last executing test programs:

14m56.921165893s ago: executing program 0 (id=619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000001000000000300000000008500000053100000850000005000000095", @ANYRES8=0x0, @ANYRES32=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000280040072800c0009000600000000000000"], 0x38}}, 0xc000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
r6 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000002b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002980)={&(0x7f0000002a00)={0x12c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048085)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

14m53.158055296s ago: executing program 0 (id=624):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x1ac, 0x30, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{0x198, 0x1, [@m_nat={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x8, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x64, 0x6, "22f8041133b73c8aea5c5688dbba84d22497a97c5283662e93bb7ebc1355b877d4ae5fd87a74d2ba911a1aa914cbc54186ccbcc807990cd8f2824a6a7ef12ef2cca086806b5b015e0f7b7d33f319419fc6ac5cf90c6b01d3bd08ba8952c5b159"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b05"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ac}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x30, 0xd, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = msgget(0x3, 0x2)
msgsnd(r0, &(0x7f0000000880)={0x0, "ffad0045217d037f407972f5d6e790f122667387856722570dda66c8badbac7e2907dea141876d0ecaf0d2ea9e1dbd4d5898e025c02e1ebb203c0b88f589ad62eee68ab44f835e7401fa4ff937b662fdf3c014748be6be0b374ac41e00e3e68c53158de3fed4f37305d69263dc1fafcf0ceecfe6f4874866e52a38a550d3956e6879efaa00b8fd6843bbbcf6ed175d955b429a5d29f01abe0bd388f900a367"}, 0xa7, 0x800)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14m49.419131337s ago: executing program 0 (id=629):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
connect$unix(r2, 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xe}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @private0}}, 0x42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
execveat(r3, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x1000)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

14m41.480188607s ago: executing program 0 (id=642):
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

14m37.47590327s ago: executing program 0 (id=652):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x800000000f, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/226, 0xe2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff30, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
gettid()
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d8000000001200001f01000002000000c0000000192540be3ef8dc3c26d9571514e199244eb667dc243cb37882c02b03d57cf32b7dcf29b2dce244dbb933013ab697fd0ade7ce810d796a8ed6bd779db42721075691161ca7898811597dea379213f26f0a69eb9b7f309002e53789bd03438335102455a36c214e702a8b8ff1bc178f0199b28e81f34a0d2233df315827152087c8b689810805b083f0bcc172c3e94209ea10e8f7598edd539ff115301721080277b0eb1e829670c9ed58240bf42e6531ed1b0ee3ad0e2c1d79a89cb0c458b49df00000078649e55cbd42674c32100"], 0xd8}, 0x4)
ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r4, &(0x7f0000000000)=""/35, 0x23)
sendmsg$nl_generic(r4, 0x0, 0x4000090)
socket$kcm(0x2, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c)

14m35.151870789s ago: executing program 0 (id=655):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x141)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket(0x1e, 0x4, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000040)={{@my=0x1}})

14m19.00872507s ago: executing program 32 (id=655):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x141)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket(0x1e, 0x4, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000040)={{@my=0x1}})

3m18.843577375s ago: executing program 3 (id=1921):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x71, 0x0)
syz_usb_disconnect(r0)

3m15.701805423s ago: executing program 3 (id=1928):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x10e)
sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r4})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="97857d6df7f023b7ea5d70d00e8c2c579313bcba99b6e45dc70aa4179c06d31fe3e19c6935b4ef3bab6c0d7bb2d393c36f08fa525176a8e9035ded8e60a1ea9c8d8f11e865988bdf54299a9756b02169cd66c4c8ea16ccb88ede4df8f5e2233b8bd7d589899221c00480c373999979b2a091d838949a78d2117f11b0323268e3bf055d1569d7711b1ba879593f7fb7bc63945207aaa46736ec7a67ff8525e846d0529c926b4372e5018a8fa98961aee62d765faeed4fae3fadc9511a1a70cdcbcaf48c87860c8678249b7162959cb400", @ANYRES64=r4, @ANYRES8=r4], 0xbc}, 0x1, 0x11, 0x0, 0x4014}, 0x851)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
r9 = fanotify_init(0x1, 0x1)
r10 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r9, 0x1, 0x40000010, r10, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r11 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
lseek(r11, 0x0, 0x1)
close_range(r8, 0xffffffffffffffff, 0x0)

3m14.536272927s ago: executing program 3 (id=1929):
r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
mkdir(0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0)
syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0xffffffffffffffda, 0x4, {0x3, 0x0, 0x9d3, 0x3, 0x8, 0x2, {0x5, 0x6, 0x81, 0x7fff, 0xf5ef, 0x1, 0xa, 0x7ff, 0x8, 0xc000, 0x10000, r7, 0x0, 0x9, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

3m13.352800168s ago: executing program 3 (id=1933):
read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x28, 0x0, 0x101, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r2, 0x80284504, &(0x7f0000000000)=""/56)

3m10.791780623s ago: executing program 3 (id=1938):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x71, 0x0)
syz_usb_disconnect(r0)

3m2.819238131s ago: executing program 3 (id=1954):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000001000000000300000000008500000053100000850000005000000095", @ANYRES8=0x0, @ANYRES32=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000280040072800c0009000600000000000000"], 0x38}}, 0xc000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
r6 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002a00)={0x124, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048085)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

2m47.473296828s ago: executing program 33 (id=1954):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000001000000000300000000008500000053100000850000005000000095", @ANYRES8=0x0, @ANYRES32=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000280040072800c0009000600000000000000"], 0x38}}, 0xc000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0)
r6 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002a00)={0x124, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048085)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

36.72209362s ago: executing program 5 (id=2189):
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x15, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
mq_open(&(0x7f0000000200)='/dev/cpu/#/msr\x00', 0x0, 0x14, &(0x7f0000000300)={0x8000000000000000, 0x8, 0x1, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setregid(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r4, r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0)
write$cgroup_subtree(r2, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
sendmsg$tipc(r1, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
read$FUSE(r2, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
getgroups(0x4, &(0x7f0000000340)=[0xffffffffffffffff, <r9=>0xee01, 0x0, 0x0])
setresgid(0x0, r8, r9)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)

34.91582824s ago: executing program 5 (id=2193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f0000"], 0x50)
r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x16, 0x3, 0x103, 0x1, 'syz1\x00', 0x4})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, &(0x7f0000000040))
r6 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_labels_list(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='=m'], 0x2)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
fstat(r5, &(0x7f0000001200))
ioctl$SIOCX25SFACILITIES(r7, 0x89e3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)

34.816080144s ago: executing program 4 (id=2194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

34.100797803s ago: executing program 4 (id=2196):
r0 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xd76, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = getpgrp(0xffffffffffffffff)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000200)={r3, 0x1, 0xfffff178})
syz_open_procfs(0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f636b20696fe79cad2187"], 0xc)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0)
write$vga_arbiter(r5, 0x0, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r6, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x200000000a)
accept4$rose(r6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)

32.950721499s ago: executing program 5 (id=2197):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

30.597971505s ago: executing program 5 (id=2199):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
truncate(0x0, 0x90)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x12, 0x2, {0x3, 0x5, 0x68a}}]}}]}, 0x48}}, 0x44080)
mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x5, 0x488880)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040)=0x5, 0x4)
mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x5, 0x12, r4, 0x3b20d000)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r5, &(0x7f0000001180)=""/4117, 0x1015)
r6 = socket$kcm(0x2a, 0x2, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000000)=0xffffff10)
dup(r3)
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)

28.500713283s ago: executing program 4 (id=2205):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x10e)
sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r4})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="97857d6df7f023b7ea5d70d00e8c2c579313bcba99b6e45dc70aa4179c06d31fe3e19c6935b4ef3bab6c0d7bb2d393c36f08fa525176a8e9035ded8e60a1ea9c8d8f11e865988bdf54299a9756b02169cd66c4c8ea16ccb88ede4df8f5e2233b8bd7d589899221c00480c373999979b2a091d838949a78d2117f11b0323268e3bf055d1569d7711b1ba879593f7fb7bc63945207aaa46736ec7a67ff8525e846d0529c926b4372e5018a8fa98961aee62d765faeed4fae3fadc9511a1a70cdcbcaf48c87860c8678249b7162959cb400", @ANYRES64=r4, @ANYRES8=r4], 0xbc}, 0x1, 0x11, 0x0, 0x4014}, 0x851)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000010, r8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
lseek(0xffffffffffffffff, 0x0, 0x1)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

25.763951389s ago: executing program 4 (id=2208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00')
r4 = fanotify_init(0x0, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0x18}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r7, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000003000000090000000101000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000ad3c00000000000000000000100000000000000000bae6c591ef02ab12afbc59d76a0bf1ee30c6b99c13efb836b0498cfd033b605e551889fc0a8b7c8a1b2f48b2a37342f424850089f332aab6c0c132b72c049d058ae4dae76868b56bc656cdbef910f9b033e8036b252c73e7b03199d9d6229dd155d61f0000000000bfb882a3405230ee96ea5847ceda852aa8119eb453000000000000000000ba8aead18acb60d5917c3012df4596bc0fb570d2b9822c5ad909719391e32c04d35027fe75d4cc004d0a3ee7b19f1ce16905dd"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)

24.506864793s ago: executing program 4 (id=2211):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7fff, 0x4, 0x1, 0x16c03, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x40000005, 0x200, @void, @value, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='cpuhp_multi_enter\x00', r2}, 0xfffffffffffffce0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x33a, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x0)
r8 = openat(r7, &(0x7f0000000340)='.\x00', 0x0, 0x131)
lseek(r8, 0x2, 0x1)
capset(&(0x7f00000004c0)={0x20080522}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x34}}, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r10, 0x407, 0x100000)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = dup(r11)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x1, 0x4, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xa}, 0x8, 0x1, 0x14000, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x1, 0x6, {{0x5, 0x4, 0x1, 0xd, 0x14, 0x66, 0x4, 0x6, 0x4, 0x0, @multicast2, @remote}}}})

24.448177458s ago: executing program 5 (id=2212):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x180a, 0x20, 0x3, 0x1, 0x0, r0, 0x0}])

21.151465399s ago: executing program 5 (id=2213):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
statx(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x100, &(0x7f0000000300))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = eventfd(0xe)
dup2(r4, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110720000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7", @ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

21.119561079s ago: executing program 4 (id=2215):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
statx(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x100, &(0x7f0000000300))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = eventfd(0xe)
dup2(r4, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110720000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7", @ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

17.457148217s ago: executing program 1 (id=2221):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x197dd000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00')
r4 = fanotify_init(0x0, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0x18}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r6, r7, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000003000000090000000101000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000ad3c00000000000000000000100000000000000000bae6c591ef02ab12afbc59d76a0bf1ee30c6b99c13efb836b0498cfd033b605e551889fc0a8b7c8a1b2f48b2a37342f424850089f332aab6c0c132b72c049d058ae4dae76868b56bc656cdbef910f9b033e8036b252c73e7b03199d9d6229dd155d61f0000000000bfb882a3405230ee96ea5847ceda852aa8119eb453000000000000000000ba8aead18acb60d5917c3012df4596bc0fb570d2b9822c5ad909719391e32c04d35027fe75d4cc004d0a3ee7b19f1ce16905dd"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x0)

16.112056561s ago: executing program 1 (id=2222):
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, <r5=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000002280)={0x50, 0x0, r5, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50)
read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x6, 0x4)

11.591457129s ago: executing program 1 (id=2228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r3, &(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff', 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

10.398270279s ago: executing program 1 (id=2232):
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002280)={0x50, 0x0, r6, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50)
read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x6, 0x4)

9.528058323s ago: executing program 6 (id=2234):
syz_open_procfs(0x0, &(0x7f0000000940)='fd\x00')
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000380))
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
setgid(r2)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0))
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4)
statx(r3, &(0x7f0000000680)='./file0\x00', 0x4000, 0x4, &(0x7f0000004280))
r5 = socket(0x11, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@initdev}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000000))
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)

8.182535823s ago: executing program 6 (id=2236):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r3, &(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff', 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, 0x0, 0x0)
write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffffd, 0x28a, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0)
r7 = dup(0xffffffffffffffff)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX])

7.851511312s ago: executing program 2 (id=2237):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

6.79213525s ago: executing program 6 (id=2238):
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, <r5=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000002280)={0x50, 0x0, r5, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50)
read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x6, 0x4)

5.823230339s ago: executing program 34 (id=2213):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
statx(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x100, &(0x7f0000000300))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = eventfd(0xe)
dup2(r4, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110720000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7", @ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5.80890783s ago: executing program 2 (id=2240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x7, 0x8000}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe)
write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file1'}, 0xb)
close(r7)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xf, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000080)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc})

4.841581442s ago: executing program 35 (id=2215):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})
statx(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x100, &(0x7f0000000300))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r4 = eventfd(0xe)
dup2(r4, r3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110720000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7", @ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.572081321s ago: executing program 1 (id=2242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r3, &(0x7f00000000c0)='\xff\xff\xff\xff\xff\xff', 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

4.182391751s ago: executing program 2 (id=2243):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x10e)
sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r4})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="97857d6df7f023b7ea5d70d00e8c2c579313bcba99b6e45dc70aa4179c06d31fe3e19c6935b4ef3bab6c0d7bb2d393c36f08fa525176a8e9035ded8e60a1ea9c8d8f11e865988bdf54299a9756b02169cd66c4c8ea16ccb88ede4df8f5e2233b8bd7d589899221c00480c373999979b2a091d838949a78d2117f11b0323268e3bf055d1569d7711b1ba879593f7fb7bc63945207aaa46736ec7a67ff8525e846d0529c926b4372e5018a8fa98961aee62d765faeed4fae3fadc9511a1a70cdcbcaf48c87860c8678249b7162959cb400", @ANYRES64=r4, @ANYRES8=r4], 0xbc}, 0x1, 0x11, 0x0, 0x4014}, 0x851)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000010, r8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
lseek(0xffffffffffffffff, 0x0, 0x1)
gettid()
close_range(r7, 0xffffffffffffffff, 0x0)

3.334836352s ago: executing program 1 (id=2244):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000013080500000088db1a00"/28], 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000000140)="18a7ccf772c0fb6ab5279f5432d8c5f28a5a87484f80badcfaff47dc5cb31a9befcab9606943296b87940fc0d926920751148fb4256f58539a401ca5e2044d16c87abeea558884edcb25dd05b2f4ba62692b13619342396acbc0358f5c4191760f0b9127748e5851b98dea557701e3ff7dee48d38c1d6569b8c3d15dd98cefcdca10f0", 0x0}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r2, 0x40045431, &(0x7f00000001c0))
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100, 0x0, {0x77359400}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xfc, "68ab0498"}, 0x0, 0x1, {0x0}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r5 = syz_usb_connect_ath9k(0x3, 0xa4, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3a, [{{0x9, 0x2, 0x5d}}]}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x2c, &(0x7f0000000880)={[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})

3.09671307s ago: executing program 2 (id=2245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

2.236944675s ago: executing program 6 (id=2246):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0x33f}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
io_uring_enter(r4, 0x47f9, 0x0, 0x7, 0x0, 0x0)
r7 = socket(0x28, 0x4, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040), 0x10)
listen(r7, 0x0)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
r9 = accept4$unix(r7, 0x0, 0x0, 0x0)
recvfrom$unix(r9, &(0x7f0000000740)=""/243, 0xffffffffffffff11, 0x40, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000280)='%pI4   \x00'}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r11 = getpid()
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.040233866s ago: executing program 2 (id=2247):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0b0400000000000000000200ffc23127034000000000000000050900010073797a30000000000900020073797a3100000000140000001100010000000000000000000200000a"], 0x60}}, 0x14b6deac033214c2)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async)
r3 = socket(0x1, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400000010000104000000000001000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x84}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x2c, &(0x7f0000000880)={[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="830004002a6000003400128008000100736974002800028008000300e00000010800010028b6555ccf9f3b88895dc096c7eaab02e1f272b1d9af16079c"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async, rerun: 32)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0))

