last executing test programs:

9m7.542281535s ago: executing program 32 (id=73):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000001800)=ANY=[], 0x1050)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r6, 0x322f, 0x802e, 0x1, 0x0, 0x0)
r10 = semget$private(0x0, 0x4, 0x30)
semop(r10, &(0x7f0000000100)=[{0x1, 0xd73b, 0x1000}], 0x1)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000020060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
r12 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)}, 0x20000014)

8m13.126242873s ago: executing program 33 (id=150):
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4, @void, @value}, 0x14)
close(0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x42080040, 0x500, 0x0, 0x0, 0x9}}, 0x50)

7m26.35475994s ago: executing program 2 (id=237):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x703, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r2, 0x89a3, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4008550c, 0xf0ff1f00000000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x28100)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

7m21.955027313s ago: executing program 2 (id=241):
syz_open_dev$tty1(0xc, 0x4, 0x1)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x9, 0x0, [<r5=>0x0], [0xff, 0x0, 0x39a], [], [0x100000001]})
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r7)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000280)={0x665, 0x1, {}, {<r8=>0xffffffffffffffff}, 0x80, 0x30b})
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x80040, &(0x7f0000000340)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}], [{@fowner_gt={'fowner>', r8}}, {@appraise}]}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9})

7m20.365455839s ago: executing program 2 (id=245):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "93dd8048cc75ddfc5f65573a61"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x4844)

