x99\xe5\xb1\x03\xa0\xfc2\xb4\xe5\x00<\xba4\x1a[\xa4\xdd@\x95\x95\x00\xfc\x9b\xeelPFP\x00F'}, {0x20, '@\xe4\x9e\x8d\x8a\r\xf7\xc5\x17\xee\x95\x7f\xa9H[\xa9\x02xjx\x1a\x9f\xe1\x03\xf3\xec\xfdx\x92\x92\x850;-_\xa2SDCCz;\xa2\xf0\xed\xcc\\Y\xf3\x8f\xdb\n\xb1\xfd\xab\xd3\xce\\\xa0\x82\x81\x91|\xe8\xe4\xfd\xdf\\\xb5J\xd4\bB\x1e\xac\xb8\x8e\xac{>cP,'}], 0xa, "9c609c2caa0a9e1aa09c22ad1ac17bf2a77c69a6a2a2cceda93ae379452a59967c7ed17b780362a3806ebd6125884f375a8567c933feceebb6f719d8817d6301bf5998f9a3159ac4c1"}, 0x39b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1}}, 0x40)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000006000a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10)
sendmsg$inet(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
syz_usb_connect(0x3, 0x48, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x2f, 0x34, 0x8a, 0x8, 0xf11, 0x2080, 0x866f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x3, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x16, 0x2, 0x4, 0x71, 0xfd, 0xe7, 0x4, [], [{{0x9, 0x5, 0x2, 0x1b, 0x20, 0x0, 0x8, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xa, 0x17, 0x80}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x9a, 0xa2, 0x9}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x7a, 0x3, 0xe}}]}}]}}]}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r8}, 0x20)
sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x10002)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fd070000000100000300000000000000", @ANYRES32=r6, @ANYBLOB="08009f0006000000050019010700000005001801210000000800260080090000"], 0x3c}}, 0x2000c890)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r13, 0x34}, 0x10)

1.75532682s ago: executing program 1 (id=3848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000001400078008001340000000000800"], 0x5c}}, 0x0)

1.624153113s ago: executing program 3 (id=3849):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xa, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)
ioctl$TCFLSH(r2, 0x540b, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r6], 0x34}}, 0x0)

1.588272118s ago: executing program 1 (id=3850):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e000000ffff080211e500010000000000000000000064000000000602020202020201000301003c"], 0x78}}, 0x0)

1.479923899s ago: executing program 1 (id=3851):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x200000d0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa}}]}}]}, 0x44}}, 0x24040084)

1.242651074s ago: executing program 1 (id=3852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x88}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, <r7=>0x0}, 0xfffffeef)
write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r6, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x8000, 0xfff, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10)
socket$kcm(0x11, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40)
setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r10=>r4, {0x8}}, './file0\x00'})
write$tcp_congestion(r10, &(0x7f00000002c0)='hybla\x00', 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0xfffffd23, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
socket$inet_smc(0x2b, 0x1, 0x0)

1.176363356s ago: executing program 3 (id=3853):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x21, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
close_range(r0, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2542, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xed)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0x3)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xb52, 0x0, &(0x7f0000000100)})
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
unshare(0x22020600)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})

1.146137894s ago: executing program 5 (id=3854):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x3a)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xb, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
write$sndseq(r4, &(0x7f00000017c0)=[{0x9, 0x4b, 0x0, 0xf9, @tick=0x2f, {0x3, 0x1}, {0x2, 0x6}, @connect={{}, {0x1, 0x81}}}], 0x1c)
dup3(r4, r2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, 0x0})
getcwd(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x2)

716.650056ms ago: executing program 5 (id=3855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0xb8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$unix(0x1, 0x5, 0x0)
accept$unix(r1, &(0x7f0000000300), &(0x7f0000000440)=0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
syz_emit_ethernet(0x3b6, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000003800000fe880000000200000000000000000101ff02000000000000000000000000000186009078000900000400000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af250200010000000500000000260004001918fe906d26efe39393fe08f73eabc5977b1190a3a6ad8738f1591cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610700477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978181d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d643367b105185e6ecd9602ba95392343e9b000000000000000399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000190b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0192107b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a02745000400000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87"], 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x5c, 0x3)
io_uring_setup(0x6cbf, &(0x7f0000000180)={0x0, 0x7565, 0x20, 0x2, 0x3e8})
syz_io_uring_setup(0x1f8a, 0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050700004000040000000100200004000180400002800c00018008000100060000000c09000000000100030000000c00018008000100050000000c00018008000100070000000c00"], 0x58}}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)=0x9)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000102505a8a440000102030109021b000101e74f01090400300107010301090501022000050608"], &(0x7f0000000740)={0x0, 0x0, 0x135, 0x0})
syz_io_uring_submit(r2, r3, 0x0)
ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)

687.305191ms ago: executing program 3 (id=3856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}}}, &(0x7f00000003c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setresuid(0x0, r5, 0x0)
mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f0000000380), 0x200024, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@appraise}, {@euid_gt={'euid>', r5}}, {@seclabel}, {@fsname={'fsname', 0x3d, '/\\$}\xf3'}}, {@seclabel}]}})
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x0)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r6, 0x0, r7, 0x0, 0x10000000000016, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x17ffffff, 0x0, 0x3136564e, 0x0, 0xc, [{}, {0x277c}, {0x516c}, {0xfffffffc}, {}, {0xd360, 0x2}, {}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x4}})
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000101010200000000000000000a0000000c00198008000100ad0400003c0001802c00018014000300"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20008840)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x6, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2}, 0x18)
write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
read$msr(r10, &(0x7f00000000c0)=""/155, 0x9b)

58.58929ms ago: executing program 6 (id=3857):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069000010000000000100200018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0xfff)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r6}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_misc(r4, &(0x7f0000000200), 0xfffffecc)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
splice(r3, 0x0, r5, 0x0, 0x100000006, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)

45.00602ms ago: executing program 1 (id=3858):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069000010000000000100200018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0xfff)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r6}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_misc(r4, &(0x7f0000000200), 0xfffffecc)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
splice(r3, 0x0, r5, 0x0, 0x100000006, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)

0s ago: executing program 4 (id=3859):
fchdir(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
r3 = socket$inet6(0xa, 0x3, 0x1)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @qipcrtr={0x2a, 0xffffffff, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200, 0x1, 0x3})
connect$inet6(r3, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x0, 0x1, 0x4, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x1178, &(0x7f0000000640)={0x0, 0x0, 0x40}, &(0x7f0000000540), &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

_slave_0: left allmulticast mode
[ 1394.354955][ T5940] bridge_slave_0: left promiscuous mode
[ 1394.376809][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1395.066633][T17584] fuse: Unknown parameter 'use00000000000000000000'
[ 1395.131569][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1395.152038][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1395.320683][   T92] get_1284_register timeout
[ 1395.325367][   T92] uss720 4-1:0.125: probe with driver uss720 failed with error -5
[ 1395.333394][    C0] usb 4-1: async_complete: urb error -104
[ 1395.333499][    C0] usb 4-1: async_complete: urb error -104
[ 1395.490328][T12035] Bluetooth: hci3: command tx timeout
[ 1396.241417][ T5940] team0: Port device bridge0 removed
[ 1396.784379][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.808430][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.842572][ T5940] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1396.861251][ T5940] bond0 (unregistering): Released all slaves
[ 1397.123482][T17545] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1397.160318][T17545] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1397.167786][T17545] bridge_slave_0: entered allmulticast mode
[ 1397.179463][T17545] bridge_slave_0: entered promiscuous mode
[ 1397.206258][ T5940] tipc: Disabling bearer <udp:syz2>
[ 1397.212013][ T5940] tipc: Left network mode
[ 1398.010296][T12035] Bluetooth: hci3: command tx timeout
[ 1398.610277][T17545] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1398.620381][T17545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1398.627706][T17545] bridge_slave_1: entered allmulticast mode
[ 1398.647795][T17545] bridge_slave_1: entered promiscuous mode
[ 1398.652686][T12294] usb 4-1: USB disconnect, device number 81
[ 1398.676242][T17599] vlan2: entered allmulticast mode
[ 1398.710205][T17599] dummy0: entered allmulticast mode
[ 1398.741623][T17599] dummy0: left allmulticast mode
[ 1400.163669][   T55] Bluetooth: hci3: command tx timeout
[ 1400.219343][T17545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1401.307804][T17545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1402.060950][T17545] team0: Port device team_slave_0 added
[ 1402.069246][T17628] sctp: [Deprecated]: syz.5.3103 (pid 17628) Use of int in max_burst socket option.
[ 1402.069246][T17628] Use struct sctp_assoc_value instead
[ 1402.119751][T17545] team0: Port device team_slave_1 added
[ 1402.165035][T17628] netlink: 'syz.5.3103': attribute type 10 has an invalid length.
[ 1402.212171][T17628] veth0_vlan: left promiscuous mode
[ 1402.218999][T17628] veth0_vlan: entered promiscuous mode
[ 1402.248559][T17628] team0: Device veth0_vlan failed to register rx_handler
[ 1402.360275][   T55] Bluetooth: hci3: command 0x0405 tx timeout
[ 1402.391624][T17545] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1402.404748][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1402.578918][T17545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1402.626853][T17545] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1402.645297][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1402.684819][T17545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1402.697832][ T5930] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1402.829821][T17545] hsr_slave_0: entered promiscuous mode
[ 1402.843448][T17545] hsr_slave_1: entered promiscuous mode
[ 1402.854690][T17545] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1402.870253][T10876] usb 2-1: new low-speed USB device number 81 using dummy_hcd
[ 1402.872918][T17545] Cannot create hsr debugfs directory
[ 1402.887329][ T5930] usb 7-1: Using ep0 maxpacket: 32
[ 1402.912452][ T5930] usb 7-1: config 0 has an invalid interface number: 230 but max is 0
[ 1402.927410][ T5930] usb 7-1: config 0 has no interface number 0
[ 1402.936175][ T5930] usb 7-1: config 0 interface 230 has no altsetting 0
[ 1402.950383][ T5930] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1402.994505][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.013772][ T5930] usb 7-1: Product: syz
[ 1403.020772][ T5930] usb 7-1: Manufacturer: syz
[ 1403.035791][ T5930] usb 7-1: SerialNumber: syz
[ 1403.060273][T10876] usb 2-1: device descriptor read/64, error -71
[ 1403.067538][ T5930] usb 7-1: config 0 descriptor??
[ 1403.096773][ T5930] ums-usbat 7-1:0.230: USB Mass Storage device detected
[ 1403.128750][ T5930] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1
[ 1403.318383][T10876] usb 2-1: new low-speed USB device number 82 using dummy_hcd
[ 1403.500337][T10876] usb 2-1: device descriptor read/64, error -71
[ 1403.521554][T17640] netlink: 'syz.5.3106': attribute type 3 has an invalid length.
[ 1403.529461][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'.
[ 1403.620643][T10876] usb usb2-port1: attempt power cycle
[ 1403.980504][T10876] usb 2-1: new low-speed USB device number 83 using dummy_hcd
[ 1404.031362][T10876] usb 2-1: device descriptor read/8, error -71
[ 1404.132217][T17545] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1404.250228][T17545] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1404.300270][T10876] usb 2-1: new low-speed USB device number 84 using dummy_hcd
[ 1404.486712][T10876] usb 2-1: device descriptor read/8, error -71
[ 1404.502237][T17545] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1404.545231][T17545] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1404.920441][T10876] usb usb2-port1: unable to enumerate USB device
[ 1404.971099][T17648] netlink: 'syz.3.3109': attribute type 3 has an invalid length.
[ 1405.019528][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'.
[ 1405.400558][ T5930] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5
[ 1405.596321][T17545] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1405.616042][ T5930] usb 7-1: USB disconnect, device number 49
[ 1406.617763][T17545] 8021q: adding VLAN 0 to HW filter on device team0
[ 1406.640952][ T5930] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1406.831104][ T5930] usb 7-1: Using ep0 maxpacket: 16
[ 1407.197489][ T5930] usb 7-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1407.214972][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1407.227950][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1407.235092][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1407.278051][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1407.287368][T12294] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1407.344567][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1407.346058][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1407.351740][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1407.470454][T12294] usb 6-1: Using ep0 maxpacket: 16
[ 1407.493721][ T5930] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1407.506342][ T5930] usb 7-1: config 0 has no interface number 0
[ 1407.513981][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1407.526911][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1407.527094][T12294] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1407.537390][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1407.587377][ T5930] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1407.618093][T12294] usb 6-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32
[ 1407.637024][T12294] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1407.690805][T12294] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1407.701087][T12294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.703265][ T5930] usb 7-1: config 0 interface 125 has no altsetting 0
[ 1407.709146][T12294] usb 6-1: Product: syz
[ 1407.733907][T17545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1407.768124][ T5930] usb 7-1: config 0 interface 125 has no altsetting 2
[ 1407.770222][T12294] usb 6-1: Manufacturer: syz
[ 1407.793961][ T5930] usb 7-1: string descriptor 0 read error: -71
[ 1407.818930][ T5930] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1407.830265][T12294] usb 6-1: SerialNumber: syz
[ 1407.850527][T17661] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1407.881030][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.920384][ T5930] usb 7-1: config 0 descriptor??
[ 1407.940612][ T5930] usb 7-1: can't set config #0, error -71
[ 1407.959748][ T5930] usb 7-1: USB disconnect, device number 50
[ 1411.422398][T12294] usb 6-1: USB disconnect, device number 85
[ 1411.752507][T17694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1412.013328][ T5930] usb 7-1: new low-speed USB device number 51 using dummy_hcd
[ 1412.181486][T17545] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1412.241182][ T5930] usb 7-1: device descriptor read/64, error -71
[ 1412.252536][ T5940] hsr_slave_0: left promiscuous mode
[ 1412.263914][ T5940] hsr_slave_1: left promiscuous mode
[ 1412.272445][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1412.280764][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1412.289597][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1412.299778][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1412.326015][ T5940] veth1_macvtap: left promiscuous mode
[ 1412.340242][T12294] usb 2-1: new low-speed USB device number 85 using dummy_hcd
[ 1412.351823][ T5940] veth1_vlan: left promiscuous mode
[ 1412.562646][T12294] usb 2-1: device descriptor read/64, error -71
[ 1412.580302][ T5930] usb 7-1: new low-speed USB device number 52 using dummy_hcd
[ 1412.890209][ T5930] usb 7-1: device descriptor read/64, error -71
[ 1412.945145][T12294] usb 2-1: new low-speed USB device number 86 using dummy_hcd
[ 1413.026604][ T5930] usb usb7-port1: attempt power cycle
[ 1413.230337][   T47] usb 6-1: new low-speed USB device number 86 using dummy_hcd
[ 1413.239146][T12294] usb 2-1: device descriptor read/64, error -71
[ 1413.372204][T17708] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3124'.
[ 1413.383117][   T47] usb 6-1: device descriptor read/64, error -71
[ 1413.436044][T12294] usb usb2-port1: attempt power cycle
[ 1413.850302][   T47] usb 6-1: new low-speed USB device number 87 using dummy_hcd
[ 1413.950185][T12294] usb 2-1: new low-speed USB device number 87 using dummy_hcd
[ 1414.001128][   T47] usb 6-1: device descriptor read/64, error -71
[ 1414.106033][T12294] usb 2-1: device descriptor read/8, error -71
[ 1414.128165][   T47] usb usb6-port1: attempt power cycle
[ 1414.550977][   T47] usb 6-1: new low-speed USB device number 88 using dummy_hcd
[ 1414.586061][   T47] usb 6-1: device descriptor read/8, error -71
[ 1414.819613][ T5940] team0 (unregistering): Port device team_slave_1 removed
[ 1414.860282][   T47] usb 6-1: new low-speed USB device number 89 using dummy_hcd
[ 1414.892544][   T47] usb 6-1: device descriptor read/8, error -71
[ 1414.904428][ T5940] team0 (unregistering): Port device team_slave_0 removed
[ 1415.010619][   T47] usb usb6-port1: unable to enumerate USB device
[ 1416.091615][T12294] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1416.112235][T12035] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1416.119677][T12035] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1416.560358][T12294] usb 2-1: Using ep0 maxpacket: 16
[ 1416.664829][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3132'.