1.433926846s ago: executing program 2 (id=2248):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="3b651463d6698d625fef2e24f1ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0})
read$usbfs(r5, 0x0, 0x2300)
write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2)
write$UHID_CREATE2(r5, &(0x7f00000001c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x49, 0x2, 0x4, 0x80, 0xfffeffff, 0x80000000, "48b033874456c29c8450ef5a8d6ad8921f2e43ee882b572646e1314dd46859d6488b570b2e662003e4978394fd23a0993e5162d6bffd77d3fab89b1fac3c70d0abc7eef8357dc78ce2"}}, 0x161)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000004c0)={0x20, 0x5, 0xfd, {0xfd, 0x5, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000040)={0x0, 0xf, 0x6e, {0x5, 0xf, 0x6e, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "7e5c1116971209c3ba76fe3dfcacd453"}, @generic={0x55, 0x10, 0xb, "710ca8594423be37701f16f8cf7a305909cc318ea40e4096b2253460237e1aa3553f415569575cd33cba170f3a7f45bdac2c77a07124283e5050fa03114ddc64b3b9245b45afd7271f3182fad2b1b69b5c99"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0x8, 0x6, "cb9815bf", "f9081018"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x3, 0x9, 0x2, 0x43, 0x8, 0x6}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x0, 0xc, 0x55, "d4eea3ab6a02c2b99090cd9811a039316634bcd27bcb7cf3194b857aeab9f0f1ef2fea46ab5b5adff92258491fbb5cb44efa8625b81a2766a4c80f5aec189b62796dd2063a8d70b6d91c5911c480a830d70d10f115"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0xc0, 0x80}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0xb, 0x2, "5ea7"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="90a5035c02bc"}, &(0x7f0000000880)={0x40, 0x19, 0x2, '9.'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x73}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x9, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x1, 0x3, "712bab"}, 0x0})

1.199438698s ago: executing program 6 (id=2249):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

0s ago: executing program 6 (id=2250):
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002280)={0x50, 0x0, r6, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50)
read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x6, 0x4)

kernel console output (not intermixed with test programs):