7m16.947582582s ago: executing program 2 (id=250):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000b40)={{0x1, 0x100, 0x9, 0x31, 0x1000, 0x74}, 0x31c, [0x3, 0x40, 0xfff, 0x1000, 0x8, 0x9, 0x5, 0x20000, 0x8, 0x10, 0x954c, 0x10000, 0x10, 0x7f, 0xff, 0xffffffff, 0xcc, 0x78, 0x10, 0x2d2, 0x4, 0x6, 0x2, 0x0, 0x7f, 0x9896, 0x12c, 0x1ff, 0x6, 0x3ff, 0x24, 0x70, 0x7, 0x3, 0x50, 0x2, 0x6, 0xae, 0x6d7, 0x10001, 0x7, 0x0, 0x5, 0x8, 0x6, 0x2, 0x9, 0x200, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x5d, 0x9, 0x8, 0xf30, 0x7, 0xe2, 0x3, 0x2, 0x8, 0x3ff, 0xa, 0x2dc, 0x4, 0x5, 0x7, 0x0, 0xd7, 0xffffff15, 0xffffffff, 0x7, 0x7, 0xffff, 0x7, 0x0, 0x1000, 0xc, 0xa, 0x8, 0x2, 0x4, 0x1, 0x18000000, 0x1, 0x101, 0xebe, 0xaaa, 0xe, 0x7ff, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0x6, 0x5, 0x7, 0x3, 0x401, 0x1, 0xdbf6, 0x7, 0x3f000000, 0xffff1eaa, 0x40000000, 0x8a, 0x8, 0x80000001, 0x7, 0x596, 0x83, 0x1ff, 0x5, 0x69, 0x0, 0xa, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x9b, 0x2, 0x2, 0x436, 0x6, 0xa7, 0x7fff, 0x2, 0x1780, 0x0, 0xdda, 0xffffff81, 0x8, 0x7, 0x0, 0x8, 0x173, 0x5fba0aa1, 0x6, 0x0, 0x5, 0xfffff0bd, 0x5, 0x8001, 0x401, 0x200, 0xff, 0x400, 0xb, 0x0, 0x9d5, 0x5, 0x6, 0x100, 0xfffffeff, 0x66dc091f, 0x9, 0x800, 0xe4bd, 0x9, 0x0, 0x0, 0x0, 0x8, 0xbd2, 0x8, 0x7fff, 0x114, 0x6, 0x1, 0x9, 0x3, 0x98a4, 0xfffffffc, 0x5a7, 0x3, 0x309, 0xffffffff, 0xa, 0x0, 0x8000, 0x5, 0x6, 0x9, 0x1, 0x8, 0x1, 0xb, 0x8, 0x1, 0xa7, 0x7, 0x1009, 0x2, 0x4, 0x7, 0x8, 0x9, 0x1, 0x40010001, 0x6d, 0xc, 0x1a1, 0x1, 0x5, 0xffffffff, 0x3, 0x0, 0x6, 0x7a8, 0xfffffff9, 0x4, 0x83b, 0x2, 0x9, 0x5, 0x4, 0x0, 0x9, 0xefc8, 0x7, 0x4, 0x9, 0x6, 0x4, 0x3, 0x0, 0x7, 0x9c, 0xbcb, 0x1, 0x9c03, 0x373, 0x0, 0xffffff7f, 0x8, 0x74d, 0xe, 0xfff, 0x4, 0x4, 0x3, 0xffff460d, 0x5, 0x7, 0x6, 0x1, 0x7f451369, 0xb7c, 0x3, 0xa6, 0x5, 0xffffffc4, 0x4, 0x7, 0x1, 0xff, 0x8, 0x72f3bfd3, 0x1, 0x200, 0x2, 0x4, 0x1, 0x9, 0xd, 0x8, 0x49e, 0xf, 0x7fffffff, 0x7, 0x86, 0x0, 0x108000, 0x81, 0xffff, 0x7, 0x0, 0x9, 0x40, 0x2, 0x9, 0x1, 0x7f, 0xb, 0x83, 0x1ff, 0x7, 0x8, 0x1, 0x1, 0x7fffffff, 0xf6f3, 0x8, 0xfffffffd, 0x10001, 0xffffffff, 0x7, 0x5, 0xd, 0x4, 0x6, 0x6, 0xb0, 0x7, 0x1, 0xd, 0x7fffffff, 0xfffffff7, 0x1, 0x100000, 0x8d, 0xfffffffc, 0x4, 0x1, 0x3, 0x5, 0x9, 0x8, 0x6, 0x1, 0xffffffff, 0xdc1b, 0x79, 0x7, 0x2, 0x0, 0x4, 0x34, 0xffff, 0x7, 0x4, 0x7, 0x40, 0x80000001, 0x2, 0x7, 0x3b83, 0x5, 0x9, 0x7, 0x1, 0xa, 0x84, 0x9, 0x2, 