last executing test programs:

8.162953806s ago: executing program 2 (id=778):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24)
bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0108000000000000000000000000080003400000003c08000540000000250900020073797a300000000008000a40000000000900010073797a310000000008000640ffffff000c000b"], 0x80}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000fce)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffc, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r5, 0x0, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x404, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, {0x6, @random="3c892cc215c5"}, 0x64, {0x2, 0x4e24, @private=0xa010100}, 'syz_tun\x00'})
read$FUSE(r4, 0x0, 0x0)

8.092012848s ago: executing program 2 (id=779):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000070096d400000000001d8d51410000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000000000000000000ff0000de18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003", @ANYRES32=0x0], 0x7c}}, 0x0)
sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=@newtaction={0x248, 0x30, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{0x234, 0x1, [@m_ipt={0x204, 0x1f, 0x0, 0x0, {{0x8}, {0x184, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0xc0a4, 'raw\x00', 0x5, 0xfc, "a3ee55a833a6270d56941d445328c79057ef5c3433c66647cd412122a4dd6b7a9365d0b03eb1ec3c2fab81fa14e043ec5334cb29bc0f50960845ba993f47e6039385043f0bfdc9256b59122a6cb3f6d59f9ffd7b6b77f6f23dbeb8c188c543f6bcb2452b84ffde4a329a9e2402a3b0152640174b7174ea801fefdac82f33cc725c81925baf26e1805cd196970b38889b57d4c6e3e3d2c2a75cf10cbbb8d1df13359351e8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TARG={0x74, 0x6, {0x1, 'filter\x00', 0x7, 0x4, "bb646d0b651a2c1e160850fd72dc3baa4285b58d82f94ee044e7b42d9277b7fe5ef322887c6b141ccc3344fb69aa72c739d17d42b12a3769dd234bc106357b0051f1db1611389ad7187f"}}]}, {0x5b, 0x6, "ded657ad2e0fb8f4c23940aa608c6499d9d258e83960d8b8b2d382e2dd0162b20824a5b93952d5a9baa3fe15cb3e47e457b3af5fbe0baa714f7fc706929a3f040a1a4b27af9e44efa3db5ef6b4b2e31db86a314b16df0d"}, {0xc}, {0xc}}}, @m_ipt={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x248}}, 0x20000000)
recvmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x3, 0x3b, 0xff, 0xa, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0xe892, 0xe241}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000bc0)={'gre0\x00', <r7=>0x0, 0x1, 0x7, 0xfffff323, 0x80, {{0x17, 0x4, 0x3, 0x27, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@end, @rr={0x7, 0x1b, 0x82, [@dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @local, @private=0xa010101]}, @timestamp={0x44, 0x2c, 0x95, 0x0, 0x5, [0xfffffff9, 0x2, 0x1, 0x5, 0x10001, 0x2, 0x2, 0x5, 0xd3, 0x5]}]}}}}})
r8 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x81]}}]}}]}, 0x8c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)=ANY=[@ANYBLOB="0800a2d9", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf251700000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468310000000000000000000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="340cda00", @ANYRES8=r6, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYBLOB="e6e0ffc96dfa4bdf64dde1b5abe3fae77ee865cbaa06637e0ea9c27871d969ffb1a1b7f67bbe5ef7e52dcb3136e6e4a10e2a553bf4d99bf4d2c640c830a5f668ab", @ANYBLOB="9100acde0000d200", @ANYRES16, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\b\x00W_', @ANYRES32=r9, @ANYBLOB="34000180140002006772657461703000000000000000000008000100", @ANYRESDEC=r3, @ANYBLOB="1400020077673200"/20], 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

7.033224574s ago: executing program 0 (id=782):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x6, 0x0, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000004, 0x4132, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000002380)='>\xc6\xab\xb5>\xc6Z\v\xb5Zw\xde\xce\xc6/\x7fende')
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314752}})
openat$audio1(0xffffffffffffff9c, 0x0, 0x8102, 0x0)

7.02572822s ago: executing program 4 (id=783):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
fdatasync(r2)
socket(0x200000000000011, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x200000000003, 0x87)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x41)

6.920571971s ago: executing program 0 (id=785):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0)
read$msr(r1, &(0x7f0000000540)=""/102400, 0x19000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7bb, 0xc400)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1)
openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31)
socket(0x10, 0x2, 0x0)

6.918333456s ago: executing program 2 (id=786):
openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=r3, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x20004010}, 0x4040084)

6.217789102s ago: executing program 0 (id=787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)='affs\x00', 0x0, &(0x7f0000000a80)=',\xdf')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0, <r2=>0x0})
r3 = accept$inet(0xffffffffffffffff, &(0x7f0000002cc0), &(0x7f0000002d80)=0x10)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000002d40)=0x10e)
read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
fchown(r6, r8, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r10)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = gettid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, r10, r11, 0x109, 0xf3}, 0x0, 0x0, 0x7, 0x6, 0x2, 0x4, 0x3ff, 0x5, 0x0, 0x8, r9, r12})
r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x8001)
r14 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={<r15=>0x0}, &(0x7f0000000980)=0xc)
getresgid(&(0x7f0000002b00), &(0x7f0000002b40), &(0x7f0000002b80)=<r16=>0x0)
sendmmsg$unix(r1, &(0x7f0000002c80)=[{{&(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000000c0)="601b0fe6f6479b065c19c0ff058d0f6c2d8369d13d777a55a510d279697621e1f61afd23f7f000a05e1e998a2f11d1cb31b3ea679a12dd8615911f5bf93dbf6909a32b41eb79dad584fbecb7957e11cc1d492efd9bf39fd792fa4f7c5f122c679423862f610cb4a0ece0cc5a4c201e38baa76ac32d8b261bf36c8fbd86bb6620e85f60d61cb8dd978412b326d10ce81b489326a969b9b1e872744af73bf55cc3720606374faddf155f2cfb2ffb7d184f5b1b19ddaf115cfe2ff0ca2223dd7a0186e1e81f9f640e", 0xc7}, {&(0x7f0000000240)="4e3c8285f7aac7a3d46e903ef25a57fef6193629c13b710222400033eb26915ec5faca60ec51fff5af296c98c8e74c4962a6cc07e33b2df67a3b95bc29356dae6c7815bb94e3f67a1f2a5dd63829682e82c069a86150b96e61a114dddde43de5cbe374433b6a241c0ab33b27790d0e05e762d81bd2b887672bd4743e4ac36032f1bcec", 0x83}, {&(0x7f00000001c0)="cce081c0656242", 0x7}, {&(0x7f0000000380)="409b60afb1c846bd0d20701ffa409e4bbc5063bc7e725c99823139b1c0df1af949817edcdf7e2937dd2adb19df63907b54e267ba7868d3d14393ad7607dc047e3025b0f3127b31114c67cd19612f3541b65d510fac01f05373ebb1210b7ae8e8e7b925fe28ba5ba8062e75f1715995394d39e461d9ad9b8c", 0x78}, {&(0x7f0000000400)="c61a27d8a8e0b2d7281d8c2d109318d52b0b4155a07d4fcdc9f9ea450bf125153776156b49f38f2062eadc8899b16e574e0b3ff7c938557d53c8e6270a7f6b1d28edaa47122020bb2a9f0f7281f39500f79d8944d0106c546346f07e2fed26c6f5cec40ec171d4364c5bdf816b51bd4b069ca8407aca8ecd134af8547f7976b7996d72bcb062bf5abbc64722dbc6780801689f7545774629701bdf4cb08e4a97ea75a05170c426c6849e758c59bc7a213a511ffdb48479934fa81131139e773db8a0f4f5afd74d1f272482", 0xcb}, {&(0x7f0000000300)="2f0d874c8bd8f136c6a3c1c02fc5600ee75b6d", 0x13}, {&(0x7f0000000500)="84bd166f7d7741257782d4f766c2f75bb54334d94337e261c56c33b99b0d65c624f7d3f54a81c10dfc", 0x29}, {&(0x7f0000000540)="a85d9f3a8bcfb2bfbf44652054bafdd187137db6a097b9452a8c6bf04c4241d3f54cd6416678ee0d38b145f8a1766180b44c3a2fc2eb5b33f8554fc8102a1ecf2c22782e964ea2a5b3d566b347ef84d4f351f5883bea4795169fb7f2a16fed59b21b6022d3bc3c34239e5ad53194bd5614eee8f1a2209796b14f78efcfbb0f33e0cfda202928787bee9fbcc24206244e402bd1cdf806e1ee8bc0d44dad52", 0x9e}, {&(0x7f0000000600)="cfb3861d54396902efc391970df8a29a476024e4175c9465082f785de812b6877c0027e66bc34c072ef0628ebf799250e4d104198d9775558a07edd2807e0655ad8f3fe6d521d3eef0d3daa8a8bc85b845ddf1a436c110b9c1611a3ff0484d98ff9de01a065f8d6eb2559351900f3ca585621e6ab0", 0x75}], 0x9, &(0x7f0000002bc0)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r11}}}, @rights={{0x28, 0x1, 0x1, [r0, r13, r1, r1, r1, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee01, r16}}}], 0xa0, 0x20000880}}], 0x1, 0x20004041)

6.165689349s ago: executing program 4 (id=789):
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x3})
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) (fail_nth: 3)

5.63035366s ago: executing program 1 (id=790):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20)
fanotify_init(0x200, 0x0)
dup(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

5.4916254s ago: executing program 0 (id=791):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c)
bind$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x147}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

5.463389189s ago: executing program 4 (id=792):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000009000071123b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x120)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x84)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
fcntl$setstatus(r4, 0x4, 0x0)
copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

5.131544269s ago: executing program 1 (id=794):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006d00010000000000000000000000000043df"], 0x20}}, 0x40)
r1 = io_uring_setup(0x1fd1, &(0x7f0000000540)={0x0, 0xa8eb, 0x10, 0x2, 0x4000000})
io_uring_enter(r1, 0x2ddd, 0x32b4, 0x1c, &(0x7f00000005c0)={[0x2]}, 0x8)
ioperm(0x7, 0x5, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

4.378961423s ago: executing program 3 (id=795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x80000000005, 0x101701)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"])
ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f00000000c0))
pipe2$9p(0x0, 0x0)
dup(r2)
llistxattr(0x0, 0x0, 0x0)
unshare(0x22020400)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0)

3.994917782s ago: executing program 4 (id=796):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006e6515d028c348650b82a088b251761dd399ee9a1610d61c96f1523f5e436f4ffc27a740a2e873c948e103caa568cb33010c8a7f0fdb07c90dbb3cfbe5a6e793ec1e49bb98da8c3209c5716fdb35f0fb534859920a714e31e5db51213bbe483766db84e2a13111b2b84db4edfddd7f32b2a1ed6f7e2d3b2c7af946e80d082f6ed241d29d14ce81e35a3ce68821"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 64)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) (async, rerun: 64)
setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080), 0x4) (async, rerun: 64)
connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10) (async)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async)
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r6=>0x0}, 0x2020) (async)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async, rerun: 32)
read$FUSE(r5, &(0x7f00000065c0)={0x2020, 0x0, <r7=>0x0}, 0x2020) (rerun: 32)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r8, r5, 0x0) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async, rerun: 64)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) (rerun: 64)
sendfile(r9, r10, 0x0, 0x100001)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1})

3.994066073s ago: executing program 1 (id=797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x2000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000040)=0x2)
close_range(r5, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0019"], 0x34}}, 0xc000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0xd4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd4}}, 0x0)

3.049341855s ago: executing program 3 (id=798):
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0)
read$msr(r1, &(0x7f0000000540)=""/102400, 0x19000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7bb, 0xc400)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1)
openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31)
socket(0x10, 0x2, 0x0)

3.015627007s ago: executing program 1 (id=799):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

2.810877379s ago: executing program 1 (id=800):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xc0, 0xb, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaf}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8a}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000240))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a40)=<r5=>0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r8 = syz_open_pts(0xffffffffffffffff, 0x8000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r9=>0x0}, &(0x7f0000000140)=0xc)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="7d03020000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000002dc0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2200c0}, 0xc, &(0x7f0000002bc0)=[{&(0x7f00000004c0)={0x55c, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x22}, @generic="ed98a912a3ad4937b2ada43bdaba40fb107602caff87f9b613be8236ccec071d8301", @generic="89b84c22fe2340a2355db2c085916a376194ee8f1e282843f2290743266491a94fd2a5a127605bb73a229deaf1d31632488bc5cfaf98dcfa1ee99432bdb3e044cfd89b900261fd466008cf46f761d865efb9d2308c3e99b9ca0b596033f9a2eced55202f01fa8a19715d0e2be0c265dcef9f49506205c8deaca9241deb8a7710278f09fd074a0c0344cc7ac0c869ae431ae9f0326799190167c0c8f8973391020a27", @nested={0x2de, 0x136, 0x0, 0x1, [@generic="711c955ca2ec8eb4c8d45d3055b021515a987744491abbcacbdc38bdd54b385592c0382f1f9315e9c7be931b7bae8d4281f42993bad9e469877368338d1840be870f7e0670d3dc1bff18835d2b2bbf866136e97629dbc7641b8c086e61e3e1dfc63e8fe235df0e028ada71eac487e4e222f1f28132a8220ba5a42070b298cccbfad39455e3e955a351c4e2a5448ec0141810f415c207128935043ab8c5", @typed={0x8, 0x64, 0x0, 0x0, @str='(*^\x00'}, @generic="82dce90266fbee4bd78020425325103846e4dcc1825124e556f004728a62013259a68dee8a616a79272a3f2d0c2feb92d3f38e3c82d68310a7179b7aae2fe90e911f83cf8c3e4ee936b8256aeb4a27a00b0c647d65b3cda2f4f426d06f63e60d8a7dd51f7328566910f494b990b3235349ce535b22b0372d247c5e5eee747af77b8b25de70576c5f36d1420cdab8bea8f9b8fa53396962dc186e7ddcfe9e75f1a528399adcd19a7cdc802c5d65665557", @generic="d831a41688fb02973a9e53d03391e4891001eb05a9013d252c67a00c88fbb4f3c70d085bab7078430a47038724305d92c0f31c4758c09c11c608d444", @typed={0x8, 0x104, 0x0, 0x0, @fd=r2}, @typed={0x6, 0xfe, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x907}, @typed={0xff, 0x6c, 0x0, 0x0, @binary="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"}, @generic="bdb463acbe3b3439522893918b484b841332b248e7784fc11f92aee8692a473cf8635c3fabbfb3a40f", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0xb0, 0x44, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @fd=r0}, @typed={0xa4, 0x127, 0x0, 0x0, @binary="fbc1fd0cba147e7a65a0b37cb1d72c26f1c1b687aae4b70149c09d4d8c132101675cf47305733d65f8b8a78f99f99146f604e06b2e8823cbd36cee75601baae4a900e8791a293bd429e3441f2ee8fbf810af196c024071a5ea7d2f0ac15591b6026088af5cf5e9ef0b85cc5ee2bdc1869bb74fe754eaee463bc4699542af509a299747622365c226eb8498c0c553420619b0feee8e276a0dec089c8960a37e00"}]}, @generic="ff86507457c80694f4d663ee9b65d0862af9515470024d7df9f8acb288cc1bd6221d649f45098a65247158227f870065df6565a3a41f379dff36c5bd4bdbf215140b9d10eb60e906436b9f4d9858cdff313be59b47fa70f296d1fa9424a05f8c03041f424e97ddfb7158ce7b6550ecfe2dfbdf59e0976417c7e5c4ce43d1fbb3033d07c034599734e64188e32645a614e5f0cf89d6584413703c650ae52021fb29fa89437d06c4ca1b3f4ec9ab804a6822c5900d05f086f672f013dadbea2536d28ddc79f51af8b650958c89dbe01619c5ff52c8d249b572722c4757fc6a10665dc9628fef2b2c064452822a7d972ae0e6d3"]}, 0x55c}, {&(0x7f0000000b40)={0x190, 0x11, 0x100, 0x70bd25, 0x25dfdbfe, "", [@nested={0x180, 0xb6, 0x0, 0x1, [@generic="0278e09477fdd9119e9248e2bf1b0940bfce0dd76fbba0b5b84c2d87312323e294e9fb78fbda4783796318c7f16f6619aa1bd3c86f49cf269422586cfe30d8e1a4511363ed2d82bf4932122880e3fe4ee79b8466605fee0e4b810bc61c6b9ed93bdd5ddf5a7131fea27389bf4b263aedf68649997cf485008564586a98a6b5", @typed={0x8, 0xd3, 0x0, 0x0, @ipv4=@empty}, @generic="d9884bf21f0ec5a7e71d0286c727f9624826e5ea1c9f7768392be148adfa9bf791dc34e6d42019ef9af68254aac39bffc740d9cfc154994c591840b953de5bd07bc83d7c55d22a7e39d4d52deebe6dac6551c10e250502f8604a146b68b0a8a5181b536db306380e426bcc27a26ca78ff13c2812a0752a2501e7125b24353f46d825bac6e276d7264e733a35daab0524de302c4366cd9dc3fda7cf684b1c16588d30cf9c8685d89f58470d4406d69af41c970caaa2233dc612d5bb88f8bb5b9996a968ce4b65b85e30d03d432abedb08af19240ab8e806a569797370f264e99bf29f3e1b43c282fe90699ca1aa4e7c97012c030b92"]}]}, 0x190}, {&(0x7f0000000d00)={0x23c, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@generic="1973df96a35fb3352413e6fbf858ff9e42a92d72c8dec98d8f3723dbe04e48322a699532a7c2456d55bebf91de6fa49e2cb1f5b9e940f19dc46776de16a785fe9ef06d3d87192dafbae4d4b51307e8e740865b7b8a83903d5126fa8f7f2d293a221cbd2ff682700856ed12f33dfc6fb65a85876c8d3bb1e98c18904505c7527b7a7f885dd582bc091012167632efc7b9f5130eb0c38cc27db4cb123f368c691f61ca8fa1dfe711a96c23f20a639e3cb6aa097355a63a1998224862c362916fce638625eada", @typed={0x14, 0x101, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="0d7e878839933f9dca8209ccb4699cbde3b0ac48d6d40130798fe8915f35cd289012a2d45cde927d7c1dc58881ef70eabd157dd498b4579e40228a46253afb014138ee1282f2406c2957a211cb69799803ccc014d9d1a0cf654ecd9683d32ed95c0b8ed6bf1dd613c4ecd5bd38db98aec2c93c8fe3763c86fec48785661867a0d03f129ad6834b1d", @generic="2fee81f6731c5fc4232546147f1a23ac8fcce0592fbdc249d81842ac3f9715af70ae64e33c0904ee65e1ebbbc43e9b28a8693ef50a3bd47d173618186f9339db245dc3b656dba715ea67d24b4d78f8354604373731d12339bb0d991c2f65864e11cf3fb29b7f60d45f04be3ae9b005aa043e322a0eb81576b24eff7feba24d2a8a10bd0e7c153d4d230ebe6bdef612904ed38b0390d97bbc56eafa11c7434f4a708a1b9067be397b701fc197f0ad4c5b08b340cb7899d63a878c81bbfd08b995fa38892496f4e0770a56"]}, 0x23c}, {&(0x7f0000001200)={0x240, 0x34, 0x400, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x68}, @nested={0x221, 0x8, 0x0, 0x1, [@generic="ef0b164f5d6ba2e0e6c3c73e481b9bb5dff9d9fa2d43b6b7b47b95c5d6348a5e2de5c91c1898564f116f8f379afe4fdc6d7840e8d1846793e8f97000dcec6b75b13ce248408ac27b41b9ed67c011a52b36ab0c20d5f3fdf945358dde203075debd62961812fd55e0e4efc2e0ce236e39f5c32649413ec4e67a2498afd739299466b49afb69a68624ab5ddf6f52b035e8c48a0e3f09de2c5148fc87ade9b42b9b9abc", @typed={0x8, 0x143, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x110, 0x0, 0x0, @pid}, @generic="e4dee8a967c7cd7afe5cc55f7ae54a49616bce73619c79adefb7d9e1c039ceb3bdf95e78cc4ab3f808754903a3c7517d0d67161899388dd37b7bd65262fa0ad2a5e9834e2ee3b20140846c7cb8b77722635ef0a38aad1f1f6e711998546ca6b6778e230b06262a5654218710c4f21ba8d8b9ed9c80b99758d4e9b03fe564084676caaceef64c720af2ccd594497d63fe2bef503997305c8e5ef6504bb8", @generic="5ca220a6e49a3e8c3f39ac216a3bf450d66df3b41f6f4c3364d4641fa7c5716acdb7f40d6505e09d2b3c38249faa71e4ef924c8de7722f4b9080adec1a8023caa0e604b82e2c43da4a2820b46896eb6545867aa9cff4ee9f40217d9cfc8c016eec9f92c22b205b25a7a6114e8dc2f923a0b872fd0185a10c57d4c9e75a985ee62a9d38be2562fe19476c46dc0b245a310c53f9409184573c1d3d9fa91b412c1767f0889bcf9604d015d182c34cf8f03fe6cb88da62c22447d414", @typed={0x8, 0x14b, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x1}]}]}, 0x240}, {&(0x7f0000001880)={0x324, 0x2f, 0x2, 0x70bd26, 0x25dfdbff, "", [@nested={0x311, 0xc6, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @str=')):\x00'}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x230b}, @generic="b46eb469da6349c5e077b1f208e0322b3f177884489be6b83e61a334b6635ad436bea674a120d2b2d52bed713b62e665c61cee3a33e4837c73cf4c99c91bb09958b12964619e246ba6d70c491f39cb7b84fdd1b64eaf31a3f9c9b49dfed438d352b6f3292c80aabfe1538f851f44f3898ccc", @generic="67fa984e942d808ac028a3117fa667337dce1f9ddac335fa6b8c6302a9b351cccd962d5b03a8bbe1be6a5cca0553046b93e56c3f71d16dcd77a1143164357333a159b732d2968dd3e4555925e9ff45c7de8e021d67285f54ee631c0ccc5146a1f413e76766fdf5f4e5925fd0e30c03cd8cf48bf6f05188538a5a1e4b8c9808c141141f1ed09ad2a052441b8a33b3a35793746efd85f66785ed516589107bbdcbf23098a1ced9358d910862d415cdf16b1a5b0b729b04c4da9bfd996076f852950b5bc602ac98e1255ad132992af05259daaaf4e7408740a72e20913783ed628900", @generic, @generic="d607abfac6157d7fa2692f546e99b0b8552c017cad9dde14de9517952526da0a2eef38e229ccee03bdddf3fc073b33bf42b6e084c8b826b8b6c03fc7423d933633fbf12e70597d7c382766f41486a0e07a0720697512719a", @generic="409d4cc5cbad5ffcf8514fa2d51d4ee386ce9ac31e28a37a59293bba810913d67e420432b03ab7b08763e1e06764acecb89f7fbe0e40314125993cfa32428354d83958b7a2ff11679dcdadfb4846d09b2cc80f23c590a1a3446a90152d29123911ea6ee39858970751e13b69f16db42ea7455d2b8e6b5e02f41d8c2a8b487d3d642db4a59099ad1a3294287fbf33fcfbba0539b9d21ab6056daef58ac3a370fe822196dceff944a0d4ffebecc8c6d2c6290d0188723909", @generic="c5a210120532f6a16d59cc1c576a80ddd6739106bd57c9988997adef5dca39bf0267f450a01ffc3126c4b10d04bd1e3435dfca3c77388262c9a70d10c4fc94bebbdcfb2d80c9d633995beb9708b7a7adb00dccb3bfe5d847d7b46d5785ed5307eb00d73400b1bcd9cb58add1e6398548d4bb8264839d203d4dc64550ed44ab0074615c3aad0f35e9d82886d5f6c0cc6f72019d21d4d9410e33a5d6"]}]}, 0x324}], 0x5, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r2, r2, r6, r1, r0, r8]}}, @rights={{0x34, 0x1, 0x1, [r2, r0, r2, r2, r0, r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r1, r0, r1, r12, r2]}}], 0x100, 0x1}, 0x24000001)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