[  888.364974][T12107] RAX: ffffffffffffffda RBX: 00007f4069fa6160 RCX: 00007f4069d8cde9
[  888.364986][T12107] RDX: 000000000000fea7 RSI: 0000400000000000 RDI: 000000000000000a
[  888.364997][T12107] RBP: 00007f406ac56090 R08: 0000000000000000 R09: 0000000000000000
[  888.365008][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.365017][T12107] R13: 0000000000000000 R14: 00007f4069fa6160 R15: 00007ffc773d9098
[  888.365042][T12107]  </TASK>
[  889.661261][T12119] tmpfs: Bad value for 'mpol'
[  889.673146][T12119] Cannot find set identified by id 0 to match
[  893.586019][T12132] kAFS: Can only specify source 'none' with -o dyn
[  893.817558][   T29] audit: type=1804 audit(1739446227.221:21): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1516" name="/newroot/308/file0" dev="tmpfs" ino=1696 res=1 errno=0
[  894.372675][   T29] audit: type=1804 audit(1739446227.781:22): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1515" name="/newroot/156/file0" dev="fuse" ino=1 res=1 errno=0
[  894.949077][ T5878] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  895.120340][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.156809][ T5878] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  895.195642][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.235206][ T5878] usb 4-1: Product: syz
[  895.254922][ T5878] usb 4-1: Manufacturer: syz
[  895.284204][ T5878] usb 4-1: SerialNumber: syz
[  895.381350][ T5878] usb 4-1: config 0 descriptor??
[  895.395526][ T5878] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  895.677227][T12167] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  896.803811][T12169] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  896.819174][T12166] xt_TCPMSS: Only works on TCP SYN packets
[  897.176876][ T5878] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  898.111635][ T5878] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  898.112768][    T8] usb 4-1: USB disconnect, device number 32
[  898.139075][ T5878] usb 2-1: config 0 has no interface number 0
[  898.145244][ T5878] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  898.232504][ T5878] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  898.307743][ T5878] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  898.420473][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.777449][T11632] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  898.804549][ T5878] usb 2-1: Product: syz
[  898.835281][ T5878] usb 2-1: Manufacturer: syz
[  898.874845][ T5878] usb 2-1: SerialNumber: syz
[  898.918238][ T5878] usb 2-1: config 0 descriptor??
[  898.988142][ T5878] usb 2-1: can't set config #0, error -71
[  899.012918][T11632] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  899.033619][ T5878] usb 2-1: USB disconnect, device number 26
[  899.060254][T11632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.095002][T11632] usb 3-1: config 0 descriptor??
[  899.119254][T11632] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  899.378238][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  899.548042][    T9] usb 6-1: Using ep0 maxpacket: 16
[  899.567262][    T9] usb 6-1: config 0 has an invalid interface number: 99 but max is 0
[  899.604170][    T9] usb 6-1: config 0 has no interface number 0
[  899.635279][    T9] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0
[  899.863668][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.874663][   T29] audit: type=1804 audit(1739446233.261:23): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1527" name="/newroot/309/file0" dev="fuse" ino=1 res=1 errno=0
[  900.310465][    T9] usb 6-1: Product: syz
[  900.314735][    T9] usb 6-1: Manufacturer: syz
[  900.335220][    T9] usb 6-1: SerialNumber: syz
[  900.359063][    T9] usb 6-1: config 0 descriptor??
[  900.591333][T11632] usb 3-1: USB disconnect, device number 40
[  900.606007][    T9] usb 6-1: USB disconnect, device number 31
[  900.658153][ T5878] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  900.806358][T12203] program syz.3.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  900.834497][T12203] xt_TCPMSS: Only works on TCP SYN packets
[  900.840949][ T5878] usb 2-1: Using ep0 maxpacket: 16
[  900.857058][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  900.868746][ T5878] usb 2-1: config 0 has no interfaces?
[  900.890045][ T5878] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  900.901496][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.910309][ T5878] usb 2-1: Product: syz
[  900.914716][ T5878] usb 2-1: Manufacturer: syz
[  900.924565][ T5878] usb 2-1: SerialNumber: syz
[  900.954935][ T5878] usb 2-1: config 0 descriptor??
[  901.324838][ T5878] usb 2-1: USB disconnect, device number 27
[  901.496441][T12209] Cannot find set identified by id 65534 to match
[  902.599451][T12220] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  902.903342][   T29] audit: type=1804 audit(1739446235.541:24): pid=12217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1529" name="/newroot/320/file0" dev="fuse" ino=1 res=1 errno=0
[  904.022632][T12226] FAULT_INJECTION: forcing a failure.
[  904.022632][T12226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  904.760894][T12226] CPU: 1 UID: 0 PID: 12226 Comm: syz.2.1533 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  904.760927][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  904.760940][T12226] Call Trace:
[  904.760948][T12226]  <TASK>
[  904.760957][T12226]  dump_stack_lvl+0x241/0x360
[  904.760998][T12226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.761032][T12226]  ? __pfx__printk+0x10/0x10
[  904.761066][T12226]  ? __pfx_lock_release+0x10/0x10
[  904.761101][T12226]  should_fail_ex+0x40a/0x550
[  904.761131][T12226]  _copy_from_user+0x2d/0xb0
[  904.761154][T12226]  do_ip6t_set_ctl+0x73a/0x1270
[  904.761183][T12226]  ? nf_setsockopt+0x240/0x2c0
[  904.761203][T12226]  ? kstrtouint_from_user+0x128/0x190
[  904.761232][T12226]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  904.761256][T12226]  ? rcu_is_watching+0x15/0xb0
[  904.761289][T12226]  ? trace_contention_end+0x3c/0x120
[  904.761330][T12226]  ? __mutex_unlock_slowpath+0x227/0x800
[  904.761368][T12226]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  904.761413][T12226]  nf_setsockopt+0x295/0x2c0
[  904.761440][T12226]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  904.761469][T12226]  do_sock_setsockopt+0x3af/0x720
[  904.761518][T12226]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  904.761556][T12226]  ? __fget_files+0x395/0x410
[  904.761582][T12226]  ? __fget_files+0x2a/0x410
[  904.761617][T12226]  __x64_sys_setsockopt+0x1ee/0x280
[  904.761657][T12226]  do_syscall_64+0xf3/0x230
[  904.761686][T12226]  ? clear_bhb_loop+0x35/0x90
[  904.761719][T12226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.761747][T12226] RIP: 0033:0x7f014d58cde9
[  904.761765][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.761783][T12226] RSP: 002b:00007f014e4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  904.761806][T12226] RAX: ffffffffffffffda RBX: 00007f014d7a5fa0 RCX: 00007f014d58cde9
[  904.761821][T12226] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  904.761834][T12226] RBP: 00007f014e4cf090 R08: 0000000000000458 R09: 0000000000000000
[  904.761847][T12226] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001
[  904.761860][T12226] R13: 0000000000000000 R14: 00007f014d7a5fa0 R15: 00007fff554bbb98
[  904.761890][T12226]  </TASK>
[  905.666535][T12238] FAULT_INJECTION: forcing a failure.
[  905.666535][T12238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  905.728450][T12238] CPU: 0 UID: 0 PID: 12238 Comm: syz.1.1536 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  905.728481][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  905.728495][T12238] Call Trace:
[  905.728502][T12238]  <TASK>
[  905.728511][T12238]  dump_stack_lvl+0x241/0x360
[  905.728554][T12238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  905.728587][T12238]  ? __pfx__printk+0x10/0x10
[  905.728620][T12238]  ? __pfx_lock_release+0x10/0x10
[  905.728655][T12238]  should_fail_ex+0x40a/0x550
[  905.728685][T12238]  _copy_from_iter+0x1e9/0x1c20
[  905.728717][T12238]  ? __virt_addr_valid+0x183/0x530
[  905.728758][T12238]  ? __alloc_skb+0x28f/0x440
[  905.728789][T12238]  ? __pfx__copy_from_iter+0x10/0x10
[  905.728823][T12238]  ? __virt_addr_valid+0x183/0x530
[  905.728851][T12238]  ? __virt_addr_valid+0x183/0x530
[  905.728878][T12238]  ? __virt_addr_valid+0x45f/0x530
[  905.728907][T12238]  ? __phys_addr_symbol+0x2f/0x70
[  905.728935][T12238]  ? __check_object_size+0x47a/0x730
[  905.728966][T12238]  netlink_sendmsg+0x73d/0xcb0
[  905.729000][T12238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  905.729035][T12238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  905.729054][T12238]  __sock_sendmsg+0x221/0x270
[  905.729084][T12238]  ____sys_sendmsg+0x52a/0x7e0
[  905.729114][T12238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  905.729134][T12238]  ? __fget_files+0x2a/0x410
[  905.729164][T12238]  ? __fget_files+0x2a/0x410
[  905.729200][T12238]  __sys_sendmsg+0x269/0x350
[  905.729227][T12238]  ? __pfx___sys_sendmsg+0x10/0x10
[  905.729261][T12238]  ? do_sys_openat2+0x17a/0x1d0
[  905.729315][T12238]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  905.729344][T12238]  ? do_syscall_64+0x100/0x230
[  905.729377][T12238]  ? do_syscall_64+0xb6/0x230
[  905.729409][T12238]  do_syscall_64+0xf3/0x230
[  905.729445][T12238]  ? clear_bhb_loop+0x35/0x90
[  905.729482][T12238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.729510][T12238] RIP: 0033:0x7feb3f98cde9
[  905.729529][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  905.729547][T12238] RSP: 002b:00007feb408be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  905.729569][T12238] RAX: ffffffffffffffda RBX: 00007feb3fba5fa0 RCX: 00007feb3f98cde9
[  905.729585][T12238] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003
[  905.729598][T12238] RBP: 00007feb408be090 R08: 0000000000000000 R09: 0000000000000000
[  905.729612][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.729624][T12238] R13: 0000000000000000 R14: 00007feb3fba5fa0 R15: 00007ffe4996e078
[  905.729654][T12238]  </TASK>
[  905.994963][    C0] vkms_vblank_simulate: vblank timer overrun
[  906.938609][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'.
[  906.948286][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1542'.
[  907.216104][T12252] erspan0: entered promiscuous mode
[  907.223191][T12252] vlan2: entered promiscuous mode
[  907.488124][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  907.671494][    T9] usb 2-1: Using ep0 maxpacket: 16
[  907.687691][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.726100][    T9] usb 2-1: config 0 has no interfaces?
[  907.766530][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  907.797816][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.043527][    T9] usb 2-1: Product: syz
[  908.791377][T12271] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  908.821803][    T9] usb 2-1: Manufacturer: syz
[  908.826479][    T9] usb 2-1: SerialNumber: syz
[  909.219129][    T9] usb 2-1: config 0 descriptor??
[  909.508380][    T8] usb 2-1: USB disconnect, device number 28
[  910.607221][    T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  910.788048][    T9] usb 3-1: Using ep0 maxpacket: 16
[  910.897368][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  910.933259][    T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  910.972799][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.156110][    T9] usb 3-1: Product: syz
[  911.209468][    T9] usb 3-1: Manufacturer: syz
[  911.241801][    T9] usb 3-1: SerialNumber: syz
[  911.408974][ T5910] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  911.444329][    T9] usb 3-1: config 0 descriptor??
[  912.040221][    T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  912.073778][    T9] usb 3-1: Detected FT232R
[  912.135530][T12302] FAULT_INJECTION: forcing a failure.
[  912.135530][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.174815][T12302] CPU: 1 UID: 0 PID: 12302 Comm: syz.1.1556 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  912.174850][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  912.174865][T12302] Call Trace:
[  912.174872][T12302]  <TASK>
[  912.174882][T12302]  dump_stack_lvl+0x241/0x360
[  912.174924][T12302]  ? __pfx_dump_stack_lvl+0x10/0x10
[  912.174959][T12302]  ? __pfx__printk+0x10/0x10
[  912.174993][T12302]  ? __pfx_lock_release+0x10/0x10
[  912.175040][T12302]  should_fail_ex+0x40a/0x550
[  912.175071][T12302]  _copy_from_iter+0x1e9/0x1c20
[  912.175103][T12302]  ? __virt_addr_valid+0x183/0x530
[  912.175144][T12302]  ? __alloc_skb+0x28f/0x440
[  912.175175][T12302]  ? __pfx__copy_from_iter+0x10/0x10
[  912.175209][T12302]  ? __virt_addr_valid+0x183/0x530
[  912.175237][T12302]  ? __virt_addr_valid+0x183/0x530
[  912.175264][T12302]  ? __virt_addr_valid+0x45f/0x530
[  912.175294][T12302]  ? __phys_addr_symbol+0x2f/0x70
[  912.175322][T12302]  ? __check_object_size+0x47a/0x730
[  912.175354][T12302]  netlink_sendmsg+0x73d/0xcb0
[  912.175388][T12302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  912.175423][T12302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  912.175443][T12302]  __sock_sendmsg+0x221/0x270
[  912.175473][T12302]  ____sys_sendmsg+0x52a/0x7e0
[  912.175504][T12302]  ? __pfx_____sys_sendmsg+0x10/0x10
[  912.175523][T12302]  ? __fget_files+0x2a/0x410
[  912.175554][T12302]  ? __fget_files+0x2a/0x410
[  912.175591][T12302]  __sys_sendmsg+0x269/0x350
[  912.175617][T12302]  ? __pfx___sys_sendmsg+0x10/0x10
[  912.175652][T12302]  ? do_sys_openat2+0x17a/0x1d0
[  912.175706][T12302]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  912.175736][T12302]  ? do_syscall_64+0x100/0x230
[  912.175769][T12302]  ? do_syscall_64+0xb6/0x230
[  912.175801][T12302]  do_syscall_64+0xf3/0x230
[  912.175830][T12302]  ? clear_bhb_loop+0x35/0x90
[  912.175863][T12302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.175891][T12302] RIP: 0033:0x7feb3f98cde9
[  912.175910][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  912.175929][T12302] RSP: 002b:00007feb408be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  912.175951][T12302] RAX: ffffffffffffffda RBX: 00007feb3fba5fa0 RCX: 00007feb3f98cde9
[  912.175967][T12302] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003
[  912.175981][T12302] RBP: 00007feb408be090 R08: 0000000000000000 R09: 0000000000000000
[  912.175994][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.176013][T12302] R13: 0000000000000000 R14: 00007feb3fba5fa0 R15: 00007ffe4996e078
[  912.176045][T12302]  </TASK>
[  912.191692][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  912.456726][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  912.647500][    T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  913.074957][T12311] No such timeout policy "syz1"
[  913.323090][ T9141] usb 3-1: USB disconnect, device number 41
[  913.367548][ T9141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  913.493041][ T9141] ftdi_sio 3-1:0.0: device disconnected
[  913.530777][ T5910] usb 5-1: unable to read config index 0 descriptor/start: -71
[  913.559829][ T5910] usb 5-1: can't read configurations, error -71
[  913.908052][ T2149] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  914.130035][ T2149] usb 4-1: config 0 has an invalid interface number: 142 but max is 0
[  914.146883][ T2149] usb 4-1: config 0 has no interface number 0
[  914.163698][ T2149] usb 4-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[  915.022390][ T5910] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  915.149416][ T2149] usb 4-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[  915.162907][ T2149] usb 4-1: config 0 interface 142 has no altsetting 0
[  915.169906][ T2149] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  915.189842][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.392902][ T2149] usb 4-1: config 0 descriptor??
[  916.078871][T12313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'.
[  916.148878][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  916.205817][T12334] fuse: Unknown parameter 'user_i00000000000000000000'
[  916.637733][ T2149] usb 4-1: string descriptor 0 read error: -71
[  916.681055][ T2149] ums-realtek 4-1:0.142: USB Mass Storage device detected
[  916.859090][ T5910] usb 5-1: device descriptor read/all, error -71
[  916.886410][ T5910] usb usb5-port1: attempt power cycle
[  916.972333][ T2149] usb 4-1: USB disconnect, device number 33
[  917.449412][ T5910] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  917.555728][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  917.564666][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.586011][ T5910] usb 5-1: config 0 has no interfaces?
[  917.612724][ T5910] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  917.623620][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.641505][ T5910] usb 5-1: Product: syz
[  917.650340][ T5910] usb 5-1: Manufacturer: syz
[  917.661938][ T5910] usb 5-1: SerialNumber: syz
[  917.684226][ T5910] usb 5-1: config 0 descriptor??
[  917.910629][T12356] netlink: 'syz.3.1570': attribute type 9 has an invalid length.
[  918.488410][T12359] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  918.706365][T12365] vlan2: entered allmulticast mode
[  918.761972][T12365] bond0: entered allmulticast mode
[  918.778016][T12365] bond_slave_0: entered allmulticast mode
[  918.789683][T12365] bond_slave_1: entered allmulticast mode
[  918.932482][T12365] bond0: left allmulticast mode
[  918.946640][T12365] bond_slave_0: left allmulticast mode
[  918.980061][T12365] bond_slave_1: left allmulticast mode
[  920.322483][ T2149] usb 5-1: USB disconnect, device number 40
[  920.413422][T12380] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1575'.
[  920.717533][T12383] netlink: 'syz.1.1575': attribute type 29 has an invalid length.
[  920.733419][T12383] netlink: 'syz.1.1575': attribute type 29 has an invalid length.
[  921.920238][T12392] fuse: Unknown parameter 'user_i00000000000000000000'
[  923.498663][ T2149] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  923.739074][ T2149] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[  923.747333][ T2149] usb 2-1: config 0 has no interface number 0
[  923.761614][ T2149] usb 2-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[  923.776532][ T2149] usb 2-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[  923.842259][ T2149] usb 2-1: config 0 interface 142 has no altsetting 0
[  923.855448][ T2149] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  923.865065][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.888549][ T2149] usb 2-1: config 0 descriptor??
[  924.295518][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'.
[  924.622249][ T2149] usb 2-1: string descriptor 0 read error: -71
[  924.680009][ T2149] ums-realtek 2-1:0.142: USB Mass Storage device detected
[  925.046914][ T2149] usb 2-1: USB disconnect, device number 29
[  928.048315][T12434] fuse: Unknown parameter 'user_i00000000000000000000'
[  928.060069][ T2149] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  928.227976][ T2149] usb 6-1: Using ep0 maxpacket: 16
[  928.243270][ T2149] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.398064][ T2149] usb 6-1: config 0 has no interfaces?
[  928.624593][ T2149] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  928.775084][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.898036][ T2149] usb 6-1: Product: syz
[  928.924769][ T2149] usb 6-1: Manufacturer: syz
[  928.948104][ T2149] usb 6-1: SerialNumber: syz
[  928.979084][ T2149] usb 6-1: config 0 descriptor??
[  930.222722][T12448] tmpfs: Bad value for 'mpol'
[  931.110578][ T2149] usb 6-1: USB disconnect, device number 32
[  932.126346][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  932.133745][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  933.888868][   T29] audit: type=1804 audit(1739446266.991:25): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1596" name="/newroot/336/file0" dev="fuse" ino=1 res=1 errno=0
[  936.736100][T12477] vlan2: entered allmulticast mode
[  937.254626][ T2149] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  937.288798][T12497] syz.2.1603: attempt to access beyond end of device
[  937.288798][T12497] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  937.306042][T12497] XFS (nbd2): SB validate failed with error -5.