0xfffffffa, 0x8, 0xd, 0x8, 0x3, 0x9, 0x7, 0x7fffffff, 0x9, 0xc01, 0x3, 0x0, 0xfffffffb, 0x3, 0x1, 0x1, 0x200, 0x7ff, 0xff, 0x7, 0x8, 0x1, 0x81, 0x8, 0x5, 0x80, 0xff78, 0x2ff5, 0x1, 0x244d182b, 0x3, 0x6, 0x6c000000, 0x4, 0x1, 0x6, 0xc0f7, 0x4d, 0x15, 0x8, 0x1, 0x0, 0x2, 0x3, 0x4, 0x1, 0x1, 0xffff, 0xfffffff9, 0x2e4, 0x4, 0x1e1b, 0xffff7fff, 0x4, 0x3ff, 0xfffff000, 0x501, 0x4, 0x9, 0x7, 0x401, 0x5, 0x2, 0x1, 0x8d, 0x1ff, 0x5, 0x7ff, 0x0, 0x7, 0x55c, 0x8, 0x0, 0x0, 0x1, 0x4, 0x1, 0xfffffff8, 0x0, 0x7f, 0x1ff, 0x0, 0x4, 0x20de, 0x17200, 0x0, 0xc6f, 0x2, 0x244f, 0x64a, 0x3, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0xfff, 0x81, 0x6ca, 0x6, 0x3, 0x4, 0xcb25, 0x6, 0x8, 0x2, 0x8, 0x4, 0x5, 0xfffffa7c, 0x9, 0x7, 0x7fff, 0x5, 0x0, 0x1, 0x1ff, 0x9, 0x2, 0xe, 0xb, 0x6, 0x5, 0x1e, 0x1, 0x21, 0x4, 0x3, 0x400, 0x8, 0xfffffffc, 0x7, 0x7, 0x10, 0x65, 0x5, 0x11, 0xffff, 0x0, 0x5, 0x7, 0x9, 0x40, 0x0, 0xfffffff8, 0x5, 0x8000, 0x5, 0x7fff, 0x0, 0x400, 0x4, 0x1, 0xffffffff, 0x6, 0xffff, 0xffff, 0x53, 0x1, 0x3a069a6f, 0xabfc, 0x0, 0x7, 0x0, 0x800, 0x0, 0x2, 0xcbd, 0x4, 0x380000, 0x7, 0x6, 0xe7, 0x81, 0x4, 0x81, 0x9, 0x8, 0xfffffff7, 0x1, 0x9, 0x80000000, 0x5, 0x81, 0x6, 0xfffffffc, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7, 0x0, 0xb2d, 0xfffffffd, 0x7, 0x80000001, 0x2, 0x4b5, 0xd64, 0x9, 0x7, 0x5, 0xb6, 0xfac, 0x80, 0xb2, 0x9, 0x7, 0xffff, 0x5, 0x2, 0x7ff, 0x1, 0x80000000, 0x61189570, 0x524e, 0x4, 0xb, 0xffff, 0x15, 0x2, 0x1, 0x2, 0x6643, 0x400, 0x4, 0x8d, 0x800, 0x80000001, 0x7fff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x8, 0x4, 0x997e, 0xff8, 0x7, 0x6, 0x1, 0x1e20, 0x80, 0x3, 0x5, 0x2, 0x3, 0xc000000, 0x3, 0x3, 0x7fffffff, 0xfffffffc, 0x4, 0x0, 0x8, 0x40, 0x81c, 0x9, 0xf, 0x400, 0x0, 0x100000, 0x6, 0x0, 0x7, 0x5, 0xfffffff7, 0x2, 0x1, 0x8, 0x10, 0x9, 0xd, 0x3, 0x3, 0x1000, 0x8, 0x4, 0x5, 0x2, 0x0, 0x1, 0xfffffe00, 0xffff, 0x0, 0x7, 0x6, 0x1, 0x0, 0x193b, 0x27, 0x3, 0x7fff, 0x7, 0x7, 0x3, 0x1, 0x200, 0x1, 0x2, 0xff, 0x3, 0x3e8, 0x1, 0x7, 0x100, 0x8, 0x88b, 0xca, 0x1000, 0x8, 0x7, 0x0, 0xa, 0x8, 0x400e5, 0x8001, 0x7, 0xe21, 0x1, 0x1ff7, 0x100, 0x0, 0x5, 0x6, 0x5, 0x6, 0xf, 0x57, 0x400, 0x200, 0x8b, 0x4, 0x7, 0x8001, 0x5, 0x1, 