[ 1416.722358][T12294] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1416.775042][T12294] usb 2-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32
[ 1416.787104][T12294] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1417.147773][T12294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1417.160204][T12294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1417.168736][T12294] usb 2-1: Product: syz
[ 1417.173645][T12294] usb 2-1: Manufacturer: syz
[ 1417.178401][T12294] usb 2-1: SerialNumber: syz
[ 1417.188413][T17727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1418.030992][T17747] netlink: 'syz.6.3133': attribute type 3 has an invalid length.
[ 1418.644377][T12294] usb 2-1: USB disconnect, device number 89
[ 1419.404900][ T5940] IPVS: stop unused estimator thread 0...
[ 1419.431386][T17545] veth0_vlan: entered promiscuous mode
[ 1419.486444][T17545] veth1_vlan: entered promiscuous mode
[ 1419.556189][T17545] veth0_macvtap: entered promiscuous mode
[ 1419.697388][T17545] veth1_macvtap: entered promiscuous mode
[ 1419.715003][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1419.727979][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1419.738286][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1419.749915][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1419.775964][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1419.948620][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1419.990592][T17545] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1420.221908][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1420.280981][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1420.294605][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1420.305170][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1420.632985][T17545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1420.691167][T17772] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3141'.
[ 1421.054095][T17545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1421.131009][T17545] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1421.198744][T17545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.258887][T17545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.297860][T17545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.363772][T17545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.640242][ T5817] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1421.719987][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1421.746870][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1421.930260][ T5817] usb 7-1: Using ep0 maxpacket: 8
[ 1421.951975][ T5817] usb 7-1: config 0 has an invalid interface number: 141 but max is 12
[ 1421.960458][ T5817] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1421.979450][ T5817] usb 7-1: config 0 has no interface number 0
[ 1422.011398][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1422.020565][ T5817] usb 7-1: config 0 interface 141 has no altsetting 0
[ 1422.044597][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1422.055640][T17791] netlink: 'syz.5.3145': attribute type 3 has an invalid length.
[ 1422.056989][ T5817] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1422.096903][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'.
[ 1422.125140][ T5817] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[ 1422.170151][ T5817] usb 7-1: Product: syz
[ 1422.174388][ T5817] usb 7-1: Manufacturer: syz
[ 1422.216296][ T5817] usb 7-1: SerialNumber: syz
[ 1422.237816][ T5817] usb 7-1: config 0 descriptor??
[ 1422.254302][ T5817] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1422.690720][T12294] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1422.779347][T12035] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1422.794620][T12035] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1422.973453][ T5817] gspca_zc3xx: reg_w_i err -110
[ 1423.290195][T12294] usb 5-1: Using ep0 maxpacket: 16
[ 1423.301824][T12294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1423.353735][T12294] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1423.421150][T17807] netlink: 'syz.6.3144': attribute type 10 has an invalid length.
[ 1423.434349][T12294] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1423.449441][T12294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1423.466505][T12294] usb 5-1: Product: syz
[ 1423.471639][T17807] hsr0: entered promiscuous mode
[ 1423.488987][T17807] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1423.516615][T12294] usb 5-1: Manufacturer: syz
[ 1423.524390][T12294] usb 5-1: SerialNumber: syz
[ 1423.535470][T12294] usb 5-1: config 0 descriptor??
[ 1423.544799][T17807] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1423.560365][ T5817] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1423.603139][ T5817] gspca_zc3xx 7-1:0.141: probe with driver gspca_zc3xx failed with error -110
[ 1423.607952][T17807] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1423.989507][T17817] netlink: 'syz.5.3150': attribute type 3 has an invalid length.
[ 1424.442081][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1425.131068][ T5877] usb 4-1: new low-speed USB device number 82 using dummy_hcd
[ 1425.303750][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1425.893453][ T5930] usb 7-1: USB disconnect, device number 54
[ 1425.970326][ T5877] usb 4-1: new low-speed USB device number 83 using dummy_hcd
[ 1426.120558][T12294] usb 6-1: new low-speed USB device number 90 using dummy_hcd
[ 1426.220253][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1426.300174][T12294] usb 6-1: Invalid ep0 maxpacket: 32
[ 1426.339219][T17843] netlink: 'syz.6.3156': attribute type 3 has an invalid length.
[ 1426.351545][ T5877] usb usb4-port1: attempt power cycle
[ 1426.357399][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3156'.
[ 1426.450478][T12294] usb 6-1: new low-speed USB device number 91 using dummy_hcd
[ 1426.577813][T17846] netlink: 'syz.1.3157': attribute type 3 has an invalid length.
[ 1427.032254][ T5877] usb 4-1: new low-speed USB device number 84 using dummy_hcd
[ 1427.062927][ T5877] usb 4-1: device descriptor read/8, error -71
[ 1427.120326][T12294] usb 6-1: Invalid ep0 maxpacket: 32
[ 1427.130486][T12294] usb usb6-port1: attempt power cycle
[ 1427.300616][ T5877] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[ 1427.343520][ T5877] usb 4-1: device descriptor read/8, error -71
[ 1427.406248][T17851] netlink: 'syz.1.3158': attribute type 3 has an invalid length.
[ 1428.325121][T12294] usb 6-1: new low-speed USB device number 92 using dummy_hcd
[ 1428.723479][T12294] usb 6-1: device descriptor read/8, error -71
[ 1428.748277][ T5877] usb usb4-port1: unable to enumerate USB device
[ 1430.118640][   T92] usb 5-1: USB disconnect, device number 67
[ 1430.378752][   T55] Bluetooth: hci5: unexpected event for opcode 0x0c23
[ 1430.443461][   T55] Bluetooth: hci5: ACL packet for unknown connection handle 7
[ 1430.527409][T17861] FAULT_INJECTION: forcing a failure.
[ 1430.527409][T17861] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1430.606747][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.5.3160 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1430.606778][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1430.606791][T17861] Call Trace:
[ 1430.606800][T17861]  <TASK>
[ 1430.606809][T17861]  dump_stack_lvl+0x241/0x360
[ 1430.606842][T17861]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1430.606865][T17861]  ? __pfx__printk+0x10/0x10
[ 1430.606901][T17861]  ? __pfx_lock_release+0x10/0x10
[ 1430.606933][T17861]  ? __lock_acquire+0x1397/0x2100
[ 1430.606971][T17861]  should_fail_ex+0x40a/0x550
[ 1430.607011][T17861]  _copy_from_user+0x2d/0xb0
[ 1430.607041][T17861]  kstrtouint_from_user+0xc6/0x190
[ 1430.607069][T17861]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1430.607098][T17861]  ? __pfx_lock_acquire+0x10/0x10
[ 1430.607140][T17861]  proc_fail_nth_write+0xaa/0x2d0
[ 1430.607165][T17861]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1430.607191][T17861]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1430.607227][T17861]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1430.607251][T17861]  vfs_write+0x29f/0xd10
[ 1430.607281][T17861]  ? fdget_pos+0x254/0x320
[ 1430.607303][T17861]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1430.607340][T17861]  ? __pfx_vfs_write+0x10/0x10
[ 1430.607372][T17861]  ? __fget_files+0x2a/0x410
[ 1430.607397][T17861]  ? __fget_files+0x395/0x410
[ 1430.607418][T17861]  ? __fget_files+0x2a/0x410
[ 1430.607451][T17861]  ksys_write+0x18f/0x2b0
[ 1430.607496][T17861]  ? __pfx_ksys_write+0x10/0x10
[ 1430.607524][T17861]  ? do_syscall_64+0x100/0x230
[ 1430.607571][T17861]  ? do_syscall_64+0xb6/0x230
[ 1430.607603][T17861]  do_syscall_64+0xf3/0x230
[ 1430.607632][T17861]  ? clear_bhb_loop+0x35/0x90
[ 1430.607663][T17861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.607690][T17861] RIP: 0033:0x7f230ff8bc1f
[ 1430.607707][T17861] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1430.607724][T17861] RSP: 002b:00007f2310eb8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1430.607745][T17861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f230ff8bc1f
[ 1430.607759][T17861] RDX: 0000000000000001 RSI: 00007f2310eb80a0 RDI: 0000000000000005
[ 1430.607771][T17861] RBP: 00007f2310eb8090 R08: 0000000000000000 R09: 0000000000000000
[ 1430.607784][T17861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1430.607798][T17861] R13: 0000000000000000 R14: 00007f23101a5fa0 R15: 00007ffe976e8fa8
[ 1430.607827][T17861]  </TASK>
[ 1431.960708][   T55] Bluetooth: hci0: command 0x0405 tx timeout
[ 1432.119116][T17900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3169'.
[ 1432.934322][T17903] sctp: [Deprecated]: syz.6.3170 (pid 17903) Use of int in max_burst socket option.
[ 1432.934322][T17903] Use struct sctp_assoc_value instead
[ 1433.003175][T17905] netlink: 'syz.6.3170': attribute type 10 has an invalid length.
[ 1433.043685][T17905] veth0_vlan: left promiscuous mode
[ 1433.253629][T17905] veth0_vlan: entered promiscuous mode
[ 1433.319855][T17909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3172'.
[ 1433.753544][T17905] team0: Device veth0_vlan failed to register rx_handler
[ 1436.740327][   T47] usb 7-1: new low-speed USB device number 55 using dummy_hcd
[ 1436.748782][T12035] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1436.755860][T12035] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1436.930427][   T47] usb 7-1: device descriptor read/64, error -71
[ 1437.180652][   T47] usb 7-1: new low-speed USB device number 56 using dummy_hcd
[ 1437.360036][   T47] usb 7-1: device descriptor read/64, error -71
[ 1437.946041][   T47] usb usb7-port1: attempt power cycle
[ 1438.531584][   T47] usb 7-1: new low-speed USB device number 57 using dummy_hcd
[ 1438.562224][T17944] netlink: 'syz.3.3181': attribute type 3 has an invalid length.
[ 1438.562613][   T47] usb 7-1: device descriptor read/8, error -71
[ 1438.965853][   T47] usb 7-1: new low-speed USB device number 58 using dummy_hcd
[ 1439.400201][   T47] usb 7-1: device not accepting address 58, error -71
[ 1439.515793][   T47] usb usb7-port1: unable to enumerate USB device
[ 1439.955316][T17962] delete_channel: no stack
[ 1440.829787][T17962] delete_channel: no stack
[ 1441.806052][T12035] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1443.504191][T17975] fuse: Bad value for 'fd'
[ 1443.820140][ T5877] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1444.007501][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1444.045821][T17989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1444.121714][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.733816][ T5877] usb 4-1: config 0 descriptor??
[ 1444.753753][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1445.281184][T18012] netlink: 'syz.5.3199': attribute type 3 has an invalid length.
[ 1445.643008][T12035] Bluetooth: hci3: command 0x0405 tx timeout
[ 1446.156087][T18021] fuse: Bad value for 'fd'
[ 1447.325542][ T5877] usb 4-1: USB disconnect, device number 86
[ 1449.110651][T18061] netlink: 'syz.4.3213': attribute type 3 has an invalid length.
[ 1451.917465][T18069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1452.507297][T18072] fuse: Bad value for 'fd'
[ 1452.602772][T18078] sctp: [Deprecated]: syz.3.3216 (pid 18078) Use of int in max_burst socket option.
[ 1452.602772][T18078] Use struct sctp_assoc_value instead
[ 1452.647958][T18078] netlink: 'syz.3.3216': attribute type 10 has an invalid length.
[ 1452.662752][T18078] veth0_vlan: left promiscuous mode
[ 1452.676049][T18078] veth0_vlan: entered promiscuous mode
[ 1452.688481][T18078] team0: Device veth0_vlan failed to register rx_handler
[ 1460.680139][   T55] Bluetooth: hci1: ACL packet for unknown connection handle 7
[ 1461.056426][T18122] netlink: 'syz.1.3228': attribute type 3 has an invalid length.
[ 1461.800212][   T47] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1461.832870][T18134] sctp: [Deprecated]: syz.5.3233 (pid 18134) Use of int in max_burst socket option.
[ 1461.832870][T18134] Use struct sctp_assoc_value instead
[ 1461.938614][T18134] netlink: 'syz.5.3233': attribute type 10 has an invalid length.
[ 1461.973478][T18134] veth0_vlan: left promiscuous mode
[ 1462.049518][T18134] veth0_vlan: entered promiscuous mode
[ 1462.084466][   T47] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1462.123667][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.187654][T18134] team0: Device veth0_vlan failed to register rx_handler
[ 1462.211667][   T47] usb 2-1: config 0 descriptor??
[ 1462.242439][   T47] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1463.261169][T18149] FAULT_INJECTION: forcing a failure.
[ 1463.261169][T18149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1463.274384][T18149] CPU: 1 UID: 0 PID: 18149 Comm: syz.5.3237 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1463.274411][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1463.274424][T18149] Call Trace:
[ 1463.274433][T18149]  <TASK>
[ 1463.274445][T18149]  dump_stack_lvl+0x241/0x360
[ 1463.274481][T18149]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1463.274501][T18149]  ? __pfx__printk+0x10/0x10
[ 1463.274539][T18149]  ? snprintf+0xda/0x120
[ 1463.274568][T18149]  should_fail_ex+0x40a/0x550
[ 1463.274606][T18149]  _copy_to_user+0x31/0xb0
[ 1463.274637][T18149]  simple_read_from_buffer+0xca/0x150
[ 1463.274681][T18149]  proc_fail_nth_read+0x1e9/0x250
[ 1463.274707][T18149]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1463.274731][T18149]  ? rw_verify_area+0x243/0x630
[ 1463.274757][T18149]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1463.274780][T18149]  vfs_read+0x1f8/0xb40
[ 1463.274807][T18149]  ? fdget_pos+0x254/0x320
[ 1463.274831][T18149]  ? __pfx___mutex_lock+0x10/0x10
[ 1463.274861][T18149]  ? __pfx_vfs_read+0x10/0x10
[ 1463.274891][T18149]  ? __fget_files+0x2a/0x410
[ 1463.274914][T18149]  ? __fget_files+0x395/0x410
[ 1463.274934][T18149]  ? __fget_files+0x2a/0x410
[ 1463.274965][T18149]  ksys_read+0x18f/0x2b0
[ 1463.274993][T18149]  ? __pfx_ksys_read+0x10/0x10
[ 1463.275030][T18149]  do_syscall_64+0xf3/0x230
[ 1463.275059][T18149]  ? clear_bhb_loop+0x35/0x90
[ 1463.275091][T18149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1463.275117][T18149] RIP: 0033:0x7f230ff8bb7c
[ 1463.275135][T18149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1463.275152][T18149] RSP: 002b:00007f2310e76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1463.275173][T18149] RAX: ffffffffffffffda RBX: 00007f23101a6160 RCX: 00007f230ff8bb7c
[ 1463.275188][T18149] RDX: 000000000000000f RSI: 00007f2310e760a0 RDI: 0000000000000005
[ 1463.275201][T18149] RBP: 00007f2310e76090 R08: 0000000000000000 R09: 0000000000000000
[ 1463.275213][T18149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1463.275225][T18149] R13: 0000000000000000 R14: 00007f23101a6160 R15: 00007ffe976e8fa8
[ 1463.275255][T18149]  </TASK>
[ 1464.074317][T18163] netlink: 'syz.3.3240': attribute type 1 has an invalid length.