2.180135902s ago: executing program 0 (id=801):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100))
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

2.137137839s ago: executing program 3 (id=802):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000002a00)=""/4046, 0xfce}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f00000007c0)=""/172, 0xac}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000180)=""/48, 0x30}], 0xa}, 0x0)

2.019615152s ago: executing program 2 (id=803):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$unix(0x1, 0x5, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioprio_set$uid(0x3, 0xee01, 0x2004)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

1.81840876s ago: executing program 2 (id=804):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20)
fanotify_init(0x200, 0x0)
dup(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.766124198s ago: executing program 2 (id=805):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x80000000005, 0x101701)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"])
ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f00000000c0))
pipe2$9p(0x0, 0x0)
dup(r2)
llistxattr(0x0, 0x0, 0x0)
unshare(0x22020400)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0)

1.71900599s ago: executing program 4 (id=806):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000009000071123b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x120)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x84)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
fcntl$setstatus(r4, 0x4, 0x0)
copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)

1.706308727s ago: executing program 3 (id=807):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006d00010000000000000000000000000043df"], 0x20}}, 0x40)
r1 = io_uring_setup(0x1fd1, &(0x7f0000000540)={0x0, 0xa8eb, 0x10, 0x2, 0x4000000})
io_uring_enter(r1, 0x2ddd, 0x32b4, 0x1c, &(0x7f00000005c0)={[0x2]}, 0x8)
ioperm(0x7, 0x5, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.474704585s ago: executing program 3 (id=808):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
fdatasync(r2)
socket(0x200000000000011, 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x200000000003, 0x87)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x41)

696.295985ms ago: executing program 4 (id=809):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
userfaultfd(0x80001)
openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r2)
sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x0)
ioctl$TCXONC(r0, 0x4b3a, 0x2)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xfffffffd}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @remote, @mcast1}})
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0000000000000018ff6943b87902f5d9f27dbafff200000000861f4104bfeacd", 0x20, r4)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000180)={[{0x8, 0x3ff, 0x10, 0x5, 0x6, 0xc8, 0x5, 0x1, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffffa}, {0x0, 0x5, 0x6d, 0x2, 0x0, 0x81, 0x6, 0x9, 0x1, 0x1, 0x81, 0x7, 0x7}, {0xffffffff, 0xbe1, 0xa, 0x18, 0xf5, 0x6, 0x6, 0x5, 0x8, 0x9, 0x3, 0xc4, 0x7}], 0x76469741})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000000000001, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0)

685.675611ms ago: executing program 1 (id=810):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0)
fallocate(r2, 0x0, 0x0, 0xceec)
pread64(r0, &(0x7f0000002180)=""/4105, 0x1009, 0x0)

587.016047ms ago: executing program 0 (id=811):
socket$inet6(0xa, 0x3, 0xa)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="1da97993050240d7230fb3661ea9f971992efc439fd7e3a9c1a6e53f05cae3d4679de0051285f7920cd0e78ce0d367138d12ca2b959a1a9fdd3c507efa680ce9f9fb55672020f2d62ff6f2ee6aa96e6d7c3bd60109363dbe6a152d8346c5c889b87da81b6d833b212cd16725f7c627324a87ea26cbf32ef892f859c50c1a8bfc035fcede55284e7df97a7b26276fd9dd9e4321be9f0eefe7d951a39d6643c82b987930a6a586250c57c71bd6edaee9f715c54167afa53390f5e53e02ccfbc116861aecea0063bc1e5e2e2fe25ea759", 0xcf}, {&(0x7f0000000e80)="2f00a29ad9bc934428cb37cdf608e1e9635a79b20d38714766ea81b41780217f3c7b5f971080920538e53bf8760f9eefe47300d50684362e19d01a79a434e90de9d493e3452bf006e1a4913d9a1ce69f3af21094ec43909179ab4cc4725a8438992e53e413bb56425b0b26bd002a5d9c7b56fbe467dbfe8060394ae0c6242d3edd21659c9df715d2aaa48d711d7d5d65", 0x90}, {&(0x7f0000000780)="570a2cbad191d565d056d14ba16e460fe5d417af608a66595b47c8c41a73e8d4b4cf863318b4d546e7f961a869c350c9110d979b843a1c854ffa1b590dd4cad01dfaae4632c6e199244db6e9775d0a0828f225b412a8a321f923eba0d4ee496b749b88b5b3f0090c48868f2df20ed4d6ef872eb3e5777630ae83577c50f9f953949fbdc5857ee72b6f8897f2cfd59182971beda59000ac5e21b8c7105d277802d38087bea0c373acc16700959d973fbbacdcec73", 0xb4}, {&(0x7f00000002c0)="3cf7c93c4c868995da02336e87d3383a092ae4227b423c4be19a4dcf12e881b08999f9495af06cba9e66cdc25cba6a0f5174c6b07771706734f006d646b6f1d1e6", 0x41}, {&(0x7f0000000840)="cda6d2e323a674c106c938c94d86e2b6ab5aa8dbf89701cbd2a010969f48a5bd6e2ba680cc0778e1e797ed6b3ac06fd5da8e450983ee53adc38396ae3e52d1f25dfdd1e371bce73c8e8e73a5c6f4bc7656300edd010edb65c474b50ca661ad06349293ca8e444a1ef71c37a069482b6e728afbb93d996c2e800f79fc24984589eefcd163fc246d80a82e0b9fe60a8b219b9e0e9808427b780f6822e42af49a201122757a17a7a473b5c167ed5a4718ce8d51c5d71e3664766cfca28f6e6ed8ed1b818897a277ca3a1aa2e2e6e9961220cd7b872b30b3bfc7b3b09f70080033c50bdf9db5", 0xe4}], 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000290000005c3500000000000100000000"], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x10, @mcast1}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000a00)="3a753c045f870c4b8a5398f1b77b65c668d165c8e86dc907e8a2c855e64cb970e4da915c4b4b5d5a12a329f6075af965dfc2ce2442a214293aebcc71", 0x3c}, {&(0x7f0000000a40)="edeaca522d23bde08f0477fe313b1f36800fb3fc0e39320016e3711adc9351c3350b3a963656491addfd32f8a7a2d8a2b0625bf97f818291fbb110f088e673cf6e", 0x41}, {&(0x7f0000000ac0)="4634e4bfe41dfaedf3b24d9a740abb0905e34b91eee025e52e7069deb603f1c1aad54abc0978ab84976f2d7ea209cd58855d6488e77e32b9a37c9b304bbabe1a295c06afd8f4fd05e029565e8729a57d1f921813946cee8f71c675dbc0cf71854c3197cbdf90972695e0711f4d19dc784f172531251d692978f0106ea0d336a4008b084c676fc81903379b9f1d1926e83c8ca1c30414c79f1f7a4c5568fad658", 0xa0}, {&(0x7f0000000b80)="77f4eb0b1e0b91312d54bdb4ed79defbd5f6545bfd1a63c2f86033a11f888e52f388ef", 0x23}, {&(0x7f0000000bc0)="e2be1932f3c010081ff5a3ff3fe8c20345a4031e42ddf536d70c3647ece96382bba1244e23a4aa284442906cedbc51", 0x2f}], 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180004000000000029000000040000001100000000000000"], 0x18}}, {{&(0x7f0000000d00)={0xa, 0x4e23, 0xfe9, @local, 0x3}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000000d40)="3b4780ed6f16c1c07ab0a8490b5b88c7f18c9239b6047f783eecf67b3dc7", 0x1e}, {&(0x7f0000000d80)="49a3a1a3", 0x4}, {&(0x7f0000002740)="3f5de49b8bcf3d16e853418b1e728a5a1635951ba7a67d0927c18a09d7712b7728b116fea8472f1d277dcb664be26077106f2394852f14a8479369b428345abb0d558abf2254fb53a730c5708f2c402e52d8dafc1f69e5abae5a98a233110a682ac1ef03c13edf2e35c8345881a447fc06acb1a87e4789836df76884338016f73d37f9416410dde18814e806e1be732889b442930afb16ce0b585583ca7a9ef4f7c5320f6600847627289f0c807abfee51af2681eeceea1e1ee6a745f84ef980e102758bb76ea4e5e9582f740e623e48420b719e4f4c015d3ffeaf31f7bc21de4205bcfa965e15810ffdf256382c1f3a6bfe48177789fe92944a12ef9e3eebfeabf78f72166d12e8631e7300a753f46bb8453d0ef1ea5667bc6573d4a33107f648a5a65c9182664d7aac0ebba0a351bc0f4f46f76fc89548faa0cce28b7c077ee039e714a4f4cfe8dfeb94f5bc749bc9842758c25bc172147a906c5211533054f6f2f8554975d1df82079399c5ab06f57448cc8135ef929de223411254579a9b5704c6146b77a7bc258c80f7d7260906e2a075dc007e42d0a2991c08fb84bdb311cf5845b24dd80c9ec51e9d864a01978e1439b77eb05bba4e335ee6f86add42a9f2d374a59378136360771333b4a06407cc81447bae2d669fcc7c0c583175f4589af636340ea45da4899528b90841cc35be1af948014aa7eac6335138294ad5b94a157451324cebba58bfcfed6d0ffeeb513b2ea9ee36cad1a248165ad29c12eaa447ef9b446d4c120a119f07a24e2784d2d325bc0fa0a295fa9a7ed16263cb6db7995153f78f86d58cda83e60af5456ad7b524dbd299d431828d3811332fda2668c2e49199d85a68bc1b8bc59bad47898b0e9ffbc77ef8a10c106b0af1222fa78a4675c9640cba1aad898df4b4ceaa0a7b984c43801fee508f41a92b31e1165b6d609730fbd2e9016809ac343bb3108cebcb78af97f98666376752af90b32b597e18faf65ddf9183828be08a4066e4ef5a9b51bc2e17e50bcce5ab9449acdd9b010ee6545890b67b87d35dcacc59ffa89b2d01314bdcafb5fa0c5fa258fd399268cd81facc7872cf89d2b3ccf8179c85dfcc04423c516ad2619eb71de7edf00161ddf29c4dd3202200165678981ade1d5c43973b9ca2ac4ac13c085b2881912c41cd6984d191b09f8751d2aaf09ccecab6cf10db528a24d1e77c78c1d209a13dfa4acb91eebbfcf2a483358b059fe71f6476b4cee80094c0dc90bfbdcc92f6ed30e89f216214f8a5b0c8b00e5bad327eed81b63d5ead065ae690140afc33afe4f18f3d411368fedae484fe1dc6fb663db42fbb59a30f4d796ebb1bff6590a902844015ed80777c8ef9d02dfdb585277425004de988fac2b4c594df3725dbbee9b66e06c964eb3c728bc3bdd19d4f8e7e11dd0e649629324f9790cee2887f6ace01e0e04e09577b74d49792aaa4f08c4dcc204b325587c6a52e6fcb1da93bc18f58537197ba4fb4cb4a75d16cbd4bf5bc83a558a0c9b473ec9f0d6f87ee8d7379149277a5e0f94635e0eaf5109df5b74f473a156bcf797b76d2d989fcf5c65518df2a2143283d447d91b76ae6d1d0f4f27828f3bac8b98c9f3abadd072717898b675311f93b34129fd17b97620bf316c9c056a4afc204aaf33f2e991371271ae9173fd5aecde582923469761f00419d869a156b10dae79981681d95314da121ce0098c15431fe780995f980b6adad1a3511233cdc6c7918889e64db1e20e42db1ba9ac9b2f64314703d52899406d0e6398103b287e8523cccb334eeeeb3b4aafcdea90e0937802a9b5944c50a95980b559a798f774790bdb2dc2747235dcf490a66c616a912e60b48310efa0b848e2a1b2aaa0f9fae9f5a80b1f5091a199be7f6cb69fab030802ffbbffdd73be0ed350ea715c3c2828faf4042408d4e0dd6871f1dc835e2e34149044986a58214924b34e4e36c5d949210a61c48d451d3c2d255d06ac4408de8dc8cb6903376210635e6cefe8fae9be87fd4dbdad7c0e39c2057962ada764072a4324412d98aaf40f1d1b9281b2738f1b66a0ead2b4928a27f97d065a759cbd7da3e059da99bd134c18645b566aa55c6be549a55b64c48a49a4a1db0459ff1641ec8514f7337cb52631a3370d7275ffc9dfb00515d85c7b5b5d8c9bf44c6efe72d2150b152b5e919f25f2c9a02b11984fa985674432a9a3f9b9096af6710eec41eb7830924fca985436e0bb3b09ea3d49ad0dd10461fe74277e18a3173748beb11e6436ec6a66aa719f8d3d9ce91da63cfc78b8edf5fba4bbb36ef8764cd19fd0484d8d5ea313f9a24533f68fb8a6aa9e6777414a44fbdd521a488557a27ad485e5a1bedb5929dc97e55fb280b8ef400d57b992518210395804a7846a36fa8e21e5fbed1ea75b59aec6792ac95a9efbbe9770bce0ecf510558d0fbdb6b43657d6e47217893fd1a1c95f7c0c31f6f12587614f8e3a4d0b25bc028d957afa2de686590d032b7c2405f6e5aa0c25f07a39b585df7eb62e45fe63c7b5a091fa50de28ed26577715ec7653b4fee35cf1fad8969953ee6e39f570be8f3f7edef34b0918d8f92d62af1d8b474acb4d28bd389074dbd1c5f2745e1d636fe09d465a7e1b844d82266a54df0ce7cf9e43db85cc6c7b7c51b325d7a5b15a4f8a1e2e3051104ff280b509975f8c6a056b07ffeac5dd7afe0ab1ff8480088a58a1a55110d7175f217866e2028dee8f04b4f98f529c607c9104f2508ce2e84bf49bef6d93b0e24fb95787160f90f39a427603c0825ff5823609f4c20f84c3dba0930c88f78ea39c032fdb15122619d3a3db46738ffd675248a90f6ca67bfec7265618403ad58eee42ca52c59c6d7e8418f2668054b8a5d3d416aa7f29b5f60b704857a38a07a48ce9c6fd076122550b7f6a375305796c34c9d7f90c0990046fd0cb5958e9af687c76e32e781b4d418912ea85d9745fb6ee628e44923739672ff925cf9727c38a7d09e0d8f96f39845f16a6fe1fcc4a37fb3452a80eb6c02a5a645b82803a843f4e808776de847944d74d093a493fc890b9d569d4e7b34b493573705178fed707c8e32e9d01ca1cd44f7b03ecbf4b5e10c45cf28cc8e076a55c97b7dc20c8014d8ee0d7f16cc7276477d93238c87b39fdeeb872457d11b44cb7093aec409222203dcfb368a7d5f937191fa722b53f922d0b13446a2000ef78242c3932e8ee54834d03f78458967303e416e8e6c13f8ae2d6a7e52be4e5d5b5732b9d6c9d8ae2da8bdfc12551da8364cc84ab11a23285c63bfd96b7d9fc7187d21b3d10eb895d4050a6e16128ddab6953dbdcfd405a1f36c9cc051d7b8341095406b85580076ad60feb65a9c0c64d304cd9f55bc0115189004c7897074f6dad5c04b738e8609a7325118bc9bdeb3d23ef5947a8847b131ad8a26ee5a0d3f537d406bbe83d9438e179b2f2cc74053e9293f0b0a91eb19f5bd3aab911116fd7704430185a472d66e26e56836cd197ed6e64fadb9361fd348cc9d0940dd9127881a401f75069198b89f07f6d7bdcdcae1e5212012ad7067fad2e3871b2ed27ee738fcac508438c46f14e837a367cbdef7e8ce915c895855ed124520658114b7ecef88ff6467a8221daac2e2f0b2b75e97007f92f6dfefd70650095c48324d6ae6f055f81240920e621c95bd8abca0016552bbd51b0a0e8e0bf8909b65e0794dc729fa9f42d3825d90d79942ecab9d8f1d512466d48ba38ad4eba2695e4d376bc48a09521a8d5d7b5ee62d7498ff82994692cc64c1a4e61dcdf3d0d1a97d34dff9cf4aaa2a09233d38f81cbd0d700fe257e5abe9c956c8d4b2743f7f79503bd6c6e8bc9c057c0d23c0c55b473b2804af42686eb3e281691656216b0fe9213a1c247c2c08d6bcde63c830d4147628242674fcebd3c309031aa355f5a44552f1815d391c2638a29be1e48805cd5837d09fc3dfe83a7744391ad1b5e31004326e3534c1644b54680a6d2edb1fc43731f48bff6983ab8ceb1b48000831e63ac1cdfb2907932e57000112dbe24c3fe6c592e1db77eac724653ab5df1351db5f8bcb9784a8164e04aaef57c3db3808e1ee48a98b0897880c55cc308afa56ec003b09f9e74f0bfa30ac39d13391e7b5be7bf66db78dd4ba6d3eb6b9de1dc098f137c79b1768459e727a3abb22d862e6e33758ea74378d1a7f30ab16aad5b86d95c5a51f7797503141c9cd7635b12b991c85b40edb93881159069126b4c58de5b7af1ede8403b4e241698b1048a73a28aac8d50c5b1911a7901e6e0f105256c36f846778a3b468a9579d4d91313f85226b85a6dbab9d4426b723bb919f1e3497de6e3547a306e06ddeea1ba741b61d19de1eb0451c846f1d82733c5239cce45fa2c8587ca63f88f8b21d83d3e707fe09a4078bafe04a27a6dcc868fbe4be6a676db9447a19d7233a4b5c2aa9c9c74bf4422a6ac280523972d85cffdc6908fc9e8af5a634991308fbf0b478e9db4ddd469eb899a0f967e201d91f8440223cee2fe80ce5dc5e0d85e7fa004c18d573db4b5591392deed33e60a8810846b4b273c7c75d841f136fd6cfed018d3bed4417a5193355c2719cfe25bde554a161d71a89e753f07998e4e6a29eb682f00de13925e53a49657051677587288659041978e3a6dfa7cfdca5c43cb0b35ba7072c1064347f66be5d4e9e31001f72ff0671bffe72a75c6cc4673a4aa2c5477c57fa666fc0e21d78b012bac2ef470071c9adc6063b183bd5c1498c45da60d604820ee15b87c7eecd7891134c02b5382729dcab435b9689e9e8fd71604978a94c84ea8cc29f3e58075901129b7f8577fb5fadd75026b1609f84e49e8ddae2ca2eb888cd33cf7e81a59e1cbe94e70bfd78f10c3418086cb3c2a78d953902db325f226e7cd5f57aedc15449d4a94c35b52b2c264f3ad62029bdd50422420a97d8cc21edbb54b50f070f28abf8e225b9321836443018e0222c3d117c972ed2f7b68733488cd805ddc0a8066d9e53e0556f600dcd7a2b5dacd561ceb5efdaefc1e3a93166ff5c1bfeca1c0669bf436c5cc9067cc09aa52ad99ede56ae80dffbcd96a7b1310bdb8327b537004c78935034ecfb41e5e01d1fdfc1a27b65f5fc2c7b58491903d570cf112596efd3f01c63486fe657d9d250dfef3f9282e13b6aea4f476a66aeff17c9017135862d2329830509486bb8816a30d485fc0e396ff0859b2db8b27cc7b66ed7f77d23f3022001173403fa9ce86ffc28fb27e5271570b26bdfe480f015d820941c940dcf3471016ad7171e8dd6ea8e39f406987884200677df7ff2771b926541e3a90f0e76fa9f0a7441d51e8b464a5b44a12230a7e9979da30d66148bcfd07ac226a4f47e704e5637d8c4217874e5eaba1fb58c5499532c6e45d4e819cfbc96d9c3340c16975cf808975ca42dc6ba9f1ede8cdd39ad44f998b74b9465b3d8809b107a54d33dc4506ef87fcbbaf22e74a04e1ce6ee174ad324f9dd7a0ac557684431f3e3db7d24b2d45c6292e77c5076e0013cb30fa1cfbfef7713683e06cf46ae9ce020123b8a5c4e4edb25ac71bf266e359cc177c5efcb816143d128414d4e4d360fc8fc5e38860df766788303ceaaadb8c7af38dc80d71cb612dbf87036ebf574b9f9741726ea9308c12c34716eaa7e04917f2f7de9abb65c01aa4f7528e7404d08aa1304a67e723e2ccac84244c6e0678eae9c51dc69392ccaa3515ac4cb01e3bee1c58ef49516951a9a2c943b843c69b43a2d804c80b65a4741f66defd2ac0f688a35a1cf09589a6b2423f0efe654afc7564f", 0x1000}, {&(0x7f0000001dc0)="c5298417f9e3d6c1af468984c05e677712cffb7cac46d505bdad8d1183a5347ad8a2410ca4c0d0ef1ca6bcbb3acf6db93332c757", 0x34}, {&(0x7f0000001e00)="2dca12e7e2beca3f075b06c261ee027a1a92e66bfcf77bfd98c66c37ad0d68e06e24044b61ff0e092103ff7fe6003098745e6e811554c8f9dbc7c24623ee47200ff0c99b04c428da90cf26fb3ce95214f3409d8cb7cc9c25f0be7490e52cd85f767d7755f4635e666e55f9b6c043fd73e0", 0xffffffffffffffea}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="600000000000000029000000370000000608000000000000c20400000002c910fe800000000000000000000000000036040100040104071800000003044000020100000000000000090000000000000004010401060000000000000502dc09c900fe8800000000000000000000000001010001000100f0a88326000000000000aa21362d79667544078ac333"], 0x60}}, {{&(0x7f0000001f80)={0xa, 0x4e22, 0x2, @private1, 0x40}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001fc0)="3f1b62d277316d57fc0a8578e3874b7dc0982c62a10b82d1fc6c539dc3b98189aa8a0ed13211548efcdbfe081be12662ff4bf1fe1ffe7a1ac3479eb7abf028a8a299f9", 0x43}], 0x1, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x4, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140))
sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x44)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xffffff9f, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/3, 0x3, 0x0, 0xd}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x2180, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x7fffffff}}, './file0\x00'})
r9 = syz_io_uring_setup(0x830, &(0x7f0000000340)={0x0, 0xa7f2, 0x20, 0x5, 0x1c1, 0x0, r4}, &(0x7f0000000cc0)=<r10=>0x0, &(0x7f0000000240)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x52, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x4}, r0, 0x3, 0x0, 0x1})
io_uring_enter(r9, 0x780, 0x0, 0xc, 0x0, 0x0)
r12 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r13=>0x0, &(0x7f0000000140)=<r14=>0x0)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
write$UHID_CREATE2(r15, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000e40)={0x8, 0x0, &(0x7f0000000280)=[@enter_looper, @enter_looper], 0x55, 0x0, &(0x7f0000000dc0)="700cb58d1e0f69e44a2e793325b8f79a4a38911af4d5fb3cd9dc10725e1e60a1b1bec7f000fe4148b37d782993979eacc4438fd6d86c1dd752497be89064158bde2bca96b6f1ef3469166ff0786cbddae77eebf5fb"})
syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r12, 0xbcf, 0xd8b9, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