0x7, 0x5bd0dbf3, 0xd, 0x6, 0x4, 0x9b28, 0x8, 0x8, 0x2, 0xfc0, 0x81, 0x6, 0x8, 0x2, 0x9, 0x3, 0x7, 0x7, 0x0, 0x3, 0x1, 0xc, 0x0, 0x8, 0x7, 0x55ab192a, 0xffda, 0x6, 0x756, 0x803, 0x5, 0x893, 0x3d0, 0x3, 0x5, 0x0, 0x6, 0x4, 0x10000, 0x80000000, 0x3, 0xf, 0x9, 0x3, 0x4, 0x2, 0x100, 0x63, 0x0, 0x97, 0x2, 0x2, 0x0, 0x8, 0x5, 0x1, 0x7, 0x1, 0x10000, 0x7f7, 0x100, 0x1, 0xff, 0x8, 0x7, 0xe, 0x8, 0x6, 0x7, 0xfffff800, 0x9, 0x4, 0x33debe10, 0x100, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x3, 0x3, 0x7, 0x7, 0x3, 0x8001, 0x5, 0x5, 0x6, 0x1, 0x2, 0x4, 0x1, 0x345c, 0x3, 0x1, 0xffffff7f, 0x3, 0xd142, 0x96, 0x3, 0x8, 0x0, 0x4, 0x3, 0xffffffa5, 0x8, 0x6, 0x80, 0x4, 0x800, 0x7, 0x2, 0xfffffff7, 0x8, 0x8, 0x0, 0x3e99, 0x0, 0x0, 0x3, 0x6, 0x9, 0x7, 0xd9, 0x9, 0xfffffff8, 0x1, 0x0, 0x7, 0x2, 0x3, 0x3, 0x800, 0x3, 0x800, 0x8, 0x5, 0x9, 0x9e, 0x2, 0x3ff, 0x0, 0x100, 0x8, 0x7, 0x80000001, 0x6, 0x3, 0x2, 0x6, 0x7, 0x9, 0x3, 0x2b4, 0x2, 0xbb1, 0x6, 0xf, 0x0, 0x2000000, 0x8e2, 0x9, 0x7ff, 0x61, 0x8001, 0xffff, 0x2, 0xc27, 0x2, 0x2, 0xa, 0x627, 0x3a4c07d, 0x8000, 0xfffffff8, 0x9, 0xd, 0x6, 0x7ff, 0x5, 0x16, 0x5, 0xe, 0x2d8, 0x3, 0xffffffff, 0x2, 0x3, 0xfffffffa, 0x5, 0x8, 0x7, 0x9, 0x10000, 0x5, 0x5a50bac5, 0xc, 0x1, 0x32a1, 0x9212cf98, 0x6, 0x6, 0x10, 0x1, 0xfffffffa, 0x2, 0x80000000, 0x9, 0x0, 0x6, 0xb5, 0x0, 0x4, 0x1, 0xe, 0x8, 0x81, 0x99, 0x3, 0x5, 0x1, 0x1, 0xbd8, 0x6e0, 0x0, 0x5, 0x4, 0x3, 0x4, 0x670, 0x3ff, 0x7ff, 0x401, 0x400, 0x6, 0x3, 0x8, 0x3, 0x6, 0x80000000, 0x9, 0x2, 0x0, 0x40, 0x5, 0x10001, 0x10d8, 0x10, 0x4, 0x4, 0x0, 0x7, 0x8001, 0x1, 0x5, 0x4, 0x7, 0x6, 0x7, 0xd1, 0x1, 0x7, 0x7fff, 0x7f, 0x8, 0x245, 0x0, 0x81, 0xffff751a, 0xc943, 0x0, 0x7fff, 0xf, 0x2, 0x0, 0xef, 0x7, 0x1, 0x3, 0x6, 0xff, 0x1, 0xf, 0x6, 0x6, 0x6, 0x7fffffff, 0x8b1a, 0x1, 0x9e98, 0x80000001, 0xc88e, 0xcbe, 0x40, 0x3, 0xfffffff1, 0xd, 0x68, 0xfffffff9, 0x1, 0x3, 0xa5, 0x2, 0xffffffff, 0x5, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x2, 0x2, 0x867d, 0x6f, 0x1, 0x3, 0x8, 0x1, 0x100, 0x6, 0xba49, 0x10, 0x1, 0x7, 0x4, 0x4, 0x0, 0x7c6, 0x0, 0x6, 0x4, 0x3]}) (fail_nth: 3)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)