[ 1464.082415][T18163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3240'.
[ 1464.086996][T10876] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1464.106293][T18160] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1464.113426][T18160] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1464.160529][ T5817] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1464.240541][T10876] usb 5-1: device descriptor read/64, error -71
[ 1464.253763][T18160] vhci_hcd vhci_hcd.0: Device attached
[ 1464.360592][ T5817] usb 7-1: Using ep0 maxpacket: 16
[ 1464.375391][ T5817] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1464.453234][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1464.508316][   T47] usb 2-1: USB disconnect, device number 90
[ 1464.566810][   T10] vhci_hcd: vhci_device speed not set
[ 1464.567419][T10876] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1464.649014][ T5817] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1464.738712][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.757355][ T5817] usb 7-1: Product: syz
[ 1464.761972][ T5817] usb 7-1: Manufacturer: syz
[ 1464.767522][ T5817] usb 7-1: SerialNumber: syz
[ 1464.790849][   T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[ 1464.798756][ T5817] usb 7-1: config 0 descriptor??
[ 1464.822292][ T5817] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1464.849866][ T5817] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 1464.871927][T10876] usb 5-1: device descriptor read/64, error -71
[ 1464.884630][T18161] vhci_hcd: connection reset by peer
[ 1464.906463][ T1162] vhci_hcd: stop threads
[ 1464.916682][ T1162] vhci_hcd: release socket
[ 1464.923447][ T1162] vhci_hcd: disconnect device
[ 1464.990642][T10876] usb usb5-port1: attempt power cycle
[ 1465.094660][T18167] netlink: 'syz.5.3243': attribute type 3 has an invalid length.
[ 1465.386287][T10876] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1465.514064][ T5817] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 1465.641078][ T5817] em28xx 7-1:0.0: Config register raw data: 0x41
[ 1465.681267][T10876] usb 5-1: device descriptor read/8, error -71
[ 1466.796908][   T92] usb 7-1: USB disconnect, device number 59
[ 1466.840508][T10876] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1466.940328][   T92] em28xx 7-1:0.0: Disconnecting em28xx
[ 1467.339390][   T92] em28xx 7-1:0.0: Freeing device
[ 1467.421268][T10876] usb 5-1: device descriptor read/8, error -71
[ 1467.532475][T10876] usb usb5-port1: unable to enumerate USB device
[ 1467.921650][T18188] netlink: 'syz.1.3247': attribute type 10 has an invalid length.
[ 1467.970718][T18188] veth0_vlan: left promiscuous mode
[ 1467.976818][T18188] veth0_vlan: entered promiscuous mode
[ 1468.006879][T18188] team0: Device veth0_vlan failed to register rx_handler
[ 1468.049692][T18196] netlink: 'syz.6.3251': attribute type 1 has an invalid length.
[ 1468.062146][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3251'.
[ 1468.282370][ T5817] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[ 1468.350139][   T47] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1468.445242][ T5817] usb 6-1: device descriptor read/64, error -71
[ 1468.520492][   T47] usb 7-1: Using ep0 maxpacket: 32
[ 1468.533134][T18210] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3253'.
[ 1468.589025][   T47] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1469.042231][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.060333][ T5817] usb 6-1: new low-speed USB device number 95 using dummy_hcd
[ 1469.077880][   T47] usb 7-1: config 0 descriptor??
[ 1469.108852][   T47] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1469.210314][ T5817] usb 6-1: device descriptor read/64, error -71
[ 1469.348103][ T5817] usb usb6-port1: attempt power cycle
[ 1469.694123][T18222] netlink: 'syz.4.3255': attribute type 3 has an invalid length.
[ 1469.751429][ T5817] usb 6-1: new low-speed USB device number 96 using dummy_hcd
[ 1470.250887][ T5817] usb 6-1: device descriptor read/8, error -71
[ 1470.270210][   T10] vhci_hcd: vhci_device speed not set
[ 1470.286543][T18225] netlink: 'syz.1.3256': attribute type 1 has an invalid length.
[ 1470.310947][T18225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3256'.
[ 1470.510607][ T5817] usb 6-1: new low-speed USB device number 97 using dummy_hcd
[ 1470.567245][T18229] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3257'.
[ 1470.921037][   T47] gspca_nw80x: reg_w err -110
[ 1470.961075][   T47] nw80x 7-1:0.0: probe with driver nw80x failed with error -110
[ 1472.923679][ T5817] usb 6-1: device descriptor read/8, error -71
[ 1473.359505][ T5817] usb usb6-port1: unable to enumerate USB device
[ 1476.046587][   T10] usb 7-1: USB disconnect, device number 60
[ 1476.658551][T18251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3262'.
[ 1477.253544][T18254] delete_channel: no stack
[ 1477.735620][T18254] delete_channel: no stack
[ 1477.849197][T18259] sctp: [Deprecated]: syz.3.3263 (pid 18259) Use of int in max_burst socket option.
[ 1477.849197][T18259] Use struct sctp_assoc_value instead
[ 1478.080318][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[ 1478.391295][T18259] netlink: 'syz.3.3263': attribute type 10 has an invalid length.
[ 1478.480975][T18259] veth0_vlan: left promiscuous mode
[ 1478.488663][T18259] veth0_vlan: entered promiscuous mode
[ 1478.521733][T18259] team0: Device veth0_vlan failed to register rx_handler
[ 1478.739263][T18272] netlink: 'syz.1.3266': attribute type 3 has an invalid length.
[ 1478.840476][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[ 1479.014519][T18280] netlink: 'syz.3.3269': attribute type 1 has an invalid length.
[ 1479.022618][T18280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3269'.
[ 1479.120922][T10876] usb 7-1: new low-speed USB device number 61 using dummy_hcd
[ 1479.262898][T10876] usb 7-1: device descriptor read/64, error -71
[ 1480.471519][T10876] usb 7-1: new low-speed USB device number 62 using dummy_hcd
[ 1482.436112][T18298] usb usb1: usbfs: process 18298 (syz.6.3273) did not claim interface 0 before use
[ 1483.008220][T18298] kvm: kvm [18297]: vcpu0, guest rIP: 0x19d Unhandled WRMSR(0x187) = 0x8000
[ 1483.139926][T18296] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3275'.
[ 1484.085103][T18319] sctp: [Deprecated]: syz.1.3279 (pid 18319) Use of int in max_burst socket option.
[ 1484.085103][T18319] Use struct sctp_assoc_value instead
[ 1484.131209][T18321] netlink: 'syz.3.3281': attribute type 1 has an invalid length.
[ 1484.143304][T18322] netlink: 'syz.1.3279': attribute type 10 has an invalid length.
[ 1484.151327][   T10] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1484.159267][T18322] veth0_vlan: left promiscuous mode
[ 1484.165960][T18322] veth0_vlan: entered promiscuous mode
[ 1484.193378][T18321] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3281'.
[ 1484.213940][T18322] team0: Device veth0_vlan failed to register rx_handler
[ 1484.321350][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1484.341600][   T10] usb 6-1: config 0 has an invalid interface number: 112 but max is 0
[ 1484.350256][   T10] usb 6-1: config 0 has no interface number 0
[ 1484.356345][   T10] usb 6-1: config 0 interface 112 has no altsetting 0
[ 1484.388803][   T10] usb 6-1: New USB device found, idVendor=f8c8, idProduct=f5c1, bcdDevice=e0.d9
[ 1484.408429][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.428963][   T10] usb 6-1: Product: syz
[ 1484.434110][   T10] usb 6-1: Manufacturer: syz
[ 1484.438783][   T10] usb 6-1: SerialNumber: syz
[ 1484.449833][   T10] usb 6-1: config 0 descriptor??
[ 1485.431963][   T10] usb-storage 6-1:0.112: USB Mass Storage device detected
[ 1485.882375][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1486.240643][   T10] usb 6-1: USB disconnect, device number 98
[ 1486.335021][T18338] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3285'.
[ 1486.573885][T18338] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3285'.
[ 1490.001097][T18352] tmpfs: Bad value for 'huge'
[ 1490.110494][T18358] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3290'.
[ 1491.330692][ T5877] usb 4-1: new low-speed USB device number 87 using dummy_hcd
[ 1491.360748][   T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1491.403092][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1491.419403][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 1491.903067][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1491.941722][T18376] netlink: 'syz.5.3293': attribute type 1 has an invalid length.
[ 1491.950371][T18376] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3293'.
[ 1492.048276][T18373] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[ 1492.054879][T18373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1492.064791][T18373] vhci_hcd vhci_hcd.0: Device attached
[ 1492.106612][T18374] vhci_hcd: connection closed
[ 1492.108884][   T12] vhci_hcd: stop threads
[ 1492.121123][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1492.127079][T18378] fuse: Unknown parameter '0x0000000000000008'
[ 1492.153521][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1492.240100][   T12] vhci_hcd: release socket
[ 1492.249280][   T12] vhci_hcd: disconnect device
[ 1492.254963][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1492.274117][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1492.286914][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.290436][ T5930] vhci_hcd: vhci_device speed not set
[ 1492.305954][   T10] usb 2-1: Product: syz
[ 1492.315393][   T10] usb 2-1: Manufacturer: syz
[ 1492.322934][   T10] usb 2-1: SerialNumber: syz
[ 1492.459282][ T5877] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[ 1492.482857][T18384] sctp: [Deprecated]: syz.4.3296 (pid 18384) Use of int in max_burst socket option.
[ 1492.482857][T18384] Use struct sctp_assoc_value instead
[ 1492.510826][T18384] netlink: 'syz.4.3296': attribute type 10 has an invalid length.
[ 1493.413421][   T10] usb 2-1: 0:2 : does not exist
[ 1493.423782][   T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1493.463068][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1493.482680][T18384] veth0_vlan: left promiscuous mode
[ 1493.497040][   T10] usb 2-1: USB disconnect, device number 91
[ 1493.549010][T18384] veth0_vlan: entered promiscuous mode
[ 1493.576271][ T5877] usb usb4-port1: attempt power cycle
[ 1493.716533][T18384] team0: Device veth0_vlan failed to register rx_handler
[ 1494.715904][T18354] udevd[18354]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1495.800780][T18407] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1495.905869][T18413] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3303'.
[ 1495.985139][T18414] tmpfs: Bad value for 'huge'
[ 1497.507970][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c23
[ 1497.515393][   T55] Bluetooth: hci1: ACL packet for unknown connection handle 7
[ 1498.155462][T18429] netlink: 'syz.4.3306': attribute type 3 has an invalid length.
[ 1498.370488][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'.
[ 1499.310960][T18436] FAULT_INJECTION: forcing a failure.
[ 1499.310960][T18436] name failslab, interval 1, probability 0, space 0, times 0
[ 1499.325919][T18436] CPU: 0 UID: 0 PID: 18436 Comm: syz.3.3309 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1499.325945][T18436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1499.325958][T18436] Call Trace:
[ 1499.325966][T18436]  <TASK>
[ 1499.325974][T18436]  dump_stack_lvl+0x241/0x360
[ 1499.326020][T18436]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1499.326042][T18436]  ? __pfx__printk+0x10/0x10
[ 1499.326077][T18436]  ? fs_reclaim_acquire+0x93/0x130
[ 1499.326106][T18436]  ? __pfx___might_resched+0x10/0x10
[ 1499.326139][T18436]  should_fail_ex+0x40a/0x550
[ 1499.326174][T18436]  should_failslab+0xac/0x100
[ 1499.326208][T18436]  __kmalloc_noprof+0xdd/0x4c0
[ 1499.326228][T18436]  ? tomoyo_encode+0x26f/0x540
[ 1499.326257][T18436]  tomoyo_encode+0x26f/0x540
[ 1499.326285][T18436]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1499.326320][T18436]  tomoyo_path_number_perm+0x239/0x770
[ 1499.326351][T18436]  ? __lock_acquire+0x1397/0x2100
[ 1499.326400][T18436]  ? tomoyo_path_number_perm+0x209/0x770
[ 1499.326433][T18436]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1499.326505][T18436]  ? __fget_files+0x2a/0x410
[ 1499.326530][T18436]  ? __fget_files+0x2a/0x410
[ 1499.326557][T18436]  security_file_ioctl+0xc6/0x2a0
[ 1499.326592][T18436]  __se_sys_ioctl+0x46/0x170
[ 1499.326624][T18436]  do_syscall_64+0xf3/0x230
[ 1499.326656][T18436]  ? clear_bhb_loop+0x35/0x90
[ 1499.326688][T18436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1499.326726][T18436] RIP: 0033:0x7ff87a98d169
[ 1499.326745][T18436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1499.326763][T18436] RSP: 002b:00007ff87b74d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1499.326787][T18436] RAX: ffffffffffffffda RBX: 00007ff87aba6080 RCX: 00007ff87a98d169
[ 1499.326803][T18436] RDX: 0000400000000040 RSI: 0000000000005423 RDI: 0000000000000006
[ 1499.326816][T18436] RBP: 00007ff87b74d090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.326829][T18436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1499.326841][T18436] R13: 0000000000000000 R14: 00007ff87aba6080 R15: 00007fffc7bfbe78
[ 1499.326873][T18436]  </TASK>
[ 1499.326951][T18436] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1502.462290][T18455] sctp: [Deprecated]: syz.3.3312 (pid 18455) Use of int in max_burst socket option.
[ 1502.462290][T18455] Use struct sctp_assoc_value instead
[ 1502.602816][T18455] netlink: 'syz.3.3312': attribute type 10 has an invalid length.
[ 1502.616107][T18455] veth0_vlan: left promiscuous mode
[ 1502.644978][T18455] veth0_vlan: entered promiscuous mode
[ 1502.668347][T18455] team0: Device veth0_vlan failed to register rx_handler
[ 1503.130337][T18459] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3315'.
[ 1503.447262][T18462] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1504.954536][   T55] Bluetooth: hci0: unexpected event for opcode 0x0c23
[ 1504.961637][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 7
[ 1506.569369][T18484] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1506.596137][T18485] netlink: 'syz.5.3323': attribute type 3 has an invalid length.
[ 1506.604024][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3323'.
[ 1506.799959][T18494] netlink: 'syz.3.3325': attribute type 3 has an invalid length.
[ 1506.802479][T18495] sctp: [Deprecated]: syz.4.3326 (pid 18495) Use of int in max_burst socket option.
[ 1506.802479][T18495] Use struct sctp_assoc_value instead
[ 1507.376247][T18495] netlink: 'syz.4.3326': attribute type 10 has an invalid length.
[ 1507.385037][T18495] veth0_vlan: left promiscuous mode
[ 1507.411831][T18495] veth0_vlan: entered promiscuous mode
[ 1507.419126][T18495] team0: Device veth0_vlan failed to register rx_handler
[ 1507.740600][T18502] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3327'.
[ 1508.510502][T18511] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1509.315631][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'.
[ 1511.145785][   T55] Bluetooth: hci5: unexpected event for opcode 0x0c23
[ 1511.181257][   T55] Bluetooth: hci5: ACL packet for unknown connection handle 7
[ 1511.777574][T18539] sctp: [Deprecated]: syz.3.3338 (pid 18539) Use of int in max_burst socket option.
[ 1511.777574][T18539] Use struct sctp_assoc_value instead
[ 1511.825782][T18539] netlink: 'syz.3.3338': attribute type 10 has an invalid length.