0s ago: executing program 3 (id=812):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
syz_emit_ethernet(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd6012000800333a00fe8000000000000000000000000000f05c6300000000000000000000000000aa0802906100000000600008100000000000000000000000000000ffff00000000fc020000000000000000000000000000fb36ee"], 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
setfsgid(0xee00) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5) (async)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)

kernel console output (not intermixed with test programs):

+0x10/0x10
[  169.111092][ T7097]  __sys_sendmmsg+0x3ab/0x730
[  169.115779][ T7097]  ? __pfx___sys_sendmmsg+0x10/0x10
[  169.120985][ T7097]  ? __pfx_lock_release+0x10/0x10
[  169.126098][ T7097]  ? kstrtouint_from_user+0x128/0x190
[  169.131496][ T7097]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  169.137388][ T7097]  ? ksys_write+0x229/0x2b0
[  169.141890][ T7097]  ? __pfx_lock_release+0x10/0x10
[  169.146920][ T7097]  ? vfs_write+0x730/0xd30
[  169.151336][ T7097]  ? __mutex_unlock_slowpath+0x21d/0x750
[  169.156997][ T7097]  ? __fget_files+0x3f3/0x470
[  169.161708][ T7097]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  169.167704][ T7097]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  169.174041][ T7097]  ? do_syscall_64+0x100/0x230
[  169.178820][ T7097]  __x64_sys_sendmmsg+0xa0/0xb0
[  169.183677][ T7097]  do_syscall_64+0xf3/0x230
[  169.188189][ T7097]  ? clear_bhb_loop+0x35/0x90
[  169.192876][ T7097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.198772][ T7097] RIP: 0033:0x7f6795f7e719
[  169.203189][ T7097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.222799][ T7097] RSP: 002b:00007f6796cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  169.231217][ T7097] RAX: ffffffffffffffda RBX: 00007f6796135f80 RCX: 00007f6795f7e719
[  169.239191][ T7097] RDX: 0000000000000001 RSI: 0000000020003f40 RDI: 0000000000000003
[  169.247160][ T7097] RBP: 00007f6796cc0090 R08: 0000000000000000 R09: 0000000000000000
[  169.255125][ T7097] R10: 00000000200000d0 R11: 0000000000000246 R12: 0000000000000001
[  169.263090][ T7097] R13: 0000000000000000 R14: 00007f6796135f80 R15: 00007ffd245b6468
[  169.271066][ T7097]  </TASK>
[  170.311202][ T7109] program syz.0.321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.386545][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'.
[  172.574930][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[  173.074615][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.098363][ T7139] batadv_slave_0: entered promiscuous mode
[  173.105679][ T7149] FAULT_INJECTION: forcing a failure.
[  173.105679][ T7149] name failslab, interval 1, probability 0, space 0, times 0
[  173.125900][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.3.332 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  173.136534][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  173.146614][ T7149] Call Trace:
[  173.149914][ T7149]  <TASK>
[  173.152878][ T7149]  dump_stack_lvl+0x241/0x360
[  173.157591][ T7149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.162817][ T7149]  ? __pfx__printk+0x10/0x10
[  173.167449][ T7149]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  173.173022][ T7149]  ? __pfx___might_resched+0x10/0x10
[  173.178330][ T7149]  should_fail_ex+0x3b0/0x4e0
[  173.183016][ T7149]  ? io_submit_one+0x154/0x18a0
[  173.187879][ T7149]  should_failslab+0xac/0x100
[  173.192565][ T7149]  ? io_submit_one+0x154/0x18a0
[  173.197421][ T7149]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  173.202802][ T7149]  io_submit_one+0x154/0x18a0
[  173.207497][ T7149]  ? __pfx_io_submit_one+0x10/0x10
[  173.212608][ T7149]  ? __might_fault+0xaa/0x120
[  173.217286][ T7149]  ? __pfx_lock_release+0x10/0x10
[  173.222313][ T7149]  ? lookup_ioctx+0x94/0x6a0
[  173.226905][ T7149]  ? __might_fault+0xaa/0x120
[  173.231579][ T7149]  ? __might_fault+0xc6/0x120
[  173.236259][ T7149]  __se_sys_io_submit+0x179/0x2f0
[  173.241289][ T7149]  ? __pfx___se_sys_io_submit+0x10/0x10
[  173.246946][ T7149]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  173.252952][ T7149]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  173.259313][ T7149]  ? do_syscall_64+0x100/0x230
[  173.264087][ T7149]  ? do_syscall_64+0xb6/0x230
[  173.268775][ T7149]  do_syscall_64+0xf3/0x230
[  173.273301][ T7149]  ? clear_bhb_loop+0x35/0x90
[  173.277990][ T7149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.283889][ T7149] RIP: 0033:0x7f053237e719
[  173.288316][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.308022][ T7149] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  173.316441][ T7149] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719
[  173.324409][ T7149] RDX: 00000000200004c0 RSI: 0000000000000001 RDI: 00007f0533194000
[  173.332377][ T7149] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000
[  173.340371][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.348358][ T7149] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78
[  173.356356][ T7149]  </TASK>
[  174.195988][ T7157] program syz.0.335 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.451334][ T7163] FAULT_INJECTION: forcing a failure.
[  174.451334][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.532212][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.0.336 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  174.542858][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  174.552919][ T7163] Call Trace:
[  174.556199][ T7163]  <TASK>
[  174.559129][ T7163]  dump_stack_lvl+0x241/0x360
[  174.563816][ T7163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.569016][ T7163]  ? __pfx__printk+0x10/0x10
[  174.573611][ T7163]  ? __pfx_lock_release+0x10/0x10
[  174.578644][ T7163]  should_fail_ex+0x3b0/0x4e0
[  174.583320][ T7163]  _copy_to_iter+0x4ae/0x1e70
[  174.587996][ T7163]  ? __virt_addr_valid+0x183/0x530
[  174.593109][ T7163]  ? __pfx__copy_to_iter+0x10/0x10
[  174.598219][ T7163]  ? __virt_addr_valid+0x183/0x530
[  174.603324][ T7163]  ? __virt_addr_valid+0x183/0x530
[  174.608427][ T7163]  ? __virt_addr_valid+0x45f/0x530
[  174.613531][ T7163]  ? __phys_addr_symbol+0x2f/0x70
[  174.618557][ T7163]  ? __check_object_size+0x48e/0x900
[  174.623880][ T7163]  seq_read_iter+0xb80/0xd70
[  174.628486][ T7163]  seq_read+0x3a9/0x4f0
[  174.632646][ T7163]  ? __pfx_seq_read+0x10/0x10
[  174.637321][ T7163]  ? __fsnotify_parent+0x20c/0x5e0
[  174.642434][ T7163]  ? __pfx___fsnotify_parent+0x10/0x10
[  174.647898][ T7163]  ? rw_verify_area+0x5c6/0x6f0
[  174.652747][ T7163]  vfs_readv+0x6bc/0xa80
[  174.656990][ T7163]  ? __pfx_seq_read+0x10/0x10
[  174.661660][ T7163]  ? __pfx_vfs_readv+0x10/0x10
[  174.666416][ T7163]  ? vfs_write+0x730/0xd30
[  174.670838][ T7163]  ? __fget_files+0x29/0x470
[  174.675429][ T7163]  ? __fget_files+0x29/0x470
[  174.680027][ T7163]  __x64_sys_preadv+0x1c7/0x2d0
[  174.684884][ T7163]  ? __pfx___x64_sys_preadv+0x10/0x10
[  174.690254][ T7163]  ? do_syscall_64+0x100/0x230
[  174.695025][ T7163]  ? do_syscall_64+0xb6/0x230
[  174.699721][ T7163]  do_syscall_64+0xf3/0x230
[  174.704227][ T7163]  ? clear_bhb_loop+0x35/0x90
[  174.708916][ T7163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.714809][ T7163] RIP: 0033:0x7efc29b7e719
[  174.719307][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.738917][ T7163] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  174.747420][ T7163] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719
[  174.755388][ T7163] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000000005
[  174.763354][ T7163] RBP: 00007efc2a8f5090 R08: 00000000000070ef R09: 0000000000000000
[  174.771321][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.779284][ T7163] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68
[  174.787526][ T7163]  </TASK>
[  175.698434][ T7172] tls_set_device_offload: netdev not found
[  175.801215][ T7178] FAULT_INJECTION: forcing a failure.
[  175.801215][ T7178] name failslab, interval 1, probability 0, space 0, times 0
[  175.834191][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.3.338 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  175.844845][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  175.854930][ T7178] Call Trace:
[  175.858231][ T7178]  <TASK>
[  175.861185][ T7178]  dump_stack_lvl+0x241/0x360
[  175.865895][ T7178]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.871118][ T7178]  ? __pfx__printk+0x10/0x10
[  175.875745][ T7178]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  175.881744][ T7178]  ? __pfx___might_resched+0x10/0x10
[  175.887063][ T7178]  should_fail_ex+0x3b0/0x4e0
[  175.891746][ T7178]  should_failslab+0xac/0x100
[  175.896423][ T7178]  ? __alloc_skb+0x1c3/0x440
[  175.901018][ T7178]  kmem_cache_alloc_node_noprof+0x71/0x320
[  175.906829][ T7178]  __alloc_skb+0x1c3/0x440
[  175.911264][ T7178]  ? __pfx___alloc_skb+0x10/0x10
[  175.916202][ T7178]  ? netlink_autobind+0xd6/0x2f0
[  175.921313][ T7178]  ? netlink_autobind+0x2b0/0x2f0
[  175.926341][ T7178]  netlink_sendmsg+0x638/0xcb0
[  175.931143][ T7178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.936435][ T7178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.941804][ T7178]  __sock_sendmsg+0x221/0x270
[  175.946483][ T7178]  ____sys_sendmsg+0x52a/0x7e0
[  175.951256][ T7178]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.956552][ T7178]  __sys_sendmsg+0x292/0x380
[  175.961150][ T7178]  ? __pfx___sys_sendmsg+0x10/0x10
[  175.966270][ T7178]  ? __pfx_vfs_write+0x10/0x10
[  175.971052][ T7178]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  175.977402][ T7178]  ? do_syscall_64+0x100/0x230
[  175.982193][ T7178]  ? do_syscall_64+0xb6/0x230
[  175.986886][ T7178]  do_syscall_64+0xf3/0x230
[  175.991395][ T7178]  ? clear_bhb_loop+0x35/0x90
[  175.996088][ T7178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.002007][ T7178] RIP: 0033:0x7f053237e719
[  176.006434][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.026145][ T7178] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.034572][ T7178] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719
[  176.042543][ T7178] RDX: 0000000004008000 RSI: 0000000020000000 RDI: 0000000000000003
[  176.050514][ T7178] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000
[  176.058482][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.066471][ T7178] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78
[  176.074468][ T7178]  </TASK>
[  177.142252][ T7198] netlink: 276 bytes leftover after parsing attributes in process `syz.1.344'.
[  178.091197][ T7207] program syz.1.346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.922592][ T7216] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  180.274363][   T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  180.661797][ T7239] FAULT_INJECTION: forcing a failure.
[  180.661797][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.675366][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.2.352 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  180.685983][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  180.696048][ T7239] Call Trace:
[  180.699340][ T7239]  <TASK>
[  180.702285][ T7239]  dump_stack_lvl+0x241/0x360
[  180.706988][ T7239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.712214][ T7239]  ? __pfx__printk+0x10/0x10
[  180.716837][ T7239]  should_fail_ex+0x3b0/0x4e0
[  180.721533][ T7239]  strncpy_from_user+0x36/0x260
[  180.726406][ T7239]  getname_flags+0xf1/0x540
[  180.730926][ T7239]  do_sys_openat2+0xd2/0x1d0
[  180.735530][ T7239]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.740741][ T7239]  ? rcu_is_watching+0x15/0xb0
[  180.745530][ T7239]  __x64_sys_openat+0x247/0x2a0
[  180.750399][ T7239]  ? __pfx___x64_sys_openat+0x10/0x10
[  180.755789][ T7239]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  180.762139][ T7239]  ? do_syscall_64+0xb6/0x230
[  180.766834][ T7239]  do_syscall_64+0xf3/0x230
[  180.771361][ T7239]  ? clear_bhb_loop+0x35/0x90
[  180.776065][ T7239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.781971][ T7239] RIP: 0033:0x7f731db7d0b0
[  180.786403][ T7239] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44
[  180.806028][ T7239] RSP: 002b:00007f731e8b9b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  180.814459][ T7239] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f731db7d0b0
[  180.822442][ T7239] RDX: 0000000000000002 RSI: 00007f731e8b9c10 RDI: 00000000ffffff9c
[  180.830425][ T7239] RBP: 00007f731e8b9c10 R08: 0000000000000000 R09: 00236f656469762f
[  180.838421][ T7239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  180.846415][ T7239] R13: 0000000000000000 R14: 00007f731dd36130 R15: 00007ffd0ec3bb98
[  180.854423][ T7239]  </TASK>
[  180.928285][   T51] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  180.941963][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.014722][   T51] usb 1-1: config 0 descriptor??
[  181.042668][   T51] gspca_main: spca505-2.14.0 probing 0733:0430
[  181.197685][ T7244] overlayfs: failed to resolve './file0': -2
[  181.425714][ T7248] FAULT_INJECTION: forcing a failure.
[  181.425714][ T7248] name failslab, interval 1, probability 0, space 0, times 0
[  181.438760][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.3.357 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  181.449381][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  181.459460][ T7248] Call Trace:
[  181.462759][ T7248]  <TASK>
[  181.465708][ T7248]  dump_stack_lvl+0x241/0x360
[  181.470421][ T7248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.475650][ T7248]  ? __pfx__printk+0x10/0x10
[  181.480262][ T7248]  ? fs_reclaim_acquire+0x93/0x130
[  181.485393][ T7248]  ? __pfx___might_resched+0x10/0x10
[  181.490703][ T7248]  should_fail_ex+0x3b0/0x4e0
[  181.495401][ T7248]  ? tomoyo_encode+0x26f/0x540
[  181.500174][ T7248]  should_failslab+0xac/0x100
[  181.504854][ T7248]  ? tomoyo_encode+0x26f/0x540
[  181.509623][ T7248]  __kmalloc_noprof+0xd8/0x400
[  181.514401][ T7248]  tomoyo_encode+0x26f/0x540
[  181.519005][ T7248]  tomoyo_realpath_from_path+0x59e/0x5e0
[  181.524646][ T7248]  tomoyo_path_number_perm+0x23a/0x880
[  181.530110][ T7248]  ? tomoyo_path_number_perm+0x208/0x880
[  181.535753][ T7248]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  181.541762][ T7248]  ? __fget_files+0x29/0x470
[  181.546354][ T7248]  ? __fget_files+0x3f3/0x470
[  181.551054][ T7248]  security_file_ioctl+0xc6/0x2a0
[  181.556083][ T7248]  __se_sys_ioctl+0x47/0x170
[  181.560676][ T7248]  do_syscall_64+0xf3/0x230
[  181.565183][ T7248]  ? clear_bhb_loop+0x35/0x90
[  181.569865][ T7248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.575762][ T7248] RIP: 0033:0x7f053237e719
[  181.580172][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.599779][ T7248] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  181.608198][ T7248] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719
[  181.616167][ T7248] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000005
[  181.624136][ T7248] RBP: 00007f05331b5090 R08: 0000000000000000 R09: 0000000000000000
[  181.632104][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.640070][ T7248] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78
[  181.648059][ T7248]  </TASK>
[  181.684659][ T7248] ERROR: Out of memory at tomoyo_realpath_from_path.
[  182.694329][   T51] gspca_spca505: reg write: error -110
[  182.699910][   T51] spca505 1-1:0.0: probe with driver spca505 failed with error -5
[  183.421099][ T7263] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.359' sets config #1
[  183.436049][ T7263] overlayfs: conflicting lowerdir path
[  183.467644][ T5884] usb 1-1: USB disconnect, device number 10
[  183.490992][    T9] IPVS: starting estimator thread 0...
[  183.589472][ T7264] program syz.4.358 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.599581][ T7265] IPVS: using max 16 ests per chain, 38400 per kthread
[  185.687726][ T7292] FAULT_INJECTION: forcing a failure.
[  185.687726][ T7292] name failslab, interval 1, probability 0, space 0, times 0
[  185.700761][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.3.365 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  185.711367][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  185.721437][ T7292] Call Trace:
[  185.724733][ T7292]  <TASK>
[  185.727847][ T7292]  dump_stack_lvl+0x241/0x360
[  185.732549][ T7292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.737766][ T7292]  ? __pfx__printk+0x10/0x10
[  185.742376][ T7292]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  185.748370][ T7292]  ? __pfx___might_resched+0x10/0x10
[  185.753677][ T7292]  should_fail_ex+0x3b0/0x4e0
[  185.758375][ T7292]  should_failslab+0xac/0x100
[  185.763068][ T7292]  ? __alloc_skb+0x1c3/0x440
[  185.767671][ T7292]  kmem_cache_alloc_node_noprof+0x71/0x320
[  185.773495][ T7292]  __alloc_skb+0x1c3/0x440
[  185.777930][ T7292]  ? __pfx___alloc_skb+0x10/0x10
[  185.782883][ T7292]  ? smack_socket_getpeersec_dgram+0x220/0x410
[  185.789069][ T7292]  netlink_sendmsg+0x638/0xcb0
[  185.793874][ T7292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.799189][ T7292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.804493][ T7292]  __sock_sendmsg+0x221/0x270
[  185.809191][ T7292]  ____sys_sendmsg+0x52a/0x7e0
[  185.813983][ T7292]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.819300][ T7292]  __sys_sendmsg+0x292/0x380
[  185.823906][ T7292]  ? __pfx___sys_sendmsg+0x10/0x10
[  185.829047][ T7292]  ? __pfx_vfs_write+0x10/0x10
[  185.833860][ T7292]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  185.840208][ T7292]  ? do_syscall_64+0x100/0x230
[  185.844992][ T7292]  ? do_syscall_64+0xb6/0x230
[  185.849687][ T7292]  do_syscall_64+0xf3/0x230
[  185.854204][ T7292]  ? clear_bhb_loop+0x35/0x90
[  185.858899][ T7292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.864807][ T7292] RIP: 0033:0x7f053237e719
[  185.869229][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.888846][ T7292] RSP: 002b:00007f0533173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.897280][ T7292] RAX: ffffffffffffffda RBX: 00007f0532536130 RCX: 00007f053237e719
[  185.905262][ T7292] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000006
[  185.913243][ T7292] RBP: 00007f0533173090 R08: 0000000000000000 R09: 0000000000000000
[  185.921223][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.929209][ T7292] R13: 0000000000000000 R14: 00007f0532536130 R15: 00007ffcd76f7e78
[  185.937204][ T7292]  </TASK>
[  186.406898][ T5943] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  186.416606][ T7296] 9pnet: Could not find request transport: f.]��~gp䧊DT��r7��ُؗ˧$�ӯf��0xffffffffffffffff
[  186.465713][ T7298] binder: 7297:7298 ioctl c0306201 20000a40 returned -14
[  186.585601][ T5943] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  186.601159][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.757817][ T5943] usb 2-1: config 0 descriptor??
[  186.781485][ T7307] FAULT_INJECTION: forcing a failure.
[  186.781485][ T7307] name failslab, interval 1, probability 0, space 0, times 0
[  186.794549][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.370 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  186.805172][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  186.815250][ T7307] Call Trace:
[  186.818554][ T7307]  <TASK>
[  186.821497][ T7307]  dump_stack_lvl+0x241/0x360
[  186.826199][ T7307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.831417][ T7307]  ? __pfx__printk+0x10/0x10
[  186.836026][ T7307]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  186.841504][ T7307]  ? __pfx___might_resched+0x10/0x10
[  186.846817][ T7307]  should_fail_ex+0x3b0/0x4e0
[  186.851523][ T7307]  should_failslab+0xac/0x100
[  186.856220][ T7307]  ? rxrpc_lookup_local+0x54e/0x1890
[  186.861535][ T7307]  __kmalloc_cache_noprof+0x6c/0x2c0
[  186.866843][ T7307]  ? rxrpc_net+0x45/0x270
[  186.871194][ T7307]  rxrpc_lookup_local+0x54e/0x1890
[  186.876327][ T7307]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  186.882330][ T7307]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  186.888680][ T7307]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  186.894245][ T7307]  ? __local_bh_enable_ip+0x168/0x200
[  186.899639][ T7307]  ? lockdep_hardirqs_on+0x99/0x150