7m15.736441931s ago: executing program 34 (id=250):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000b40)={{0x1, 0x100, 0x9, 0x31, 0x1000, 0x74}, 0x31c, [0x3, 0x40, 0xfff, 0x1000, 0x8, 0x9, 0x5, 0x20000, 0x8, 0x10, 0x954c, 0x10000, 0x10, 0x7f, 0xff, 0xffffffff, 0xcc, 0x78, 0x10, 0x2d2, 0x4, 0x6, 0x2, 0x0, 0x7f, 0x9896, 0x12c, 0x1ff, 0x6, 0x3ff, 0x24, 0x70, 0x7, 0x3, 0x50, 0x2, 0x6, 0xae, 0x6d7, 0x10001, 0x7, 0x0, 0x5, 0x8, 0x6, 0x2, 0x9, 0x200, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x5d, 0x9, 0x8, 0xf30, 0x7, 0xe2, 0x3, 0x2, 0x8, 0x3ff, 0xa, 0x2dc, 0x4, 0x5, 0x7, 0x0, 0xd7, 0xffffff15, 0xffffffff, 0x7, 0x7, 0xffff, 0x7, 0x0, 0x1000, 0xc, 0xa, 0x8, 0x2, 0x4, 0x1, 0x18000000, 0x1, 0x101, 0xebe, 0xaaa, 0xe, 0x7ff, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0x6, 0x5, 0x7, 0x3, 0x401, 0x1, 0xdbf6, 0x7, 0x3f000000, 0xffff1eaa, 0x40000000, 0x8a, 0x8, 0x80000001, 0x7, 0x596, 0x83, 0x1ff, 0x5, 0x69, 0x0, 0xa, 0x7, 0xfffffff7, 0x0, 0x0, 0x0, 0x9b, 0x2, 0x2, 0x436, 0x6, 0xa7, 0x7fff, 0x2, 0x1780, 0x0, 0xdda, 0xffffff81, 0x8, 0x7, 0x0, 0x8, 0x173, 0x5fba0aa1, 0x6, 0x0, 0x5, 0xfffff0bd, 0x5, 0x8001, 0x401, 0x200, 0xff, 0x400, 0xb, 0x0, 0x9d5, 0x5, 0x6, 0x100, 0xfffffeff, 0x66dc091f, 0x9, 0x800, 0xe4bd, 0x9, 0x0, 0x0, 0x0, 0x8, 0xbd2, 0x8, 0x7fff, 0x114, 0x6, 0x1, 0x9, 0x3, 0x98a4, 0xfffffffc, 0x5a7, 0x3, 0x309, 0xffffffff, 0xa, 0x0, 0x8000, 0x5, 0x6, 0x9, 0x1, 0x8, 0x1, 0xb, 0x8, 0x1, 0xa7, 0x7, 0x1009, 0x2, 0x4, 0x7, 0x8, 0x9, 0x1, 0x40010001, 0x6d, 0xc, 0x1a1, 0x1, 0x5, 0xffffffff, 0x3, 0x0, 0x6, 0x7a8, 0xfffffff9, 0x4, 0x83b, 0x2, 0x9, 0x5, 0x4, 0x0, 0x9, 0xefc8, 0x7, 0x4, 0x9, 0x6, 0x4, 0x3, 0x0, 0x7, 0x9c, 0xbcb, 0x1, 0x9c03, 0x373, 0x0, 0xffffff7f, 0x8, 0x74d, 0xe, 0xfff, 0x4, 0x4, 0x3, 0xffff460d, 0x5, 0x7, 0x6, 0x1, 0x7f451369, 0xb7c, 0x3, 0xa6, 0x5, 0xffffffc4, 0x4, 0x7, 0x1, 0xff, 0x8, 0x72f3bfd3, 0x1, 0x200, 0x2, 0x4, 0x1, 0x9, 0xd, 0x8, 0x49e, 0xf, 0x7fffffff, 0x7, 0x86, 0x0, 0x108000, 0x81, 0xffff, 0x7, 0x0, 0x9, 0x40, 0x2, 0x9, 0x1, 0x7f, 0xb, 0x83, 0x1ff, 0x7, 0x8, 0x1, 0x1, 0x7fffffff, 0xf6f3, 0x8, 0xfffffffd, 0x10001, 0xffffffff, 0x7, 0x5, 0xd, 0x4, 0x6, 0x6, 0xb0, 0x7, 0x1, 0xd, 0x7fffffff, 0xfffffff7, 0x1, 0x100000, 0x8d, 0xfffffffc, 0x4, 0x1, 