[ 1511.905150][T18539] veth0_vlan: left promiscuous mode
[ 1511.928011][T18539] veth0_vlan: entered promiscuous mode
[ 1511.958650][T18539] team0: Device veth0_vlan failed to register rx_handler
[ 1512.323111][   T10] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[ 1512.672411][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[ 1512.681486][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1512.700847][   T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1512.736711][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1512.758195][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1512.774077][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.957474][T18558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1512.991678][   T10] usb 5-1: Product: syz
[ 1512.996200][   T10] usb 5-1: Manufacturer: syz
[ 1513.003967][T18562] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1513.031300][   T10] usb 5-1: SerialNumber: syz
[ 1513.187949][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'.
[ 1513.408813][   T10] usb 5-1: 0:2 : does not exist
[ 1513.429088][   T10] usb 5-1: USB disconnect, device number 72
[ 1513.461043][T18394] udevd[18394]: setting owner of /dev/bus/usb/005/072 to uid=0, gid=0 failed: No such file or directory
[ 1513.580622][T12035] Bluetooth: hci3: command 0x0405 tx timeout
[ 1513.907811][T18354] udevd[18354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1513.929627][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c23
[ 1514.674435][T18591] sctp: [Deprecated]: syz.6.3354 (pid 18591) Use of int in max_burst socket option.
[ 1514.674435][T18591] Use struct sctp_assoc_value instead
[ 1515.616605][T18591] netlink: 'syz.6.3354': attribute type 10 has an invalid length.
[ 1515.686735][T18591] veth0_vlan: left promiscuous mode
[ 1515.782339][T18591] veth0_vlan: entered promiscuous mode
[ 1515.789526][T18591] team0: Device veth0_vlan failed to register rx_handler
[ 1517.873555][T18620] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1518.005048][T18610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1518.011625][T18610] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1518.123531][T18610] vhci_hcd vhci_hcd.0: Device attached
[ 1518.618821][T18616] netlink: 'syz.4.3360': attribute type 1 has an invalid length.
[ 1518.645049][T18612] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[ 1518.651622][T18612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1518.831568][T18612] vhci_hcd vhci_hcd.0: Device attached
[ 1518.840332][   T47] vhci_hcd: vhci_device speed not set
[ 1518.841095][T18616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3360'.
[ 1518.868837][T18612] netlink: 'syz.6.3361': attribute type 1 has an invalid length.
[ 1519.838668][T18612] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3361'.
[ 1519.892313][   T47] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[ 1519.892675][T18625] vhci_hcd: connection closed
[ 1519.925558][ T2999] vhci_hcd: stop threads
[ 1519.961466][ T2999] vhci_hcd: release socket
[ 1520.583174][T10876] vhci_hcd: vhci_device speed not set
[ 1520.609789][T18619] vhci_hcd: connection reset by peer
[ 1520.617430][ T2999] vhci_hcd: disconnect device
[ 1520.643596][T10876] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[ 1520.652303][T10876] usb 45-1: enqueue for inactive port 0
[ 1520.658575][ T2999] vhci_hcd: stop threads
[ 1520.677735][ T2999] vhci_hcd: release socket
[ 1520.704831][ T2999] vhci_hcd: disconnect device
[ 1520.725304][T10876] vhci_hcd: vhci_device speed not set
[ 1523.945392][ T5876] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1523.955547][T18666] sctp: [Deprecated]: syz.1.3371 (pid 18666) Use of int in max_burst socket option.
[ 1523.955547][T18666] Use struct sctp_assoc_value instead
[ 1524.711714][T18666] netlink: 'syz.1.3371': attribute type 10 has an invalid length.
[ 1524.828094][T18666] veth0_vlan: left promiscuous mode
[ 1524.846474][T18666] veth0_vlan: entered promiscuous mode
[ 1524.866721][T18666] team0: Device veth0_vlan failed to register rx_handler
[ 1525.020111][ T5876] usb 7-1: Using ep0 maxpacket: 8
[ 1525.028868][ T5876] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1525.050271][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.059180][ T5876] usb 7-1: Product: syz
[ 1525.061134][   T47] vhci_hcd: vhci_device speed not set
[ 1525.327446][ T5876] usb 7-1: Manufacturer: syz
[ 1525.353463][ T5876] usb 7-1: SerialNumber: syz
[ 1525.369162][T18671] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1525.474666][ T5876] usb 7-1: config 0 descriptor??
[ 1525.743679][ T5876] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1525.847000][T18685] FAULT_INJECTION: forcing a failure.
[ 1525.847000][T18685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1525.860232][T18685] CPU: 1 UID: 0 PID: 18685 Comm: syz.4.3375 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1525.860257][T18685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1525.860270][T18685] Call Trace:
[ 1525.860278][T18685]  <TASK>
[ 1525.860287][T18685]  dump_stack_lvl+0x241/0x360
[ 1525.860317][T18685]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1525.860337][T18685]  ? __pfx__printk+0x10/0x10
[ 1525.860373][T18685]  ? snprintf+0xda/0x120
[ 1525.860399][T18685]  should_fail_ex+0x40a/0x550
[ 1525.860433][T18685]  _copy_to_user+0x31/0xb0
[ 1525.860463][T18685]  simple_read_from_buffer+0xca/0x150
[ 1525.860498][T18685]  proc_fail_nth_read+0x1e9/0x250
[ 1525.860522][T18685]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1525.860546][T18685]  ? rw_verify_area+0x243/0x630
[ 1525.860571][T18685]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1525.860594][T18685]  vfs_read+0x1f8/0xb40
[ 1525.860621][T18685]  ? fdget_pos+0x254/0x320
[ 1525.860644][T18685]  ? __pfx___mutex_lock+0x10/0x10
[ 1525.860674][T18685]  ? __pfx_vfs_read+0x10/0x10
[ 1525.860702][T18685]  ? __rcu_read_unlock+0xa1/0x110
[ 1525.860729][T18685]  ? __fget_files+0x2a/0x410
[ 1525.860752][T18685]  ? __fget_files+0x395/0x410
[ 1525.860772][T18685]  ? __fget_files+0x2a/0x410
[ 1525.860809][T18685]  ksys_read+0x18f/0x2b0
[ 1525.860837][T18685]  ? __pfx_ksys_read+0x10/0x10
[ 1525.860863][T18685]  ? do_syscall_64+0x100/0x230
[ 1525.860896][T18685]  ? do_syscall_64+0xb6/0x230
[ 1525.860928][T18685]  do_syscall_64+0xf3/0x230
[ 1525.860957][T18685]  ? clear_bhb_loop+0x35/0x90
[ 1525.860988][T18685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.861015][T18685] RIP: 0033:0x7f0c5df8bb7c
[ 1525.861032][T18685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1525.861050][T18685] RSP: 002b:00007f0c5ee87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1525.861071][T18685] RAX: ffffffffffffffda RBX: 00007f0c5e1a6160 RCX: 00007f0c5df8bb7c
[ 1525.861086][T18685] RDX: 000000000000000f RSI: 00007f0c5ee870a0 RDI: 0000000000000007
[ 1525.861099][T18685] RBP: 00007f0c5ee87090 R08: 0000000000000000 R09: 0000000000000000
[ 1525.861111][T18685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1525.861123][T18685] R13: 0000000000000000 R14: 00007f0c5e1a6160 R15: 00007ffd22459188
[ 1525.861152][T18685]  </TASK>
[ 1526.472571][T18689] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3378'.
[ 1526.489202][T18689] overlayfs: missing 'lowerdir'
[ 1528.263889][   T10] usb 4-1: new low-speed USB device number 90 using dummy_hcd
[ 1528.519029][ T5876] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1528.551856][T18690] netlink: 'syz.4.3379': attribute type 1 has an invalid length.
[ 1528.559735][T18690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3379'.
[ 1528.583157][T18699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1528.589738][T18699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1528.601589][T18699] vhci_hcd vhci_hcd.0: Device attached
[ 1528.633702][T18700] vhci_hcd: connection closed
[ 1528.639851][ T6002] vhci_hcd: stop threads
[ 1528.641802][   T92] usb 7-1: USB disconnect, device number 63
[ 1528.670988][ T6002] vhci_hcd: release socket
[ 1528.675463][ T6002] vhci_hcd: disconnect device
[ 1528.680389][   T10] usb 4-1: device descriptor read/64, error -71
[ 1529.140208][   T10] usb 4-1: new low-speed USB device number 91 using dummy_hcd
[ 1530.573952][T18728] sctp: [Deprecated]: syz.3.3386 (pid 18728) Use of int in max_burst socket option.
[ 1530.573952][T18728] Use struct sctp_assoc_value instead
[ 1530.610506][T18728] netlink: 'syz.3.3386': attribute type 10 has an invalid length.
[ 1530.622557][T18728] veth0_vlan: left promiscuous mode
[ 1530.632906][T18728] veth0_vlan: entered promiscuous mode
[ 1530.641780][T18728] team0: Device veth0_vlan failed to register rx_handler
[ 1531.496671][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1531.511575][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 1532.310532][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1533.068039][T18754] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3392'.
[ 1535.372034][T18760] overlayfs: missing 'lowerdir'
[ 1537.400542][T18768] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3395'.
[ 1537.851837][ T5930] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1538.087183][   T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1538.910272][ T5930] usb 5-1: Using ep0 maxpacket: 16
[ 1539.027796][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1539.037972][ T5930] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1539.049207][ T5930] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1539.114994][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1539.145076][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1539.301030][T18781] netlink: 'syz.5.3399': attribute type 3 has an invalid length.
[ 1539.535219][ T5930] usb 5-1: Product: syz
[ 1539.552405][ T5930] usb 5-1: Manufacturer: syz
[ 1539.557051][ T5930] usb 5-1: SerialNumber: syz
[ 1540.886673][ T5930] usb 5-1: can't set config #1, error -71
[ 1540.947729][ T5930] usb 5-1: USB disconnect, device number 73
[ 1541.111135][T18801] sctp: [Deprecated]: syz.6.3402 (pid 18801) Use of int in max_burst socket option.
[ 1541.111135][T18801] Use struct sctp_assoc_value instead
[ 1541.210009][T18801] netlink: 'syz.6.3402': attribute type 10 has an invalid length.
[ 1541.303912][T18801] veth0_vlan: left promiscuous mode
[ 1541.487505][T18801] veth0_vlan: entered promiscuous mode
[ 1541.494678][T18801] team0: Device veth0_vlan failed to register rx_handler
[ 1544.562306][T18823] netlink: 'syz.4.3407': attribute type 3 has an invalid length.
[ 1545.168434][T18826] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3408'.
[ 1545.255525][T18828] usb usb9: usbfs: process 18828 (syz.6.3409) did not claim interface 0 before use
[ 1545.408319][T18825] overlayfs: missing 'lowerdir'
[ 1545.629966][ T5905] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1545.933996][ T5905] usb 6-1: Using ep0 maxpacket: 8
[ 1545.954064][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[ 1545.963951][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.070670][ T5905] usb 6-1: Product: syz
[ 1546.899317][ T5905] usb 6-1: Manufacturer: syz
[ 1546.954073][ T5905] usb 6-1: SerialNumber: syz
[ 1546.992798][ T5905] usb 6-1: config 0 descriptor??
[ 1547.110776][ T5905] usb 6-1: can't set config #0, error -71
[ 1547.146101][ T5905] usb 6-1: USB disconnect, device number 99
[ 1548.253830][ T5930] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1548.521676][T18847] netlink: 'syz.1.3414': attribute type 3 has an invalid length.
[ 1548.531388][ T5930] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1548.898969][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1549.387051][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.578362][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1549.596983][ T5930] usb 7-1: config 0 descriptor??
[ 1549.936564][ T5930] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1550.197686][T18854] netlink: 'syz.5.3417': attribute type 9 has an invalid length.
[ 1550.220889][T18854] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3417'.
[ 1551.867284][   T47] usb 2-1: new low-speed USB device number 92 using dummy_hcd
[ 1552.979218][   T47] usb 2-1: device descriptor read/64, error -71
[ 1553.203644][ T5930] usb 7-1: USB disconnect, device number 65
[ 1553.279364][   T47] usb 2-1: new low-speed USB device number 93 using dummy_hcd
[ 1553.303854][T18874] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3422'.
[ 1553.322003][T18874] overlayfs: missing 'lowerdir'
[ 1553.449883][   T47] usb 2-1: device descriptor read/64, error -71
[ 1553.782746][   T47] usb usb2-port1: attempt power cycle
[ 1556.729270][   T55] Bluetooth: hci5: unexpected event for opcode 0x0c23
[ 1556.740662][   T55] Bluetooth: hci5: ACL packet for unknown connection handle 7
[ 1557.240638][T18907] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[ 1557.247220][T18907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1557.256763][T18907] vhci_hcd vhci_hcd.0: Device attached
[ 1557.304597][T18902] netlink: 'syz.5.3431': attribute type 1 has an invalid length.
[ 1557.312615][T18902] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3431'.
[ 1557.732059][T18908] vhci_hcd: connection closed
[ 1557.732351][ T7475] vhci_hcd: stop threads
[ 1557.742224][ T7475] vhci_hcd: release socket
[ 1557.746703][ T7475] vhci_hcd: disconnect device
[ 1559.286858][ T5877] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1559.304265][T18925] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3436'.
[ 1559.319625][T18925] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1559.328602][T18925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1559.644957][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1559.701181][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.742263][ T5877] usb 4-1: config 0 descriptor??
[ 1559.771292][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1559.974561][T18933] overlayfs: failed to resolve './file1': -2
[ 1563.719170][ T5877] usb 4-1: USB disconnect, device number 92
[ 1564.045086][T18955] netlink: 'syz.5.3441': attribute type 3 has an invalid length.
[ 1568.901179][T18990] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[ 1568.907734][T18990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1568.916230][T18990] vhci_hcd vhci_hcd.0: Device attached
[ 1569.034618][T18990] netlink: 'syz.6.3448': attribute type 1 has an invalid length.
[ 1569.042713][T18990] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3448'.
[ 1569.196684][   T92] vhci_hcd: vhci_device speed not set
[ 1569.485374][   T92] usb 45-1: new full-speed USB device number 3 using vhci_hcd
[ 1570.595532][T18991] vhci_hcd: connection reset by peer
[ 1570.619158][ T5940] vhci_hcd: stop threads
[ 1570.662653][ T5940] vhci_hcd: release socket
[ 1570.667467][ T5940] vhci_hcd: disconnect device
[ 1570.775308][T19004] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.3452'.
[ 1571.215116][T19013] netlink: 'syz.5.3456': attribute type 3 has an invalid length.
[ 1574.303489][T19045] FAULT_INJECTION: forcing a failure.