[  937.438082][ T2149] usb 4-1: Using ep0 maxpacket: 16
[  937.485793][ T2149] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  937.580005][ T2149] usb 4-1: config 0 has no interface number 0
[  937.580165][T12557] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  937.586154][ T2149] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  937.637046][ T2149] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  937.726758][ T2149] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  937.893650][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  938.028107][ T5874] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  938.039328][ T2149] usb 4-1: Product: syz
[  938.043552][ T2149] usb 4-1: SerialNumber: syz
[  938.097273][ T2149] usb 4-1: config 0 descriptor??
[  938.252602][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  938.274907][ T2149] cm109 4-1:0.8: invalid payload size 0, expected 4
[  938.288724][ T2149] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6
[  938.311246][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  938.337239][ T5874] usb 2-1: config 0 has no interfaces?
[  938.559002][ T5874] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  938.569116][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.577199][ T5874] usb 2-1: Product: syz
[  938.581543][ T5874] usb 2-1: Manufacturer: syz
[  938.586924][ T5874] usb 2-1: SerialNumber: syz
[  938.710272][ T5874] usb 2-1: config 0 descriptor??
[  939.832085][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  939.832327][ T5910] usb 4-1: USB disconnect, device number 34
[  939.839100][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  941.052638][ T5910] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  941.129128][    T9] usb 2-1: USB disconnect, device number 30
[  942.822573][T12606] program syz.5.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  942.853803][T12606] xt_TCPMSS: Only works on TCP SYN packets
[  942.958877][    T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  943.569715][    T9] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[  943.657632][    T9] usb 2-1: config 0 has no interface number 0
[  943.835228][    T9] usb 2-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[  943.856086][    T9] usb 2-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[  943.874391][    T9] usb 2-1: config 0 interface 142 has no altsetting 0
[  944.608310][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  944.617385][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.880671][    T9] usb 2-1: config 0 descriptor??
[  945.628830][    T9] usb 2-1: string descriptor 0 read error: -71
[  945.892980][    T9] ums-realtek 2-1:0.142: USB Mass Storage device detected
[  947.141638][    T9] usb 2-1: USB disconnect, device number 31
[  947.183154][T12630] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  947.670065][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  947.762746][T12640] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  947.836911][T12640] xt_TCPMSS: Only works on TCP SYN packets
[  947.958200][    T9] usb 2-1: Using ep0 maxpacket: 16
[  948.608778][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  948.626233][    T9] usb 2-1: config 0 has no interfaces?
[  948.665255][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  948.705007][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.738298][    T9] usb 2-1: Product: syz
[  948.755396][    T9] usb 2-1: Manufacturer: syz
[  948.869311][    T9] usb 2-1: SerialNumber: syz
[  948.905415][    T9] usb 2-1: config 0 descriptor??
[  949.128433][ T9141] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  949.288106][ T9141] usb 5-1: device descriptor read/64, error -71
[  949.654997][ T9141] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  949.838011][ T9141] usb 5-1: device descriptor read/64, error -71
[  950.202010][ T9141] usb usb5-port1: attempt power cycle
[  950.609058][    T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  950.668825][ T5874] usb 2-1: USB disconnect, device number 32
[  950.707953][ T9141] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  950.815226][    T9] usb 6-1: config 0 has an invalid interface number: 142 but max is 0
[  950.873148][    T9] usb 6-1: config 0 has no interface number 0
[  950.888246][ T9141] usb 5-1: device descriptor read/8, error -71
[  950.914720][    T9] usb 6-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[  950.957192][    T9] usb 6-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[  950.984022][    T9] usb 6-1: config 0 interface 142 has no altsetting 0
[  951.263922][    T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  951.495968][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.581090][    T9] usb 6-1: config 0 descriptor??
[  951.650922][T12679] fuse: Unknown parameter '0x0000000000000006'
[  952.504525][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1630'.
[  952.639403][    T9] usb 6-1: string descriptor 0 read error: -71
[  952.661747][    T9] ums-realtek 6-1:0.142: USB Mass Storage device detected
[  952.846915][    T9] usb 6-1: USB disconnect, device number 33
[  952.874043][ T8580] udevd[8580]: setting mode of /dev/bus/usb/006/033 to 020664 failed: No such file or directory
[  952.908216][ T8580] udevd[8580]: setting owner of /dev/bus/usb/006/033 to uid=0, gid=0 failed: No such file or directory
[  954.706653][T12706] 9pnet_fd: Insufficient options for proto=fd
[  954.995195][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'.
[  956.468551][ T5910] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  956.728092][ T5910] usb 6-1: Using ep0 maxpacket: 16
[  956.849065][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  956.873633][ T5910] usb 6-1: config 0 has no interfaces?
[  956.887132][ T5910] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  956.908428][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.923446][ T5910] usb 6-1: Product: syz
[  956.934818][ T5910] usb 6-1: Manufacturer: syz
[  956.948241][ T5910] usb 6-1: SerialNumber: syz
[  956.975570][ T5910] usb 6-1: config 0 descriptor??
[  957.228864][T12727] netlink: 'syz.2.1647': attribute type 9 has an invalid length.
[  957.740757][T12730] FAULT_INJECTION: forcing a failure.
[  957.740757][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  957.798433][T12730] CPU: 1 UID: 0 PID: 12730 Comm: syz.3.1648 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  957.798467][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  957.798480][T12730] Call Trace:
[  957.798487][T12730]  <TASK>
[  957.798497][T12730]  dump_stack_lvl+0x241/0x360
[  957.798539][T12730]  ? __pfx_dump_stack_lvl+0x10/0x10
[  957.798572][T12730]  ? __pfx__printk+0x10/0x10
[  957.798605][T12730]  ? __pfx_lock_release+0x10/0x10
[  957.798641][T12730]  should_fail_ex+0x40a/0x550
[  957.798670][T12730]  _copy_from_user+0x2d/0xb0
[  957.798701][T12730]  copy_msghdr_from_user+0xae/0x680
[  957.798735][T12730]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  957.798759][T12730]  ? __fget_files+0x2a/0x410
[  957.798789][T12730]  ? __fget_files+0x2a/0x410
[  957.798825][T12730]  __sys_sendmmsg+0x32b/0x720
[  957.798858][T12730]  ? __pfx___sys_sendmmsg+0x10/0x10
[  957.798899][T12730]  ? __pfx_lock_release+0x10/0x10
[  957.798922][T12730]  ? kstrtouint_from_user+0x128/0x190
[  957.798976][T12730]  ? ksys_write+0x22a/0x2b0
[  957.799001][T12730]  ? __pfx_lock_release+0x10/0x10
[  957.799034][T12730]  ? sb_end_write+0xe9/0x1c0
[  957.799062][T12730]  ? vfs_write+0x7fa/0xd10
[  957.799083][T12730]  ? __mutex_unlock_slowpath+0x227/0x800
[  957.799141][T12730]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  957.799171][T12730]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  957.799200][T12730]  ? do_syscall_64+0x100/0x230
[  957.799233][T12730]  __x64_sys_sendmmsg+0xa0/0xb0
[  957.799255][T12730]  do_syscall_64+0xf3/0x230
[  957.799285][T12730]  ? clear_bhb_loop+0x35/0x90
[  957.799317][T12730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.799346][T12730] RIP: 0033:0x7f4069d8cde9
[  957.799365][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  957.799383][T12730] RSP: 002b:00007f406ac98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  957.799405][T12730] RAX: ffffffffffffffda RBX: 00007f4069fa5fa0 RCX: 00007f4069d8cde9
[  957.799421][T12730] RDX: 0000000000000001 RSI: 0000400000000380 RDI: 0000000000000003
[  957.799433][T12730] RBP: 00007f406ac98090 R08: 0000000000000000 R09: 0000000000000000
[  957.799446][T12730] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  957.799458][T12730] R13: 0000000000000000 R14: 00007f4069fa5fa0 R15: 00007ffc773d9098
[  957.799487][T12730]  </TASK>
[  959.128177][ T9141] usb 6-1: USB disconnect, device number 34
[  959.584895][T12749] 9pnet_fd: Insufficient options for proto=fd
[  966.846587][ T5910] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  967.074383][ T5910] usb 6-1: Using ep0 maxpacket: 16
[  967.428958][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.458821][ T5910] usb 6-1: config 0 has no interfaces?
[  967.477428][ T5910] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  967.493751][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.521648][ T5910] usb 6-1: Product: syz
[  967.535661][ T5910] usb 6-1: Manufacturer: syz
[  967.591822][ T5910] usb 6-1: SerialNumber: syz
[  967.606347][ T5910] usb 6-1: config 0 descriptor??
[  967.675125][T12801] FAULT_INJECTION: forcing a failure.
[  967.675125][T12801] name failslab, interval 1, probability 0, space 0, times 0
[  967.689436][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.1.1665 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  967.689465][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  967.689478][T12801] Call Trace:
[  967.689486][T12801]  <TASK>
[  967.689495][T12801]  dump_stack_lvl+0x241/0x360
[  967.689537][T12801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  967.689571][T12801]  ? __pfx__printk+0x10/0x10
[  967.689605][T12801]  ? fs_reclaim_acquire+0x93/0x130
[  967.689627][T12801]  ? __pfx___might_resched+0x10/0x10
[  967.689655][T12801]  should_fail_ex+0x40a/0x550
[  967.689685][T12801]  should_failslab+0xac/0x100
[  967.689714][T12801]  __kmalloc_noprof+0xdd/0x4c0
[  967.689742][T12801]  ? tomoyo_encode+0x26f/0x540
[  967.689768][T12801]  tomoyo_encode+0x26f/0x540
[  967.689795][T12801]  tomoyo_realpath_from_path+0x59e/0x5e0
[  967.689829][T12801]  tomoyo_path_number_perm+0x236/0x860
[  967.689858][T12801]  ? __lock_acquire+0x1397/0x2100
[  967.689888][T12801]  ? tomoyo_path_number_perm+0x206/0x860
[  967.689920][T12801]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  967.689992][T12801]  ? __fget_files+0x2a/0x410
[  967.690024][T12801]  ? __fget_files+0x2a/0x410
[  967.690057][T12801]  security_file_ioctl+0xc6/0x2a0
[  967.690090][T12801]  __se_sys_ioctl+0x46/0x170
[  967.690113][T12801]  do_syscall_64+0xf3/0x230
[  967.690144][T12801]  ? clear_bhb_loop+0x35/0x90
[  967.690177][T12801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.690206][T12801] RIP: 0033:0x7feb3f98cde9
[  967.690224][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  967.690242][T12801] RSP: 002b:00007feb408be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  967.690266][T12801] RAX: ffffffffffffffda RBX: 00007feb3fba5fa0 RCX: 00007feb3f98cde9
[  967.690281][T12801] RDX: 0000400000000400 RSI: 00000000c0347c03 RDI: 0000000000000003
[  967.690295][T12801] RBP: 00007feb408be090 R08: 0000000000000000 R09: 0000000000000000
[  967.690308][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.690321][T12801] R13: 0000000000000000 R14: 00007feb3fba5fa0 R15: 00007ffe4996e078
[  967.690353][T12801]  </TASK>
[  967.691492][T12801] ERROR: Out of memory at tomoyo_realpath_from_path.
[  968.600151][T12812] fuse: Unknown parameter 'group_i00000000000000000000'
[  968.615781][T12811] 9pnet_fd: Insufficient options for proto=fd
[  969.434642][ T5910] usb 6-1: USB disconnect, device number 35
[  976.042712][T12848] FAULT_INJECTION: forcing a failure.
[  976.042712][T12848] name failslab, interval 1, probability 0, space 0, times 0
[  976.317988][   T29] audit: type=1804 audit(1739446308.491:26): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1676" name="/newroot/197/file0" dev="fuse" ino=1 res=1 errno=0
[  977.079442][T12848] CPU: 0 UID: 0 PID: 12848 Comm: syz.3.1677 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  977.079475][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  977.079488][T12848] Call Trace:
[  977.079495][T12848]  <TASK>
[  977.079503][T12848]  dump_stack_lvl+0x241/0x360
[  977.079554][T12848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  977.079582][T12848]  ? __pfx__printk+0x10/0x10
[  977.079612][T12848]  ? __kmalloc_noprof+0xb5/0x4c0
[  977.079637][T12848]  ? __pfx___might_resched+0x10/0x10
[  977.079662][T12848]  should_fail_ex+0x40a/0x550
[  977.079688][T12848]  should_failslab+0xac/0x100
[  977.079713][T12848]  __kmalloc_noprof+0xdd/0x4c0
[  977.079736][T12848]  ? ioctl_standard_iw_point+0x4af/0xcb0
[  977.079764][T12848]  ioctl_standard_iw_point+0x4af/0xcb0
[  977.079800][T12848]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  977.079823][T12848]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  977.079846][T12848]  ? __pfx___mutex_lock+0x10/0x10
[  977.079873][T12848]  ? rcu_is_watching+0x15/0xb0
[  977.079902][T12848]  ? __pfx_lock_release+0x10/0x10
[  977.079923][T12848]  ? full_name_hash+0x93/0xe0
[  977.079951][T12848]  ioctl_standard_call+0xbd/0x190
[  977.079972][T12848]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  977.079993][T12848]  ? __pfx_cfg80211_wext_siwgenie+0x10/0x10
[  977.080017][T12848]  wext_ioctl_dispatch+0xe4/0x410
[  977.080037][T12848]  ? __pfx_ioctl_standard_call+0x10/0x10
[  977.080062][T12848]  wext_handle_ioctl+0x166/0x280
[  977.080086][T12848]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  977.080114][T12848]  ? __asan_memset+0x23/0x50
[  977.080142][T12848]  ? smack_file_ioctl+0x29e/0x3a0
[  977.080172][T12848]  sock_ioctl+0x17c/0x8e0
[  977.080197][T12848]  ? __pfx_sock_ioctl+0x10/0x10
[  977.080217][T12848]  ? __fget_files+0x2a/0x410
[  977.080244][T12848]  ? __fget_files+0x2a/0x410
[  977.080272][T12848]  ? __pfx_sock_ioctl+0x10/0x10
[  977.080294][T12848]  __se_sys_ioctl+0xf5/0x170
[  977.080314][T12848]  do_syscall_64+0xf3/0x230
[  977.080339][T12848]  ? clear_bhb_loop+0x35/0x90
[  977.080367][T12848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.080392][T12848] RIP: 0033:0x7f4069d8cde9
[  977.080410][T12848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  977.080427][T12848] RSP: 002b:00007f406ac98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  977.080449][T12848] RAX: ffffffffffffffda RBX: 00007f4069fa5fa0 RCX: 00007f4069d8cde9
[  977.080463][T12848] RDX: 00004000000000c0 RSI: 0000000000008b30 RDI: 0000000000000007
[  977.080476][T12848] RBP: 00007f406ac98090 R08: 0000000000000000 R09: 0000000000000000
[  977.080488][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  977.080499][T12848] R13: 0000000000000000 R14: 00007f4069fa5fa0 R15: 00007ffc773d9098
[  977.080538][T12848]  </TASK>
[  977.108531][   T29] audit: type=1804 audit(1739446310.061:27): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1674" name="/newroot/338/file0" dev="fuse" ino=1 res=1 errno=0
[  978.846974][T12878] fuse: Unknown parameter 'group_i00000000000000000000'
[  978.868042][T12878] 9pnet_fd: Insufficient options for proto=fd
[  980.139155][T11632] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  981.817961][T11632] usb 3-1: Using ep0 maxpacket: 16
[  981.824849][T11632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  981.848964][T11632] usb 3-1: config 0 has no interfaces?
[  981.879624][T11632] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  981.888951][T11632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.896979][T11632] usb 3-1: Product: syz
[  981.917990][T11632] usb 3-1: Manufacturer: syz
[  981.928941][T11632] usb 3-1: SerialNumber: syz
[  982.160014][T11632] usb 3-1: config 0 descriptor??
[  982.445777][T12906] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[  982.455870][T12906] xt_TCPMSS: Only works on TCP SYN packets
[  984.490432][ T5905] usb 3-1: USB disconnect, device number 42
[  984.568078][    T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  984.838812][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  985.678069][    T8] usb 4-1: Using ep0 maxpacket: 32
[  985.748067][    T9] usb 2-1: Using ep0 maxpacket: 16
[  985.809583][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  985.845520][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  985.888152][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.296217][T12937] fuse: Unknown parameter 'group_i00000000000000000000'
[  986.312793][T12937] 9pnet_fd: Insufficient options for proto=fd
[  986.902351][    T9] usb 2-1: Product: syz
[  986.906620][    T9] usb 2-1: Manufacturer: syz
[  987.863024][    T9] usb 2-1: SerialNumber: syz
[  987.868693][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  987.883175][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  987.897976][    T8] usb 4-1: can't read configurations, error -71
[  987.956259][    T9] usb 2-1: config 0 descriptor??
[  988.110958][    T9] usb 2-1: can't set config #0, error -71
[  988.129199][    T9] usb 2-1: USB disconnect, device number 33
[  989.482587][T11864] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  989.492863][T11864] CPU: 1 UID: 0 PID: 11864 Comm: kworker/u9:1 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  989.492892][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  989.492907][T11864] Workqueue: hci4 hci_rx_work
[  989.492935][T11864] Call Trace:
[  989.492942][T11864]  <TASK>
[  989.492962][T11864]  dump_stack_lvl+0x241/0x360
[  989.493003][T11864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  989.493037][T11864]  ? __pfx__printk+0x10/0x10
[  989.493073][T11864]  ? __kmalloc_cache_noprof+0x243/0x390
[  989.493100][T11864]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  989.493127][T11864]  sysfs_create_dir_ns+0x2ce/0x3a0
[  989.493152][T11864]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  989.493184][T11864]  kobject_add_internal+0x435/0x8d0
[  989.493227][T11864]  kobject_add+0x152/0x220
[  989.493258][T11864]  ? preempt_schedule_thunk+0x1a/0x30
[  989.493285][T11864]  ? device_add+0x3e7/0xbf0
[  989.493306][T11864]  ? __pfx_kobject_add+0x10/0x10
[  989.493339][T11864]  ? _raw_spin_unlock+0x3e/0x50
[  989.493368][T11864]  ? get_device_parent+0x165/0x410
[  989.493393][T11864]  device_add+0x4e5/0xbf0
[  989.493420][T11864]  hci_conn_add_sysfs+0xe8/0x200
[  989.493457][T11864]  le_conn_complete_evt+0xc9f/0x12e0
[  989.493502][T11864]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  989.493529][T11864]  ? __mutex_unlock_slowpath+0x227/0x800
[  989.493571][T11864]  ? skb_pull_data+0x112/0x230
[  989.493606][T11864]  hci_le_conn_complete_evt+0x18c/0x420
[  989.493642][T11864]  hci_event_packet+0xa55/0x1540
[  989.493671][T11864]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  989.493702][T11864]  ? __pfx_hci_event_packet+0x10/0x10
[  989.493723][T11864]  ? do_raw_spin_unlock+0x13c/0x8b0
[  989.493755][T11864]  ? hci_send_to_monitor+0xd8/0x7f0
[  989.493784][T11864]  ? kcov_remote_start+0x97/0x7d0
[  989.493815][T11864]  hci_rx_work+0x3f3/0xdb0
[  989.493847][T11864]  ? process_scheduled_works+0x976/0x1840
[  989.493871][T11864]  process_scheduled_works+0xa66/0x1840
[  989.493927][T11864]  ? __pfx_process_scheduled_works+0x10/0x10
[  989.493971][T11864]  ? assign_work+0x364/0x3d0
[  989.494000][T11864]  worker_thread+0x870/0xd30
[  989.494032][T11864]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  989.494061][T11864]  ? __kthread_parkme+0x169/0x1d0
[  989.494089][T11864]  ? __pfx_worker_thread+0x10/0x10
[  989.494113][T11864]  kthread+0x7a9/0x920
[  989.494137][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494166][T11864]  ? __pfx_worker_thread+0x10/0x10
[  989.494190][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494214][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494246][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494271][T11864]  ? _raw_spin_unlock_irq+0x23/0x50
[  989.494295][T11864]  ? lockdep_hardirqs_on+0x99/0x150
[  989.494321][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494350][T11864]  ret_from_fork+0x4b/0x80
[  989.494375][T11864]  ? __pfx_kthread+0x10/0x10