[  186.904873][ T7307]  ? __local_bh_enable_ip+0x168/0x200
[  186.910265][ T7307]  ? rxrpc_bind+0x2d7/0x700
[  186.914788][ T7307]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  186.920538][ T7307]  ? rxrpc_bind+0x38c/0x700
[  186.925065][ T7307]  rxrpc_bind+0x3b7/0x700
[  186.929423][ T7307]  __sys_bind+0x22d/0x2d0
[  186.933769][ T7307]  ? __pfx___sys_bind+0x10/0x10
[  186.938648][ T7307]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  186.944986][ T7307]  ? do_syscall_64+0x100/0x230
[  186.949757][ T7307]  __x64_sys_bind+0x7a/0x90
[  186.954264][ T7307]  do_syscall_64+0xf3/0x230
[  186.958783][ T7307]  ? clear_bhb_loop+0x35/0x90
[  186.963461][ T7307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.969350][ T7307] RIP: 0033:0x7efc29b7e719
[  186.973758][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.993359][ T7307] RSP: 002b:00007efc2a8d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  187.001773][ T7307] RAX: ffffffffffffffda RBX: 00007efc29d36058 RCX: 00007efc29b7e719
[  187.009739][ T7307] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000007
[  187.017711][ T7307] RBP: 00007efc2a8d4090 R08: 0000000000000000 R09: 0000000000000000
[  187.025682][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.033649][ T7307] R13: 0000000000000000 R14: 00007efc29d36058 R15: 00007fff3d6dce68
[  187.041631][ T7307]  </TASK>
[  187.176713][ T7311] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.932551][ T7316] FAULT_INJECTION: forcing a failure.
[  187.932551][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.964758][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.0.374 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  187.975392][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  187.985465][ T7316] Call Trace:
[  187.988757][ T7316]  <TASK>
[  187.991698][ T7316]  dump_stack_lvl+0x241/0x360
[  187.996408][ T7316]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.001627][ T7316]  ? __pfx__printk+0x10/0x10
[  188.006240][ T7316]  ? __pfx_lock_release+0x10/0x10
[  188.011292][ T7316]  should_fail_ex+0x3b0/0x4e0
[  188.015991][ T7316]  _copy_from_user+0x2f/0xc0
[  188.020601][ T7316]  memdup_user+0x64/0xc0
[  188.024869][ T7316]  strndup_user+0x68/0xc0
[  188.029219][ T7316]  __se_sys_mount+0x9f/0x3c0
[  188.033839][ T7316]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  188.039854][ T7316]  ? __pfx___se_sys_mount+0x10/0x10
[  188.045084][ T7316]  ? do_syscall_64+0x100/0x230
[  188.049873][ T7316]  ? __x64_sys_mount+0x20/0xc0
[  188.054659][ T7316]  do_syscall_64+0xf3/0x230
[  188.059187][ T7316]  ? clear_bhb_loop+0x35/0x90
[  188.063882][ T7316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.069798][ T7316] RIP: 0033:0x7efc29b7e719
[  188.074227][ T7316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.093855][ T7316] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  188.102287][ T7316] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719
[  188.110265][ T7316] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000
[  188.118235][ T7316] RBP: 00007efc2a8f5090 R08: 0000000020000340 R09: 0000000000000000
[  188.126206][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.134177][ T7316] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68
[  188.142166][ T7316]  </TASK>
[  188.159159][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'.
[  188.520331][ T5943] ath6kl: Failed to read usb control message: -71
[  189.021889][ T5943] ath6kl: Unable to read the bmi data from the device: -71
[  189.079405][ T5943] ath6kl: unable to read target info byte count: -71
[  189.209008][ T5943] ath6kl: Failed to init ath6kl core: -71
[  189.219875][ T5943] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  189.340506][ T5943] usb 2-1: USB disconnect, device number 3
[  189.724768][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  190.141925][   T25] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  190.212411][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.278310][   T25] usb 3-1: config 0 descriptor??
[  190.324443][   T25] gspca_main: spca505-2.14.0 probing 0733:0430
[  190.554959][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  190.609841][ T7343] trusted_key: encrypted_key: insufficient parameters specified
[  190.766029][   T25] gspca_spca505: reg write: error -71
[  190.771699][   T25] spca505 3-1:0.0: probe with driver spca505 failed with error -5
[  191.438725][    T9] usb 2-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config
[  191.463322][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb
[  191.528740][    T9] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  191.554333][   T25] usb 3-1: USB disconnect, device number 7
[  191.556755][    T9] usb 2-1: Product: syz
[  191.573438][    T9] usb 2-1: Manufacturer: syz
[  191.588857][    T9] usb 2-1: SerialNumber: syz
[  193.200073][ T7369] syz.3.391: attempt to access beyond end of device
[  193.200073][ T7369] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[  193.219793][ T7369] befs: (nbd3): unable to read superblock
[  193.453959][    T9] hub 2-1:189.0: bad descriptor, ignoring hub
[  193.468992][    T9] hub 2-1:189.0: probe with driver hub failed with error -5
[  193.493985][    T9] keyspan 2-1:189.0: Keyspan - (without firmware) converter detected
[  193.571957][    T9] usb 2-1: USB disconnect, device number 4
[  193.592095][    T9] keyspan 2-1:189.0: device disconnected
[  194.435852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.450745][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.880303][ T5847] Bluetooth: hci5: sending frame failed (-49)
[  194.888484][   T54] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  195.132451][ T7396] Smack: duplicate mount options
[  195.364128][ T7398] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  195.372735][ T7398] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  195.381303][ T7398] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  195.656693][ T7397] netlink: 276 bytes leftover after parsing attributes in process `syz.3.400'.
[  196.855176][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  197.041766][ T7411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.404'.
[  197.062680][ T7414] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.403'.
[  197.115889][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  197.124154][ T5884] usb 2-1: can't read configurations, error -22
[  197.254368][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  197.440790][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  197.616189][ T5884] usb 2-1: can't read configurations, error -22
[  197.758749][ T5884] usb usb2-port1: attempt power cycle
[  198.317641][ T7424] hpfs: Bad magic ... probably not HPFS
[  198.662328][ T7426] usb usb8: usbfs: process 7426 (syz.2.408) did not claim interface 0 before use
[  198.754420][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  198.809171][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  198.841443][ T5884] usb 2-1: can't read configurations, error -22
[  199.006653][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  199.219772][ T7434] netlink: 276 bytes leftover after parsing attributes in process `syz.2.411'.
[  199.287993][ T5884] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  199.438361][ T5884] usb 2-1: can't read configurations, error -22
[  199.463380][ T5884] usb usb2-port1: unable to enumerate USB device
[  199.754379][ T1198] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  199.944685][ T1198] usb 1-1: Using ep0 maxpacket: 16
[  199.987297][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.059104][ T1198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.129771][ T1198] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  200.225138][ T1198] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  200.296967][ T1198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.438486][ T1198] usb 1-1: config 0 descriptor??
[  201.983997][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  201.992177][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  201.999956][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  202.007483][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  202.014878][ T1198] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  202.026829][ T1198] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input9
[  202.303483][ T1198] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  202.467912][ T7476] hpfs: Bad magic ... probably not HPFS
[  203.087967][ T7472] netlink: 276 bytes leftover after parsing attributes in process `syz.1.423'.
[  203.224338][ T1198] usb 1-1: USB disconnect, device number 11
[  203.694358][   T51] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  203.719769][ T7485] capability: warning: `syz.2.426' uses deprecated v2 capabilities in a way that may be insecure
[  203.884399][   T51] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  203.914956][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.982828][   T51] usb 5-1: Product: syz
[  204.003963][   T51] usb 5-1: Manufacturer: syz
[  204.032238][   T51] usb 5-1: SerialNumber: syz
[  204.071594][   T51] usb 5-1: config 0 descriptor??
[  204.142242][ T7492] input: syz0 as /devices/virtual/input/input10
[  204.320830][   T51] hso 5-1:0.0: Can't find BULK IN endpoint
[  204.353695][   T51] usb-storage 5-1:0.0: USB Mass Storage device detected
[  204.624455][ T5943] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  204.835806][ T5943] usb 4-1: Using ep0 maxpacket: 32
[  204.943627][ T5943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  205.167632][ T5943] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  205.447796][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  205.456187][ T5943] usb 4-1: Product: syz
[  205.460376][ T5943] usb 4-1: Manufacturer: syz
[  205.465053][ T5943] usb 4-1: SerialNumber: syz
[  205.522447][ T5943] usb 4-1: config 0 descriptor??
[  205.711911][ T7511] netlink: 'syz.2.434': attribute type 4 has an invalid length.
[  205.750897][ T7511] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.434'.
[  206.434614][ T7494] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  206.566203][   T51] usb 5-1: USB disconnect, device number 8
[  206.864389][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'.
[  207.385162][ T1198] usb 4-1: USB disconnect, device number 4
[  209.194778][ T7553] binder: 7551:7553 ioctl 4018620d 0 returned -22
[  209.309401][ T7553] syz_tun: entered promiscuous mode
[  209.329476][ T7553] macvtap1: entered promiscuous mode
[  209.352081][ T7553] macvtap1: entered allmulticast mode
[  209.364551][ T7553] syz_tun: entered allmulticast mode
[  209.455415][ T7553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.446'.
[  209.490803][ T7553] batadv1: entered promiscuous mode
[  209.515664][ T7553] batadv1: entered allmulticast mode
[  209.921572][ T7578] 9pnet_fd: Insufficient options for proto=fd
[  210.544441][ T7586] netlink: 276 bytes leftover after parsing attributes in process `syz.2.453'.
[  211.578736][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  213.116673][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.123781][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  213.281163][ T7626] batadv_slave_0: entered promiscuous mode
[  213.374429][ T5905] usb 4-1: Using ep0 maxpacket: 8
[  213.388846][ T5905] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  213.433747][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.503112][ T5905] usb 4-1: config 0 has no interface number 0
[  213.558731][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  213.658370][ T5905] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  213.780960][ T5905] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.834472][ T5905] usb 4-1: config 0 interface 52 has no altsetting 0
[  213.860934][ T5905] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  213.880310][ T5905] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  213.904264][ T5905] usb 4-1: Manufacturer: syz
[  213.922810][ T5905] usb 4-1: config 0 descriptor??
[  214.903395][ T5905] usb 4-1: Can not set alternate setting to 1, error: -71
[  214.925275][ T7645] binder: 7643:7645 ioctl 4018620d 0 returned -22
[  214.984436][ T5905] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  215.042985][ T7645] netlink: 3 bytes leftover after parsing attributes in process `syz.1.465'.
[  215.054557][ T5905] usb 4-1: USB disconnect, device number 5
[  215.071930][ T7645] batadv1: entered promiscuous mode
[  215.082947][ T7645] batadv1: entered allmulticast mode
[  215.245192][ T7624] dns_resolver: Unsupported server list version (0)
[  215.263897][ T7652] netlink: 120 bytes leftover after parsing attributes in process `syz.3.467'.
[  215.293806][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'.
[  215.488986][ T7669] FAULT_INJECTION: forcing a failure.
[  215.488986][ T7669] name failslab, interval 1, probability 0, space 0, times 0
[  215.545918][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.1.469 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  215.556554][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  215.566605][ T7669] Call Trace:
[  215.569873][ T7669]  <TASK>
[  215.572791][ T7669]  dump_stack_lvl+0x241/0x360
[  215.577483][ T7669]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.582694][ T7669]  ? __pfx__printk+0x10/0x10
[  215.587289][ T7669]  ? __kmalloc_noprof+0xb0/0x400
[  215.592226][ T7669]  ? __pfx___might_resched+0x10/0x10
[  215.597514][ T7669]  should_fail_ex+0x3b0/0x4e0
[  215.602191][ T7669]  ? sock_kmalloc+0xd7/0x160
[  215.606778][ T7669]  should_failslab+0xac/0x100
[  215.611452][ T7669]  ? sock_kmalloc+0xd7/0x160
[  215.616045][ T7669]  __kmalloc_noprof+0xd8/0x400
[  215.620807][ T7669]  ? __might_fault+0xaa/0x120
[  215.625497][ T7669]  sock_kmalloc+0xd7/0x160
[  215.629921][ T7669]  ____sys_sendmsg+0x216/0x7e0
[  215.634693][ T7669]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.639987][ T7669]  __sys_sendmmsg+0x3ab/0x730
[  215.644672][ T7669]  ? __pfx___sys_sendmmsg+0x10/0x10
[  215.649878][ T7669]  ? __pfx_lock_release+0x10/0x10
[  215.654904][ T7669]  ? kstrtouint_from_user+0x128/0x190
[  215.660290][ T7669]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  215.666180][ T7669]  ? ksys_write+0x229/0x2b0
[  215.670684][ T7669]  ? __pfx_lock_release+0x10/0x10
[  215.675723][ T7669]  ? vfs_write+0x730/0xd30
[  215.680149][ T7669]  ? __mutex_unlock_slowpath+0x21d/0x750
[  215.685791][ T7669]  ? __fget_files+0x3f3/0x470
[  215.690478][ T7669]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  215.696459][ T7669]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  215.702793][ T7669]  ? do_syscall_64+0x100/0x230
[  215.707594][ T7669]  __x64_sys_sendmmsg+0xa0/0xb0
[  215.712456][ T7669]  do_syscall_64+0xf3/0x230
[  215.716967][ T7669]  ? clear_bhb_loop+0x35/0x90
[  215.721645][ T7669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.727536][ T7669] RIP: 0033:0x7f6795f7e719
[  215.731946][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.751547][ T7669] RSP: 002b:00007f6796c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  215.759963][ T7669] RAX: ffffffffffffffda RBX: 00007f6796136058 RCX: 00007f6795f7e719
[  215.767929][ T7669] RDX: 0000000000000001 RSI: 0000000020000500 RDI: 0000000000000004
[  215.775904][ T7669] RBP: 00007f6796c9f090 R08: 0000000000000000 R09: 0000000000000000
[  215.783868][ T7669] R10: 0000000004044040 R11: 0000000000000246 R12: 0000000000000001
[  215.791837][ T7669] R13: 0000000000000000 R14: 00007f6796136058 R15: 00007ffd245b6468
[  215.799819][ T7669]  </TASK>
[  216.334354][ T7682] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.978936][ T5943] IPVS: starting estimator thread 0...
[  217.074399][ T7684] IPVS: using max 32 ests per chain, 76800 per kthread
[  217.109517][ T7688] xt_hashlimit: size too large, truncated to 1048576
[  217.353082][ T7632] syz.2.463: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  217.454031][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.2.463 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  217.464681][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  217.474779][ T7632] Call Trace:
[  217.478088][ T7632]  <TASK>
[  217.481047][ T7632]  dump_stack_lvl+0x241/0x360
[  217.485777][ T7632]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.491010][ T7632]  ? __pfx__printk+0x10/0x10
[  217.495638][ T7632]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  217.502077][ T7632]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  217.508609][ T7632]  warn_alloc+0x278/0x410
[  217.512978][ T7632]  ? __pfx_warn_alloc+0x10/0x10
[  217.517867][ T7632]  ? vb2_vmalloc_alloc+0xf2/0x340
[  217.522920][ T7632]  ? __get_vm_area_node+0x23d/0x270
[  217.528152][ T7632]  __vmalloc_node_range_noprof+0x691/0x13f0
[  217.534106][ T7632]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  217.540474][ T7632]  ? __kasan_kmalloc+0x98/0xb0
[  217.545267][ T7632]  ? vb2_vmalloc_alloc+0xb5/0x340
[  217.550324][ T7632]  vmalloc_user_noprof+0x74/0x80
[  217.555288][ T7632]  ? vb2_vmalloc_alloc+0xf2/0x340
[  217.560346][ T7632]  vb2_vmalloc_alloc+0xf2/0x340
[  217.565231][ T7632]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  217.570712][ T7632]  __vb2_queue_alloc+0xa0b/0x16f0
[  217.575777][ T7632]  vb2_core_reqbufs+0xd2e/0x17c0
[  217.580753][ T7632]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  217.586138][ T7632]  ? trace_contention_end+0x3c/0x120
[  217.591441][ T7632]  ? __mutex_lock+0x2ef/0xd70
[  217.596145][ T7632]  ? vb2_verify_memory_type+0x1f7/0x570
[  217.601712][ T7632]  vb2_ioctl_reqbufs+0x4e3/0x830
[  217.606687][ T7632]  __video_do_ioctl+0xc23/0xdd0
[  217.611570][ T7632]  ? __pfx___video_do_ioctl+0x10/0x10
[  217.616958][ T7632]  ? smack_log+0x123/0x540
[  217.621392][ T7632]  ? __might_fault+0xc6/0x120
[  217.626093][ T7632]  video_usercopy+0x89b/0x1180
[  217.630887][ T7632]  ? __pfx___video_do_ioctl+0x10/0x10
[  217.636274][ T7632]  ? __pfx_video_usercopy+0x10/0x10
[  217.641486][ T7632]  ? smack_file_ioctl+0x2f7/0x3a0
[  217.646544][ T7632]  ? __fget_files+0x3f3/0x470
[  217.651252][ T7632]  v4l2_ioctl+0x189/0x1e0
[  217.655599][ T7632]  ? __pfx_v4l2_ioctl+0x10/0x10
[  217.660468][ T7632]  __se_sys_ioctl+0xf9/0x170
[  217.665082][ T7632]  do_syscall_64+0xf3/0x230
[  217.669611][ T7632]  ? clear_bhb_loop+0x35/0x90
[  217.674311][ T7632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.680224][ T7632] RIP: 0033:0x7f731db7e719
[  217.684655][ T7632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.704276][ T7632] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.712722][ T7632] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719
[  217.720713][ T7632] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000005
[  217.728690][ T7632] RBP: 00007f731dbf175e R08: 0000000000000000 R09: 0000000000000000
[  217.736660][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.744625][ T7632] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98
[  217.752608][ T7632]  </TASK>
[  217.982825][ T7632] Mem-Info:
[  217.986693][ T7701] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  218.083648][ T7632] active_anon:359 inactive_anon:7480 isolated_anon:0
[  218.083648][ T7632]  active_file:21271 inactive_file:38121 isolated_file:0
[  218.083648][ T7632]  unevictable:782 dirty:219 writeback:0
[  218.083648][ T7632]  slab_reclaimable:10311 slab_unreclaimable:99250
[  218.083648][ T7632]  mapped:25628 shmem:4333 pagetables:788
[  218.083648][ T7632]  sec_pagetables:0 bounce:0
[  218.083648][ T7632]  kernel_misc_reclaimable:0
[  218.083648][ T7632]  free:1305985 free_pcp:5882 free_cma:0
[  218.173631][ T7632] Node 0 active_anon:1436kB inactive_anon:30020kB active_file:85012kB inactive_file:152484kB unevictable:1592kB isolated(anon):0kB isolated(file):0kB mapped:102612kB dirty:872kB writeback:0kB shmem:15796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11272kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no
[  218.213731][ T7632] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  218.254589][ T7632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  218.287967][ T7632] lowmem_reserve[]: 0 2465 2466 0 0