[ 1574.303489][T19045] name failslab, interval 1, probability 0, space 0, times 0
[ 1574.388621][T19045] CPU: 1 UID: 0 PID: 19045 Comm: syz.3.3465 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1574.388653][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1574.388667][T19045] Call Trace:
[ 1574.388675][T19045]  <TASK>
[ 1574.388685][T19045]  dump_stack_lvl+0x241/0x360
[ 1574.388719][T19045]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1574.388740][T19045]  ? __pfx__printk+0x10/0x10
[ 1574.388774][T19045]  ? __kmalloc_noprof+0xb5/0x4c0
[ 1574.388798][T19045]  ? __pfx___might_resched+0x10/0x10
[ 1574.388831][T19045]  should_fail_ex+0x40a/0x550
[ 1574.388869][T19045]  should_failslab+0xac/0x100
[ 1574.388913][T19045]  __kmalloc_noprof+0xdd/0x4c0
[ 1574.388931][T19045]  ? __kmalloc_cache_noprof+0x243/0x390
[ 1574.388952][T19045]  ? alloc_pipe_info+0x1ff/0x4d0
[ 1574.388989][T19045]  alloc_pipe_info+0x1ff/0x4d0
[ 1574.389024][T19045]  splice_direct_to_actor+0xa9e/0xc80
[ 1574.389084][T19045]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1574.389115][T19045]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1574.389145][T19045]  ? __fget_files+0x2a/0x410
[ 1574.389166][T19045]  ? __pfx_lock_release+0x10/0x10
[ 1574.389198][T19045]  do_splice_direct+0x289/0x3e0
[ 1574.389232][T19045]  ? __pfx_do_splice_direct+0x10/0x10
[ 1574.389278][T19045]  ? __fget_files+0x2a/0x410
[ 1574.389300][T19045]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1574.389323][T19045]  ? bpf_lsm_file_permission+0x9/0x10
[ 1574.389352][T19045]  ? rw_verify_area+0x243/0x630
[ 1574.389381][T19045]  do_sendfile+0x564/0x8a0
[ 1574.389410][T19045]  ? __pfx_do_sendfile+0x10/0x10
[ 1574.389432][T19045]  ? __fget_files+0x2a/0x410
[ 1574.389462][T19045]  __se_sys_sendfile64+0x17c/0x1e0
[ 1574.389484][T19045]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1574.389505][T19045]  ? do_syscall_64+0x100/0x230
[ 1574.389541][T19045]  ? do_syscall_64+0xb6/0x230
[ 1574.389573][T19045]  do_syscall_64+0xf3/0x230
[ 1574.389602][T19045]  ? clear_bhb_loop+0x35/0x90
[ 1574.389634][T19045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1574.389662][T19045] RIP: 0033:0x7ff87a98d169
[ 1574.389680][T19045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1574.389699][T19045] RSP: 002b:00007ff87b76e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1574.389721][T19045] RAX: ffffffffffffffda RBX: 00007ff87aba5fa0 RCX: 00007ff87a98d169
[ 1574.389736][T19045] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008
[ 1574.389748][T19045] RBP: 00007ff87b76e090 R08: 0000000000000000 R09: 0000000000000000
[ 1574.389761][T19045] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001
[ 1574.389774][T19045] R13: 0000000000000000 R14: 00007ff87aba5fa0 R15: 00007fffc7bfbe78
[ 1574.389801][T19045]  </TASK>
[ 1574.870302][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1574.881017][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1574.931172][ T5905] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1575.013311][   T92] vhci_hcd: vhci_device speed not set
[ 1575.290329][ T5905] usb 5-1: Using ep0 maxpacket: 16
[ 1576.347711][ T5905] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1577.793323][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1577.817049][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1577.834750][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1577.870921][ T5905] usb 5-1: Product: syz
[ 1577.925632][ T5905] usb 5-1: Manufacturer: syz
[ 1577.930283][ T5905] usb 5-1: SerialNumber: syz
[ 1578.770532][T19076] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3473'.
[ 1578.857236][T19076] overlayfs: missing 'lowerdir'
[ 1579.118413][ T5905] usb 5-1: can't set config #1, error -71
[ 1579.207720][ T5905] usb 5-1: USB disconnect, device number 74
[ 1579.242884][T19085] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3474'.
[ 1579.309026][T19085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1579.318480][T19085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1581.489595][T19113] vlan2: entered promiscuous mode
[ 1581.504303][T19113] bond0: entered promiscuous mode
[ 1581.533814][T19113] bond_slave_0: entered promiscuous mode
[ 1581.552306][T19113] bond_slave_1: entered promiscuous mode
[ 1582.099356][T19123] sctp: [Deprecated]: syz.5.3488 (pid 19123) Use of int in max_burst socket option.
[ 1582.099356][T19123] Use struct sctp_assoc_value instead
[ 1582.190240][T19123] netlink: 'syz.5.3488': attribute type 10 has an invalid length.
[ 1582.243716][T19123] veth0_vlan: left promiscuous mode
[ 1582.282500][T19123] veth0_vlan: entered promiscuous mode
[ 1582.437714][T19123] team0: Device veth0_vlan failed to register rx_handler
[ 1585.799936][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1585.854552][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1586.356145][T19151] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3494'.
[ 1586.532383][T19157] FAULT_INJECTION: forcing a failure.
[ 1586.532383][T19157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1586.553986][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.5.3496 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1586.554012][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1586.554023][T19157] Call Trace:
[ 1586.554030][T19157]  <TASK>
[ 1586.554040][T19157]  dump_stack_lvl+0x241/0x360
[ 1586.554079][T19157]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1586.554093][T19157]  ? __pfx__printk+0x10/0x10
[ 1586.554117][T19157]  ? __pfx_lock_release+0x10/0x10
[ 1586.554144][T19157]  should_fail_ex+0x40a/0x550
[ 1586.554169][T19157]  _copy_from_iter+0x1df/0x1c40
[ 1586.554186][T19157]  ? __virt_addr_valid+0x183/0x530
[ 1586.554210][T19157]  ? __pfx_lock_release+0x10/0x10
[ 1586.554236][T19157]  ? __pfx__copy_from_iter+0x10/0x10
[ 1586.554253][T19157]  ? __virt_addr_valid+0x183/0x530
[ 1586.554274][T19157]  ? __virt_addr_valid+0x183/0x530
[ 1586.554293][T19157]  ? __virt_addr_valid+0x45f/0x530
[ 1586.554314][T19157]  ? __phys_addr_symbol+0x2f/0x70
[ 1586.554334][T19157]  ? __check_object_size+0x47a/0x730
[ 1586.554360][T19157]  kernfs_fop_write_iter+0x1a9/0x500
[ 1586.554394][T19157]  vfs_write+0xacf/0xd10
[ 1586.554416][T19157]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1586.554435][T19157]  ? __pfx_vfs_write+0x10/0x10
[ 1586.554451][T19157]  ? do_sys_openat2+0x17a/0x1d0
[ 1586.554468][T19157]  ? __fget_files+0x2a/0x410
[ 1586.554485][T19157]  ? __fget_files+0x2a/0x410
[ 1586.554505][T19157]  ksys_write+0x18f/0x2b0
[ 1586.554525][T19157]  ? __pfx_ksys_write+0x10/0x10
[ 1586.554544][T19157]  ? do_syscall_64+0x100/0x230
[ 1586.554568][T19157]  ? do_syscall_64+0xb6/0x230
[ 1586.554591][T19157]  do_syscall_64+0xf3/0x230
[ 1586.554612][T19157]  ? clear_bhb_loop+0x35/0x90
[ 1586.554634][T19157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.554654][T19157] RIP: 0033:0x7f230ff8d169
[ 1586.554666][T19157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1586.554685][T19157] RSP: 002b:00007f2310eb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1586.554700][T19157] RAX: ffffffffffffffda RBX: 00007f23101a5fa0 RCX: 00007f230ff8d169
[ 1586.554710][T19157] RDX: 0000000000000012 RSI: 0000400000000000 RDI: 0000000000000003
[ 1586.554720][T19157] RBP: 00007f2310eb8090 R08: 0000000000000000 R09: 0000000000000000
[ 1586.554728][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1586.554736][T19157] R13: 0000000000000000 R14: 00007f23101a5fa0 R15: 00007ffe976e8fa8
[ 1586.554756][T19157]  </TASK>
[ 1586.800838][ T5905] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1586.976990][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.989279][ T5905] usb 7-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c
[ 1586.998411][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.006445][ T5905] usb 7-1: Product: syz
[ 1587.010737][ T5905] usb 7-1: Manufacturer: syz
[ 1587.015365][ T5905] usb 7-1: SerialNumber: syz
[ 1587.023376][ T5905] usb 7-1: config 0 descriptor??
[ 1588.342500][T19168] FAULT_INJECTION: forcing a failure.
[ 1588.342500][T19168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1588.356043][T19168] CPU: 0 UID: 0 PID: 19168 Comm: syz.5.3500 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1588.356071][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1588.356084][T19168] Call Trace:
[ 1588.356093][T19168]  <TASK>
[ 1588.356102][T19168]  dump_stack_lvl+0x241/0x360
[ 1588.356133][T19168]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1588.356162][T19168]  ? __pfx__printk+0x10/0x10
[ 1588.356197][T19168]  ? __pfx_lock_release+0x10/0x10
[ 1588.356237][T19168]  should_fail_ex+0x40a/0x550
[ 1588.356274][T19168]  _copy_from_user+0x2d/0xb0
[ 1588.356303][T19168]  copy_msghdr_from_user+0xae/0x680
[ 1588.356342][T19168]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1588.356368][T19168]  ? __fget_files+0x2a/0x410
[ 1588.356395][T19168]  ? __fget_files+0x2a/0x410
[ 1588.356445][T19168]  __sys_sendmsg+0x209/0x350
[ 1588.356473][T19168]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1588.356524][T19168]  ? sb_end_write+0xdc/0x1c0
[ 1588.356559][T19168]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1588.356592][T19168]  ? do_syscall_64+0x100/0x230
[ 1588.356629][T19168]  ? do_syscall_64+0xb6/0x230
[ 1588.356663][T19168]  do_syscall_64+0xf3/0x230
[ 1588.356695][T19168]  ? clear_bhb_loop+0x35/0x90
[ 1588.356729][T19168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1588.356758][T19168] RIP: 0033:0x7f230ff8d169
[ 1588.356778][T19168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1588.356796][T19168] RSP: 002b:00007f2310e76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1588.356820][T19168] RAX: ffffffffffffffda RBX: 00007f23101a6160 RCX: 00007f230ff8d169
[ 1588.356836][T19168] RDX: 0000000000004000 RSI: 00004000000002c0 RDI: 0000000000000005
[ 1588.356851][T19168] RBP: 00007f2310e76090 R08: 0000000000000000 R09: 0000000000000000
[ 1588.356865][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1588.356878][T19168] R13: 0000000000000001 R14: 00007f23101a6160 R15: 00007ffe976e8fa8
[ 1588.356910][T19168]  </TASK>
[ 1588.906065][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3493'.
[ 1589.029364][T19172] sctp: [Deprecated]: syz.4.3501 (pid 19172) Use of int in max_burst socket option.
[ 1589.029364][T19172] Use struct sctp_assoc_value instead
[ 1589.378008][T19172] netlink: 'syz.4.3501': attribute type 10 has an invalid length.
[ 1589.412226][T19172] veth0_vlan: left promiscuous mode
[ 1589.433291][T19172] veth0_vlan: entered promiscuous mode
[ 1589.446218][T19172] team0: Device veth0_vlan failed to register rx_handler
[ 1590.243790][   T47] usb 7-1: USB disconnect, device number 66
[ 1590.742598][T19178] delete_channel: no stack
[ 1591.785704][T19205] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3510'.
[ 1591.822612][T19205] FAULT_INJECTION: forcing a failure.
[ 1591.822612][T19205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1591.849220][T19205] CPU: 1 UID: 0 PID: 19205 Comm: syz.1.3510 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1591.849249][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1591.849263][T19205] Call Trace:
[ 1591.849271][T19205]  <TASK>
[ 1591.849280][T19205]  dump_stack_lvl+0x241/0x360
[ 1591.849312][T19205]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1591.849334][T19205]  ? __pfx__printk+0x10/0x10
[ 1591.849373][T19205]  ? snprintf+0xda/0x120
[ 1591.849401][T19205]  should_fail_ex+0x40a/0x550
[ 1591.849439][T19205]  _copy_to_user+0x31/0xb0
[ 1591.849470][T19205]  simple_read_from_buffer+0xca/0x150
[ 1591.849509][T19205]  proc_fail_nth_read+0x1e9/0x250
[ 1591.849534][T19205]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1591.849559][T19205]  ? rw_verify_area+0x243/0x630
[ 1591.849586][T19205]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1591.849609][T19205]  vfs_read+0x1f8/0xb40
[ 1591.849641][T19205]  ? fdget_pos+0x254/0x320
[ 1591.849666][T19205]  ? __pfx___mutex_lock+0x10/0x10
[ 1591.849697][T19205]  ? __pfx_vfs_read+0x10/0x10
[ 1591.849728][T19205]  ? __fget_files+0x2a/0x410
[ 1591.849752][T19205]  ? __fget_files+0x395/0x410
[ 1591.849773][T19205]  ? __fget_files+0x2a/0x410
[ 1591.849811][T19205]  ksys_read+0x18f/0x2b0
[ 1591.849841][T19205]  ? __pfx_ksys_read+0x10/0x10
[ 1591.849869][T19205]  ? do_syscall_64+0x100/0x230
[ 1591.849903][T19205]  ? do_syscall_64+0xb6/0x230
[ 1591.849938][T19205]  do_syscall_64+0xf3/0x230
[ 1591.849969][T19205]  ? clear_bhb_loop+0x35/0x90
[ 1591.850001][T19205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1591.850029][T19205] RIP: 0033:0x7f2825f8bb7c
[ 1591.850048][T19205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1591.850066][T19205] RSP: 002b:00007f2826e40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1591.850088][T19205] RAX: ffffffffffffffda RBX: 00007f28261a5fa0 RCX: 00007f2825f8bb7c
[ 1591.850104][T19205] RDX: 000000000000000f RSI: 00007f2826e400a0 RDI: 0000000000000005
[ 1591.850117][T19205] RBP: 00007f2826e40090 R08: 0000000000000000 R09: 0000000000000000
[ 1591.850130][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1591.850142][T19205] R13: 0000000000000000 R14: 00007f28261a5fa0 R15: 00007ffe5f436248
[ 1591.850173][T19205]  </TASK>
[ 1592.419219][T19215] netlink: 'syz.6.3511': attribute type 1 has an invalid length.
[ 1592.427107][T19215] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3511'.
[ 1592.652722][T19213] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[ 1592.659295][T19213] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1592.668366][T19213] vhci_hcd vhci_hcd.0: Device attached
[ 1593.075739][T19214] vhci_hcd: connection closed
[ 1593.076217][   T13] vhci_hcd: stop threads
[ 1593.086336][   T13] vhci_hcd: release socket
[ 1593.091097][   T13] vhci_hcd: disconnect device
[ 1597.239246][T19260] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3523'.
[ 1597.411963][   T47] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1597.453665][   T26] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1597.570022][   T47] usb 7-1: device descriptor read/64, error -71
[ 1597.598314][T19269] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 1597.604901][T19269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1597.612774][T19269] vhci_hcd vhci_hcd.0: Device attached
[ 1597.644421][   T26] usb 2-1: Using ep0 maxpacket: 16
[ 1597.676576][T19269] netlink: 'syz.3.3524': attribute type 1 has an invalid length.
[ 1597.684381][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3524'.
[ 1597.696549][   T26] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1597.733089][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[ 1597.803735][   T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1597.815500][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1597.846055][ T2151] vhci_hcd: vhci_device speed not set
[ 1597.862605][   T47] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1597.878610][   T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1597.899259][   T26] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1597.908975][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.922893][   T26] usb 2-1: Product: syz
[ 1597.928560][   T26] usb 2-1: Manufacturer: syz
[ 1597.933519][ T2151] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[ 1597.945067][   T26] usb 2-1: SerialNumber: syz
[ 1597.966480][   T26] usb 2-1: config 0 descriptor??