[  989.494402][T11864]  ret_from_fork_asm+0x1a/0x30
[  989.494438][T11864]  </TASK>
[  989.494618][T11864] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  989.494868][T12961] FAULT_INJECTION: forcing a failure.
[  989.494868][T12961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  989.505894][T11864] Bluetooth: hci4: failed to register connection device
[  989.823489][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.2.1702 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  989.823519][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  989.823532][T12961] Call Trace:
[  989.823539][T12961]  <TASK>
[  989.823548][T12961]  dump_stack_lvl+0x241/0x360
[  989.823587][T12961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  989.823614][T12961]  ? __pfx__printk+0x10/0x10
[  989.823641][T12961]  ? __pfx_lock_release+0x10/0x10
[  989.823678][T12961]  should_fail_ex+0x40a/0x550
[  989.823701][T12961]  _copy_from_user+0x2d/0xb0
[  989.823720][T12961]  memdup_user+0x64/0xc0
[  989.823745][T12961]  strndup_user+0x68/0xc0
[  989.823769][T12961]  __se_sys_mount+0xe2/0x3c0
[  989.823791][T12961]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  989.823814][T12961]  ? __pfx___se_sys_mount+0x10/0x10
[  989.823836][T12961]  ? do_syscall_64+0x100/0x230
[  989.823862][T12961]  ? __x64_sys_mount+0x20/0xc0
[  989.823884][T12961]  do_syscall_64+0xf3/0x230
[  989.823908][T12961]  ? clear_bhb_loop+0x35/0x90
[  989.823936][T12961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.823958][T12961] RIP: 0033:0x7f014d58cde9
[  989.823973][T12961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  989.823987][T12961] RSP: 002b:00007f014e4ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  989.824005][T12961] RAX: ffffffffffffffda RBX: 00007f014d7a6080 RCX: 00007f014d58cde9
[  989.824017][T12961] RDX: 00004000000000c0 RSI: 0000400000000000 RDI: 0000400000000140
[  989.824029][T12961] RBP: 00007f014e4ae090 R08: 0000000000000000 R09: 0000000000000000
[  989.824039][T12961] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001
[  989.824049][T12961] R13: 0000000000000000 R14: 00007f014d7a6080 R15: 00007fff554bbb98
[  989.824072][T12961]  </TASK>
[  991.636353][T12974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  991.668052][ T5905] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  991.868237][ T5905] usb 4-1: Using ep0 maxpacket: 16
[  991.885397][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.984500][ T5905] usb 4-1: config 0 has no interfaces?
[  992.058009][ T5905] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  992.171921][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.258166][ T5905] usb 4-1: Product: syz
[  992.263154][ T5905] usb 4-1: Manufacturer: syz
[  992.292940][ T5905] usb 4-1: SerialNumber: syz
[  992.328678][ T5905] usb 4-1: config 0 descriptor??
[  993.335451][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  993.343717][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  994.281674][T12988] netlink: 'syz.2.1708': attribute type 9 has an invalid length.
[  994.938579][    T8] usb 4-1: USB disconnect, device number 37
[  995.122842][T12996] fuse: Unknown parameter 'group_id00000000000000000000'
[  995.138141][T12994] 9pnet_fd: Insufficient options for proto=fd
[  995.331364][T12995] FAULT_INJECTION: forcing a failure.
[  995.331364][T12995] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  995.579427][T12995] CPU: 1 UID: 0 PID: 12995 Comm: syz.1.1710 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[  995.579461][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  995.579475][T12995] Call Trace:
[  995.579482][T12995]  <TASK>
[  995.579491][T12995]  dump_stack_lvl+0x241/0x360
[  995.579535][T12995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  995.579576][T12995]  ? __pfx__printk+0x10/0x10
[  995.579621][T12995]  should_fail_ex+0x40a/0x550
[  995.579652][T12995]  prepare_alloc_pages+0x1da/0x5b0
[  995.579684][T12995]  __alloc_frozen_pages_noprof+0x16f/0x710
[  995.579712][T12995]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  995.579738][T12995]  ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0
[  995.579786][T12995]  alloc_pages_mpol+0x311/0x660
[  995.579810][T12995]  ? finish_task_switch+0x1e5/0x870
[  995.579848][T12995]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  995.579887][T12995]  vma_alloc_folio_noprof+0x12b/0x260
[  995.579918][T12995]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  995.579957][T12995]  folio_prealloc+0x2e/0x170
[  995.579980][T12995]  do_wp_page+0x1253/0x49b0
[  995.580028][T12995]  ? __pfx_do_wp_page+0x10/0x10
[  995.580058][T12995]  ? __pfx_preempt_schedule+0x10/0x10
[  995.580090][T12995]  ? __pfx_lock_acquire+0x10/0x10
[  995.580115][T12995]  ? rcu_is_watching+0x15/0xb0
[  995.580151][T12995]  ? do_raw_spin_lock+0x14f/0x370
[  995.580174][T12995]  ? __pfx____pte_offset_map+0x10/0x10
[  995.580210][T12995]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  995.580248][T12995]  __handle_mm_fault+0x24d5/0x70f0
[  995.580311][T12995]  ? __pfx___handle_mm_fault+0x10/0x10
[  995.580350][T12995]  ? rcu_read_unlock_special+0x497/0x570
[  995.580380][T12995]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  995.580408][T12995]  ? __pfx_lock_release+0x10/0x10
[  995.580448][T12995]  ? __rcu_read_unlock+0xa1/0x110
[  995.580476][T12995]  ? mt_find+0x2a9/0x920
[  995.580507][T12995]  ? mt_find+0x6c8/0x920
[  995.580537][T12995]  ? mt_find+0x2a9/0x920
[  995.580580][T12995]  ? __pfx_mt_find+0x10/0x10
[  995.580632][T12995]  ? find_vma+0xf9/0x170
[  995.580661][T12995]  ? __pfx_find_vma+0x10/0x10
[  995.580690][T12995]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  995.580722][T12995]  handle_mm_fault+0x2c1/0x7e0
[  995.580765][T12995]  exc_page_fault+0x2b9/0x8b0
[  995.580793][T12995]  ? irqentry_exit+0x63/0x90
[  995.580824][T12995]  asm_exc_page_fault+0x26/0x30
[  995.580852][T12995] RIP: 0010:rep_movs_alternative+0x4a/0x70
[  995.580876][T12995] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[  995.580895][T12995] RSP: 0018:ffffc90003d1f4b8 EFLAGS: 00050206
[  995.580914][T12995] RAX: ffffffff84de5f01 RBX: 0000400000001580 RCX: 0000000000006580
[  995.580930][T12995] RDX: 0000000000000000 RSI: ffff8880247c1a80 RDI: 0000400000003000
[  995.580945][T12995] RBP: ffffc90003d1f640 R08: ffff8880247c7fff R09: 1ffff110048f8fff
[  995.580961][T12995] R10: dffffc0000000000 R11: ffffed10048f9000 R12: 1ffff920007a3fc3
[  995.580977][T12995] R13: ffffc90003d1fe18 R14: 0000000000008000 R15: ffff8880247c0000
[  995.581001][T12995]  ? _copy_to_iter+0x1e1/0x1c50
[  995.581040][T12995]  _copy_to_iter+0x267/0x1c50
[  995.581072][T12995]  ? __virt_addr_valid+0x183/0x530
[  995.581103][T12995]  ? __pfx_lock_release+0x10/0x10
[  995.581141][T12995]  ? __pfx__copy_to_iter+0x10/0x10
[  995.581177][T12995]  ? __virt_addr_valid+0x183/0x530
[  995.581206][T12995]  ? __virt_addr_valid+0x183/0x530
[  995.581233][T12995]  ? __virt_addr_valid+0x45f/0x530
[  995.581282][T12995]  ? __phys_addr_symbol+0x2f/0x70
[  995.581311][T12995]  ? __check_object_size+0x47a/0x730
[  995.581343][T12995]  __skb_datagram_iter+0x3c6/0x900
[  995.581370][T12995]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  995.581404][T12995]  skb_copy_datagram_iter+0xd1/0x250
[  995.581433][T12995]  unix_stream_read_actor+0x70/0xb0
[  995.581460][T12995]  unix_stream_read_generic+0xc47/0x26b0
[  995.581526][T12995]  ? __pfx_unix_stream_read_generic+0x10/0x10
[  995.581550][T12995]  ? __pfx_autoremove_wake_function+0x10/0x10
[  995.581607][T12995]  unix_stream_recvmsg+0x22b/0x2c0
[  995.581636][T12995]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  995.581660][T12995]  ? __pfx_unix_stream_read_actor+0x10/0x10
[  995.581686][T12995]  ? __pfx___might_resched+0x10/0x10
[  995.581710][T12995]  ? __might_fault+0xaa/0x120
[  995.581743][T12995]  ? __pfx_lock_release+0x10/0x10
[  995.581767][T12995]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  995.581797][T12995]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[  995.581825][T12995]  sock_recvmsg+0x22f/0x280
[  995.581857][T12995]  ____sys_recvmsg+0x1c6/0x480
[  995.581890][T12995]  ? __pfx_____sys_recvmsg+0x10/0x10
[  995.581940][T12995]  __sys_recvmsg+0x291/0x390
[  995.581968][T12995]  ? __pfx___sys_recvmsg+0x10/0x10
[  995.582006][T12995]  ? __fget_files+0x2a/0x410
[  995.582051][T12995]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  995.582081][T12995]  ? do_syscall_64+0x100/0x230
[  995.582113][T12995]  ? do_syscall_64+0xb6/0x230
[  995.582146][T12995]  do_syscall_64+0xf3/0x230
[  995.582175][T12995]  ? clear_bhb_loop+0x35/0x90
[  995.582208][T12995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.582236][T12995] RIP: 0033:0x7feb3f98cde9
[  995.582254][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  995.582271][T12995] RSP: 002b:00007feb408be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  995.582292][T12995] RAX: ffffffffffffffda RBX: 00007feb3fba5fa0 RCX: 00007feb3f98cde9
[  995.582308][T12995] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000000000000003
[  995.582322][T12995] RBP: 00007feb408be090 R08: 0000000000000000 R09: 0000000000000000
[  995.582335][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  995.582348][T12995] R13: 0000000000000000 R14: 00007feb3fba5fa0 R15: 00007ffe4996e078
[  995.582381][T12995]  </TASK>
[  997.878143][ T5905] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  998.088306][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  998.156565][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  998.254273][ T5905] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  998.313117][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.401729][ T5905] usb 6-1: Product: syz
[  998.455369][ T5905] usb 6-1: Manufacturer: syz
[  998.678377][ T5905] usb 6-1: SerialNumber: syz
[  998.700259][ T5905] usb 6-1: config 0 descriptor??
[  998.714647][ T5905] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  998.755613][ T5905] usb 6-1: Detected FT232R
[  999.236992][ T5905] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  999.253875][ T5905] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  999.261357][   T29] audit: type=1804 audit(1739446332.671:28): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1718" name="/newroot/346/file0" dev="tmpfs" ino=1902 res=1 errno=0
[  999.525444][ T5905] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  999.546861][ T5905] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  999.568096][ T5905] usb 6-1: USB disconnect, device number 36
[  999.598569][ T5905] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  999.628841][    T8] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  999.630506][ T5905] ftdi_sio 6-1:0.0: device disconnected
[  999.769804][T13041] netlink: 'syz.2.1721': attribute type 9 has an invalid length.
[ 1000.080904][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1000.103647][    T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1000.117964][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.126730][    T8] usb 5-1: Product: syz
[ 1000.418262][    T8] usb 5-1: Manufacturer: syz
[ 1000.422944][    T8] usb 5-1: SerialNumber: syz
[ 1000.478913][    T8] usb 5-1: config 0 descriptor??
[ 1000.515454][    T8] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22
[ 1000.969611][T13050] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1000.976791][T13049] 9pnet_fd: Insufficient options for proto=fd
[ 1001.808472][T13053] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1001.877323][T13053] xt_TCPMSS: Only works on TCP SYN packets
[ 1002.801084][ T5878] usb 5-1: USB disconnect, device number 45
[ 1002.926930][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1725'.
[ 1002.952073][T13060] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1725'.
[ 1003.068502][ T5905] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1003.135603][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'.
[ 1003.667883][ T5905] usb 4-1: config 0 has an invalid interface number: 142 but max is 0
[ 1003.676175][ T5905] usb 4-1: config 0 has no interface number 0
[ 1003.683312][ T5905] usb 4-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1003.694808][ T5905] usb 4-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1003.714584][ T5905] usb 4-1: config 0 interface 142 has no altsetting 0
[ 1003.728254][ T5905] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1003.743001][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.800176][ T5905] usb 4-1: config 0 descriptor??
[ 1003.844577][ T5905] usb 4-1: can't set config #0, error -71
[ 1003.882687][ T5905] usb 4-1: USB disconnect, device number 38
[ 1005.763675][T13092] netlink: 'syz.2.1734': attribute type 9 has an invalid length.
[ 1006.458100][   T29] audit: type=1804 audit(1739446339.861:29): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1736" name="/newroot/348/file0" dev="tmpfs" ino=1915 res=1 errno=0
[ 1006.514652][T13098] program syz.3.1737 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1006.544603][T13098] xt_TCPMSS: Only works on TCP SYN packets
[ 1006.760399][ T5910] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1006.988021][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.032133][ T5910] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1007.576305][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.585666][ T5910] usb 5-1: Product: syz
[ 1007.590295][ T5910] usb 5-1: Manufacturer: syz
[ 1007.595206][ T5910] usb 5-1: SerialNumber: syz
[ 1007.649065][ T5910] usb 5-1: config 0 descriptor??
[ 1008.447689][ T5910] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22
[ 1009.728041][ T5910] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1009.843773][ T9141] usb 5-1: USB disconnect, device number 46
[ 1010.879592][T12962] Bluetooth: hci5: command 0x0419 tx timeout
[ 1010.978330][ T5910] usb 2-1: Using ep0 maxpacket: 16
[ 1011.135951][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1011.155021][ T5910] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1011.169992][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.179315][ T5910] usb 2-1: Product: syz
[ 1011.183529][ T5910] usb 2-1: Manufacturer: syz
[ 1011.207949][ T5910] usb 2-1: SerialNumber: syz
[ 1011.216869][ T5910] usb 2-1: config 0 descriptor??
[ 1011.244479][ T5910] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[ 1011.305324][ T5910] usb 2-1: Detected FT232R
[ 1011.714597][ T5910] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1012.864277][ T5910] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1013.108445][T13151] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1013.159113][T13151] xt_TCPMSS: Only works on TCP SYN packets
[ 1015.678527][ T5878] usb 2-1: USB disconnect, device number 34
[ 1015.791533][ T5878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1015.837436][ T5878] ftdi_sio 2-1:0.0: device disconnected
[ 1019.883919][   T29] audit: type=1804 audit(1739446353.281:30): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1757" name="/newroot/352/file0" dev="tmpfs" ino=1940 res=1 errno=0
[ 1019.904520][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1020.718139][ T5874] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1020.779169][    T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1020.838351][ T5878] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1021.165351][ T5878] usb 2-1: Using ep0 maxpacket: 16
[ 1021.272893][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1021.403316][ T5878] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1021.505525][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.568619][ T5878] usb 2-1: Product: syz
[ 1021.572863][ T5878] usb 2-1: Manufacturer: syz
[ 1021.604553][ T5878] usb 2-1: SerialNumber: syz
[ 1021.628226][ T5878] usb 2-1: config 0 descriptor??
[ 1021.667247][ T5878] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[ 1021.714629][ T5878] usb 2-1: Detected FT232R
[ 1021.789975][ T5874] usb 3-1: Using ep0 maxpacket: 16
[ 1021.797119][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1021.817178][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1021.831086][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1022.636261][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.646917][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.647621][ T5878] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1022.656027][ T5874] usb 3-1: Product: syz
[ 1022.656050][ T5874] usb 3-1: Manufacturer: syz
[ 1022.687708][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1022.761021][ T5874] usb 3-1: SerialNumber: syz
[ 1022.779384][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.983805][ T5878] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1023.309183][    T9] usb 5-1: Product: syz
[ 1023.313423][    T9] usb 5-1: Manufacturer: syz
[ 1023.320476][    T9] usb 5-1: SerialNumber: syz
[ 1023.348917][    T9] usb 5-1: config 0 descriptor??
[ 1023.378538][ T5874] usb 3-1: config 0 descriptor??
[ 1023.385829][    T9] usb 5-1: can't set config #0, error -71
[ 1023.414762][    T9] usb 5-1: USB disconnect, device number 47
[ 1023.432742][ T5874] usb 3-1: can't set config #0, error -71
[ 1023.482834][ T5874] usb 3-1: USB disconnect, device number 43
[ 1025.908085][ T5874] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1026.359694][ T2149] usb 2-1: USB disconnect, device number 35
[ 1026.370832][ T5874] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.408118][ T5874] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2
[ 1026.420951][ T2149] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1026.436044][ T5874] usb 3-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd
[ 1026.592510][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.671819][ T5874] usb 3-1: Product: syz
[ 1026.676485][ T5874] usb 3-1: Manufacturer: syz
[ 1026.685796][ T5874] usb 3-1: SerialNumber: syz
[ 1026.694410][ T2149] ftdi_sio 2-1:0.0: device disconnected
[ 1026.695638][ T5874] usb 3-1: can't set config #2, error -71
[ 1026.707547][ T5874] usb 3-1: USB disconnect, device number 44
[ 1027.017428][ T5878] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1028.258006][ T5878] usb 5-1: Using ep0 maxpacket: 16
[ 1028.318674][ T5878] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1028.357480][ T5878] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1028.804723][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.827698][ T5878] usb 5-1: Product: syz
[ 1028.850662][ T5878] usb 5-1: Manufacturer: syz
[ 1028.865871][ T5878] usb 5-1: SerialNumber: syz
[ 1028.897224][ T5878] usb 5-1: config 0 descriptor??
[ 1028.941714][ T5878] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[ 1029.008598][ T5878] usb 5-1: Detected FT232R
[ 1029.276600][ T5878] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1029.337090][ T5878] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1029.366495][ T5878] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[ 1029.401887][ T5878] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1029.513339][ T5878] usb 5-1: USB disconnect, device number 48
[ 1029.581333][ T5878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1029.590907][T13225] udevd[13225]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[ 1029.606218][ T5878] ftdi_sio 5-1:0.0: device disconnected
[ 1030.767162][T13301] syzkaller0: entered promiscuous mode
[ 1030.800266][T13301] syzkaller0: entered allmulticast mode
[ 1033.223855][T13262] Set syz1 is full, maxelem 65536 reached
[ 1034.431835][T13341] pimreg0: tun_chr_ioctl cmd 1074025681
[ 1037.207058][   T29] audit: type=1804 audit(1739446369.741:31): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1817" name="/newroot/374/file0" dev="fuse" ino=1 res=1 errno=0
[ 1037.928091][T13375] program syz.5.1820 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1039.855670][T10451] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1040.270826][ T5878] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1040.418254][T10451] usb 6-1: Using ep0 maxpacket: 16
[ 1040.441060][T10451] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1040.476508][T10451] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1040.502579][T10451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.531797][T10451] usb 6-1: Product: syz
[ 1040.536125][T10451] usb 6-1: Manufacturer: syz
[ 1040.596527][ T5878] usb 5-1: Using ep0 maxpacket: 32