[  218.293244][ T7632] Node 0 DMA32 free:1301052kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1432kB inactive_anon:29984kB active_file:84232kB inactive_file:152432kB unevictable:1592kB writepending:872kB present:3129332kB managed:2552500kB mlocked:56kB bounce:0kB free_pcp:23752kB local_pcp:832kB free_cma:0kB
[  218.490459][ T7632] lowmem_reserve[]: 0 0 0 0 0
[  218.520931][ T7632] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  219.364706][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  220.257899][ T1198] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  220.266354][ T7632] lowmem_reserve[]: 0 0 0 0 0
[  220.271241][ T7632] Node 1 Normal free:3907108kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.314264][ T7632] lowmem_reserve[]: 0 0 0 0 0
[  220.318982][ T7632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  220.344296][ T7632] Node 0 DMA32: 2*4kB (UE) 1*8kB (M) 437*16kB (UME) 398*32kB (UM) 196*64kB (ME) 60*128kB (UME) 45*256kB (UME) 42*512kB (UME) 13*1024kB (ME) 9*2048kB (ME) 296*4096kB (M) = 1317152kB
[  220.384290][ T7632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  220.404510][ T7632] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 37*16kB (UME) 191*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3907140kB
[  220.445034][    T8] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  220.454590][ T7632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.464152][ T7632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.484517][ T7632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.494063][ T7632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.503441][ T7632] 63698 total pagecache pages
[  220.514729][ T7632] 0 pages in swap cache
[  220.518883][ T7632] Free swap  = 124984kB
[  220.523037][ T7632] Total swap = 124996kB
[  220.544286][ T7632] 2097051 pages RAM
[  220.548092][ T7632] 0 pages HighMem/MovableOnly
[  220.552746][ T7632] 427074 pages reserved
[  220.574463][ T7632] 0 pages cma reserved
[  220.604375][ T1198] usb 5-1: Using ep0 maxpacket: 16
[  220.613072][ T1198] usb 5-1: config 9 has an invalid interface number: 80 but max is 0
[  220.664741][ T1198] usb 5-1: config 9 has no interface number 0
[  220.675006][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  220.686201][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  220.696986][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  220.707775][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  220.718486][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  220.729319][ T1198] usb 5-1: config 9 interface 80 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  220.740326][ T1198] usb 5-1: config 9 interface 80 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  220.750997][ T1198] usb 5-1: config 9 interface 80 has no altsetting 0
[  220.785595][ T1198] usb 5-1: New USB device found, idVendor=2dc8, idProduct=6ba5, bcdDevice=59.9e
[  220.809090][ T1198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.837399][ T1198] usb 5-1: Product: syz
[  220.841614][ T1198] usb 5-1: Manufacturer: 䀁
[  220.861041][ T1198] usb 5-1: SerialNumber: syz
[  221.295781][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  221.528586][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.551722][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.574425][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  221.713765][ T1198] usb 5-1: USB disconnect, device number 9
[  221.808665][    T8] usb 2-1: Using ep0 maxpacket: 8
[  221.854625][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.888429][    T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  221.946201][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.975028][    T8] usb 2-1: config 0 descriptor??
[  221.984705][   T51] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  222.205709][   T51] usb 1-1: Using ep0 maxpacket: 16
[  222.277433][   T51] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3
[  222.353480][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.493254][   T51] usb 1-1: Product: syz
[  222.633429][   T51] usb 1-1: Manufacturer: syz
[  222.638500][   T51] usb 1-1: SerialNumber: syz
[  222.655397][   T51] usb 1-1: config 0 descriptor??
[  223.035965][   T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  223.133649][ T7735] xt_time: unknown flags 0xc
[  223.205142][   T25] usb 5-1: Using ep0 maxpacket: 16
[  223.222527][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.241731][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.271015][   T25] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  223.302988][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.337717][   T25] usb 5-1: config 0 descriptor??
[  223.369770][    T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  223.386912][    T8] usb 2-1: USB disconnect, device number 9
[  223.405354][    T8] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[  223.688071][   T51] pegasus 1-1:0.0: probe with driver pegasus failed with error -32
[  224.015178][ T7779] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  224.027410][   T25] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0
[  224.084527][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  224.084547][   T29] audit: type=1326 audit(1731828151.998:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.2.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731db7e719 code=0x0
[  224.270158][ T7786] input: syz1 as /devices/virtual/input/input11
[  224.528198][ T7789] overlayfs: missing 'lowerdir'
[  224.632053][   T51] usb 1-1: USB disconnect, device number 12
[  224.924176][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.935699][ T7795] batadv_slave_0: entered promiscuous mode
[  225.148528][ T3425] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  225.388340][ T7801] hpfs: Bad magic ... probably not HPFS
[  226.044402][   T51] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  226.112950][   T29] audit: type=1326 audit(1731828154.028:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.196135][ T7810] 9pnet_fd: Insufficient options for proto=fd
[  226.202571][   T29] audit: type=1326 audit(1731828154.028:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.264349][   T29] audit: type=1326 audit(1731828154.058:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.366685][   T29] audit: type=1326 audit(1731828154.058:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.415711][   T29] audit: type=1326 audit(1731828154.068:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.437950][   T29] audit: type=1326 audit(1731828154.068:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.512953][   T29] audit: type=1326 audit(1731828154.068:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  226.597036][   T29] audit: type=1326 audit(1731828154.068:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7803 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053237e719 code=0x7ffc0000
[  227.061574][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  227.554645][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  227.624432][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  228.744436][    T8] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  228.752599][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.762998][    T8] usb 2-1: config 0 has no interface number 0
[  228.769390][    T8] usb 2-1: too many endpoints for config 0 interface 32 altsetting 119: 37, using maximum allowed: 30
[  228.780718][    T8] usb 2-1: config 0 interface 32 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  228.794315][    T8] usb 2-1: config 0 interface 32 has no altsetting 0
[  228.801033][    T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=e4.df
[  228.810422][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.822666][    T8] usb 2-1: config 0 descriptor??
[  229.008784][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'.
[  229.042971][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'.
[  229.104352][ T7818] cgroup: none used incorrectly
[  229.111215][    T8] usb 2-1: USB disconnect, device number 10
[  229.293839][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[  229.331485][ T7849] netlink: 'syz.3.507': attribute type 29 has an invalid length.
[  229.342200][ T7840] FAULT_INJECTION: forcing a failure.
[  229.342200][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.355823][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.0.508 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  229.366434][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  229.376508][ T7840] Call Trace:
[  229.379791][ T7840]  <TASK>
[  229.382719][ T7840]  dump_stack_lvl+0x241/0x360
[  229.387403][ T7840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.392606][ T7840]  ? __pfx__printk+0x10/0x10
[  229.397201][ T7840]  ? snprintf+0xda/0x120
[  229.401470][ T7840]  should_fail_ex+0x3b0/0x4e0
[  229.406174][ T7840]  _copy_to_user+0x31/0xb0
[  229.410603][ T7840]  simple_read_from_buffer+0xca/0x150
[  229.415985][ T7840]  proc_fail_nth_read+0x1e9/0x250
[  229.421033][ T7840]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  229.426595][ T7840]  ? rw_verify_area+0x568/0x6f0
[  229.431451][ T7840]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  229.437000][ T7840]  vfs_read+0x1fc/0xb70
[  229.441169][ T7840]  ? fdget_pos+0x24e/0x320
[  229.445613][ T7840]  ? __pfx_vfs_read+0x10/0x10
[  229.450309][ T7840]  ? __fget_files+0x3f3/0x470
[  229.455002][ T7840]  ? fdget_pos+0x24e/0x320
[  229.459427][ T7840]  ksys_read+0x183/0x2b0
[  229.463682][ T7840]  ? __pfx_ksys_read+0x10/0x10
[  229.468462][ T7840]  ? do_syscall_64+0x100/0x230
[  229.473241][ T7840]  ? do_syscall_64+0xb6/0x230
[  229.477924][ T7840]  do_syscall_64+0xf3/0x230
[  229.482432][ T7840]  ? clear_bhb_loop+0x35/0x90
[  229.487119][ T7840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.493019][ T7840] RIP: 0033:0x7efc29b7d15c
[  229.497441][ T7840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  229.517050][ T7840] RSP: 002b:00007efc2a8f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  229.525462][ T7840] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7d15c
[  229.533436][ T7840] RDX: 000000000000000f RSI: 00007efc2a8f50a0 RDI: 0000000000000004
[  229.541402][ T7840] RBP: 00007efc2a8f5090 R08: 0000000000000000 R09: 0000000000000000
[  229.549370][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.557337][ T7840] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68
[  229.565314][ T7840]  </TASK>
[  229.568647][ T7849] netlink: 'syz.3.507': attribute type 3 has an invalid length.
[  229.576869][ T7849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.507'.
[  229.650818][ T7852] 9pnet_fd: Insufficient options for proto=fd
[  229.670150][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'.
[  230.310197][ T7870] program syz.0.513 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.722026][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  230.743069][ T7867] overlayfs: missing 'lowerdir'
[  230.888255][ T7873] fuse: Bad value for 'fd'
[  231.202965][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'.
[  231.223173][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'.
[  231.244622][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'.
[  231.689620][   T25] usb 5-1: USB disconnect, device number 10
[  231.975895][ T7897] netlink: 276 bytes leftover after parsing attributes in process `syz.4.520'.
[  232.784967][ T7918] 9pnet_fd: Insufficient options for proto=fd
[  232.804754][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  232.879916][ T7923] fuse: Bad value for 'fd'
[  233.926133][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  234.094371][ T5943] usb 2-1: Using ep0 maxpacket: 32
[  234.117465][ T5943] usb 2-1: config 1 has an invalid interface number: 207 but max is 0
[  234.159088][ T5943] usb 2-1: config 1 has no interface number 0
[  234.191581][ T5943] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.f7
[  234.214537][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.248032][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.533'.
[  234.257210][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'.
[  234.426869][ T7945] overlayfs: failed to resolve './file1': -2
[  234.547901][ T5943] usb 2-1: Product: syz
[  234.797414][ T7948] hpfs: Bad magic ... probably not HPFS
[  234.944566][ T5943] usb 2-1: Manufacturer: syz
[  234.949255][ T5943] usb 2-1: SerialNumber: syz
[  235.186909][ T7915] program syz.3.526 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.232603][ T7954] input: syz1 as /devices/virtual/input/input12
[  235.347641][   T29] audit: type=1107 audit(1731828163.258:44): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='�m��І����uvj�<먔^�M��4�-�Db�c��a���#'
[  235.399958][ T7956] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  235.634663][ T7962] overlayfs: failed to resolve './file1': -2
[  236.141210][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  236.324987][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  236.700842][    T8] usb 5-1: device descriptor read/64, error -71
[  236.837216][ T5943] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware
[  237.469846][ T5943] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  237.544350][    T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  237.559663][ T7977] 9pnet_fd: Insufficient options for proto=fd
[  237.604955][ T5943] dib0700: firmware download failed at 7 with -22
[  237.633248][ T5943] usb 2-1: USB disconnect, device number 11
[  237.720535][    T8] usb 5-1: device descriptor read/64, error -71
[  237.903529][    T8] usb usb5-port1: attempt power cycle
[  238.257017][    T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  238.567786][ T1135] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  238.656452][    T8] usb 5-1: device descriptor read/8, error -71
[  238.877025][ T7999] tls_set_device_offload: netdev not found
[  240.042325][ T8011] hpfs: Bad magic ... probably not HPFS
[  240.063561][ T8013] 9pnet_fd: Insufficient options for proto=fd
[  240.397973][ T8010] overlay: filesystem on ./bus not supported as upperdir
[  241.992018][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  243.910413][ T8063] FAULT_INJECTION: forcing a failure.
[  243.910413][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.911843][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.2.568 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  243.911865][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  243.911876][ T8063] Call Trace:
[  243.911882][ T8063]  <TASK>
[  243.911898][ T8063]  dump_stack_lvl+0x241/0x360
[  243.911925][ T8063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.911945][ T8063]  ? __pfx__printk+0x10/0x10
[  243.911972][ T8063]  should_fail_ex+0x3b0/0x4e0
[  243.911993][ T8063]  strncpy_from_user+0x36/0x260
[  243.912012][ T8063]  strncpy_from_user_nofault+0x71/0x140
[  243.912031][ T8063]  bpf_probe_read_compat_str+0xe9/0x180
[  243.912056][ T8063]  ? bpf_trace_run2+0x1fc/0x540
[  243.912077][ T8063]  bpf_prog_1ccb8ba97563bf77+0x41/0x64
[  243.912093][ T8063]  bpf_trace_run2+0x2ec/0x540
[  243.912109][ T8063]  ? __pfx_bpf_trace_run2+0x10/0x10
[  243.912129][ T8063]  trace_tlb_flush+0x118/0x140
[  243.912143][ T8063]  switch_mm_irqs_off+0x77a/0xa70
[  243.912154][ T8063]  ? psi_task_switch+0x387/0x7a0
[  243.912170][ T8063]  ? __pfx_switch_mm_irqs_off+0x10/0x10
[  243.912188][ T8063]  __schedule+0x10c7/0x4bd0
[  243.912200][ T8063]  ? trace_irq_enable+0x2c/0x120
[  243.912216][ T8063]  ? lockdep_hardirqs_on+0x99/0x150
[  243.912231][ T8063]  ? queue_work_on+0x25f/0x380
[  243.912254][ T8063]  ? __pfx___schedule+0x10/0x10
[  243.912271][ T8063]  ? soft_cursor+0xa9e/0xcd0
[  243.912291][ T8063]  preempt_schedule_notrace+0x100/0x140
[  243.912310][ T8063]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  243.912329][ T8063]  preempt_schedule_notrace_thunk+0x1a/0x30
[  243.912344][ T8063]  ? lock_acquire+0xd4/0x550
[  243.912360][ T8063]  rcu_is_watching+0x7e/0xb0
[  243.912373][ T8063]  lock_acquire+0xe3/0x550
[  243.912391][ T8063]  ? __pfx_lock_acquire+0x10/0x10
[  243.912406][ T8063]  ? __pfx_bit_cursor+0x10/0x10
[  243.912424][ T8063]  ? hide_cursor+0x193/0x4a0
[  243.912438][ T8063]  ? __pfx_hide_cursor+0x10/0x10
[  243.912452][ T8063]  ? atomic_notifier_call_chain+0x26/0x180
[  243.912468][ T8063]  atomic_notifier_call_chain+0x43/0x180
[  243.912483][ T8063]  ? atomic_notifier_call_chain+0x26/0x180
[  243.912498][ T8063]  do_con_write+0xab1/0x4c30
[  243.912516][ T8063]  ? desc_read+0x200/0x3f0
[  243.912530][ T8063]  ? desc_read+0x1a2/0x3f0
[  243.912567][ T8063]  ? __pfx_do_con_write+0x10/0x10
[  243.912594][ T8063]  ? __mutex_trylock_common+0x183/0x2e0
[  243.912607][ T8063]  ? __pfx___might_resched+0x10/0x10
[  243.912623][ T8063]  ? __pfx___mutex_trylock_common+0x10/0x10
[  243.912640][ T8063]  con_put_char+0x95/0xf0
[  243.912654][ T8063]  ? __pfx_con_put_char+0x10/0x10
[  243.912668][ T8063]  ? __mutex_lock+0x2ef/0xd70
[  243.912684][ T8063]  ? __mutex_unlock_slowpath+0x21d/0x750
[  243.912697][ T8063]  ? __pfx_con_put_char+0x10/0x10
[  243.912713][ T8063]  tty_put_char+0xe3/0x190
[  243.912729][ T8063]  ? __pfx_tty_put_char+0x10/0x10
[  243.912743][ T8063]  ? __pfx_bit_cursor+0x10/0x10
[  243.912761][ T8063]  do_output_char+0x6b1/0x970
[  243.912776][ T8063]  n_tty_write+0xe06/0x1230
[  243.912799][ T8063]  ? __pfx_n_tty_write+0x10/0x10
[  243.912811][ T8063]  ? __pfx_woken_wake_function+0x10/0x10
[  243.912827][ T8063]  ? __virt_addr_valid+0x183/0x530
[  243.912838][ T8063]  ? __virt_addr_valid+0x183/0x530
[  243.912848][ T8063]  ? __virt_addr_valid+0x45f/0x530
[  243.912860][ T8063]  ? __phys_addr_symbol+0x2f/0x70
[  243.912870][ T8063]  ? __check_object_size+0x48e/0x900
[  243.912884][ T8063]  ? __pfx_n_tty_write+0x10/0x10
[  243.912894][ T8063]  file_tty_write+0x546/0x9b0
[  243.912914][ T8063]  vfs_write+0xaeb/0xd30
[  243.912931][ T8063]  ? __pfx_tty_write+0x10/0x10
[  243.912945][ T8063]  ? __pfx_vfs_write+0x10/0x10
[  243.912969][ T8063]  ? fdget_pos+0x19a/0x320
[  243.912986][ T8063]  ksys_write+0x183/0x2b0
[  243.913001][ T8063]  ? __pfx_ksys_write+0x10/0x10
[  243.913015][ T8063]  ? do_syscall_64+0x100/0x230
[  243.913030][ T8063]  ? do_syscall_64+0xb6/0x230
[  243.913047][ T8063]  do_syscall_64+0xf3/0x230
[  243.913062][ T8063]  ? clear_bhb_loop+0x35/0x90
[  243.913077][ T8063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.913090][ T8063] RIP: 0033:0x7f731db7e719
[  243.913100][ T8063] Code: Unable to access opcode bytes at 0x7f731db7e6ef.
[  243.913106][ T8063] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  243.913121][ T8063] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719
[  243.913130][ T8063] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000004
[  243.913138][ T8063] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000
[  243.913146][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.913153][ T8063] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98
[  243.913171][ T8063]  </TASK>
[  244.246992][ T8066] tls_set_device_offload: netdev not found
[  244.342178][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  245.533003][ T8084] fuse: Unknown parameter ''
[  245.555695][ T8084] netlink: 176 bytes leftover after parsing attributes in process `syz.3.573'.
[  245.610368][ T8086] trusted_key: encrypted_key: insufficient parameters specified
[  245.644717][ T5883] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  245.799935][ T5883] usb 2-1: Using ep0 maxpacket: 32
[  245.811508][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short
[  245.812749][ T5883] usb 2-1: config 127 has an invalid interface number: 25 but max is 0
[  245.812776][ T5883] usb 2-1: config 127 has no interface number 0
[  245.812802][ T5883] usb 2-1: config 127 interface 25 has no altsetting 0
[  245.820490][ T5883] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11
[  245.820521][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.820543][ T5883] usb 2-1: Product: syz
[  245.820560][ T5883] usb 2-1: Manufacturer: syz
[  245.820577][ T5883] usb 2-1: SerialNumber: syz
[  246.136036][ T5883] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930
[  246.789447][ T5883] usb 2-1: reset high-speed USB device number 12 using dummy_hcd
[  247.716859][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'.
[  248.210409][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  248.297923][ T8108] overlay: ./file0 is not a directory