[ 1597.973308][T19270] vhci_hcd: connection reset by peer
[ 1598.141560][   T47] usb 7-1: device descriptor read/64, error -71
[ 1598.239313][ T9885] vhci_hcd: stop threads
[ 1598.244528][ T9885] vhci_hcd: release socket
[ 1598.249672][ T9885] vhci_hcd: disconnect device
[ 1598.261258][T19257] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1598.293161][   T26] mcba_usb 2-1:0.0 can0: couldn't setup read URBs
[ 1598.305048][   T26] mcba_usb 2-1:0.0 can0: couldn't start device: -90
[ 1598.484217][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c23
[ 1598.492230][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 7
[ 1598.828507][   T26] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90
[ 1598.840429][   T47] usb usb7-port1: attempt power cycle
[ 1598.908237][   T26] usb 2-1: USB disconnect, device number 95
[ 1599.280115][   T47] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1599.343815][T19285] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[ 1599.346648][   T47] usb 7-1: device descriptor read/8, error -71
[ 1599.350362][T19285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1599.371027][T19285] vhci_hcd vhci_hcd.0: Device attached
[ 1599.542480][T19285] netlink: 'syz.5.3529': attribute type 1 has an invalid length.
[ 1599.550536][T19285] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3529'.
[ 1599.836049][T19134] vhci_hcd: vhci_device speed not set
[ 1600.013159][T19134] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[ 1600.036818][T19286] vhci_hcd: connection closed
[ 1600.047420][   T53] vhci_hcd: stop threads
[ 1600.167748][   T47] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1600.191124][   T47] usb 7-1: device descriptor read/8, error -71
[ 1600.306705][   T47] usb usb7-port1: unable to enumerate USB device
[ 1600.805004][   T53] vhci_hcd: release socket
[ 1600.805135][   T53] vhci_hcd: disconnect device
[ 1600.890651][T19296] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3531'.
[ 1600.916056][T19296] overlayfs: missing 'workdir'
[ 1603.397410][ T2151] vhci_hcd: vhci_device speed not set
[ 1603.539212][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1603.547257][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 1605.610062][T19327] netlink: 'syz.1.3541': attribute type 21 has an invalid length.
[ 1605.617926][T19327] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3541'.
[ 1605.627177][T19327] netlink: 'syz.1.3541': attribute type 5 has an invalid length.
[ 1605.634967][T19327] netlink: 'syz.1.3541': attribute type 6 has an invalid length.
[ 1605.642736][T19327] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3541'.
[ 1606.279979][T19331] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3540'.
[ 1606.292113][T19331] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1606.300926][T19331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1606.317572][T19134] vhci_hcd: vhci_device speed not set
[ 1607.259737][T19342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1607.501850][T19344] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3544'.
[ 1609.498905][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1609.505872][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 1609.647851][T19363] netlink: 'syz.1.3552': attribute type 3 has an invalid length.
[ 1610.228248][T19366] x_tables: duplicate underflow at hook 2
[ 1610.344099][T19371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1610.351562][T19371] IPv6: NLM_F_CREATE should be set when creating new route
[ 1610.359182][T19371] IPv6: NLM_F_CREATE should be set when creating new route
[ 1610.366623][T19371] IPv6: NLM_F_CREATE should be set when creating new route
[ 1611.683700][T19381] futex_wake_op: syz.4.3559 tries to shift op by -1; fix this program
[ 1611.719822][T19380] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1611.768844][T19381] overlay: Unknown parameter 'obj_role'
[ 1612.963502][T19387] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3561'.
[ 1613.157218][   T55] Bluetooth: hci0: unexpected event for opcode 0x0c23
[ 1613.164464][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 7
[ 1613.752663][T19399] netlink: 1112 bytes leftover after parsing attributes in process `syz.1.3565'.
[ 1613.787362][ T2151] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1614.510468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1614.525256][ T2151] usb 5-1: Using ep0 maxpacket: 8
[ 1614.557342][ T2151] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1614.566021][ T2151] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[ 1614.610618][ T2151] usb 5-1: config 179 has no interface number 0
[ 1614.619523][ T2151] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[ 1614.668484][ T2151] usb 5-1: config 179 interface 65 has no altsetting 0
[ 1614.714960][ T2151] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1614.733227][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.095122][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3568'.
[ 1615.110339][T19408] dummy0: entered promiscuous mode
[ 1615.140811][T19408] macvtap0: entered promiscuous mode
[ 1615.180432][T19408] macvtap0: entered allmulticast mode
[ 1615.199220][   T10] usb 5-1: USB disconnect, device number 75
[ 1615.217124][T19408] dummy0: entered allmulticast mode
[ 1615.307680][T19412] dummy0: left allmulticast mode
[ 1615.336437][T19412] dummy0: left promiscuous mode
[ 1615.367322][T19412] macvtap0: left promiscuous mode
[ 1615.407928][T19412] macvtap0: left allmulticast mode
[ 1616.908527][T19423] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1619.806108][T19440] ceph: No mds server is up or the cluster is laggy
[ 1619.931173][T19434] ceph: No mds server is up or the cluster is laggy
[ 1622.489511][T19454] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3577'.
[ 1622.501703][T19454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1622.510456][T19454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1622.543381][T19463] input: syz0 as /devices/virtual/input/input25
[ 1623.994919][T19472] netlink: 'syz.6.3582': attribute type 3 has an invalid length.
[ 1624.046468][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3582'.
[ 1626.540595][T19483] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3588'.
[ 1627.467838][T19499] netlink: 'syz.3.3593': attribute type 3 has an invalid length.
[ 1627.970835][T19500] sctp: [Deprecated]: syz.6.3592 (pid 19500) Use of int in max_burst socket option.
[ 1627.970835][T19500] Use struct sctp_assoc_value instead
[ 1628.046620][T19500] netlink: 'syz.6.3592': attribute type 10 has an invalid length.
[ 1628.164363][T19505] delete_channel: no stack
[ 1628.174389][T19505] delete_channel: no stack
[ 1628.286822][T19500] veth0_vlan: left promiscuous mode
[ 1628.293079][T19500] veth0_vlan: entered promiscuous mode
[ 1628.341022][T19500] team0: Device veth0_vlan failed to register rx_handler
[ 1632.250335][T19538] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3604'.
[ 1634.066467][T19559] netlink: 'syz.1.3610': attribute type 3 has an invalid length.
[ 1635.120494][T19570] netlink: 'syz.5.3612': attribute type 3 has an invalid length.
[ 1635.648941][T19572] netlink: 'syz.1.3613': attribute type 1 has an invalid length.
[ 1635.720976][T19572] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1637.799578][ T5905] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1638.623573][ T5905] usb 6-1: Using ep0 maxpacket: 16
[ 1638.640774][ T5905] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1638.663638][ T5905] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1638.716123][ T5905] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1638.814173][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.856666][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1638.891195][ T5905] usb 6-1: config 0 has no interface number 0
[ 1638.909123][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1639.013161][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1639.060770][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1639.083743][ T5905] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1639.133758][ T5905] usb 6-1: config 0 interface 125 has no altsetting 0
[ 1639.150293][ T5905] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1639.172235][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1639.194302][ T5905] usb 6-1: Product: syz
[ 1639.203759][ T5905] usb 6-1: Manufacturer: syz
[ 1639.227644][ T5905] usb 6-1: SerialNumber: syz
[ 1639.251987][ T5905] usb 6-1: config 0 descriptor??
[ 1640.963610][   T55] Bluetooth: hci5: unexpected event for opcode 0x0c23
[ 1640.970811][   T55] Bluetooth: hci5: ACL packet for unknown connection handle 7
[ 1641.544353][T19622] delete_channel: no stack
[ 1641.828235][T19622] delete_channel: no stack
[ 1641.835019][T19623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1641.864656][T19623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1644.150444][   T10] usb 6-1: USB disconnect, device number 100
[ 1645.880447][ T5817] usb 4-1: new low-speed USB device number 93 using dummy_hcd
[ 1646.238168][T19657] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1646.875669][T19659] netlink: 'syz.1.3638': attribute type 3 has an invalid length.
[ 1646.928298][ T5817] usb 4-1: device descriptor read/64, error -71
[ 1647.321830][T19666] delete_channel: no stack
[ 1647.614415][T19666] delete_channel: no stack
[ 1647.730151][ T5817] usb 4-1: new low-speed USB device number 94 using dummy_hcd
[ 1649.143179][   T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1649.365538][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1649.373784][   T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1649.392103][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1649.419480][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1649.445820][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1649.472310][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1649.500145][   T10] usb 2-1: config 0 has no interface number 0
[ 1649.515211][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1649.536613][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1649.558298][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1649.589753][   T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1649.618957][   T10] usb 2-1: config 0 interface 125 has no altsetting 0
[ 1649.636602][   T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1649.646548][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.659679][   T10] usb 2-1: Product: syz
[ 1649.838948][   T10] usb 2-1: Manufacturer: syz
[ 1649.843653][   T10] usb 2-1: SerialNumber: syz
[ 1649.862383][   T10] usb 2-1: config 0 descriptor??
[ 1650.258122][T19712] delete_channel: no stack
[ 1650.574901][T19712] delete_channel: no stack
[ 1651.086380][   T55] Bluetooth: hci3: unexpected event for opcode 0x0c23
[ 1651.100245][   T55] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 1651.222614][T19719] netlink: 'syz.5.3652': attribute type 3 has an invalid length.
[ 1652.406081][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'.
[ 1652.914047][ T5817] usb 2-1: USB disconnect, device number 96
[ 1653.691831][T19740] netlink: 'syz.4.3658': attribute type 9 has an invalid length.
[ 1653.918000][T19740] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3658'.
[ 1653.956789][T19744] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3659'.
[ 1654.198094][T19746] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1655.389622][T19766] delete_channel: no stack
[ 1655.629424][T19770] netlink: 'syz.3.3665': attribute type 3 has an invalid length.
[ 1656.081182][T19766] delete_channel: no stack
[ 1656.464973][T19775] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[ 1656.471559][T19775] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1656.481371][T19775] vhci_hcd vhci_hcd.0: Device attached
[ 1656.610675][T19775] netlink: 'syz.1.3666': attribute type 1 has an invalid length.
[ 1656.618862][T19775] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3666'.
[ 1656.796571][   T10] vhci_hcd: vhci_device speed not set
[ 1657.041586][   T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[ 1657.068890][T19780] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3667'.
[ 1657.758017][T19776] vhci_hcd: connection reset by peer
[ 1658.328018][   T13] vhci_hcd: stop threads
[ 1658.332567][   T13] vhci_hcd: release socket
[ 1658.342620][   T13] vhci_hcd: disconnect device
[ 1658.409278][T19790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3672'.
[ 1658.797925][T19792] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1659.213747][T19800] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3676'.
[ 1659.638609][ T6002] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1659.920456][T19803] delete_channel: no stack
[ 1659.984371][ T6002] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.103285][ T6002] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.121823][T12035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1660.132843][T12035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1660.146776][T12035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1660.158988][T12035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1660.167171][T12035] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1660.175162][T12035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1660.328345][ T6002] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.639026][T19803] delete_channel: no stack
[ 1660.704600][T19821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3680'.
[ 1660.935708][T19821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1660.952628][T19821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1661.396116][ T6002] bridge_slave_1: left allmulticast mode
[ 1661.401834][ T6002] bridge_slave_1: left promiscuous mode
[ 1661.568490][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1661.605477][ T6002] bridge_slave_0: left allmulticast mode
[ 1661.611635][ T6002] bridge_slave_0: left promiscuous mode
[ 1661.625168][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1662.405891][   T55] Bluetooth: hci2: command tx timeout
[ 1662.854849][T19838] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1663.038934][   T10] vhci_hcd: vhci_device speed not set
[ 1663.339948][T19850] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1664.180250][   T26] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1664.688619][   T55] Bluetooth: hci2: command tx timeout
[ 1664.867047][   T26] usb 4-1: Using ep0 maxpacket: 32
[ 1665.083818][   T26] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[ 1665.127975][T19857] delete_channel: no stack
[ 1665.164979][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.645388][   T26] usb 4-1: config 0 descriptor??
[ 1665.663733][   T55] Bluetooth: hci5: unexpected event for opcode 0x0c23
[ 1665.681024][   T26] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[ 1665.688670][   T26] gspca_mr97310a: reg write [21] error -22
[ 1665.697083][   T26] mr97310a 4-1:0.0: probe with driver mr97310a failed with error -22
[ 1665.775489][T19857] delete_channel: no stack
[ 1665.789082][   T55] Bluetooth: hci5: ACL packet for unknown connection handle 7
[ 1665.906259][   T26] usb 4-1: USB disconnect, device number 95
[ 1666.367555][T18177] usb 2-1: new full-speed USB device number 97 using dummy_hcd
[ 1666.845142][   T55] Bluetooth: hci2: command tx timeout
[ 1667.468307][T18177] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[ 1667.619392][T18177] usb 2-1: config 0 has no interface number 0
[ 1667.666048][T18177] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[ 1667.706995][T18177] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1667.732158][T18177] usb 2-1: config 0 interface 113 has no altsetting 0
[ 1667.767482][T18177] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[ 1667.781497][T18177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.790592][T18177] usb 2-1: Product: syz
[ 1667.799611][T18177] usb 2-1: Manufacturer: syz
[ 1667.804250][T18177] usb 2-1: SerialNumber: syz
[ 1668.134413][T18177] usb 2-1: config 0 descriptor??
[ 1668.145001][T19875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3697'.
[ 1668.356073][    C0] usb 2-1: NFC: Urb failure (status -71)
[ 1668.375633][T18177] usb 2-1: NFC: Unable to get FW version
[ 1668.382419][T18177] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90
[ 1668.758490][T19877] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1668.998450][T19887] netlink: 'syz.6.3702': attribute type 9 has an invalid length.
[ 1669.010747][T19887] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3702'.
[ 1669.069004][   T55] Bluetooth: hci2: command tx timeout
[ 1670.104350][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1670.116522][ T6002] bond0 (unregistering): Released all slaves
[ 1670.136704][T19804] chnl_net:caif_netlink_parms(): no params data found
[ 1670.153639][ T5877] infiniband syz0: ib_query_port failed (-19)
[ 1670.206639][ T5877] usb 2-1: USB disconnect, device number 97
[ 1670.846957][T19898] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3703'.
[ 1671.061825][ T6002] tipc: Disabling bearer <udp:syz2>
[ 1671.070099][ T6002] tipc: Left network mode
[ 1671.667783][ T6002] IPVS: stopping master sync thread 13443 ...
[ 1671.735226][T19804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1671.766097][T19804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1672.053426][T19804] bridge_slave_0: entered allmulticast mode
[ 1672.079247][T19804] bridge_slave_0: entered promiscuous mode
[ 1672.296475][T19912] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3706'.
[ 1672.512026][T19913] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1672.521458][T19913] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1672.696764][T19804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1672.919688][T19804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1672.955777][T19804] bridge_slave_1: entered allmulticast mode
[ 1672.967528][T19917] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1673.032282][T19804] bridge_slave_1: entered promiscuous mode
[ 1673.232410][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3710'.
[ 1673.901704][T19804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1673.964066][T19929] netlink: 'syz.3.3713': attribute type 9 has an invalid length.
[ 1673.974892][T19929] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3713'.
[ 1674.020788][T19804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1674.048701][T19930] netlink: 'syz.4.3711': attribute type 3 has an invalid length.
[ 1674.836294][T19804] team0: Port device team_slave_0 added
[ 1675.913816][T19804] team0: Port device team_slave_1 added
[ 1676.973307][T19804] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1676.998104][T19804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1677.036036][T19804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1677.201517][T19804] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1678.018037][T19804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1678.115512][T19804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1678.513195][T19804] hsr_slave_0: entered promiscuous mode
[ 1678.692989][T19804] hsr_slave_1: entered promiscuous mode
[ 1678.713735][T19962] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1679.820280][T19973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3722'.
[ 1679.957670][T19975] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3723'.
[ 1680.026551][T19976] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1680.035587][T19976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1680.390624][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1681.231197][T19986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[ 1681.237863][T19986] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1681.238557][T19992] netlink: 'syz.1.3726': attribute type 1 has an invalid length.