[ 1040.613492][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1040.642455][ T5878] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1040.673969][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.787936][T10451] usb 6-1: SerialNumber: syz
[ 1040.919291][ T5878] usb 5-1: Product: syz
[ 1040.923773][ T5878] usb 5-1: Manufacturer: syz
[ 1041.518177][T13399] fuse: Bad value for 'fd'
[ 1041.564053][T10451] usb 6-1: config 0 descriptor??
[ 1041.646640][ T5878] usb 5-1: SerialNumber: syz
[ 1041.819047][ T5878] usb 5-1: config 0 descriptor??
[ 1042.147481][T13396] 9pnet_fd: Insufficient options for proto=fd
[ 1042.205133][T10451] usb 6-1: can't set config #0, error -71
[ 1043.079022][ T5878] usb 5-1: can't set config #0, error -71
[ 1043.090479][ T5878] usb 5-1: USB disconnect, device number 49
[ 1043.938448][T10451] usb 6-1: USB disconnect, device number 37
[ 1045.881917][T13427] program syz.1.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1048.118127][   T29] audit: type=1804 audit(1739446381.341:32): pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1834" name="/newroot/377/file0" dev="fuse" ino=1 res=1 errno=0
[ 1048.141695][T13446] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1051.228213][T13463] fuse: Bad value for 'fd'
[ 1051.463867][T13463] 9pnet_fd: Insufficient options for proto=fd
[ 1055.148802][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.160083][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.462604][   T29] audit: type=1326 audit(1739446388.571:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13460 comm="syz.1.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb3f98cde9 code=0x0
[ 1056.995196][T13505] fuse: Bad value for 'user_id'
[ 1057.000219][T13505] fuse: Bad value for 'user_id'
[ 1057.019794][T13502] 9pnet_fd: Insufficient options for proto=fd
[ 1057.955391][T13512] 9pnet_fd: Insufficient options for proto=fd
[ 1060.364564][T13524] fuse: Bad value for 'fd'
[ 1060.372117][T13522] 9pnet_fd: Insufficient options for proto=fd
[ 1067.468655][T13566] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1067.478376][T13566] xt_TCPMSS: Only works on TCP SYN packets
[ 1070.620300][T13579] fuse: Bad value for 'fd'
[ 1072.699053][T13578] 9pnet_fd: Insufficient options for proto=fd
[ 1073.113381][T13583] 9pnet_fd: Insufficient options for proto=fd
[ 1076.476917][T13613] netlink: 'syz.4.1875': attribute type 9 has an invalid length.
[ 1077.606315][T13622] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1077.619774][T13622] xt_TCPMSS: Only works on TCP SYN packets
[ 1078.257942][ T5910] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1078.938984][T13632] fuse: Bad value for 'fd'
[ 1078.967525][T13632] 9pnet_fd: Insufficient options for proto=fd
[ 1079.290655][ T5910] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.255251][ T5910] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1080.267955][ T5910] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1080.281454][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1080.291006][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.315818][ T5910] usb 5-1: can't set config #27, error -71
[ 1080.339339][ T5910] usb 5-1: USB disconnect, device number 50
[ 1081.239089][T13647] No such timeout policy "syz1"
[ 1084.526971][T13663] netlink: 'syz.4.1887': attribute type 9 has an invalid length.
[ 1086.307773][T13679] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1086.320670][T13679] xt_TCPMSS: Only works on TCP SYN packets
[ 1087.859194][ T5910] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 1087.877590][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1088.171854][T13687] fuse: Bad value for 'fd'
[ 1088.179867][T13686] 9pnet_fd: Insufficient options for proto=fd
[ 1089.230379][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1089.540770][ T5910] usb 4-1: device descriptor read/all, error -71
[ 1089.547659][    T9] usb 2-1: device descriptor read/all, error -71
[ 1090.216916][T13690] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1090.900648][T13690] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.948400][T13690] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1090.975472][T13690] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1090.995647][T13690] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1091.015768][T13690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.033820][T13690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1091.043490][T13690] usb 6-1: invalid MIDI out EP 0
[ 1091.252834][T13690] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1091.362789][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1091.638022][T13690] usb 6-1: USB disconnect, device number 38
[ 1094.899170][T13730] netlink: 'syz.5.1905': attribute type 9 has an invalid length.
[ 1097.329374][ T5910] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[ 1097.930367][ T5910] usb 5-1: config 0 has an invalid interface number: 142 but max is 0
[ 1097.957977][ T5910] usb 5-1: config 0 has no interface number 0
[ 1097.964148][ T5910] usb 5-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1097.997976][ T5910] usb 5-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1098.053546][ T5910] usb 5-1: config 0 interface 142 has no altsetting 0
[ 1098.068039][ T5910] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1098.077155][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.162496][ T5910] usb 5-1: config 0 descriptor??
[ 1099.248386][ T5910] usb 5-1: string descriptor 0 read error: -71
[ 1099.274738][ T5910] ums-realtek 5-1:0.142: USB Mass Storage device detected
[ 1099.498399][ T5910] usb 5-1: USB disconnect, device number 51
[ 1099.673166][T13766] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1099.686809][T13766] xt_TCPMSS: Only works on TCP SYN packets
[ 1102.388124][ T2149] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1103.248121][ T2149] usb 3-1: Using ep0 maxpacket: 16
[ 1103.266363][ T2149] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1104.239148][ T2149] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1104.248471][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.256564][ T2149] usb 3-1: Product: syz
[ 1104.261747][ T2149] usb 3-1: Manufacturer: syz
[ 1104.267454][ T2149] usb 3-1: SerialNumber: syz
[ 1104.275494][ T2149] usb 3-1: config 0 descriptor??
[ 1104.283561][ T2149] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1104.362378][ T2149] usb 3-1: Detected FT232R
[ 1104.417946][ T9141] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1104.829415][ T9141] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.101139][ T9141] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1105.128285][ T9141] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1105.158158][ T9141] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1105.183257][ T9141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.297884][ T9141] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1105.317242][ T9141] usb 4-1: invalid MIDI out EP 0
[ 1105.393814][ T2149] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1105.397995][    T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[ 1105.432553][ T2149] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1105.449970][ T9141] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1105.465686][ T2149] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[ 1105.484439][ T2149] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1105.532746][ T2149] usb 3-1: USB disconnect, device number 45
[ 1105.560496][ T9141] usb 4-1: USB disconnect, device number 41
[ 1105.581106][    T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1105.600365][T13223] udevd[13223]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1105.608471][ T2149] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1105.623015][    T9] usb 2-1: config 0 has no interface number 0
[ 1105.642942][ T2149] ftdi_sio 3-1:0.0: device disconnected
[ 1105.659090][    T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1105.688388][    T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[ 1105.745722][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1105.768419][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.776501][    T9] usb 2-1: Product: syz
[ 1105.787906][    T9] usb 2-1: Manufacturer: syz
[ 1105.792585][    T9] usb 2-1: SerialNumber: syz
[ 1105.810158][    T9] usb 2-1: config 0 descriptor??
[ 1105.815801][T13799] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1105.838161][    T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1106.049203][T13799] tmpfs: Bad value for 'mpol'
[ 1106.200858][T13811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.225228][T13811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1106.271824][T13799] netlink: 'syz.1.1924': attribute type 1 has an invalid length.
[ 1106.279959][T13799] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1924'.
[ 1106.368721][ T2149] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[ 1106.568531][ T2149] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[ 1106.633903][ T2149] usb 3-1: config 0 has no interface number 0
[ 1106.650122][ T2149] usb 3-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1106.695265][ T2149] usb 3-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1107.259904][ T5910] usb 2-1: USB disconnect, device number 38
[ 1107.272274][ T5910] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1107.311385][ T2149] usb 3-1: config 0 interface 142 has no altsetting 0
[ 1107.319913][ T2149] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1107.333554][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.381786][ T2149] usb 3-1: config 0 descriptor??
[ 1107.652208][ T2149] usb 3-1: string descriptor 0 read error: -71
[ 1107.674874][ T2149] ums-realtek 3-1:0.142: USB Mass Storage device detected
[ 1108.657754][ T2149] usb 3-1: USB disconnect, device number 46
[ 1113.212372][T13862] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1115.449090][T13872] No such timeout policy "syz1"
[ 1115.503460][ T5910] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1115.739839][ T5910] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1115.786634][ T5910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1115.813084][ T5910] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1115.867510][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1944'.
[ 1115.901125][ T5910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1115.927627][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.211392][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.220661][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.761457][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1116.778389][ T5910] usb 4-1: invalid MIDI out EP 0
[ 1116.878397][ T5910] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1117.961558][    T9] usb 4-1: USB disconnect, device number 42
[ 1118.324771][T13235] udevd[13235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1120.152875][T13915] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1120.899561][T13913] netlink: 'syz.3.1954': attribute type 9 has an invalid length.
[ 1121.166718][T13915] syz.2.1953 (13915) used greatest stack depth: 19088 bytes left
[ 1123.031694][T13929] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1123.488004][T13932] No such timeout policy "syz1"
[ 1124.187994][T13690] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[ 1125.499879][T13690] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1125.512407][T13690] usb 3-1: config 0 has no interface number 0
[ 1125.612117][T13690] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1125.641972][T13690] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[ 1125.660001][T13690] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1125.677694][T13690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.691242][T13690] usb 3-1: Product: syz
[ 1125.695646][T13690] usb 3-1: Manufacturer: syz
[ 1125.701058][T13690] usb 3-1: SerialNumber: syz
[ 1125.717704][T13690] usb 3-1: config 0 descriptor??
[ 1125.725402][T13937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1125.770124][T13690] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[ 1127.020059][T13956] xt_hashlimit: max too large, truncated to 1048576
[ 1127.027758][T13956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1127.380632][T13937] tmpfs: Bad value for 'mpol'
[ 1128.442418][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1128.569620][T13966] No such timeout policy "syz1"
[ 1128.707395][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1131.019766][T13978] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1131.898137][ T5905] usb 3-1: USB disconnect, device number 47
[ 1131.938554][ T5905] yurex 3-1:0.50: USB YUREX #0 now disconnected
[ 1135.018258][T14005] No such timeout policy "syz1"
[ 1136.186520][T14008] program syz.5.1978 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1136.223425][T14008] xt_TCPMSS: Only works on TCP SYN packets
[ 1138.868327][T14022] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1139.708254][T14025] netlink: 'syz.2.1983': attribute type 4 has an invalid length.
[ 1140.478907][T12962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1140.489791][T12962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1140.508169][T12962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1140.553434][T12962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1140.762435][T12962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1141.226654][T12962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1142.018151][ T5905] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[ 1142.028717][T14028] chnl_net:caif_netlink_parms(): no params data found
[ 1142.219937][ T5905] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[ 1142.296583][ T5905] usb 2-1: config 0 has no interface number 0
[ 1143.936035][ T5833] Bluetooth: hci0: command tx timeout
[ 1144.406814][ T5905] usb 2-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1145.012379][T14066] No such timeout policy "syz1"
[ 1145.178371][ T5905] usb 2-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1145.248958][ T5905] usb 2-1: config 0 interface 142 has no altsetting 0
[ 1145.275444][ T5905] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1145.342856][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.382631][ T5905] usb 2-1: config 0 descriptor??
[ 1145.398949][T14028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.415587][ T5905] usb 2-1: can't set config #0, error -71
[ 1145.433428][T14028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.538122][ T5905] usb 2-1: USB disconnect, device number 39
[ 1145.550783][T14028] bridge_slave_0: entered allmulticast mode
[ 1145.578593][T14028] bridge_slave_0: entered promiscuous mode
[ 1145.599045][T14028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.606197][T14028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.639442][T14028] bridge_slave_1: entered allmulticast mode
[ 1145.662439][T14028] bridge_slave_1: entered promiscuous mode
[ 1146.017280][T14077] fuse: Bad value for 'fd'
[ 1146.083474][ T5833] Bluetooth: hci0: command tx timeout
[ 1146.848142][T14080] fuse: Invalid rootmode
[ 1146.910880][ T5905] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[ 1147.621007][T14079] 9pnet_fd: Insufficient options for proto=fd
[ 1147.740069][ T5905] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1147.748644][ T5905] usb 2-1: config 0 has no interface number 0
[ 1147.756243][ T5905] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1147.800721][ T5905] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[ 1148.003423][ T5905] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1148.012761][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.021232][ T5905] usb 2-1: Product: syz
[ 1148.025427][ T5905] usb 2-1: Manufacturer: syz
[ 1148.030127][ T5905] usb 2-1: SerialNumber: syz
[ 1148.040672][ T5905] usb 2-1: config 0 descriptor??
[ 1148.046457][T14068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1148.074813][ T5905] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1148.092897][T12561] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1148.183009][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1148.192715][ T5833] Bluetooth: hci0: command tx timeout
[ 1148.213678][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1148.277029][T14028] team0: Port device team_slave_0 added
[ 1148.343550][T14028] team0: Port device team_slave_1 added
[ 1148.955303][T12561] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.768187][    T9] usb 2-1: USB disconnect, device number 40
[ 1149.779981][    T9] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1149.834256][T14090] netlink: 'syz.5.1997': attribute type 4 has an invalid length.
[ 1149.878219][T12561] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1150.079264][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1150.086249][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1150.422614][ T5833] Bluetooth: hci0: command tx timeout
[ 1151.000635][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.073286][T14107] netlink: 'syz.5.2000': attribute type 9 has an invalid length.
[ 1151.267632][T12561] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.309234][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.317002][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1151.391041][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1151.922163][ T2149] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[ 1151.922754][T14028] hsr_slave_0: entered promiscuous mode
[ 1151.960920][T14028] hsr_slave_1: entered promiscuous mode
[ 1151.967219][T14028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1152.220731][T14028] Cannot create hsr debugfs directory
[ 1153.305599][ T2149] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[ 1153.756592][ T2149] usb 2-1: config 0 has no interface number 0
[ 1153.788106][ T2149] usb 2-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1153.828966][ T2149] usb 2-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1154.019949][T12561] bridge_slave_1: left allmulticast mode
[ 1154.025659][T12561] bridge_slave_1: left promiscuous mode
[ 1154.037921][ T2149] usb 2-1: config 0 interface 142 has no altsetting 0
[ 1154.040676][T12561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1154.044776][ T2149] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1154.128534][T14130] fuse: Bad value for 'fd'
[ 1154.845772][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.859703][ T2149] usb 2-1: config 0 descriptor??
[ 1154.880095][T12561] bridge_slave_0: left allmulticast mode
[ 1154.885821][T12561] bridge_slave_0: left promiscuous mode
[ 1154.891731][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2001'.
[ 1154.918413][T12561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.989421][T14135] program syz.5.2006 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1155.010684][T14135] xt_TCPMSS: Only works on TCP SYN packets
[ 1155.488074][T12962] Bluetooth: hci0: command 0x0405 tx timeout
[ 1156.439035][T12561] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[ 1159.004583][T12561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1159.020637][T12561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1159.034681][T12561] bond0 (unregistering): Released all slaves
[ 1159.184299][T12561] bond1 (unregistering): Released all slaves
[ 1159.352631][T12561] bond2 (unregistering): Released all slaves
[ 1159.505689][T12561] bond3 (unregistering): Released all slaves
[ 1159.648848][T12561] bond4 (unregistering): Released all slaves
[ 1159.817252][ T2149] usb 2-1: string descriptor 0 read error: -71
[ 1159.839075][ T2149] ums-realtek 2-1:0.142: USB Mass Storage device detected
[ 1160.290120][T14174] xt_hashlimit: max too large, truncated to 1048576
[ 1160.298092][T14174] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1160.469524][ T2149] usb 2-1: USB disconnect, device number 41
[ 1160.875490][T14045] udevd[14045]: setting owner of /dev/bus/usb/002/041 to uid=0, gid=0 failed: No such file or directory
[ 1161.543406][T14182] xt_hashlimit: max too large, truncated to 1048576
[ 1161.551440][T14182] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1161.998122][T14184] fuse: Bad value for 'fd'
[ 1163.765526][T12561] hsr_slave_0: left promiscuous mode
[ 1163.775395][T14197] program syz.1.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1163.804255][T14197] xt_TCPMSS: Only works on TCP SYN packets
[ 1163.856540][T12561] hsr_slave_1: left promiscuous mode