[  248.307962][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short
[  248.321790][ T5883] usb 2-1: device firmware changed
[  248.329956][ T5883] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19!
[  248.347725][ T5883] usb 2-1: USB disconnect, device number 12
[  248.455626][ T8116] overlayfs: missing 'lowerdir'
[  248.504311][ T5943] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  248.606169][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'.
[  248.621729][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'.
[  248.674515][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  248.706482][ T5943] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  248.731896][ T5943] usb 4-1: config 0 has no interface number 0
[  248.758183][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  248.794674][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  248.818361][ T5943] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  248.849693][ T5943] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F
[  249.011660][ T5943] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  249.028098][ T5943] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[  249.188765][ T5943] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82
[  249.198110][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.213610][ T5943] usb 4-1: Product: syz
[  249.218770][ T5943] usb 4-1: Manufacturer: syz
[  249.223965][ T5943] usb 4-1: SerialNumber: syz
[  249.630997][ T5943] usb 4-1: config 0 descriptor??
[  249.703781][ T8134] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  250.084695][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  250.654807][ T8109] syz.0.579: vmalloc error: size 566231040, failed to allocated page array size 1105920, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  250.686593][ T8109] CPU: 1 UID: 0 PID: 8109 Comm: syz.0.579 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  250.697235][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  250.707285][ T8109] Call Trace:
[  250.710550][ T8109]  <TASK>
[  250.713491][ T8109]  dump_stack_lvl+0x241/0x360
[  250.718166][ T8109]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.723355][ T8109]  ? __pfx__printk+0x10/0x10
[  250.727944][ T8109]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  250.734376][ T8109]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  250.740869][ T8109]  warn_alloc+0x278/0x410
[  250.745213][ T8109]  ? __pfx_warn_alloc+0x10/0x10
[  250.750098][ T8109]  ? vb2_vmalloc_alloc+0xf2/0x340
[  250.755152][ T8109]  ? __get_vm_area_node+0x23d/0x270
[  250.760364][ T8109]  __vmalloc_node_range_noprof+0x691/0x13f0
[  250.766278][ T8109]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  250.772609][ T8109]  ? __kasan_kmalloc+0x98/0xb0
[  250.777809][ T8109]  ? vb2_vmalloc_alloc+0xb5/0x340
[  250.782840][ T8109]  vmalloc_user_noprof+0x74/0x80
[  250.787781][ T8109]  ? vb2_vmalloc_alloc+0xf2/0x340
[  250.792807][ T8109]  vb2_vmalloc_alloc+0xf2/0x340
[  250.797838][ T8109]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  250.803300][ T8109]  __vb2_queue_alloc+0xa0b/0x16f0
[  250.808343][ T8109]  vb2_core_reqbufs+0xd2e/0x17c0
[  250.813295][ T8109]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  250.818671][ T8109]  ? trace_contention_end+0x3c/0x120
[  250.823957][ T8109]  ? __mutex_lock+0x2ef/0xd70
[  250.828640][ T8109]  ? vb2_verify_memory_type+0x1f7/0x570
[  250.834216][ T8109]  vb2_ioctl_reqbufs+0x4e3/0x830
[  250.839166][ T8109]  __video_do_ioctl+0xc23/0xdd0
[  250.844025][ T8109]  ? __pfx___video_do_ioctl+0x10/0x10
[  250.849401][ T8109]  ? smack_log+0x123/0x540
[  250.853822][ T8109]  ? __might_fault+0xc6/0x120
[  250.858504][ T8109]  video_usercopy+0x89b/0x1180
[  250.863272][ T8109]  ? __pfx___video_do_ioctl+0x10/0x10
[  250.868640][ T8109]  ? __pfx_video_usercopy+0x10/0x10
[  250.873844][ T8109]  ? smack_file_ioctl+0x2f7/0x3a0
[  250.878882][ T8109]  ? __fget_files+0x3f3/0x470
[  250.883565][ T8109]  v4l2_ioctl+0x189/0x1e0
[  250.887895][ T8109]  ? __pfx_v4l2_ioctl+0x10/0x10
[  250.892743][ T8109]  __se_sys_ioctl+0xf9/0x170
[  250.897341][ T8109]  do_syscall_64+0xf3/0x230
[  250.901873][ T8109]  ? clear_bhb_loop+0x35/0x90
[  250.906552][ T8109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.912444][ T8109] RIP: 0033:0x7efc29b7e719
[  250.916861][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.936464][ T8109] RSP: 002b:00007efc2a8f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.944896][ T8109] RAX: ffffffffffffffda RBX: 00007efc29d35f80 RCX: 00007efc29b7e719
[  250.952884][ T8109] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000005
[  250.960876][ T8109] RBP: 00007efc29bf175e R08: 0000000000000000 R09: 0000000000000000
[  250.968858][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.976832][ T8109] R13: 0000000000000000 R14: 00007efc29d35f80 R15: 00007fff3d6dce68
[  250.984820][ T8109]  </TASK>
[  251.024472][ T8109] Mem-Info:
[  251.028908][ T8109] active_anon:348 inactive_anon:13043 isolated_anon:0
[  251.028908][ T8109]  active_file:23325 inactive_file:36088 isolated_file:0
[  251.028908][ T8109]  unevictable:768 dirty:303 writeback:0
[  251.028908][ T8109]  slab_reclaimable:10134 slab_unreclaimable:100227
[  251.028908][ T8109]  mapped:31756 shmem:9913 pagetables:803
[  251.028908][ T8109]  sec_pagetables:0 bounce:0
[  251.028908][ T8109]  kernel_misc_reclaimable:0
[  251.028908][ T8109]  free:1306246 free_pcp:1510 free_cma:0
[  251.081574][ T8109] Node 0 active_anon:1392kB inactive_anon:52328kB active_file:93228kB inactive_file:144352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127140kB dirty:1224kB writeback:0kB shmem:38116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11364kB pagetables:3276kB sec_pagetables:0kB all_unreclaimable? no
[  251.128727][ T8109] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  251.159186][ T8109] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  251.191100][ T8109] lowmem_reserve[]: 0 2465 2466 0 0
[  251.196605][ T8109] Node 0 DMA32 free:1306560kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1388kB inactive_anon:52828kB active_file:92448kB inactive_file:144300kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:664kB local_pcp:360kB free_cma:0kB
[  251.271283][ T8109] lowmem_reserve[]: 0 0 0 0 0
[  251.278540][ T8109] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  251.305440][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.316369][ T8109] lowmem_reserve[]: 0 0 0 0 0
[  251.515067][ T8109] Node 1 Normal free:3902816kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:4320kB local_pcp:4288kB free_cma:0kB
[  252.217030][ T5943] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk.
[  252.226781][ T5943] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  252.238378][ T8109] lowmem_reserve[]: 0 0 0 0 0
[  252.243104][ T8109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  252.245097][ T5943] usb 4-1: USB disconnect, device number 6
[  252.261902][ T8109] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 27*16kB (UME) 294*32kB (UME) 10*64kB (UME) 51*128kB (UME) 37*256kB (ME) 40*512kB (UME) 19*1024kB (UME) 9*2048kB (UME) 298*4096kB (M) = 1305472kB
[  252.280238][ T8109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  252.292074][ T8109] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 38*16kB (UME) 185*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3902868kB
[  252.314930][ T8109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  252.336450][ T8109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  252.370295][ T8109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  252.562616][ T8109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  252.803587][ T8109] 66608 total pagecache pages
[  252.903888][ T8109] 0 pages in swap cache
[  252.968660][ T8109] Free swap  = 124760kB
[  252.989844][ T8109] Total swap = 124996kB
[  252.994455][ T8109] 2097051 pages RAM
[  252.998599][ T8109] 0 pages HighMem/MovableOnly
[  253.003598][ T8109] 427074 pages reserved
[  253.027520][ T8109] 0 pages cma reserved
[  253.662844][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'.
[  254.048465][   T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  256.152452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.158879][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.183134][ T3425] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  256.245507][ T8196] FAULT_INJECTION: forcing a failure.
[  256.245507][ T8196] name failslab, interval 1, probability 0, space 0, times 0
[  256.312905][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.3.605 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  256.323570][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  256.333662][ T8196] Call Trace:
[  256.336965][ T8196]  <TASK>
[  256.339917][ T8196]  dump_stack_lvl+0x241/0x360
[  256.344635][ T8196]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.349870][ T8196]  ? __pfx__printk+0x10/0x10
[  256.354500][ T8196]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  256.360503][ T8196]  ? __pfx___might_resched+0x10/0x10
[  256.365837][ T8196]  should_fail_ex+0x3b0/0x4e0
[  256.370521][ T8196]  should_failslab+0xac/0x100
[  256.375211][ T8196]  ? __alloc_skb+0x1c3/0x440
[  256.379810][ T8196]  kmem_cache_alloc_node_noprof+0x71/0x320
[  256.385672][ T8196]  __alloc_skb+0x1c3/0x440
[  256.390105][ T8196]  ? __pfx___alloc_skb+0x10/0x10
[  256.395059][ T8196]  ? __pfx___might_resched+0x10/0x10
[  256.400359][ T8196]  alloc_skb_with_frags+0xc3/0x820
[  256.405486][ T8196]  sock_alloc_send_pskb+0x91a/0xa60
[  256.410701][ T8196]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  256.416437][ T8196]  ? dev_get_by_index+0x23/0x2d0
[  256.421401][ T8196]  packet_sendmsg+0x3f33/0x6860
[  256.426256][ T8196]  ? mark_lock+0x9a/0x360
[  256.430590][ T8196]  ? mark_lock+0x9a/0x360
[  256.434921][ T8196]  ? __lock_acquire+0x1384/0x2050
[  256.439968][ T8196]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  256.445704][ T8196]  ? tomoyo_socket_sendmsg_permission+0x288/0x420
[  256.452132][ T8196]  ? __pfx_lock_release+0x10/0x10
[  256.457162][ T8196]  ? __pfx_packet_sendmsg+0x10/0x10
[  256.462377][ T8196]  ? __fget_files+0x29/0x470
[  256.467070][ T8196]  ? __might_fault+0xaa/0x120
[  256.471767][ T8196]  ? __pfx_packet_sendmsg+0x10/0x10
[  256.476974][ T8196]  __sock_sendmsg+0x221/0x270
[  256.481658][ T8196]  __sys_sendto+0x39b/0x4f0
[  256.486170][ T8196]  ? __pfx___sys_sendto+0x10/0x10
[  256.491192][ T8196]  ? __mutex_unlock_slowpath+0x21d/0x750
[  256.496849][ T8196]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  256.502843][ T8196]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  256.509183][ T8196]  __x64_sys_sendto+0xde/0x100
[  256.513973][ T8196]  do_syscall_64+0xf3/0x230
[  256.518496][ T8196]  ? clear_bhb_loop+0x35/0x90
[  256.523177][ T8196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.529074][ T8196] RIP: 0033:0x7f053237e719
[  256.533490][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.553105][ T8196] RSP: 002b:00007f05331b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  256.561525][ T8196] RAX: ffffffffffffffda RBX: 00007f0532535f80 RCX: 00007f053237e719
[  256.569496][ T8196] RDX: 0000000000010012 RSI: 0000000020000180 RDI: 0000000000000003
[  256.577469][ T8196] RBP: 00007f05331b5090 R08: 0000000020000140 R09: 0000000000000014
[  256.585436][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.593402][ T8196] R13: 0000000000000000 R14: 00007f0532535f80 R15: 00007ffcd76f7e78
[  256.601379][ T8196]  </TASK>
[  256.928009][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'.
[  259.685906][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  259.873548][ T8246] trusted_key: encrypted_key: insufficient parameters specified
[  261.441046][ T8259] block device autoloading is deprecated and will be removed.
[  261.606859][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  261.644906][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'.
[  261.668536][ T8272] Bluetooth: MGMT ver 1.23
[  262.481242][ T8279] overlayfs: failed to resolve './file1': -2
[  264.008182][ T8293] trusted_key: encrypted_key: insufficient parameters specified
[  264.692701][ T8311] FAULT_INJECTION: forcing a failure.
[  264.692701][ T8311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.750305][ T8311] CPU: 1 UID: 0 PID: 8311 Comm: syz.2.642 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  264.760950][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  264.771031][ T8311] Call Trace:
[  264.774338][ T8311]  <TASK>
[  264.777286][ T8311]  dump_stack_lvl+0x241/0x360
[  264.781999][ T8311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.787232][ T8311]  ? __pfx__printk+0x10/0x10
[  264.791851][ T8311]  ? __pfx_lock_release+0x10/0x10
[  264.796921][ T8311]  ? __lock_acquire+0x1384/0x2050
[  264.801979][ T8311]  should_fail_ex+0x3b0/0x4e0
[  264.806694][ T8311]  _copy_from_user+0x2f/0xc0
[  264.811309][ T8311]  kstrtouint_from_user+0xc6/0x190
[  264.816454][ T8311]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  264.822213][ T8311]  ? __pfx_lock_acquire+0x10/0x10
[  264.827265][ T8311]  proc_fail_nth_write+0xaa/0x2d0
[  264.832300][ T8311]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  264.838193][ T8311]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  264.843831][ T8311]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  264.849463][ T8311]  vfs_write+0x2a3/0xd30
[  264.853709][ T8311]  ? fdget_pos+0x24e/0x320
[  264.858129][ T8311]  ? __pfx_vfs_write+0x10/0x10
[  264.862898][ T8311]  ? __fget_files+0x3f3/0x470
[  264.867580][ T8311]  ? fdget_pos+0x24e/0x320
[  264.872001][ T8311]  ksys_write+0x183/0x2b0
[  264.876341][ T8311]  ? __pfx_ksys_write+0x10/0x10
[  264.881190][ T8311]  ? do_syscall_64+0x100/0x230
[  264.885959][ T8311]  ? do_syscall_64+0xb6/0x230
[  264.890637][ T8311]  do_syscall_64+0xf3/0x230
[  264.895142][ T8311]  ? clear_bhb_loop+0x35/0x90
[  264.899840][ T8311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.905731][ T8311] RIP: 0033:0x7f731db7d1ff
[  264.910145][ T8311] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  264.929762][ T8311] RSP: 002b:00007f731e8ba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  264.938177][ T8311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f731db7d1ff
[  264.946143][ T8311] RDX: 0000000000000001 RSI: 00007f731e8ba0a0 RDI: 0000000000000004
[  264.954107][ T8311] RBP: 00007f731e8ba090 R08: 0000000000000000 R09: 0000000000000000
[  264.962074][ T8311] R10: 0000000024008094 R11: 0000000000000293 R12: 0000000000000001
[  264.970046][ T8311] R13: 0000000000000000 R14: 00007f731dd36130 R15: 00007ffd0ec3bb98
[  264.978027][ T8311]  </TASK>
[  265.154727][ T8319] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  265.163133][ T8319] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  265.174876][ T8319] overlayfs: missing 'lowerdir'
[  265.281796][    T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  265.312404][ T8324] afs: Unknown parameter 'posixacl'
[  265.352788][ T8324] sctp: [Deprecated]: syz.1.645 (pid 8324) Use of int in maxseg socket option.
[  265.352788][ T8324] Use struct sctp_assoc_value instead
[  265.361484][    T8] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  265.451662][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  265.555421][ T5884] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  265.816767][ T8333] tls_set_device_offload: netdev not found
[  266.027695][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short
[  266.664458][ T5884] usb 3-1: no configurations
[  266.669116][ T5884] usb 3-1: can't read configurations, error -22
[  266.721922][ T8335] overlayfs: missing 'workdir'
[  267.372881][   T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  268.254293][ T5883] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  268.414304][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  268.422288][ T5883] usb 1-1: config 2 has an invalid interface number: 20 but max is 0
[  268.430875][ T5883] usb 1-1: config 2 has no interface number 0
[  268.442226][ T5883] usb 1-1: config 2 interface 20 altsetting 140 bulk endpoint 0x2 has invalid maxpacket 8
[  268.462905][ T5883] usb 1-1: config 2 interface 20 altsetting 140 bulk endpoint 0xC has invalid maxpacket 16
[  268.499985][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x8 has invalid maxpacket 1576, setting to 64
[  268.532120][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has an endpoint descriptor with address 0xDD, changing to 0x8D
[  268.545397][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x8D has invalid maxpacket 43717, setting to 64
[  268.556743][ T5883] usb 1-1: config 2 interface 20 altsetting 140 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  268.568126][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has a duplicate endpoint with address 0xD, skipping
[  268.579251][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has a duplicate endpoint with address 0x9, skipping
[  268.590256][ T5883] usb 1-1: config 2 interface 20 altsetting 140 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  268.603793][ T5883] usb 1-1: config 2 interface 20 has no altsetting 0
[  268.620075][ T5883] usb 1-1: New USB device found, idVendor=1410, idProduct=2420, bcdDevice=b0.ee
[  268.630058][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.640720][ T5883] usb 1-1: Product: syz
[  268.645379][ T5883] usb 1-1: Manufacturer: 釬뇒ᇫﮞၞ꺬챛죿ᓠ⸀ᔃ왭㗒䒅遷褛뫯鑗꘮珃盋觨䅶瑭乺佐⬔싍눠ꔕὣแѢꄁၼ녵
[  268.660524][ T5883] usb 1-1: SerialNumber: syz
[  268.697233][ T8348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  268.713295][ T8348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  268.802333][ T8366] overlayfs: missing 'workdir'
[  268.815732][ T8369] IPVS: set_ctl: invalid protocol: 95 172.20.20.170:20004
[  269.565216][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.576765][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.617402][ T5883] option 1-1:2.20: GSM modem (1-port) converter detected
[  269.730038][ T5883] usb 1-1: USB disconnect, device number 13
[  269.748974][ T5883] option 1-1:2.20: device disconnected
[  271.234631][ T6687] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  271.368631][ T8413] overlayfs: missing 'lowerdir'
[  271.545782][ T8423] capability: warning: `syz.2.671' uses 32-bit capabilities (legacy support in use)
[  271.581986][ T8423] FAULT_INJECTION: forcing a failure.
[  271.581986][ T8423] name failslab, interval 1, probability 0, space 0, times 0
[  271.582130][ T8416] syzkaller0: entered promiscuous mode
[  271.633982][ T8416] syzkaller0: entered allmulticast mode
[  271.645238][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.2.671 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  271.655869][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  271.665952][ T8423] Call Trace:
[  271.669253][ T8423]  <TASK>
[  271.672201][ T8423]  dump_stack_lvl+0x241/0x360
[  271.676912][ T8423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.682136][ T8423]  ? __pfx__printk+0x10/0x10
[  271.686752][ T8423]  ? __kmalloc_node_noprof+0xb7/0x440
[  271.692410][ T8423]  ? __pfx___might_resched+0x10/0x10
[  271.697729][ T8423]  should_fail_ex+0x3b0/0x4e0
[  271.702435][ T8423]  should_failslab+0xac/0x100
[  271.707133][ T8423]  __kmalloc_node_noprof+0xdf/0x440
[  271.712353][ T8423]  ? __vmalloc_node_range_noprof+0x5c3/0x13f0
[  271.718457][ T8423]  __vmalloc_node_range_noprof+0x5c3/0x13f0
[  271.724379][ T8423]  ? mark_lock+0x9a/0x360
[  271.728745][ T8423]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.735103][ T8423]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[  271.740670][ T8423]  __vmalloc_noprof+0x79/0x90
[  271.745378][ T8423]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[  271.750948][ T8423]  bpf_prog_alloc_no_stats+0x4d/0x4b0
[  271.756342][ T8423]  ? bpf_prog_alloc+0x28/0x1b0
[  271.761141][ T8423]  bpf_prog_alloc+0x3a/0x1b0
[  271.765756][ T8423]  bpf_prog_load+0x7f7/0x20f0
[  271.770470][ T8423]  ? __pfx_bpf_prog_load+0x10/0x10
[  271.775604][ T8423]  ? __pfx___might_resched+0x10/0x10
[  271.780929][ T8423]  ? __might_fault+0xc6/0x120
[  271.785719][ T8423]  __sys_bpf+0x4ee/0x810
[  271.789987][ T8423]  ? __pfx___sys_bpf+0x10/0x10