[ 1681.254183][T19992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3726'.
[ 1681.527324][T19986] vhci_hcd vhci_hcd.0: Device attached
[ 1681.534894][T19996] netlink: 'syz.3.3727': attribute type 9 has an invalid length.
[ 1681.542651][T19996] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3727'.
[ 1681.565046][T19988] vhci_hcd: connection closed
[ 1681.804717][   T13] vhci_hcd: stop threads
[ 1681.833091][   T13] vhci_hcd: release socket
[ 1682.629679][   T13] vhci_hcd: disconnect device
[ 1682.634719][T18963] vhci_hcd: vhci_device speed not set
[ 1682.930738][T20004] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1683.763320][T20007] netlink: 'syz.3.3731': attribute type 3 has an invalid length.
[ 1685.166602][T20022] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3735'.
[ 1685.247031][T20023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1685.256532][T20023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1685.427474][T19804] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1685.822100][T19804] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1685.945022][T19804] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1685.994798][T19804] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1686.226564][T19804] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1686.415705][T19804] 8021q: adding VLAN 0 to HW filter on device team0
[ 1687.628202][T20044] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1688.436418][T20047] netlink: 'syz.6.3742': attribute type 3 has an invalid length.
[ 1689.863021][T20056] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1690.231451][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1690.238603][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1690.358543][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1690.365792][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1691.540689][   T31] audit: type=1326 audit(1741995003.003:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1691.725432][T20076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3750'.
[ 1691.791982][   T31] audit: type=1326 audit(1741995003.003:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1691.819790][T20083] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1691.830507][T20083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1691.896103][   T31] audit: type=1326 audit(1741995003.003:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1692.063953][   T31] audit: type=1326 audit(1741995003.012:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.163915][   T31] audit: type=1326 audit(1741995003.031:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.185491][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1693.344325][   T31] audit: type=1326 audit(1741995003.059:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.410544][T20088] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1693.417129][T20088] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1693.427070][T20088] vhci_hcd vhci_hcd.0: Device attached
[ 1693.460758][   T31] audit: type=1326 audit(1741995003.077:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.582754][T20088] netlink: 'syz.4.3752': attribute type 1 has an invalid length.
[ 1693.590524][T20088] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3752'.
[ 1693.604932][   T31] audit: type=1326 audit(1741995003.096:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.653469][T19804] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1693.678238][   T26] vhci_hcd: vhci_device speed not set
[ 1693.711671][   T31] audit: type=1326 audit(1741995003.105:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1693.755840][   T26] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[ 1693.758131][T20100] netlink: 'syz.1.3755': attribute type 3 has an invalid length.
[ 1694.218733][   T31] audit: type=1326 audit(1741995003.124:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89e418d169 code=0x7ffc0000
[ 1694.458760][T20103] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1694.820640][T20090] vhci_hcd: connection reset by peer
[ 1694.842621][   T13] vhci_hcd: stop threads
[ 1694.856374][   T13] vhci_hcd: release socket
[ 1694.871875][   T13] vhci_hcd: disconnect device
[ 1694.918562][ T5877] usb 4-1: new low-speed USB device number 96 using dummy_hcd
[ 1695.067988][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1695.083432][T19804] veth0_vlan: entered promiscuous mode
[ 1695.227082][T19804] veth1_vlan: entered promiscuous mode
[ 1695.295541][T20117] bond0: option fail_over_mac: unable to set because the bond device has slaves
[ 1695.349547][ T5877] usb 4-1: new low-speed USB device number 97 using dummy_hcd
[ 1695.487949][T19804] veth0_macvtap: entered promiscuous mode
[ 1695.500014][T19804] veth1_macvtap: entered promiscuous mode
[ 1695.527999][ T5877] usb 4-1: device descriptor read/64, error -71
[ 1695.536581][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1695.554003][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.576458][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1695.606084][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1695.616792][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1696.117382][ T5877] usb usb4-port1: attempt power cycle
[ 1696.155292][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1696.161400][T20125] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3760'.
[ 1696.528528][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1696.543419][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1696.655693][T19804] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1696.789708][ T6002] hsr_slave_0: left promiscuous mode
[ 1696.804060][ T6002] hsr_slave_1: left promiscuous mode
[ 1696.989677][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1696.998127][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1697.009019][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1697.016912][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1697.064919][ T6002] veth1_macvtap: left promiscuous mode
[ 1697.088873][ T6002] veth0_macvtap: left promiscuous mode
[ 1697.095233][ T6002] veth1_vlan: left promiscuous mode
[ 1697.777012][ T5930] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1698.072531][ T5930] usb 5-1: Using ep0 maxpacket: 16
[ 1698.805143][ T6002] team0 (unregistering): Port device team_slave_1 removed
[ 1698.860938][ T6002] team0 (unregistering): Port device team_slave_0 removed
[ 1699.274898][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1699.284153][ T5930] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1699.293227][ T5930] usb 5-1: can't read configurations, error -71
[ 1699.344211][   T26] vhci_hcd: vhci_device speed not set
[ 1699.688577][T20121] netlink: 'syz.1.3759': attribute type 3 has an invalid length.
[ 1699.729971][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1699.753803][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1699.804015][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1699.825194][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1699.837590][T19804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1699.856839][T19804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1699.897059][T19804] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1700.305314][T19804] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.353987][T19804] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.381285][T19804] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.396946][T19804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.196734][T20155] netlink: 'syz.1.3766': attribute type 3 has an invalid length.
[ 1701.228229][T20160] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1701.448186][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'.
[ 1701.751737][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.790366][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1702.125080][   T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1702.179731][ T7475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1702.394195][ T7475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1702.669037][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1702.686897][   T10] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[ 1702.700755][   T10] usb 4-1: config 252 has no interface number 0
[ 1702.724067][   T10] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1702.804518][   T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 1702.835738][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.868053][   T10] usb 4-1: Product: syz
[ 1702.904216][   T10] usb 4-1: Manufacturer: syz
[ 1702.908890][   T10] usb 4-1: SerialNumber: syz
[ 1703.861554][T20187] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3774'.
[ 1704.422263][ T5876] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1704.437861][   T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1704.467537][T20189] netlink: 'syz.5.3775': attribute type 3 has an invalid length.
[ 1704.476967][   T13] usb 4-1: Failed to submit usb control message: -71
[ 1704.484290][   T13] usb 4-1: unable to send the bmi data to the device: -71
[ 1704.645464][   T13] usb 4-1: unable to get target info from device
[ 1704.652165][   T10] usb 4-1: USB disconnect, device number 99
[ 1704.876492][   T13] usb 4-1: could not get target info (-71)
[ 1704.900534][   T13] usb 4-1: could not probe fw (-71)
[ 1704.935473][ T5876] usb 7-1: Using ep0 maxpacket: 16
[ 1705.078707][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'.
[ 1705.449795][T20204] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1705.629194][T20203] openvswitch: netlink: EtherType 50a is less than min 600
[ 1706.347609][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1706.370165][ T5876] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1706.396817][ T5876] usb 7-1: can't read configurations, error -71
[ 1706.410720][   T10] usb 6-1: new low-speed USB device number 101 using dummy_hcd
[ 1706.456533][T20213] x_tables: unsorted underflow at hook 1
[ 1706.476831][T20213] SET target dimension over the limit!
[ 1706.522432][T20218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'.
[ 1706.581756][   T10] usb 6-1: Invalid ep0 maxpacket: 32
[ 1706.731379][   T10] usb 6-1: new low-speed USB device number 102 using dummy_hcd
[ 1706.910850][T20229] netlink: 'syz.6.3787': attribute type 3 has an invalid length.
[ 1706.995576][   T10] usb 6-1: Invalid ep0 maxpacket: 32
[ 1707.030726][   T10] usb usb6-port1: attempt power cycle
[ 1707.429945][   T10] usb 6-1: new low-speed USB device number 103 using dummy_hcd
[ 1707.581285][   T55] Bluetooth: hci0: unexpected event for opcode 0x0c23
[ 1707.588622][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 7
[ 1707.645199][   T10] usb 6-1: Invalid ep0 maxpacket: 32
[ 1707.933175][   T10] usb 6-1: new low-speed USB device number 104 using dummy_hcd
[ 1708.089570][   T10] usb 6-1: Invalid ep0 maxpacket: 32
[ 1708.095365][   T10] usb usb6-port1: unable to enumerate USB device
[ 1708.382969][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3791'.
[ 1708.411965][T20242] netlink: 'syz.1.3790': attribute type 3 has an invalid length.
[ 1708.911438][T20246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1709.807042][T20255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3794'.
[ 1710.686909][   T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1710.806261][T20260] fuse: Bad value for 'rootmode'
[ 1710.847543][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1711.082585][   T26] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1711.307151][   T26] usb 6-1: Using ep0 maxpacket: 16
[ 1711.319911][   T26] usb 6-1: config 0 has an invalid interface number: 25 but max is 0
[ 1711.341289][   T26] usb 6-1: config 0 has no interface number 0
[ 1711.354470][   T26] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12
[ 1711.371956][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1711.388252][   T26] usb 6-1: Product: syz
[ 1711.397205][   T26] usb 6-1: Manufacturer: syz
[ 1711.408104][   T26] usb 6-1: SerialNumber: syz
[ 1711.418168][   T26] usb 6-1: config 0 descriptor??
[ 1711.432183][   T26] mct_u232 6-1:0.25: MCT U232 converter detected
[ 1711.441077][   T26] mct_u232 ttyUSB0: expected endpoint missing
[ 1711.489424][T18963] usb 7-1: new low-speed USB device number 73 using dummy_hcd
[ 1711.566502][T20271] netlink: 'syz.4.3800': attribute type 3 has an invalid length.
[ 1712.053096][   T26] usb 6-1: USB disconnect, device number 105
[ 1712.100108][   T26] mct_u232 6-1:0.25: device disconnected
[ 1712.183729][T18963] usb 7-1: device descriptor read/64, error -71
[ 1712.440269][T18963] usb 7-1: new low-speed USB device number 74 using dummy_hcd
[ 1712.692517][T20281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1712.793299][T18963] usb 7-1: device descriptor read/64, error -71
[ 1712.934445][T18963] usb usb7-port1: attempt power cycle
[ 1712.944446][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1712.972624][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1712.992592][   T10] usb 4-1: can't read configurations, error -71
[ 1713.512904][T18963] usb 7-1: new low-speed USB device number 75 using dummy_hcd
[ 1713.657385][T18963] usb 7-1: device descriptor read/8, error -71
[ 1714.942136][T18963] usb 7-1: new low-speed USB device number 76 using dummy_hcd
[ 1715.401155][T18963] usb 7-1: device descriptor read/8, error -71
[ 1715.534002][T18963] usb usb7-port1: unable to enumerate USB device
[ 1716.082031][T20319] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3816'.
[ 1716.432452][T20327] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1716.578875][T20325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3817'.
[ 1717.779517][ T5905] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1718.149363][ T5905] usb 2-1: Using ep0 maxpacket: 16
[ 1718.514739][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1718.611214][ T5905] usb 2-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32
[ 1718.726185][T20339] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3821'.
[ 1718.778798][T20339] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1718.788091][T20339] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1718.942813][ T5905] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1719.175402][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1719.184893][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.251401][ T5905] usb 2-1: Product: syz
[ 1719.275943][ T5905] usb 2-1: Manufacturer: syz
[ 1719.294145][ T5905] usb 2-1: SerialNumber: syz
[ 1719.373445][ T5905] usb 2-1: can't set config #1, error -71
[ 1719.404945][ T5905] usb 2-1: USB disconnect, device number 98
[ 1719.773929][ T5930] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1719.984585][ T5930] usb 4-1: device descriptor read/64, error -71
[ 1719.991058][T18963] usb 7-1: new low-speed USB device number 77 using dummy_hcd
[ 1720.158851][T18963] usb 7-1: device descriptor read/64, error -71
[ 1720.265753][ T5930] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1720.436881][T18963] usb 7-1: new low-speed USB device number 78 using dummy_hcd
[ 1720.447484][ T5930] usb 4-1: device descriptor read/64, error -71
[ 1720.567280][ T5930] usb usb4-port1: attempt power cycle
[ 1720.607894][T18963] usb 7-1: device descriptor read/64, error -71
[ 1720.748926][T18963] usb usb7-port1: attempt power cycle
[ 1720.960584][ T5930] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1721.018729][ T5930] usb 4-1: device descriptor read/8, error -71
[ 1721.142368][T18963] usb 7-1: new low-speed USB device number 79 using dummy_hcd
[ 1721.171459][T18963] usb 7-1: device descriptor read/8, error -71
[ 1721.302693][ T5930] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1721.348628][ T5930] usb 4-1: device descriptor read/8, error -71
[ 1721.473830][T18963] usb 7-1: new low-speed USB device number 80 using dummy_hcd
[ 1721.496749][ T5930] usb usb4-port1: unable to enumerate USB device
[ 1721.529083][T18963] usb 7-1: device descriptor read/8, error -71
[ 1721.666364][T18963] usb usb7-port1: unable to enumerate USB device
[ 1722.306789][T20367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1723.164013][T20378] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3833'.
[ 1723.873217][T20381] FAULT_INJECTION: forcing a failure.
[ 1723.873217][T20381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1723.891087][ T5876] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1723.921868][T20381] CPU: 1 UID: 0 PID: 20381 Comm: syz.5.3834 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1723.921893][T20381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1723.921905][T20381] Call Trace:
[ 1723.921912][T20381]  <TASK>
[ 1723.921920][T20381]  dump_stack_lvl+0x241/0x360
[ 1723.921953][T20381]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1723.921971][T20381]  ? __pfx__printk+0x10/0x10
[ 1723.922015][T20381]  should_fail_ex+0x40a/0x550
[ 1723.922048][T20381]  strncpy_from_user+0x36/0x270
[ 1723.922075][T20381]  getname_flags+0xf1/0x540
[ 1723.922096][T20381]  ? security_capable+0x7e/0x2d0
[ 1723.922120][T20381]  user_path_at+0x24/0x60
[ 1723.922142][T20381]  __se_sys_move_mount+0x1ac/0xd20
[ 1723.922169][T20381]  ? __pfx___se_sys_move_mount+0x10/0x10
[ 1723.922189][T20381]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1723.922219][T20381]  ? do_syscall_64+0x100/0x230
[ 1723.922252][T20381]  ? __x64_sys_move_mount+0x20/0xc0
[ 1723.922272][T20381]  do_syscall_64+0xf3/0x230
[ 1723.922297][T20381]  ? clear_bhb_loop+0x35/0x90
[ 1723.922325][T20381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1723.922350][T20381] RIP: 0033:0x7f754f98d169
[ 1723.922367][T20381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1723.922382][T20381] RSP: 002b:00007f75508c4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[ 1723.922401][T20381] RAX: ffffffffffffffda RBX: 00007f754fba5fa0 RCX: 00007f754f98d169
[ 1723.922415][T20381] RDX: ffffffffffffff9c RSI: 0000400000000040 RDI: 0000000000000005
[ 1723.922427][T20381] RBP: 00007f75508c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1723.922439][T20381] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001
[ 1723.922450][T20381] R13: 0000000000000000 R14: 00007f754fba5fa0 R15: 00007ffff9b9ad68
[ 1723.922475][T20381]  </TASK>
[ 1724.296284][T20376] netlink: 'syz.6.3831': attribute type 3 has an invalid length.