[ 1163.920851][T12561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.975743][T12561] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1164.086024][T12561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1164.165920][T12561] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1164.395824][T12561] veth1_macvtap: left promiscuous mode
[ 1164.438922][T12561] veth0_macvtap: left promiscuous mode
[ 1164.469235][T12561] veth1_vlan: left promiscuous mode
[ 1164.517971][T12561] veth0_vlan: left promiscuous mode
[ 1164.767895][ T5878] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[ 1165.469917][ T5878] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[ 1165.503056][ T5878] usb 3-1: config 0 has no interface number 0
[ 1165.522706][ T5878] usb 3-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1165.540275][ T5878] usb 3-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1165.560873][ T5878] usb 3-1: config 0 interface 142 has no altsetting 0
[ 1165.568337][ T5878] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1165.577456][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1165.603684][ T5878] usb 3-1: config 0 descriptor??
[ 1165.760295][T13690] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 1165.815690][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'.
[ 1165.948588][T13690] usb 6-1: config 0 has an invalid interface number: 142 but max is 0
[ 1165.968504][T13690] usb 6-1: config 0 has no interface number 0
[ 1165.974682][T13690] usb 6-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1165.986352][T13690] usb 6-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1166.012666][T13690] usb 6-1: config 0 interface 142 has no altsetting 0
[ 1166.034306][T13690] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1166.053466][T13690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.079023][T13690] usb 6-1: config 0 descriptor??
[ 1166.101296][T12561] team0 (unregistering): Port device team_slave_1 removed
[ 1166.165295][T12561] team0 (unregistering): Port device team_slave_0 removed
[ 1166.306426][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2024'.
[ 1166.814646][T14210] netlink: 'syz.1.2023': attribute type 4 has an invalid length.
[ 1166.861432][T13690] usb 6-1: string descriptor 0 read error: -71
[ 1166.892115][T13690] ums-realtek 6-1:0.142: USB Mass Storage device detected
[ 1166.899343][ T5878] usb 3-1: string descriptor 0 read error: -71
[ 1166.900172][ T5878] ums-realtek 3-1:0.142: USB Mass Storage device detected
[ 1167.061291][T14028] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1167.079378][ T5878] usb 3-1: USB disconnect, device number 48
[ 1167.129915][T14028] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1167.223995][T13690] usb 6-1: USB disconnect, device number 39
[ 1167.275641][T14028] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1167.315496][T14028] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1167.582969][T14239] xt_hashlimit: max too large, truncated to 1048576
[ 1167.589860][T14239] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1169.330134][T12962] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1169.464562][T14028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.561554][T14028] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.595521][T12572] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.602726][T12572] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1169.636392][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1169.643656][ T7843] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.042539][T14268] program syz.2.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1170.068032][T14268] xt_TCPMSS: Only works on TCP SYN packets
[ 1171.074437][T14286] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2036'.
[ 1171.385051][T14289] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[ 1171.400869][T14289] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[ 1171.417645][T14289] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[ 1173.015014][T14028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.335788][T14329] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1177.066682][   T29] audit: type=1804 audit(1739446509.071:34): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2040" name="/newroot/282/file0" dev="fuse" ino=1 res=1 errno=0
[ 1177.393303][T14028] veth0_vlan: entered promiscuous mode
[ 1177.443235][T14028] veth1_vlan: entered promiscuous mode
[ 1177.604618][T14028] veth0_macvtap: entered promiscuous mode
[ 1177.630541][T14028] veth1_macvtap: entered promiscuous mode
[ 1177.653589][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.668304][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.864093][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1177.942465][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.003409][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.026879][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.056109][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.087997][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.119723][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.144185][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.169342][T14028] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1178.201193][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.229201][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.247879][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.261682][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.369989][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.380669][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.391175][T14028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1178.401827][T14028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.434431][T14352] program syz.1.2043 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1178.519113][T14028] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1178.527192][T14352] xt_TCPMSS: Only works on TCP SYN packets
[ 1178.942237][T14028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.048731][T14028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.073530][T14028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.092931][T14028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.465421][T14373] xt_hashlimit: max too large, truncated to 1048576
[ 1181.472892][T14373] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1182.469675][T12572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.477562][T12572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.022290][T14386] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1183.175925][T12548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.544427][T12548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.392193][T14418] program syz.2.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1186.798172][T14418] xt_TCPMSS: Only works on TCP SYN packets
[ 1187.338189][ T2149] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1187.609312][ T2149] usb 5-1: Using ep0 maxpacket: 16
[ 1187.944775][T14434] xt_hashlimit: max too large, truncated to 1048576
[ 1187.951648][T14434] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1188.544761][ T2149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.561861][ T2149] usb 5-1: config 0 has no interfaces?
[ 1188.569885][ T2149] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1188.697368][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.705617][ T2149] usb 5-1: Product: syz
[ 1188.709946][ T2149] usb 5-1: Manufacturer: syz
[ 1188.714652][ T2149] usb 5-1: SerialNumber: syz
[ 1188.762613][ T2149] usb 5-1: config 0 descriptor??
[ 1188.862876][T14439] program syz.5.2061 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1188.886267][T14439] xt_TCPMSS: Only works on TCP SYN packets
[ 1189.387094][ T2149] usb 5-1: USB disconnect, device number 52
[ 1189.706961][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1189.719770][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:3 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1189.719803][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1189.719820][ T5833] Workqueue: hci0 hci_rx_work
[ 1189.719850][ T5833] Call Trace:
[ 1189.719858][ T5833]  <TASK>
[ 1189.719867][ T5833]  dump_stack_lvl+0x241/0x360
[ 1189.719909][ T5833]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1189.719945][ T5833]  ? __pfx__printk+0x10/0x10
[ 1189.720001][ T5833]  ? __kmalloc_cache_noprof+0x243/0x390
[ 1189.720031][ T5833]  ? sysfs_create_dir_ns+0x28a/0x3a0
[ 1189.720061][ T5833]  sysfs_create_dir_ns+0x2ce/0x3a0
[ 1189.720088][ T5833]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1189.720122][ T5833]  kobject_add_internal+0x435/0x8d0
[ 1189.720165][ T5833]  kobject_add+0x152/0x220
[ 1189.720197][ T5833]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1189.720220][ T5833]  ? device_add+0x3e7/0xbf0
[ 1189.720243][ T5833]  ? __pfx_kobject_add+0x10/0x10
[ 1189.720276][ T5833]  ? _raw_spin_unlock+0x28/0x50
[ 1189.720306][ T5833]  ? get_device_parent+0x165/0x410
[ 1189.720333][ T5833]  device_add+0x4e5/0xbf0
[ 1189.720361][ T5833]  hci_conn_add_sysfs+0xe8/0x200
[ 1189.720399][ T5833]  le_conn_complete_evt+0xc9f/0x12e0
[ 1189.720441][ T5833]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1189.720468][ T5833]  ? __mutex_unlock_slowpath+0x227/0x800
[ 1189.720509][ T5833]  ? skb_pull_data+0x112/0x230
[ 1189.720543][ T5833]  hci_le_conn_complete_evt+0x18c/0x420
[ 1189.720579][ T5833]  hci_event_packet+0xa55/0x1540
[ 1189.720606][ T5833]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1189.720639][ T5833]  ? __pfx_hci_event_packet+0x10/0x10
[ 1189.720661][ T5833]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1189.720691][ T5833]  ? hci_send_to_monitor+0xd8/0x7f0
[ 1189.720721][ T5833]  ? kcov_remote_start+0x97/0x7d0
[ 1189.720751][ T5833]  hci_rx_work+0x3f3/0xdb0
[ 1189.720782][ T5833]  ? process_scheduled_works+0x976/0x1840
[ 1189.720808][ T5833]  process_scheduled_works+0xa66/0x1840
[ 1189.720829][ T5833]  ? schedule+0x90/0x320
[ 1189.720885][ T5833]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1189.720919][ T5833]  ? assign_work+0x364/0x3d0
[ 1189.720949][ T5833]  worker_thread+0x870/0xd30
[ 1189.720997][ T5833]  ? __kthread_parkme+0x169/0x1d0
[ 1189.721028][ T5833]  ? __pfx_worker_thread+0x10/0x10
[ 1189.721053][ T5833]  kthread+0x7a9/0x920
[ 1189.721080][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721112][ T5833]  ? __pfx_worker_thread+0x10/0x10
[ 1189.721138][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721164][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721197][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721223][ T5833]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1189.721248][ T5833]  ? lockdep_hardirqs_on+0x99/0x150
[ 1189.721275][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721305][ T5833]  ret_from_fork+0x4b/0x80
[ 1189.721330][ T5833]  ? __pfx_kthread+0x10/0x10
[ 1189.721359][ T5833]  ret_from_fork_asm+0x1a/0x30
[ 1189.721399][ T5833]  </TASK>
[ 1189.721423][ T5833] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1190.019166][T14449] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1190.035541][ T5833] Bluetooth: hci0: failed to register connection device
[ 1194.014918][T14495] program syz.6.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1194.046016][T14495] xt_TCPMSS: Only works on TCP SYN packets
[ 1194.585041][T14497] xt_hashlimit: max too large, truncated to 1048576
[ 1194.592597][T14497] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1197.018068][    T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1197.304762][T14515] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1197.425992][T14517] netlink: 'syz.6.2079': attribute type 39 has an invalid length.
[ 1197.469165][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1197.497264][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.667529][    T8] usb 2-1: config 0 has no interfaces?
[ 1197.676009][    T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1197.703680][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.796930][T14524] fuse: Bad value for 'fd'
[ 1198.575709][    T8] usb 2-1: Product: syz
[ 1198.581225][    T8] usb 2-1: Manufacturer: syz
[ 1198.601102][    T8] usb 2-1: SerialNumber: syz
[ 1198.789227][    T8] usb 2-1: config 0 descriptor??
[ 1198.981479][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1199.949068][    T8] usb 2-1: can't set config #0, error -71
[ 1200.002951][    T8] usb 2-1: USB disconnect, device number 42
[ 1201.922111][T14555] No such timeout policy "syz1"
[ 1202.147956][ T5833] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[ 1203.397133][   T29] audit: type=1804 audit(1739446536.731:35): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.2087" name="/newroot/421/file0" dev="fuse" ino=1 res=1 errno=0
[ 1204.766685][T14585] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1205.014916][T14587] fuse: Bad value for 'fd'
[ 1207.372425][ T5905] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1208.277880][ T5905] usb 2-1: Using ep0 maxpacket: 16
[ 1208.303233][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1208.342864][ T5905] usb 2-1: config 0 has no interfaces?
[ 1208.357359][ T5905] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1208.375153][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.428568][ T5905] usb 2-1: Product: syz
[ 1208.464553][T14614] program syz.4.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1208.488331][ T5905] usb 2-1: Manufacturer: syz
[ 1208.496336][ T5905] usb 2-1: SerialNumber: syz
[ 1208.522894][T14614] xt_TCPMSS: Only works on TCP SYN packets
[ 1208.577146][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1208.641305][ T5905] usb 2-1: config 0 descriptor??
[ 1208.809210][    T8] usb 7-1: Using ep0 maxpacket: 16
[ 1208.829190][ T9141] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 1208.840196][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1208.932862][    T8] usb 7-1: config 0 has no interfaces?
[ 1209.069768][    T8] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1209.086675][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.101849][ T9141] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[ 1209.112674][    T8] usb 7-1: Product: syz
[ 1209.119722][T13690] usb 2-1: USB disconnect, device number 43
[ 1209.132978][ T9141] usb 3-1: config 0 has no interface number 0
[ 1209.146791][    T8] usb 7-1: Manufacturer: syz
[ 1209.148126][ T9141] usb 3-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[ 1209.171737][    T8] usb 7-1: SerialNumber: syz
[ 1209.187845][ T9141] usb 3-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[ 1209.200632][    T8] usb 7-1: config 0 descriptor??
[ 1209.217664][ T9141] usb 3-1: config 0 interface 142 has no altsetting 0
[ 1209.307648][ T9141] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1209.399599][ T9141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.518372][ T9141] usb 3-1: config 0 descriptor??
[ 1209.882014][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2098'.
[ 1210.105904][ T9141] usb 3-1: string descriptor 0 read error: -71
[ 1210.132767][ T9141] ums-realtek 3-1:0.142: USB Mass Storage device detected
[ 1210.937970][T14640] fuse: Bad value for 'fd'
[ 1211.519945][T14643] openvswitch: netlink: ufid size 95 bytes exceeds the range (1, 16)
[ 1211.529776][T14643] xt_TCPMSS: Only works on TCP SYN packets
[ 1211.954708][T13690] usb 7-1: USB disconnect, device number 2
[ 1212.013024][ T9141] usb 3-1: USB disconnect, device number 49
[ 1213.063549][ T5833] Bluetooth: hci0: command 0x0405 tx timeout
[ 1214.702217][   T29] audit: type=1804 audit(1739446548.111:36): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2105" name="/newroot/439/file0" dev="fuse" ino=1 res=1 errno=0
[ 1216.034268][T14672] No such timeout policy "syz1"
[ 1216.079434][T14667] program syz.1.2110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1216.102101][T14667] xt_TCPMSS: Only works on TCP SYN packets
[ 1217.154112][T14684] xt_hashlimit: max too large, truncated to 1048576
[ 1217.161601][T14684] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1218.071648][    T8] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1218.267954][    T8] usb 6-1: Using ep0 maxpacket: 16
[ 1218.275457][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.296454][    T8] usb 6-1: config 0 has no interfaces?
[ 1218.547997][    T8] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1218.557121][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.586413][    T8] usb 6-1: Product: syz
[ 1218.590722][    T8] usb 6-1: Manufacturer: syz
[ 1218.655792][T14694] fuse: Invalid rootmode
[ 1220.089151][    T8] usb 6-1: SerialNumber: syz
[ 1220.095983][    T8] usb 6-1: config 0 descriptor??
[ 1220.183824][    T8] usb 6-1: can't set config #0, error -71
[ 1220.209288][    T8] usb 6-1: USB disconnect, device number 40
[ 1220.622352][ T2149] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[ 1220.731116][T14711] xt_hashlimit: max too large, truncated to 1048576
[ 1220.738568][T14711] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1221.078243][   T29] audit: type=1804 audit(1739446554.461:37): pid=14712 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2115" name="/newroot/440/file0" dev="fuse" ino=1 res=1 errno=0
[ 1221.524703][ T2149] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1221.653107][ T2149] usb 2-1: config 0 has no interface number 0
[ 1221.661807][ T2149] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1221.673570][ T2149] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[ 1221.686882][ T2149] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1221.739071][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.747176][ T2149] usb 2-1: Product: syz
[ 1221.803327][ T2149] usb 2-1: Manufacturer: syz
[ 1221.808201][ T2149] usb 2-1: SerialNumber: syz
[ 1221.835895][ T2149] usb 2-1: config 0 descriptor??
[ 1221.837184][T14698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1221.844874][ T2149] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1221.939922][T14720] program syz.5.2118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1221.960659][T14720] xt_TCPMSS: Only works on TCP SYN packets
[ 1222.353159][T14698] tmpfs: Bad value for 'mpol'
[ 1223.492202][T14728] program syz.5.2121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1223.510413][T14728] xt_TCPMSS: Only works on TCP SYN packets
[ 1223.971280][ T2149] usb 2-1: USB disconnect, device number 44
[ 1224.254193][ T2149] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1225.166319][ T5833] Bluetooth: hci0: command 0x0405 tx timeout
[ 1225.439181][T14742] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1225.459146][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2123'.
[ 1225.470651][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2123'.
[ 1225.480835][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2123'.
[ 1225.489868][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2123'.
[ 1225.967098][T14766] fuse: Invalid rootmode
[ 1226.890710][T14771] xt_hashlimit: max too large, truncated to 1048576
[ 1226.898247][T14771] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1227.677932][T13690] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1227.881857][T13690] usb 5-1: Using ep0 maxpacket: 16
[ 1228.852860][T13690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.863245][T13690] usb 5-1: config 0 has no interfaces?
[ 1228.871641][T13690] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1228.881016][T13690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.856637][T13690] usb 5-1: Product: syz
[ 1229.866775][T13690] usb 5-1: Manufacturer: syz
[ 1230.268430][T13690] usb 5-1: SerialNumber: syz
[ 1230.281814][T13690] usb 5-1: config 0 descriptor??
[ 1230.290181][T13690] usb 5-1: can't set config #0, error -71
[ 1230.304257][T13690] usb 5-1: USB disconnect, device number 53
[ 1233.040938][T14817] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1233.398130][T14822] netlink: 'syz.6.2140': attribute type 4 has an invalid length.
[ 1233.765977][T14829] fuse: Invalid rootmode
[ 1234.168841][T14825] tipc: Started in network mode
[ 1234.173974][T14825] tipc: Node identity ac1414aa, cluster identity 4711
[ 1234.367592][T14825] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1235.613917][    T8] tipc: Node number set to 2886997162
[ 1237.059412][T14851] No such timeout policy "syz1"
[ 1237.173020][ T9141] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1237.390425][ T9141] usb 2-1: Using ep0 maxpacket: 16