[  271.794785][ T8423]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.800795][ T8423]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.807149][ T8423]  ? do_syscall_64+0x100/0x230
[  271.811944][ T8423]  __x64_sys_bpf+0x7c/0x90
[  271.816386][ T8423]  do_syscall_64+0xf3/0x230
[  271.820914][ T8423]  ? clear_bhb_loop+0x35/0x90
[  271.825614][ T8423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.831528][ T8423] RIP: 0033:0x7f731db7e719
[  271.835964][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.855598][ T8423] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  271.864045][ T8423] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719
[  271.872046][ T8423] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[  271.880041][ T8423] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000
[  271.888037][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.896029][ T8423] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98
[  271.904035][ T8423]  </TASK>
[  272.036775][ T8435] netlink: 276 bytes leftover after parsing attributes in process `syz.3.677'.
[  272.437852][ T8423] syz.2.671: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  272.455515][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.2.671 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  272.466148][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  272.476229][ T8423] Call Trace:
[  272.479525][ T8423]  <TASK>
[  272.482476][ T8423]  dump_stack_lvl+0x241/0x360
[  272.487184][ T8423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.492410][ T8423]  ? __pfx__printk+0x10/0x10
[  272.497028][ T8423]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  272.503464][ T8423]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  272.509989][ T8423]  warn_alloc+0x278/0x410
[  272.514343][ T8423]  ? __pfx___might_resched+0x10/0x10
[  272.519657][ T8423]  ? __pfx_warn_alloc+0x10/0x10
[  272.524547][ T8423]  ? rcu_is_watching+0x15/0xb0
[  272.529333][ T8423]  ? trace_kmalloc+0x1f/0xd0
[  272.533943][ T8423]  ? __vmalloc_node_range_noprof+0x5c3/0x13f0
[  272.540034][ T8423]  __vmalloc_node_range_noprof+0x691/0x13f0
[  272.545964][ T8423]  ? mark_lock+0x9a/0x360
[  272.550331][ T8423]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  272.556689][ T8423]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[  272.562258][ T8423]  __vmalloc_noprof+0x79/0x90
[  272.566967][ T8423]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[  272.572545][ T8423]  bpf_prog_alloc_no_stats+0x4d/0x4b0
[  272.577941][ T8423]  ? bpf_prog_alloc+0x28/0x1b0
[  272.582731][ T8423]  bpf_prog_alloc+0x3a/0x1b0
[  272.587342][ T8423]  bpf_prog_load+0x7f7/0x20f0
[  272.592059][ T8423]  ? __pfx_bpf_prog_load+0x10/0x10
[  272.597216][ T8423]  ? __pfx___might_resched+0x10/0x10
[  272.602546][ T8423]  ? __might_fault+0xc6/0x120
[  272.607252][ T8423]  __sys_bpf+0x4ee/0x810
[  272.611520][ T8423]  ? __pfx___sys_bpf+0x10/0x10
[  272.616321][ T8423]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  272.622330][ T8423]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  272.628684][ T8423]  ? do_syscall_64+0x100/0x230
[  272.633474][ T8423]  __x64_sys_bpf+0x7c/0x90
[  272.637920][ T8423]  do_syscall_64+0xf3/0x230
[  272.642448][ T8423]  ? clear_bhb_loop+0x35/0x90
[  272.647146][ T8423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.653059][ T8423] RIP: 0033:0x7f731db7e719
[  272.657491][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.677132][ T8423] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  272.685580][ T8423] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719
[  272.694004][ T8423] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005
[  272.701995][ T8423] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000
[  272.709981][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.717970][ T8423] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98
[  272.725973][ T8423]  </TASK>
[  272.731804][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  272.834297][ T8423] Mem-Info:
[  272.837534][ T8423] active_anon:324 inactive_anon:19895 isolated_anon:0
[  272.837534][ T8423]  active_file:23827 inactive_file:35694 isolated_file:0
[  272.837534][ T8423]  unevictable:768 dirty:427 writeback:0
[  272.837534][ T8423]  slab_reclaimable:10260 slab_unreclaimable:101525
[  272.837534][ T8423]  mapped:22429 shmem:15970 pagetables:837
[  272.837534][ T8423]  sec_pagetables:0 bounce:0
[  272.837534][ T8423]  kernel_misc_reclaimable:0
[  272.837534][ T8423]  free:1315775 free_pcp:1399 free_cma:0
[  272.934313][ T8423] Node 0 active_anon:1296kB inactive_anon:78180kB active_file:95236kB inactive_file:142776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89716kB dirty:1704kB writeback:0kB shmem:60444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no
[  273.010122][ T8423] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  273.119315][ T8423] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.146868][    C1] vkms_vblank_simulate: vblank timer overrun
[  273.161601][ T8423] lowmem_reserve[]: 0 2465 2466 0 0
[  273.168813][ T8423] Node 0 DMA32 free:1343008kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1224kB inactive_anon:29524kB active_file:94456kB inactive_file:142724kB unevictable:1536kB writepending:1724kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:51868kB local_pcp:160kB free_cma:0kB
[  273.199616][    C1] vkms_vblank_simulate: vblank timer overrun
[  273.229123][ T8423] lowmem_reserve[]: 0 0 0 0 0
[  273.229175][ T8423] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  273.229230][ T8423] lowmem_reserve[]: 0 0 0 0 0
[  273.229272][ T8423] Node 1 Normal free:3907204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.229327][ T8423] lowmem_reserve[]: 0 0 0 0 0
[  273.229369][ T8423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  273.229512][ T8423] Node 0 DMA32: 498*4kB (UME) 407*8kB (UME) 842*16kB (UME) 530*32kB (UME) 165*64kB (UM) 93*128kB (UME) 65*256kB (UE) 65*512kB (UME) 27*1024kB (UME) 9*2048kB (UME) 298*4096kB (M) = 1374752kB
[  273.229698][ T8423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  273.229813][ T8423] Node 1 Normal: 177*4kB (UME) 58*8kB (UME) 39*16kB (UME) 192*32kB (UME) 92*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 946*4096kB (M) = 3907204kB
[  273.230000][ T8423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  273.230017][ T8423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  273.230034][ T8423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  273.230050][ T8423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  273.230067][ T8423] 60931 total pagecache pages
[  273.230077][ T8423] 0 pages in swap cache
[  273.230084][ T8423] Free swap  = 120112kB
[  273.230093][ T8423] Total swap = 124996kB
[  273.230101][ T8423] 2097051 pages RAM
[  273.230109][ T8423] 0 pages HighMem/MovableOnly
[  273.230118][ T8423] 427074 pages reserved
[  273.230126][ T8423] 0 pages cma reserved
[  273.454310][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  273.749530][ T5883] usb 5-1: Using ep0 maxpacket: 16
[  273.787503][ T5883] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= d.b3
[  273.806189][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.825041][ T5883] usb 5-1: Product: syz
[  273.829266][ T5883] usb 5-1: Manufacturer: syz
[  273.833878][ T5883] usb 5-1: SerialNumber: syz
[  273.854939][ T5883] usb 5-1: config 0 descriptor??
[  274.161537][ T5883] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  274.179528][ T5883] usb 5-1: USB disconnect, device number 15
[  274.234547][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  274.409053][ T5884] usb 2-1: Using ep0 maxpacket: 8
[  274.415691][ T5884] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  274.430553][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.440547][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.450383][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.466615][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.486173][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  274.495295][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.724899][ T5884] usb 2-1: usb_control_msg returned -32
[  274.730529][ T5884] usbtmc 2-1:16.0: can't read capabilities
[  277.008413][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  277.284059][ T5884] usb 2-1: USB disconnect, device number 13
[  277.864049][ T8487] netlink: 'syz.3.690': attribute type 3 has an invalid length.
[  278.255157][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  280.193153][ T8546] FAULT_INJECTION: forcing a failure.
[  280.193153][ T8546] name failslab, interval 1, probability 0, space 0, times 0
[  280.211595][ T8546] CPU: 0 UID: 0 PID: 8546 Comm: syz.1.705 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  280.222229][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  280.232312][ T8546] Call Trace:
[  280.235618][ T8546]  <TASK>
[  280.238566][ T8546]  dump_stack_lvl+0x241/0x360
[  280.243268][ T8546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.248496][ T8546]  ? __pfx__printk+0x10/0x10
[  280.253123][ T8546]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  280.258692][ T8546]  ? __pfx___might_resched+0x10/0x10
[  280.263980][ T8546]  should_fail_ex+0x3b0/0x4e0
[  280.268665][ T8546]  ? alloc_empty_file+0x9e/0x1d0
[  280.273631][ T8546]  should_failslab+0xac/0x100
[  280.278323][ T8546]  ? alloc_empty_file+0x9e/0x1d0
[  280.283250][ T8546]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  280.288629][ T8546]  alloc_empty_file+0x9e/0x1d0
[  280.293420][ T8546]  path_openat+0x107/0x3590
[  280.297953][ T8546]  ? unwind_next_frame+0x18e6/0x22d0
[  280.303272][ T8546]  ? preempt_count_add+0x93/0x190
[  280.308325][ T8546]  ? 0xffffffffa00038c0
[  280.312491][ T8546]  ? 0xffffffffa00038c0
[  280.316664][ T8546]  ? __pfx_validate_chain+0x10/0x10
[  280.321881][ T8546]  ? is_bpf_text_address+0x26/0x2a0
[  280.327107][ T8546]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  280.333293][ T8546]  ? kernel_text_address+0xa7/0xe0
[  280.338440][ T8546]  ? __kernel_text_address+0xd/0x40
[  280.343661][ T8546]  ? unwind_get_return_address+0x4d/0x90
[  280.349327][ T8546]  ? __pfx_path_openat+0x10/0x10
[  280.354291][ T8546]  ? arch_stack_walk+0xfd/0x150
[  280.359180][ T8546]  do_filp_open+0x235/0x490
[  280.363711][ T8546]  ? __pfx_do_filp_open+0x10/0x10
[  280.368789][ T8546]  ? alloc_bprm+0xac/0xe20
[  280.373238][ T8546]  alloc_bprm+0x178/0xe20
[  280.377599][ T8546]  ? __might_fault+0xaa/0x120
[  280.382301][ T8546]  ? __pfx_lock_release+0x10/0x10
[  280.387355][ T8546]  ? __pfx_alloc_bprm+0x10/0x10
[  280.392237][ T8546]  ? __might_fault+0xaa/0x120
[  280.396941][ T8546]  ? __might_fault+0xc6/0x120
[  280.401643][ T8546]  do_execveat_common+0x18c/0x6f0
[  280.406706][ T8546]  __x64_sys_execveat+0xc4/0xe0
[  280.411583][ T8546]  do_syscall_64+0xf3/0x230
[  280.416116][ T8546]  ? clear_bhb_loop+0x35/0x90
[  280.420820][ T8546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.426738][ T8546] RIP: 0033:0x7f6795f7e719
[  280.431175][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.450810][ T8546] RSP: 002b:00007f6796cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  280.459252][ T8546] RAX: ffffffffffffffda RBX: 00007f6796135f80 RCX: 00007f6795f7e719
[  280.467245][ T8546] RDX: 0000000020000040 RSI: 0000000020000040 RDI: 0000000000000004
[  280.475238][ T8546] RBP: 00007f6796cc0090 R08: 0000000000001000 R09: 0000000000000000
[  280.483233][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.491225][ T8546] R13: 0000000000000000 R14: 00007f6796135f80 R15: 00007ffd245b6468
[  280.499232][ T8546]  </TASK>
[  280.560871][ T8558] syz.2.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  280.642889][ T8559] bad cache= option: none
[  280.642889][ T8559] 
[  280.649967][ T8559] CIFS: VFS: bad cache= option: none
[  281.479299][ T8574] 9pnet_fd: Insufficient options for proto=fd
[  282.214626][ T8588] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.715'.
[  283.635742][ T3455] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  284.325618][ T8602] program syz.1.718 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  284.766683][   T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  285.697855][ T8617] overlayfs: missing 'workdir'
[  286.055599][ T8625] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.727'.
[  286.154126][ T8624] (syz.1.726,8624,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  286.164049][ T8624] (syz.1.726,8624,1):ocfs2_fill_super:1178 ERROR: status = -22
[  286.269648][   T29] audit: type=1326 audit(1731828214.138:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  286.836412][   T29] audit: type=1326 audit(1731828214.138:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  286.915586][   T29] audit: type=1326 audit(1731828214.138:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  286.984246][   T29] audit: type=1326 audit(1731828214.138:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.032353][   T29] audit: type=1326 audit(1731828214.138:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.080216][   T29] audit: type=1326 audit(1731828214.338:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.144407][   T29] audit: type=1326 audit(1731828214.348:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.173163][   T29] audit: type=1326 audit(1731828214.348:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.206532][   T29] audit: type=1326 audit(1731828214.358:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  287.507367][ T8648] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  287.550914][   T29] audit: type=1326 audit(1731828214.368:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8631 comm="syz.4.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab93b7e719 code=0x7ffc0000
[  289.330900][   T81] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  290.466960][ T3455] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  291.069171][ T8703] FAULT_INJECTION: forcing a failure.
[  291.069171][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.142299][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.4.743 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  291.153290][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  291.163367][ T8703] Call Trace:
[  291.166651][ T8703]  <TASK>
[  291.169578][ T8703]  dump_stack_lvl+0x241/0x360
[  291.174293][ T8703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.180016][ T8703]  ? __pfx__printk+0x10/0x10
[  291.184612][ T8703]  ? snprintf+0xda/0x120
[  291.189205][ T8703]  should_fail_ex+0x3b0/0x4e0
[  291.194261][ T8703]  _copy_to_user+0x31/0xb0
[  291.198703][ T8703]  simple_read_from_buffer+0xca/0x150
[  291.204094][ T8703]  proc_fail_nth_read+0x1e9/0x250
[  291.209133][ T8703]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  291.214714][ T8703]  ? rw_verify_area+0x55e/0x6f0
[  291.219683][ T8703]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  291.225335][ T8703]  vfs_read+0x1fc/0xb70
[  291.229502][ T8703]  ? fdget_pos+0x24e/0x320
[  291.233927][ T8703]  ? __pfx_vfs_read+0x10/0x10
[  291.238615][ T8703]  ? __fget_files+0x3f3/0x470
[  291.243301][ T8703]  ? fdget_pos+0x24e/0x320
[  291.247726][ T8703]  ksys_read+0x183/0x2b0
[  291.251999][ T8703]  ? __pfx_ksys_read+0x10/0x10
[  291.256784][ T8703]  ? do_syscall_64+0x100/0x230
[  291.261576][ T8703]  ? do_syscall_64+0xb6/0x230
[  291.266263][ T8703]  do_syscall_64+0xf3/0x230
[  291.270772][ T8703]  ? clear_bhb_loop+0x35/0x90
[  291.275459][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.281833][ T8703] RIP: 0033:0x7fab93b7d15c
[  291.286250][ T8703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  291.305945][ T8703] RSP: 002b:00007fab9499d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  291.314368][ T8703] RAX: ffffffffffffffda RBX: 00007fab93d35f80 RCX: 00007fab93b7d15c
[  291.322337][ T8703] RDX: 000000000000000f RSI: 00007fab9499d0a0 RDI: 0000000000000004
[  291.330307][ T8703] RBP: 00007fab9499d090 R08: 0000000000000000 R09: 0000000000000000
[  291.338275][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.346245][ T8703] R13: 0000000000000000 R14: 00007fab93d35f80 R15: 00007ffcf0de6768
[  291.354232][ T8703]  </TASK>
[  293.915436][ T8738] xt_nat: multiple ranges no longer supported
[  294.884815][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  294.922611][ T8747] FAULT_INJECTION: forcing a failure.
[  294.922611][ T8747] name failslab, interval 1, probability 0, space 0, times 0
[  294.956619][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.2.757 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  294.967263][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  294.977347][ T8747] Call Trace:
[  294.980659][ T8747]  <TASK>
[  294.983618][ T8747]  dump_stack_lvl+0x241/0x360
[  294.988325][ T8747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.993532][ T8747]  ? __pfx__printk+0x10/0x10
[  294.998131][ T8747]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  295.003676][ T8747]  ? __pfx___might_resched+0x10/0x10
[  295.008970][ T8747]  should_fail_ex+0x3b0/0x4e0
[  295.013664][ T8747]  ? ep_insert+0x4c5/0x1aa0
[  295.018172][ T8747]  should_failslab+0xac/0x100
[  295.022848][ T8747]  ? ep_insert+0x4c5/0x1aa0
[  295.027349][ T8747]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  295.032725][ T8747]  ep_insert+0x4c5/0x1aa0
[  295.037062][ T8747]  ? __pfx_ep_insert+0x10/0x10
[  295.041820][ T8747]  ? do_epoll_ctl+0x435/0xf60
[  295.046495][ T8747]  ? __pfx___mutex_lock+0x10/0x10
[  295.051513][ T8747]  ? __fget_files+0x29/0x470
[  295.056111][ T8747]  ? __fget_files+0x29/0x470
[  295.060700][ T8747]  ? safesetid_security_capable+0xb2/0x1d0
[  295.066508][ T8747]  ? bpf_lsm_capable+0x9/0x10
[  295.071180][ T8747]  ? security_capable+0x7e/0x2d0
[  295.076123][ T8747]  do_epoll_ctl+0x8c9/0xf60
[  295.080624][ T8747]  ? do_epoll_ctl+0x831/0xf60
[  295.085299][ T8747]  __x64_sys_epoll_ctl+0x161/0x1a0
[  295.090415][ T8747]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  295.096043][ T8747]  ? do_syscall_64+0x100/0x230
[  295.100822][ T8747]  ? do_syscall_64+0xb6/0x230
[  295.105501][ T8747]  do_syscall_64+0xf3/0x230
[  295.110003][ T8747]  ? clear_bhb_loop+0x35/0x90
[  295.114681][ T8747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.120574][ T8747] RIP: 0033:0x7f731db7e719
[  295.124990][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.144591][ T8747] RSP: 002b:00007f731e8fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  295.153003][ T8747] RAX: ffffffffffffffda RBX: 00007f731dd35f80 RCX: 00007f731db7e719
[  295.160986][ T8747] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  295.168974][ T8747] RBP: 00007f731e8fc090 R08: 0000000000000000 R09: 0000000000000000
[  295.176947][ T8747] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  295.184916][ T8747] R13: 0000000000000000 R14: 00007f731dd35f80 R15: 00007ffd0ec3bb98
[  295.192902][ T8747]  </TASK>
[  295.262308][ T8750] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.758'.
[  295.355649][    T8] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  295.510398][    T8] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  295.518753][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  295.527998][    T8] usb 1-1: config 0 has no interface number 0
[  295.538121][    T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  295.547417][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.558955][    T8] usb 1-1: config 0 descriptor??
[  295.686630][ T5884] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  295.695385][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.707968][ T5884] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  295.719640][ T5884] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  295.728780][ T5884] usb 3-1: Manufacturer: syz
[  295.742487][ T5884] usb 3-1: config 0 descriptor??
[  295.771813][    T8] usb 1-1: string descriptor 0 read error: -71
[  295.782715][    T8] ums-realtek 1-1:0.3: USB Mass Storage device detected
[  295.814331][ T5884] rc_core: IR keymap rc-hauppauge not found
[  295.820357][ T5884] Registered IR keymap rc-empty
[  295.829276][ T5884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  295.852996][    T8] usb 1-1: USB disconnect, device number 14
[  295.863002][ T5884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13