[ 1724.488869][ T5876] usb 4-1: Using ep0 maxpacket: 16
[ 1724.520953][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1724.539407][ T5876] usb 4-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32
[ 1724.576171][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1724.656092][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1724.704512][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.751696][ T5876] usb 4-1: Product: syz
[ 1724.760166][ T5876] usb 4-1: Manufacturer: syz
[ 1724.859055][ T5876] usb 4-1: SerialNumber: syz
[ 1724.900519][T20378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1725.630770][T20406] netlink: 'syz.4.3841': attribute type 3 has an invalid length.
[ 1726.701053][ T5876] usb 4-1: USB disconnect, device number 106
[ 1726.879897][T20411] fuse: Invalid rootmode
[ 1727.033023][T18963] usb 7-1: new low-speed USB device number 81 using dummy_hcd
[ 1727.310123][T20417] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1727.330466][T18963] usb 7-1: device descriptor read/64, error -71
[ 1727.437415][   T31] kauditd_printk_skb: 23 callbacks suppressed
[ 1727.437739][   T31] audit: type=1804 audit(1741995036.574:86): pid=20422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3847" name="/newroot/116/file0" dev="tmpfs" ino=698 res=1 errno=0
[ 1727.625287][T18963] usb 7-1: new low-speed USB device number 82 using dummy_hcd
[ 1727.840099][T18963] usb 7-1: device descriptor read/64, error -71
[ 1728.053489][T18963] usb usb7-port1: attempt power cycle
[ 1728.114680][ T5930] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1728.294380][ T5930] usb 5-1: Using ep0 maxpacket: 8
[ 1728.301098][ T5930] usb 5-1: config 3 has an invalid interface number: 22 but max is 0
[ 1728.320586][ T5930] usb 5-1: config 3 has no interface number 0
[ 1728.345765][ T5930] usb 5-1: config 3 interface 22 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1728.369426][ T5930] usb 5-1: config 3 interface 22 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32
[ 1728.391241][ T5930] usb 5-1: config 3 interface 22 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1728.413616][ T5930] usb 5-1: config 3 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1728.439320][ T5930] usb 5-1: config 3 interface 22 has no altsetting 0
[ 1728.454724][T18963] usb 7-1: new low-speed USB device number 83 using dummy_hcd
[ 1728.465395][ T5930] usb 5-1: New USB device found, idVendor=0f11, idProduct=2080, bcdDevice=86.6f
[ 1728.478679][T18963] usb 7-1: device descriptor read/8, error -71
[ 1728.491209][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.514220][ T5930] usb 5-1: Product: syz
[ 1728.518539][ T5930] usb 5-1: Manufacturer: syz
[ 1728.537756][ T5930] usb 5-1: SerialNumber: syz
[ 1728.552724][T20422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1728.982038][T18963] usb 7-1: new low-speed USB device number 84 using dummy_hcd
[ 1728.992580][T20439] fuse: Bad value for 'rootmode'
[ 1729.001777][ T5930] ldusb 5-1:3.22: Interrupt in endpoint not found
[ 1729.013753][ T5930] usb 5-1: USB disconnect, device number 78
[ 1729.056307][T18963] usb 7-1: device descriptor read/8, error -71
[ 1729.173926][T18963] usb usb7-port1: unable to enumerate USB device
[ 1729.273308][T20446] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3855'.
[ 1729.670542][T18177] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1729.736470][T20448] netlink: 'syz.3.3856': attribute type 29 has an invalid length.
[ 1729.772130][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'.
[ 1729.905514][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3856'.
[ 1729.919318][T18177] usb 6-1: Using ep0 maxpacket: 16
[ 1729.938776][T20450] netlink: 'syz.6.3857': attribute type 3 has an invalid length.
[ 1729.989783][T20452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3856'.
[ 1730.016411][T18177] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1730.044596][T18177] usb 6-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32
[ 1730.055202][T18177] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1730.073757][T20452] 
[ 1730.076104][T20452] ======================================================
[ 1730.083133][T20452] WARNING: possible circular locking dependency detected
[ 1730.090144][T20452] 6.14.0-rc6-syzkaller-00145-g695caca9345a #0 Not tainted
[ 1730.097261][T20452] ------------------------------------------------------
[ 1730.104277][T20452] syz.3.3856/20452 is trying to acquire lock:
[ 1730.110336][T20452] ffff88805cbc4100 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x45/0x70
[ 1730.120076][T20452] 
[ 1730.120076][T20452] but task is already holding lock:
[ 1730.127481][T20452] ffff88806b6ec888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500
[ 1730.136807][T20452] 
[ 1730.136807][T20452] which lock already depends on the new lock.
[ 1730.136807][T20452] 
[ 1730.147211][T20452] 
[ 1730.147211][T20452] the existing dependency chain (in reverse order) is:
[ 1730.156227][T20452] 
[ 1730.156227][T20452] -> #3 (&of->mutex){+.+.}-{4:4}:
[ 1730.163452][T20452]        lock_acquire+0x1ed/0x550
[ 1730.168482][T20452]        __mutex_lock+0x19c/0x1010
[ 1730.173589][T20452]        kernfs_fop_write_iter+0x1ea/0x500
[ 1730.179400][T20452]        iter_file_splice_write+0xbfa/0x1510
[ 1730.185383][T20452]        do_splice+0xd68/0x18b0
[ 1730.190231][T20452]        __se_sys_splice+0x2e0/0x450
[ 1730.195516][T20452]        do_syscall_64+0xf3/0x230
[ 1730.200542][T20452]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1730.206954][T20452] 
[ 1730.206954][T20452] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[ 1730.214350][T20452]        lock_acquire+0x1ed/0x550
[ 1730.219384][T20452]        __mutex_lock+0x19c/0x1010
[ 1730.224496][T20452]        iter_file_splice_write+0x330/0x1510
[ 1730.230484][T20452]        backing_file_splice_write+0x35f/0x580
[ 1730.236633][T20452]        ovl_splice_write+0x4b8/0x630
[ 1730.242013][T20452]        do_splice+0xd68/0x18b0
[ 1730.246864][T20452]        __se_sys_splice+0x2e0/0x450
[ 1730.252151][T20452]        do_syscall_64+0xf3/0x230
[ 1730.257177][T20452]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1730.263595][T20452] 
[ 1730.263595][T20452] -> #1 (sb_writers#5){.+.+}-{0:0}:
[ 1730.270981][T20452]        lock_acquire+0x1ed/0x550
[ 1730.276002][T20452]        sb_start_write+0x4d/0x1c0
[ 1730.281110][T20452]        mnt_want_write+0x3f/0x90
[ 1730.286133][T20452]        ovl_create_object+0x13a/0x3a0
[ 1730.291587][T20452]        path_openat+0x193c/0x3590
[ 1730.296697][T20452]        do_filp_open+0x27f/0x4e0
[ 1730.301720][T20452]        do_sys_openat2+0x13e/0x1d0
[ 1730.306925][T20452]        __x64_sys_openat+0x247/0x2a0
[ 1730.312292][T20452]        do_syscall_64+0xf3/0x230
[ 1730.317318][T20452]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1730.323732][T20452] 
[ 1730.323732][T20452] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[ 1730.332414][T20452]        validate_chain+0x18ef/0x5920
[ 1730.337779][T20452]        __lock_acquire+0x1397/0x2100
[ 1730.343159][T20452]        lock_acquire+0x1ed/0x550
[ 1730.348177][T20452]        down_read+0xb1/0xa40
[ 1730.352864][T20452]        lookup_slow+0x45/0x70
[ 1730.357635][T20452]        walk_component+0x2e1/0x410
[ 1730.362835][T20452]        path_lookupat+0x16f/0x450
[ 1730.367939][T20452]        filename_lookup+0x2a3/0x670
[ 1730.373223][T20452]        kern_path+0x35/0x50
[ 1730.377828][T20452]        lookup_bdev+0xc5/0x290
[ 1730.382668][T20452]        resume_store+0x1a0/0x710
[ 1730.387713][T20452]        kernfs_fop_write_iter+0x3a0/0x500
[ 1730.393514][T20452]        vfs_write+0xacf/0xd10
[ 1730.398272][T20452]        ksys_write+0x18f/0x2b0
[ 1730.403116][T20452]        do_syscall_64+0xf3/0x230
[ 1730.408135][T20452]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1730.414539][T20452] 
[ 1730.414539][T20452] other info that might help us debug this:
[ 1730.414539][T20452] 
[ 1730.424768][T20452] Chain exists of:
[ 1730.424768][T20452]   &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex
[ 1730.424768][T20452] 
[ 1730.438146][T20452]  Possible unsafe locking scenario:
[ 1730.438146][T20452] 
[ 1730.445585][T20452]        CPU0                    CPU1
[ 1730.450936][T20452]        ----                    ----
[ 1730.456313][T20452]   lock(&of->mutex);
[ 1730.460291][T20452]                                lock(&pipe->mutex);
[ 1730.466966][T20452]                                lock(&of->mutex);
[ 1730.473463][T20452]   rlock(&ovl_i_mutex_dir_key[depth]);
[ 1730.479005][T20452] 
[ 1730.479005][T20452]  *** DEADLOCK ***
[ 1730.479005][T20452] 
[ 1730.487145][T20452] 4 locks held by syz.3.3856/20452:
[ 1730.492353][T20452]  #0: ffff8880695c9cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320
[ 1730.501421][T20452]  #1: ffff8880240b6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10
[ 1730.510303][T20452]  #2: ffff88806b6ec888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500
[ 1730.520052][T20452]  #3: ffff888142292008 (kn->active#56){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[ 1730.530069][T20452] 
[ 1730.530069][T20452] stack backtrace:
[ 1730.535946][T20452] CPU: 0 UID: 0 PID: 20452 Comm: syz.3.3856 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0
[ 1730.535964][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1730.535975][T20452] Call Trace:
[ 1730.535984][T20452]  <TASK>
[ 1730.535992][T20452]  dump_stack_lvl+0x241/0x360
[ 1730.536011][T20452]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1730.536040][T20452]  ? __pfx__printk+0x10/0x10
[ 1730.536086][T20452]  print_circular_bug+0x13a/0x1b0
[ 1730.536105][T20452]  check_noncircular+0x36a/0x4a0
[ 1730.536123][T20452]  ? __pfx_check_noncircular+0x10/0x10
[ 1730.536146][T20452]  validate_chain+0x18ef/0x5920
[ 1730.536170][T20452]  ? __pfx_validate_chain+0x10/0x10
[ 1730.536188][T20452]  ? __pfx_validate_chain+0x10/0x10
[ 1730.536202][T20452]  ? __pfx_validate_chain+0x10/0x10
[ 1730.536224][T20452]  ? __lock_acquire+0x1397/0x2100
[ 1730.536248][T20452]  ? mark_lock+0x9a/0x360
[ 1730.536272][T20452]  __lock_acquire+0x1397/0x2100
[ 1730.536299][T20452]  lock_acquire+0x1ed/0x550
[ 1730.536320][T20452]  ? lookup_slow+0x45/0x70
[ 1730.536342][T20452]  ? __pfx_lock_acquire+0x10/0x10
[ 1730.536364][T20452]  ? __pfx___might_resched+0x10/0x10
[ 1730.536385][T20452]  ? __pfx_lock_acquire+0x10/0x10
[ 1730.536406][T20452]  ? __d_lookup+0x64/0x7b0
[ 1730.536426][T20452]  ? smack_inode_permission+0x2db/0x380
[ 1730.536457][T20452]  ? __pfx_lock_release+0x10/0x10
[ 1730.536480][T20452]  down_read+0xb1/0xa40
[ 1730.536505][T20452]  ? lookup_slow+0x45/0x70
[ 1730.536524][T20452]  ? __d_lookup+0x64/0x7b0
[ 1730.536544][T20452]  ? __pfx_down_read+0x10/0x10
[ 1730.536568][T20452]  ? __d_lookup+0x706/0x7b0
[ 1730.536588][T20452]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1730.536608][T20452]  ? security_inode_permission+0xbc/0x320
[ 1730.536631][T20452]  ? make_vfsuid+0x52/0xa0
[ 1730.536652][T20452]  ? lookup_fast+0x17a/0x590
[ 1730.536670][T20452]  lookup_slow+0x45/0x70
[ 1730.536689][T20452]  walk_component+0x2e1/0x410
[ 1730.536707][T20452]  path_lookupat+0x16f/0x450
[ 1730.536727][T20452]  filename_lookup+0x2a3/0x670
[ 1730.536748][T20452]  ? __pfx_filename_lookup+0x10/0x10
[ 1730.536773][T20452]  ? rcu_is_watching+0x15/0xb0
[ 1730.536790][T20452]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 1730.536805][T20452]  ? getname_kernel+0x140/0x2f0
[ 1730.536825][T20452]  kern_path+0x35/0x50
[ 1730.536842][T20452]  lookup_bdev+0xc5/0x290
[ 1730.536857][T20452]  ? rcu_is_watching+0x15/0xb0
[ 1730.536873][T20452]  ? __pfx_lookup_bdev+0x10/0x10
[ 1730.536887][T20452]  ? kstrndup+0xbb/0x150
[ 1730.536907][T20452]  resume_store+0x1a0/0x710
[ 1730.536927][T20452]  ? kernfs_fop_write_iter+0x1ea/0x500
[ 1730.536947][T20452]  ? __pfx_resume_store+0x10/0x10
[ 1730.536969][T20452]  ? sysfs_kf_write+0x182/0x2a0
[ 1730.536992][T20452]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1730.537013][T20452]  kernfs_fop_write_iter+0x3a0/0x500
[ 1730.537041][T20452]  vfs_write+0xacf/0xd10
[ 1730.537062][T20452]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1730.537083][T20452]  ? __pfx_vfs_write+0x10/0x10
[ 1730.537103][T20452]  ? __fget_files+0x2a/0x410
[ 1730.537121][T20452]  ? __fget_files+0x2a/0x410
[ 1730.537140][T20452]  ksys_write+0x18f/0x2b0
[ 1730.537161][T20452]  ? __pfx_ksys_write+0x10/0x10
[ 1730.537181][T20452]  ? do_syscall_64+0x100/0x230
[ 1730.537206][T20452]  ? do_syscall_64+0xb6/0x230
[ 1730.537229][T20452]  do_syscall_64+0xf3/0x230
[ 1730.537252][T20452]  ? clear_bhb_loop+0x35/0x90
[ 1730.537276][T20452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1730.537298][T20452] RIP: 0033:0x7ff87a98d169
[ 1730.537312][T20452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1730.537325][T20452] RSP: 002b:00007ff87b74d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1730.537341][T20452] RAX: ffffffffffffffda RBX: 00007ff87aba6080 RCX: 00007ff87a98d169
[ 1730.537352][T20452] RDX: 0000000000000012 RSI: 0000400000000040 RDI: 0000000000000004
[ 1730.537363][T20452] RBP: 00007ff87aa0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1730.537373][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1730.537382][T20452] R13: 0000000000000000 R14: 00007ff87aba6080 R15: 00007fffc7bfbe78
[ 1730.537399][T20452]  </TASK>
[ 1731.095305][T20456] netlink: 'syz.1.3858': attribute type 3 has an invalid length.
[ 1731.278099][T18177] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1731.287268][T18177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1731.295304][T18177] usb 6-1: Product: syz
[ 1731.299502][T18177] usb 6-1: Manufacturer: syz
[ 1731.304086][T18177] usb 6-1: SerialNumber: syz
[ 1731.336831][T20446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1731.346956][T20456] ieee80211 phy210: Selected rate control algorithm 'minstrel_ht'
[ 1731.471472][T20452] block device autoloading is deprecated and will be removed.
[ 1731.517603][T20452] PM: Image not found (code -22)
[ 1732.769697][T18177] usb 6-1: USB disconnect, device number 106