[ 1237.412653][ T9141] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1237.451583][ T9141] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1237.480697][ T9141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.507620][ T9141] usb 2-1: Product: syz
[ 1237.534496][ T9141] usb 2-1: Manufacturer: syz
[ 1237.651194][ T9141] usb 2-1: SerialNumber: syz
[ 1237.668315][ T9141] usb 2-1: config 0 descriptor??
[ 1237.891085][ T9141] usb 2-1: can't set config #0, error -71
[ 1238.017934][ T9141] usb 2-1: USB disconnect, device number 45
[ 1239.083629][T14869] loop4: detected capacity change from 0 to 7
[ 1239.094658][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.105417][  T242] kworker/u8:5 (242) used greatest stack depth: 19032 bytes left
[ 1239.107845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.168973][T14869] Dev loop4: unable to read RDB block 7
[ 1239.245778][T14869]  loop4: unable to read partition table
[ 1239.378222][T14869] loop4: partition table beyond EOD, truncated
[ 1239.385922][T14869] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1239.429016][ T5197] Dev loop4: unable to read RDB block 7
[ 1239.569931][ T5197]  loop4: unable to read partition table
[ 1239.730019][ T5197] loop4: partition table beyond EOD, truncated
[ 1240.161590][T14882] fuse: Bad value for 'rootmode'
[ 1240.243505][T14884] usb usb1: usbfs: process 14884 (syz.4.2154) did not claim interface 8 before use
[ 1241.436402][T14893] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2155'.
[ 1245.939297][T14919] xt_hashlimit: max too large, truncated to 1048576
[ 1245.947012][T14919] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1248.226530][T14931] program syz.6.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1248.253793][T14931] xt_TCPMSS: Only works on TCP SYN packets
[ 1255.837970][T14993] xt_hashlimit: max too large, truncated to 1048576
[ 1255.847009][T14993] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1261.391631][   T29] audit: type=1804 audit(1739446594.791:38): pid=15026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2181" name="/newroot/452/file0" dev="fuse" ino=1 res=1 errno=0
[ 1262.967618][T15048] fuse: Bad value for 'rootmode'
[ 1263.984766][T15065] xt_hashlimit: max too large, truncated to 1048576
[ 1263.993907][T15065] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1266.858110][ T2149] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1266.928322][ T5833] Bluetooth: hci0: command 0x0405 tx timeout
[ 1267.423426][T15087] No such timeout policy "syz1"
[ 1267.627327][ T2149] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1267.644568][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.892156][ T2149] usb 3-1: Product: syz
[ 1267.911698][ T2149] usb 3-1: Manufacturer: syz
[ 1269.016697][ T2149] usb 3-1: SerialNumber: syz
[ 1269.055919][ T2149] usb 3-1: config 0 descriptor??
[ 1269.203643][ T2149] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 050
[ 1269.489863][T15106] fuse: Bad value for 'rootmode'
[ 1271.517543][ T2149]  (null): failure setting delay to 10us
[ 1271.549534][ T2149] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[ 1271.601012][T15111] mkiss: ax0: crc mode is auto.
[ 1271.628942][ T2149] usb 3-1: USB disconnect, device number 50
[ 1272.283149][T15129] fuse: Bad value for 'fd'
[ 1274.035789][T15151] fuse: Bad value for 'fd'
[ 1275.754866][   T29] audit: type=1804 audit(1739446608.661:39): pid=15153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2203" name="/newroot/30/file0" dev="fuse" ino=1 res=1 errno=0
[ 1277.461528][T15171] No such timeout policy "syz1"
[ 1278.758781][T15183] xt_hashlimit: max too large, truncated to 1048576
[ 1278.768411][T15183] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1281.145525][T15187] mkiss: ax0: crc mode is auto.
[ 1281.230825][T15195] fuse: Unknown parameter 'use00000000000000000000'
[ 1282.389669][T15204] fuse: Bad value for 'fd'
[ 1284.251430][T15222] kernel profiling enabled (shift: 9)
[ 1286.569333][   T29] audit: type=1804 audit(1739446619.911:40): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.2222" name="/newroot/448/file0" dev="fuse" ino=1 res=1 errno=0
[ 1288.454098][T15260] ip6t_rpfilter: unknown options
[ 1289.207902][ T9141] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1289.438529][T15271] fuse: Unknown parameter 'use00000000000000000000'
[ 1290.839519][T15283] fuse: Bad value for 'fd'
[ 1291.913534][T15292] FAULT_INJECTION: forcing a failure.
[ 1291.913534][T15292] name failslab, interval 1, probability 0, space 0, times 0
[ 1291.935369][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.6.2233 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1291.935400][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1291.935413][T15292] Call Trace:
[ 1291.935421][T15292]  <TASK>
[ 1291.935430][T15292]  dump_stack_lvl+0x241/0x360
[ 1291.935471][T15292]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1291.935502][T15292]  ? __pfx__printk+0x10/0x10
[ 1291.935533][T15292]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[ 1291.935561][T15292]  ? __pfx___might_resched+0x10/0x10
[ 1291.935588][T15292]  should_fail_ex+0x40a/0x550
[ 1291.935616][T15292]  should_failslab+0xac/0x100
[ 1291.935644][T15292]  kmem_cache_alloc_node_noprof+0x77/0x380
[ 1291.935671][T15292]  ? __alloc_skb+0x1c3/0x440
[ 1291.935706][T15292]  __alloc_skb+0x1c3/0x440
[ 1291.935739][T15292]  ? __pfx___alloc_skb+0x10/0x10
[ 1291.935779][T15292]  pfkey_sendmsg+0x1da/0x1050
[ 1291.935820][T15292]  ? smack_socket_sendmsg+0x178/0x540
[ 1291.935853][T15292]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1291.935883][T15292]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 1291.935916][T15292]  ? tomoyo_socket_sendmsg_permission+0x288/0x420
[ 1291.935944][T15292]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1291.935970][T15292]  ? __might_fault+0xaa/0x120
[ 1291.936001][T15292]  ? __pfx_lock_release+0x10/0x10
[ 1291.936026][T15292]  ? __import_iovec+0x590/0x870
[ 1291.936065][T15292]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1291.936093][T15292]  __sock_sendmsg+0x221/0x270
[ 1291.936123][T15292]  ____sys_sendmsg+0x52a/0x7e0
[ 1291.936152][T15292]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1291.936171][T15292]  ? __fget_files+0x2a/0x410
[ 1291.936201][T15292]  ? __fget_files+0x2a/0x410
[ 1291.936237][T15292]  __sys_sendmsg+0x269/0x350
[ 1291.936264][T15292]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1291.936297][T15292]  ? do_sys_openat2+0x17a/0x1d0
[ 1291.936351][T15292]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1291.936379][T15292]  ? do_syscall_64+0x100/0x230
[ 1291.936412][T15292]  ? do_syscall_64+0xb6/0x230
[ 1291.936442][T15292]  do_syscall_64+0xf3/0x230
[ 1291.936470][T15292]  ? clear_bhb_loop+0x35/0x90
[ 1291.936502][T15292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.936530][T15292] RIP: 0033:0x7f1a1618cde9
[ 1291.936548][T15292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1291.936566][T15292] RSP: 002b:00007f1a16fd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1291.936588][T15292] RAX: ffffffffffffffda RBX: 00007f1a163a5fa0 RCX: 00007f1a1618cde9
[ 1291.936603][T15292] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003
[ 1291.936616][T15292] RBP: 00007f1a16fd3090 R08: 0000000000000000 R09: 0000000000000000
[ 1291.936628][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1291.936640][T15292] R13: 0000000000000000 R14: 00007f1a163a5fa0 R15: 00007ffc34fde4a8
[ 1291.936670][T15292]  </TASK>
[ 1294.339879][T15316] 9pnet_fd: Insufficient options for proto=fd
[ 1295.345329][T15322] fuse: Unknown parameter 'use00000000000000000000'
[ 1297.204032][   T29] audit: type=1804 audit(1739446630.601:41): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2238" name="/newroot/42/file0" dev="fuse" ino=1 res=1 errno=0
[ 1297.906768][T15337] fuse: Bad value for 'fd'
[ 1298.883096][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1298.894442][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1298.905637][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1298.917212][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1298.924937][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1298.933511][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1299.027950][ T5905] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[ 1299.697586][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1299.713643][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1299.835934][T15342] chnl_net:caif_netlink_parms(): no params data found
[ 1299.880627][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1299.895574][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1299.903430][ T5833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1299.911104][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1300.104256][T15365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'.
[ 1300.173246][T15366] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2247'.
[ 1300.327853][ T5905] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1300.336028][ T5905] usb 2-1: config 0 has no interface number 0
[ 1300.378556][T15342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1300.414645][ T5905] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1300.418305][T15342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1300.438502][ T5905] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[ 1300.493567][T15342] bridge_slave_0: entered allmulticast mode
[ 1300.526283][T15342] bridge_slave_0: entered promiscuous mode
[ 1300.535988][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.536044][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.579891][T15342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1300.587353][T15342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1300.595006][ T5905] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1300.635478][T15342] bridge_slave_1: entered allmulticast mode
[ 1300.665869][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.677610][T15342] bridge_slave_1: entered promiscuous mode
[ 1300.716712][ T5905] usb 2-1: Product: syz
[ 1300.777898][ T5905] usb 2-1: Manufacturer: syz
[ 1300.813481][ T5905] usb 2-1: SerialNumber: syz
[ 1300.838420][ T5905] usb 2-1: config 0 descriptor??
[ 1300.858522][T15341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1300.885743][T15342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1300.917376][ T5905] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1300.967911][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1301.017979][ T5833] Bluetooth: hci4: command tx timeout
[ 1301.173827][T15342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1301.258063][T15376] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1301.969410][ T5833] Bluetooth: hci6: command tx timeout
[ 1302.028074][    T9] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1302.041800][    T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1302.053577][    T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1302.077836][    T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1302.100844][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.128101][T15371] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1302.231942][T15341] tmpfs: Bad value for 'mpol'
[ 1302.233254][T15342] team0: Port device team_slave_0 added
[ 1302.320587][T15342] team0: Port device team_slave_1 added
[ 1302.854434][   T29] audit: type=1804 audit(1739446636.181:42): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2250" name="/newroot/45/file0" dev="fuse" ino=1 res=1 errno=0
[ 1303.107812][ T5833] Bluetooth: hci4: command tx timeout
[ 1303.921706][T15392] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1303.947953][T15392] vimc vimc.0: subdev_call error Scaler
[ 1303.954848][T15392] ------------[ cut here ]------------
[ 1303.960490][T15392] WARNING: CPU: 1 PID: 15392 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x222/0x280
[ 1303.971609][T15392] Modules linked in:
[ 1303.975557][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.2.2248 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1303.986414][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1303.996572][T15392] RIP: 0010:call_s_stream+0x222/0x280
[ 1304.002085][T15392] Code: df 11 fa 48 8b 7d 00 48 c7 c6 40 a0 ca 8c 89 da e8 93 d2 17 f9 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 7f cd ad f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48
[ 1304.021789][T15392] RSP: 0018:ffffc9000b30f980 EFLAGS: 00010283
[ 1304.027955][T15392] RAX: ffffffff881181c1 RBX: 0000000000000000 RCX: 0000000000080000
[ 1304.035992][T15392] RDX: ffffc9000e441000 RSI: 0000000000006d72 RDI: 0000000000006d73
[ 1304.044289][T15392] RBP: 0000000000000000 R08: ffffffff88118008 R09: 1ffff92001661e94
[ 1304.053199][T15392] R10: dffffc0000000000 R11: ffffffff88117fa0 R12: ffff888029f8f020
[ 1304.062058][T15392] R13: 0000000000000000 R14: 1ffff110053f1e33 R15: 0000000000000000
[ 1304.068971][ T5833] Bluetooth: hci6: command tx timeout
[ 1304.070507][T15392] FS:  00007f014e4ae6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1304.084632][T15392] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1304.091355][T15392] CR2: 00007fbbc06b5a3f CR3: 0000000041ef2000 CR4: 00000000003526f0
[ 1304.099496][T15392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1304.107509][T15392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1304.115652][T15392] Call Trace:
[ 1304.119004][T15392]  <TASK>
[ 1304.121978][T15392]  ? __warn+0x165/0x4d0
[ 1304.126184][T15392]  ? call_s_stream+0x222/0x280
[ 1304.131142][T15392]  ? report_bug+0x2b3/0x500
[ 1304.135703][T15392]  ? call_s_stream+0x222/0x280
[ 1304.140577][T15392]  ? handle_bug+0x60/0x90
[ 1304.144956][T15392]  ? exc_invalid_op+0x1a/0x50
[ 1304.149735][T15392]  ? asm_exc_invalid_op+0x1a/0x20
[ 1304.155476][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.161370][T15392]  ? call_s_stream+0x68/0x280
[ 1304.166105][T15392]  ? call_s_stream+0x221/0x280
[ 1304.170967][T15392]  ? call_s_stream+0x222/0x280
[ 1304.175800][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.181022][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.186194][T15392]  vimc_streamer_pipeline_terminate+0x219/0x360
[ 1304.192672][T15392]  vimc_streamer_s_stream+0x69f/0x800
[ 1304.198179][T15392]  vimc_capture_start_streaming+0x230/0x440
[ 1304.204135][T15392]  ? __pfx___mutex_lock+0x10/0x10
[ 1304.209305][T15392]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1304.215774][T15392]  vb2_start_streaming+0x129/0x440
[ 1304.220994][T15392]  vb2_core_streamon+0x2b5/0x4c0
[ 1304.225997][T15392]  __video_do_ioctl+0xc23/0xdd0
[ 1304.230953][T15392]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1304.236376][T15392]  ? smack_log+0x10d/0x5c0
[ 1304.240900][T15392]  ? __might_fault+0xaa/0x120
[ 1304.245646][T15392]  video_usercopy+0x89b/0x1180
[ 1304.250557][T15392]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1304.256677][T15392]  ? __pfx_video_usercopy+0x10/0x10
[ 1304.262596][T15392]  ? smack_file_ioctl+0x29e/0x3a0
[ 1304.267702][T15392]  ? __fget_files+0x2a/0x410
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1304.272437][T15392]  ? __fget_files+0x2a/0x410
[ 1304.277079][T15392]  v4l2_ioctl+0x189/0x1e0
[ 1304.281565][T15392]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1304.286472][T15392]  __se_sys_ioctl+0xf5/0x170
[ 1304.291174][T15392]  do_syscall_64+0xf3/0x230
[ 1304.295734][T15392]  ? clear_bhb_loop+0x35/0x90
[ 1304.300556][T15392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1304.306497][T15392] RIP: 0033:0x7f014d58cde9
[ 1304.311037][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1304.330753][T15392] RSP: 002b:00007f014e4ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1304.339277][T15392] RAX: ffffffffffffffda RBX: 00007f014d7a6080 RCX: 00007f014d58cde9
[ 1304.347310][T15392] RDX: 0000400000000000 RSI: 0000000040045612 RDI: 0000000000000007
[ 1304.355430][T15392] RBP: 00007f014d60e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1304.364179][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1304.372849][T15392] R13: 0000000000000001 R14: 00007f014d7a6080 R15: 00007fff554bbb98
[ 1304.380986][T15392]  </TASK>
[ 1304.384070][T15392] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1304.391385][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.2.2248 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0
[ 1304.402194][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1304.412270][T15392] Call Trace:
[ 1304.415564][T15392]  <TASK>
[ 1304.418508][T15392]  dump_stack_lvl+0x241/0x360
[ 1304.423221][T15392]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1304.428447][T15392]  ? __pfx__printk+0x10/0x10
[ 1304.433056][T15392]  ? _printk+0xd5/0x120
[ 1304.437247][T15392]  ? __init_begin+0x41000/0x41000
[ 1304.442293][T15392]  ? vscnprintf+0x5d/0x90
[ 1304.446642][T15392]  panic+0x349/0x880
[ 1304.450563][T15392]  ? __warn+0x174/0x4d0
[ 1304.454741][T15392]  ? __pfx_panic+0x10/0x10
[ 1304.459237][T15392]  __warn+0x344/0x4d0
[ 1304.463241][T15392]  ? call_s_stream+0x222/0x280
[ 1304.468033][T15392]  report_bug+0x2b3/0x500
[ 1304.472385][T15392]  ? call_s_stream+0x222/0x280
[ 1304.477181][T15392]  handle_bug+0x60/0x90
[ 1304.481366][T15392]  exc_invalid_op+0x1a/0x50
[ 1304.485899][T15392]  asm_exc_invalid_op+0x1a/0x20
[ 1304.490809][T15392] RIP: 0010:call_s_stream+0x222/0x280
[ 1304.496215][T15392] Code: df 11 fa 48 8b 7d 00 48 c7 c6 40 a0 ca 8c 89 da e8 93 d2 17 f9 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 7f cd ad f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48
[ 1304.515842][T15392] RSP: 0018:ffffc9000b30f980 EFLAGS: 00010283
[ 1304.521932][T15392] RAX: ffffffff881181c1 RBX: 0000000000000000 RCX: 0000000000080000
[ 1304.529915][T15392] RDX: ffffc9000e441000 RSI: 0000000000006d72 RDI: 0000000000006d73
[ 1304.537906][T15392] RBP: 0000000000000000 R08: ffffffff88118008 R09: 1ffff92001661e94
[ 1304.545891][T15392] R10: dffffc0000000000 R11: ffffffff88117fa0 R12: ffff888029f8f020
[ 1304.553890][T15392] R13: 0000000000000000 R14: 1ffff110053f1e33 R15: 0000000000000000
[ 1304.561885][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.567034][T15392]  ? call_s_stream+0x68/0x280
[ 1304.571733][T15392]  ? call_s_stream+0x221/0x280
[ 1304.576523][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.581661][T15392]  ? __pfx_call_s_stream+0x10/0x10
[ 1304.586806][T15392]  vimc_streamer_pipeline_terminate+0x219/0x360
[ 1304.593075][T15392]  vimc_streamer_s_stream+0x69f/0x800
[ 1304.598479][T15392]  vimc_capture_start_streaming+0x230/0x440
[ 1304.604500][T15392]  ? __pfx___mutex_lock+0x10/0x10
[ 1304.609548][T15392]  ? __pfx_vimc_capture_start_streaming+0x10/0x10
[ 1304.615989][T15392]  vb2_start_streaming+0x129/0x440
[ 1304.621132][T15392]  vb2_core_streamon+0x2b5/0x4c0
[ 1304.626096][T15392]  __video_do_ioctl+0xc23/0xdd0
[ 1304.631009][T15392]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1304.636400][T15392]  ? smack_log+0x10d/0x5c0
[ 1304.640835][T15392]  ? __might_fault+0xaa/0x120
[ 1304.645543][T15392]  video_usercopy+0x89b/0x1180
[ 1304.650335][T15392]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1304.655729][T15392]  ? __pfx_video_usercopy+0x10/0x10
[ 1304.660959][T15392]  ? smack_file_ioctl+0x29e/0x3a0
[ 1304.666044][T15392]  ? __fget_files+0x2a/0x410
[ 1304.670678][T15392]  ? __fget_files+0x2a/0x410
[ 1304.675303][T15392]  v4l2_ioctl+0x189/0x1e0
[ 1304.679662][T15392]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1304.684543][T15392]  __se_sys_ioctl+0xf5/0x170
[ 1304.689150][T15392]  do_syscall_64+0xf3/0x230
[ 1304.693700][T15392]  ? clear_bhb_loop+0x35/0x90
[ 1304.698424][T15392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1304.704374][T15392] RIP: 0033:0x7f014d58cde9
[ 1304.708814][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1304.728461][T15392] RSP: 002b:00007f014e4ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1304.736911][T15392] RAX: ffffffffffffffda RBX: 00007f014d7a6080 RCX: 00007f014d58cde9
[ 1304.744900][T15392] RDX: 0000400000000000 RSI: 0000000040045612 RDI: 0000000000000007
[ 1304.752902][T15392] RBP: 00007f014d60e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1304.760890][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1304.768889][T15392] R13: 0000000000000001 R14: 00007f014d7a6080 R15: 00007fff554bbb98
[ 1304.776898][T15392]  </TASK>
[ 1304.780286][T15392] Kernel Offset: disabled
[ 1304.784689][T15392] Rebooting in 86400 seconds..