[  295.984492][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  296.034376][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.044106][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.134354][    T9] usb 5-1: Using ep0 maxpacket: 8
[  296.143454][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  296.154880][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  296.164061][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.172804][ T8667] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  296.183966][    T9] usb 5-1: config 0 descriptor??
[  296.435564][    T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  296.852627][ T5943] usb 5-1: USB disconnect, device number 16
[  297.021315][ T5943] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  297.336989][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  297.337007][   T29] audit: type=1804 audit(1731828225.248:60): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.766" name="/newroot/164/file0" dev="9p" ino=2 res=1 errno=0
[  297.498928][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'.
[  297.680850][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'.
[  298.154410][ T5943] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  298.344461][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  298.931876][ T5943] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  299.591734][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.599944][ T5943] usb 4-1: Product: syz
[  299.604138][ T5943] usb 4-1: Manufacturer: syz
[  299.608813][ T5943] usb 4-1: SerialNumber: syz
[  299.626757][ T5943] usb 4-1: config 0 descriptor??
[  299.636931][ T5883] usb 3-1: USB disconnect, device number 10
[  299.868536][ T8802] overlay: ./file0 is not a directory
[  299.889735][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.775'.
[  299.905441][ T5943] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  299.906531][ T8801] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  300.007665][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  300.112366][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'.
[  300.121794][ T8782] bridge_slave_1: left allmulticast mode
[  300.138484][ T8782] bridge_slave_1: left promiscuous mode
[  300.156148][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.180087][ T8782] bridge_slave_0: left allmulticast mode
[  300.186004][ T8782] bridge_slave_0: left promiscuous mode
[  300.191982][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.584403][ T5883] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  300.734396][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  300.741698][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  300.753264][ T5883] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  300.762642][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.773688][ T5883] usb 2-1: config 0 descriptor??
[  300.990567][ T5883] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  301.004608][ T8816] loop6: detected capacity change from 0 to 1
[  301.019552][ T8816] Dev loop6: unable to read RDB block 1
[  301.025735][ T8816]  loop6: unable to read partition table
[  301.031613][ T8816] loop6: partition table beyond EOD, truncated
[  301.038230][ T5883] usb 2-1: USB disconnect, device number 14
[  301.045961][ T8816] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  301.045961][ T8816] ) failed (rc=-5)
[  301.059927][ T5883] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[  301.238793][ T5943] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  301.317850][ T5943] usb 4-1: USB disconnect, device number 7
[  301.882274][   T29] audit: type=1326 audit(1731828229.748:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  301.928528][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  301.933204][   T29] audit: type=1326 audit(1731828229.748:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  301.984486][   T29] audit: type=1326 audit(1731828229.748:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.003447][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'.
[  302.016520][   T29] audit: type=1326 audit(1731828229.748:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.487741][   T29] audit: type=1326 audit(1731828229.748:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.520103][   T29] audit: type=1326 audit(1731828229.748:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.0.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.549571][   T29] audit: type=1326 audit(1731828229.748:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.649147][   T29] audit: type=1326 audit(1731828229.748:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  302.695730][ T8840] netlink: 276 bytes leftover after parsing attributes in process `syz.2.786'.
[  302.711334][ T8838] affs: Unrecognized mount option "�" or missing value
[  302.723654][ T8838] affs: Error parsing options
[  302.728822][   T29] audit: type=1326 audit(1731828229.748:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc29b7d0b0 code=0x7ffc0000
[  302.775273][ T8842] FAULT_INJECTION: forcing a failure.
[  302.775273][ T8842] name failslab, interval 1, probability 0, space 0, times 0
[  302.796225][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.4.789 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  302.806856][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  302.816913][ T8842] Call Trace:
[  302.820187][ T8842]  <TASK>
[  302.823116][ T8842]  dump_stack_lvl+0x241/0x360
[  302.827803][ T8842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.833003][ T8842]  ? __pfx__printk+0x10/0x10
[  302.837599][ T8842]  ? fs_reclaim_acquire+0x93/0x130
[  302.842721][ T8842]  ? __pfx___might_resched+0x10/0x10
[  302.848013][ T8842]  should_fail_ex+0x3b0/0x4e0
[  302.852696][ T8842]  ? tomoyo_encode+0x26f/0x540
[  302.857470][ T8842]  should_failslab+0xac/0x100
[  302.862153][ T8842]  ? tomoyo_encode+0x26f/0x540
[  302.866919][ T8842]  __kmalloc_noprof+0xd8/0x400
[  302.871686][ T8842]  tomoyo_encode+0x26f/0x540
[  302.876284][ T8842]  tomoyo_realpath_from_path+0x59e/0x5e0
[  302.881919][ T8842]  tomoyo_path_number_perm+0x23a/0x880
[  302.887382][ T8842]  ? tomoyo_path_number_perm+0x208/0x880
[  302.893101][ T8842]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  302.899201][ T8842]  ? __fget_files+0x29/0x470
[  302.903796][ T8842]  ? __fget_files+0x3f3/0x470
[  302.908485][ T8842]  security_file_ioctl+0xc6/0x2a0
[  302.913512][ T8842]  __se_sys_ioctl+0x47/0x170
[  302.918101][ T8842]  do_syscall_64+0xf3/0x230
[  302.922611][ T8842]  ? clear_bhb_loop+0x35/0x90
[  302.927290][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.933182][ T8842] RIP: 0033:0x7fab93b7e719
[  302.937598][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.957205][ T8842] RSP: 002b:00007fab9499d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  302.965622][ T8842] RAX: ffffffffffffffda RBX: 00007fab93d35f80 RCX: 00007fab93b7e719
[  302.973605][ T8842] RDX: 0000000020000000 RSI: 00000000000007a4 RDI: 0000000000000004
[  302.981589][ T8842] RBP: 00007fab9499d090 R08: 0000000000000000 R09: 0000000000000000
[  302.989570][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.997556][ T8842] R13: 0000000000000000 R14: 00007fab93d35f80 R15: 00007ffcf0de6768
[  303.005549][ T8842]  </TASK>
[  303.010189][   T29] audit: type=1326 audit(1731828229.748:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  303.035220][ T8842] ERROR: Out of memory at tomoyo_realpath_from_path.
[  303.054245][   T29] audit: type=1326 audit(1731828229.748:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  303.084797][   T29] audit: type=1326 audit(1731828229.748:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  303.105522][   T29] audit: type=1326 audit(1731828229.748:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  303.126317][   T29] audit: type=1326 audit(1731828229.748:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b7e719 code=0x7ffc0000
[  303.644366][ T5943] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  304.104632][ T5943] usb 1-1: device descriptor read/64, error -71
[  304.524299][ T5943] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  304.881538][ T8865] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  305.005072][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  305.014688][ T8864] openvswitch: netlink: Actions may not be safe on all matching packets
[  305.054385][ T5943] usb 1-1: device descriptor read/64, error -71
[  305.519996][ T5943] usb usb1-port1: attempt power cycle
[  305.765952][ T8672] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  305.826565][ T8871] input: syz1 as /devices/virtual/input/input14
[  305.954473][ T5943] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  305.987786][ T5943] usb 1-1: device descriptor read/8, error -71
[  306.254656][ T5943] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  306.521106][ T8876] binder: 8875:8876 ioctl 4018620d 0 returned -22
[  306.552891][ T5943] usb 1-1: device descriptor read/8, error -71
[  306.696424][ T8880] netlink: 3 bytes leftover after parsing attributes in process `syz.1.800'.
[  306.714836][ T5943] usb usb1-port1: unable to enumerate USB device
[  306.741040][ T8880] batadv1: entered promiscuous mode
[  306.754284][ T8880] batadv1: entered allmulticast mode
[  306.858910][ T8883] netlink: 'syz.3.802': attribute type 29 has an invalid length.
[  306.933997][ T8887] netlink: 'syz.3.802': attribute type 29 has an invalid length.
[  308.106855][ T8905] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  308.670326][ T3579] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  308.682545][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  308.682560][   T29] audit: type=1800 audit(1731828236.598:84): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.810" name="bus" dev="overlay" ino=1020 res=0 errno=0
[  308.804896][   T29] audit: type=1800 audit(1731828236.698:85): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.810" name="bus" dev="overlay" ino=1020 res=0 errno=0
[  308.824895][   T29] 
[  308.824905][   T29] ======================================================
[  308.824912][   T29] WARNING: possible circular locking dependency detected
[  308.824920][   T29] 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 Not tainted
[  308.824930][   T29] ------------------------------------------------------
[  308.824937][   T29] kauditd/29 is trying to acquire lock:
[  308.824946][   T29] ffff88805b364618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbe/0x14b0
[  308.824990][   T29] 
[  308.824990][   T29] but task is already holding lock:
[  308.824995][   T29] ffffffff8e813418 ((console_sem).lock){-.-.}-{2:2}, at: up+0x1d/0x90
[  308.825033][   T29] 
[  308.825033][   T29] which lock already depends on the new lock.
[  308.825033][   T29] 
[  308.825039][   T29] 
[  308.825039][   T29] the existing dependency chain (in reverse order) is:
[  308.825045][   T29] 
[  308.825045][   T29] -> #2 ((console_sem).lock){-.-.}-{2:2}:
[  308.825068][   T29]        lock_acquire+0x1ed/0x550
[  308.825091][   T29]        _raw_spin_lock_irqsave+0xd5/0x120
[  308.825108][   T29]        down_trylock+0x20/0xa0
[  308.825126][   T29]        __down_trylock_console_sem+0x109/0x250
[  308.825146][   T29]        vprintk_emit+0x3d7/0xa10
[  308.825163][   T29]        _printk+0xd5/0x120
[  308.825181][   T29]        should_fail_ex+0x391/0x4e0
[  308.825198][   T29]        strncpy_from_user+0x36/0x260
[  308.825214][   T29]        strncpy_from_user_nofault+0x71/0x140
[  308.825231][   T29]        bpf_probe_read_compat_str+0xe9/0x180
[  308.825253][   T29]        0xffffffffa0000859
[  308.825265][   T29]        bpf_trace_run2+0x2ec/0x540
[  308.825282][   T29]        trace_tlb_flush+0x118/0x140
[  308.825298][   T29]        switch_mm_irqs_off+0x77a/0xa70
[  308.825313][   T29]        __schedule+0x10c7/0x4bd0
[  308.825329][   T29]        preempt_schedule_notrace+0x100/0x140
[  308.825354][   T29]        preempt_schedule_notrace_thunk+0x1a/0x30
[  308.825371][   T29]        rcu_is_watching+0x7e/0xb0
[  308.825387][   T29]        lock_acquire+0xe3/0x550
[  308.825407][   T29]        atomic_notifier_call_chain+0x43/0x180
[  308.825430][   T29]        do_con_write+0xab1/0x4c30
[  308.825452][   T29]        con_put_char+0x95/0xf0
[  308.825472][   T29]        tty_put_char+0xe3/0x190
[  308.825494][   T29]        do_output_char+0x6b1/0x970
[  308.825511][   T29]        n_tty_write+0xe06/0x1230
[  308.825527][   T29]        file_tty_write+0x546/0x9b0
[  308.825546][   T29]        vfs_write+0xaeb/0xd30
[  308.825566][   T29]        ksys_write+0x183/0x2b0
[  308.825584][   T29]        do_syscall_64+0xf3/0x230
[  308.825603][   T29]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.825622][   T29] 
[  308.825622][   T29] -> #1 (&rq->__lock){-.-.}-{2:2}:
[  308.825645][   T29]        lock_acquire+0x1ed/0x550
[  308.825666][   T29]        _raw_spin_lock_nested+0x31/0x40
[  308.825683][   T29]        raw_spin_rq_lock_nested+0x2a/0x140
[  308.825702][   T29]        task_rq_lock+0xc6/0x360
[  308.825719][   T29]        cgroup_move_task+0x9b/0x5a0
[  308.825734][   T29]        css_set_move_task+0x72e/0x950
[  308.825749][   T29]        cgroup_post_fork+0x256/0x880
[  308.825765][   T29]        copy_process+0x39e9/0x3d50
[  308.825789][   T29]        kernel_clone+0x223/0x880
[  308.825810][   T29]        user_mode_thread+0x132/0x1a0
[  308.825831][   T29]        rest_init+0x23/0x300
[  308.825852][   T29]        start_kernel+0x47f/0x500
[  308.825872][   T29]        x86_64_start_reservations+0x2a/0x30
[  308.825890][   T29]        x86_64_start_kernel+0x9f/0xa0
[  308.825905][   T29]        common_startup_64+0x13e/0x147
[  308.825923][   T29] 
[  308.825923][   T29] -> #0 (&p->pi_lock){-.-.}-{2:2}:
[  308.825947][   T29]        validate_chain+0x18ef/0x5920
[  308.825963][   T29]        __lock_acquire+0x1384/0x2050
[  308.825984][   T29]        lock_acquire+0x1ed/0x550
[  308.826005][   T29]        _raw_spin_lock_irqsave+0xd5/0x120
[  308.826022][   T29]        try_to_wake_up+0xbe/0x14b0
[  308.826035][   T29]        up+0x72/0x90
[  308.826061][   T29]        __console_unlock+0x123/0x1f0
[  308.826079][   T29]        console_unlock+0x18f/0x3b0
[  308.826096][   T29]        vprintk_emit+0x730/0xa10
[  308.826112][   T29]        _printk+0xd5/0x120
[  308.826130][   T29]        kauditd_hold_skb+0x1be/0x210
[  308.826148][   T29]        kauditd_send_queue+0x2b1/0x310
[  308.826165][   T29]        kauditd_thread+0x74a/0x9b0
[  308.826180][   T29]        kthread+0x2f0/0x390
[  308.826191][   T29]        ret_from_fork+0x4b/0x80
[  308.826211][   T29]        ret_from_fork_asm+0x1a/0x30
[  308.826229][   T29] 
[  308.826229][   T29] other info that might help us debug this:
[  308.826229][   T29] 
[  308.826234][   T29] Chain exists of:
[  308.826234][   T29]   &p->pi_lock --> &rq->__lock --> (console_sem).lock
[  308.826234][   T29] 
[  308.826258][   T29]  Possible unsafe locking scenario:
[  308.826258][   T29] 
[  308.826262][   T29]        CPU0                    CPU1
[  308.826266][   T29]        ----                    ----
[  308.826271][   T29]   lock((console_sem).lock);
[  308.826281][   T29]                                lock(&rq->__lock);
[  308.826291][   T29]                                lock((console_sem).lock);
[  308.826302][   T29]   lock(&p->pi_lock);
[  308.826312][   T29] 
[  308.826312][   T29]  *** DEADLOCK ***
[  308.826312][   T29] 
[  308.826316][   T29] 1 lock held by kauditd/29:
[  308.826325][   T29]  #0: ffffffff8e813418 ((console_sem).lock){-.-.}-{2:2}, at: up+0x1d/0x90
[  308.826362][   T29] 
[  308.826362][   T29] stack backtrace:
[  308.826368][   T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
[  308.826385][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  308.826401][   T29] Call Trace:
[  308.826407][   T29]  <TASK>
[  308.826413][   T29]  dump_stack_lvl+0x241/0x360
[  308.826436][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.826456][   T29]  ? __pfx__printk+0x10/0x10
[  308.826481][   T29]  print_circular_bug+0x13a/0x1b0
[  308.826501][   T29]  check_noncircular+0x36a/0x4a0
[  308.826522][   T29]  ? __pfx_check_noncircular+0x10/0x10
[  308.826541][   T29]  ? lockdep_lock+0x123/0x2b0
[  308.826565][   T29]  ? __pfx_validate_chain+0x10/0x10
[  308.826582][   T29]  ? __lock_acquire+0x1384/0x2050
[  308.826607][   T29]  validate_chain+0x18ef/0x5920
[  308.826631][   T29]  ? prb_first_seq+0x131/0x210
[  308.826651][   T29]  ? __pfx_validate_chain+0x10/0x10
[  308.826669][   T29]  ? validate_chain+0x11e/0x5920
[  308.826688][   T29]  ? this_cpu_in_panic+0x4f/0x80
[  308.826712][   T29]  ? __pfx_validate_chain+0x10/0x10
[  308.826729][   T29]  ? sprintf+0xda/0x120
[  308.826748][   T29]  ? mark_lock+0x9a/0x360
[  308.826765][   T29]  __lock_acquire+0x1384/0x2050
[  308.826800][   T29]  lock_acquire+0x1ed/0x550
[  308.826822][   T29]  ? try_to_wake_up+0xbe/0x14b0
[  308.826839][   T29]  ? mark_lock+0x9a/0x360
[  308.826856][   T29]  ? __pfx_lock_acquire+0x10/0x10
[  308.826887][   T29]  _raw_spin_lock_irqsave+0xd5/0x120
[  308.826905][   T29]  ? try_to_wake_up+0xbe/0x14b0
[  308.826920][   T29]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  308.826940][   T29]  ? do_raw_spin_lock+0x14f/0x370
[  308.826962][   T29]  try_to_wake_up+0xbe/0x14b0
[  308.826981][   T29]  ? __pfx_try_to_wake_up+0x10/0x10
[  308.826998][   T29]  ? _raw_spin_lock_irqsave+0xe1/0x120
[  308.827016][   T29]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  308.827034][   T29]  ? __up+0x3c/0x150
[  308.827055][   T29]  up+0x72/0x90
[  308.827075][   T29]  __console_unlock+0x123/0x1f0
[  308.827094][   T29]  ? __pfx___console_unlock+0x10/0x10
[  308.827116][   T29]  ? this_cpu_in_panic+0x4f/0x80
[  308.827133][   T29]  ? is_printk_legacy_deferred+0x43/0x50
[  308.827156][   T29]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  308.827177][   T29]  console_unlock+0x18f/0x3b0
[  308.827197][   T29]  ? __pfx_console_unlock+0x10/0x10
[  308.827217][   T29]  ? this_cpu_in_panic+0x4f/0x80
[  308.827234][   T29]  ? is_printk_legacy_deferred+0x43/0x50
[  308.827257][   T29]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  308.827278][   T29]  vprintk_emit+0x730/0xa10
[  308.827298][   T29]  ? __pfx_vprintk_emit+0x10/0x10
[  308.827316][   T29]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  308.827334][   T29]  ? lockdep_hardirqs_on+0x99/0x150
[  308.827355][   T29]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  308.827373][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.827395][   T29]  _printk+0xd5/0x120
[  308.827415][   T29]  ? kauditd_hold_skb+0xe7/0x210
[  308.827435][   T29]  ? __pfx__printk+0x10/0x10
[  308.827457][   T29]  ? netlink_has_listeners+0x2ea/0x3a0
[  308.827477][   T29]  kauditd_hold_skb+0x1be/0x210
[  308.827498][   T29]  ? __pfx_kauditd_hold_skb+0x10/0x10
[  308.827518][   T29]  ? __pfx_kauditd_send_multicast_skb+0x10/0x10
[  308.827539][   T29]  kauditd_send_queue+0x2b1/0x310
[  308.827559][   T29]  ? __pfx_kauditd_send_multicast_skb+0x10/0x10
[  308.827580][   T29]  ? __pfx_kauditd_hold_skb+0x10/0x10
[  308.827601][   T29]  ? kauditd_thread+0xb4/0x9b0
[  308.827620][   T29]  kauditd_thread+0x74a/0x9b0
[  308.827637][   T29]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  308.827671][   T29]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  308.827688][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.827707][   T29]  ? __pfx_kauditd_thread+0x10/0x10
[  308.827726][   T29]  ? __pfx_autoremove_wake_function+0x10/0x10
[  308.827751][   T29]  ? __kthread_parkme+0x169/0x1d0
[  308.827775][   T29]  ? __pfx_kauditd_thread+0x10/0x10
[  308.827800][   T29]  kthread+0x2f0/0x390
[  308.827816][   T29]  ? __pfx_kauditd_thread+0x10/0x10
[  308.827835][   T29]  ? __pfx_kthread+0x10/0x10
[  308.827851][   T29]  ret_from_fork+0x4b/0x80
[  308.827874][   T29]  ? __pfx_kthread+0x10/0x10
[  308.827890][   T29]  ret_from_fork_asm+0x1a/0x30
[  308.827918][   T29]  </TASK>
[  309.798132][ T8907] tty tty1: ldisc open failed (-12), clearing slot 0
[  310.884657][ T8679] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  314.084972][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  316.004669][   T35] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  317.287284][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.293604][ T1296] ieee802154 phy1 wpan1: encryption failed: -22