0x3, 0x5, 0x9, 0x8, 0x6, 0x1, 0xffffffff, 0xdc1b, 0x79, 0x7, 0x2, 0x0, 0x4, 0x34, 0xffff, 0x7, 0x4, 0x7, 0x40, 0x80000001, 0x2, 0x7, 0x3b83, 0x5, 0x9, 0x7, 0x1, 0xa, 0x84, 0x9, 0x2, 0xfffffffa, 0x8, 0xd, 0x8, 0x3, 0x9, 0x7, 0x7fffffff, 0x9, 0xc01, 0x3, 0x0, 0xfffffffb, 0x3, 0x1, 0x1, 0x200, 0x7ff, 0xff, 0x7, 0x8, 0x1, 0x81, 0x8, 0x5, 0x80, 0xff78, 0x2ff5, 0x1, 0x244d182b, 0x3, 0x6, 0x6c000000, 0x4, 0x1, 0x6, 0xc0f7, 0x4d, 0x15, 0x8, 0x1, 0x0, 0x2, 0x3, 0x4, 0x1, 0x1, 0xffff, 0xfffffff9, 0x2e4, 0x4, 0x1e1b, 0xffff7fff, 0x4, 0x3ff, 0xfffff000, 0x501, 0x4, 0x9, 0x7, 0x401, 0x5, 0x2, 0x1, 0x8d, 0x1ff, 0x5, 0x7ff, 0x0, 0x7, 0x55c, 0x8, 0x0, 0x0, 0x1, 0x4, 0x1, 0xfffffff8, 0x0, 0x7f, 0x1ff, 0x0, 0x4, 0x20de, 0x17200, 0x0, 0xc6f, 0x2, 0x244f, 0x64a, 0x3, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x5, 0x2, 0x8, 0xfff, 0x81, 0x6ca, 0x6, 0x3, 0x4, 0xcb25, 0x6, 0x8, 0x2, 0x8, 0x4, 0x5, 0xfffffa7c, 0x9, 0x7, 0x7fff, 0x5, 0x0, 0x1, 0x1ff, 0x9, 0x2, 0xe, 0xb, 0x6, 0x5, 0x1e, 0x1, 0x21, 0x4, 0x3, 0x400, 0x8, 0xfffffffc, 0x7, 0x7, 0x10, 0x65, 0x5, 0x11, 0xffff, 0x0, 0x5, 0x7, 0x9, 0x40, 0x0, 0xfffffff8, 0x5, 0x8000, 0x5, 0x7fff, 0x0, 0x400, 0x4, 0x1, 0xffffffff, 0x6, 0xffff, 0xffff, 0x53, 0x1, 0x3a069a6f, 0xabfc, 0x0, 0x7, 0x0, 0x800, 0x0, 0x2, 0xcbd, 0x4, 0x380000, 0x7, 0x6, 0xe7, 0x81, 0x4, 0x81, 0x9, 0x8, 0xfffffff7, 0x1, 0x9, 0x80000000, 0x5, 0x81, 0x6, 0xfffffffc, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7, 0x0, 0xb2d, 0xfffffffd, 0x7, 0x80000001, 0x2, 0x4b5, 0xd64, 0x9, 0x7, 0x5, 0xb6, 0xfac, 0x80, 0xb2, 0x9, 0x7, 0xffff, 0x5, 0x2, 0x7ff, 0x1, 0x80000000, 0x61189570, 0x524e, 0x4, 0xb, 0xffff, 0x15, 0x2, 0x1, 0x2, 0x6643, 0x400, 0x4, 0x8d, 0x800, 0x80000001, 0x7fff, 0x7fff, 0x6, 0x1, 0x0, 0x4, 0x8, 0x4, 0x997e, 0xff8, 0x7, 0x6, 0x1, 0x1e20, 0x80, 0x3, 0x5, 0x2, 0x3, 0xc000000, 0x3, 0x3, 0x7fffffff, 0xfffffffc, 0x4, 0x0, 0x8, 0x40, 0x81c, 0x9, 0xf, 0x400, 0x0, 0x100000, 0x6, 0x0, 0x7, 0x5, 0xfffffff7, 0x2, 0x1, 0x8, 0x10, 0x9, 0xd, 0x3, 0x3, 0x1000, 0x8, 0x4, 0x5, 0x2, 0x0, 0x1, 0xfffffe00, 0xffff, 0x0, 0x7, 0x6, 0x1, 0x0, 0x193b, 0x27, 0x3, 0x7fff, 0x7, 0x7, 0x3, 0x1, 0x200, 0x1, 0x2, 0xff, 0x3, 0x3e8, 0x1, 0x7, 0x100, 0x8, 0x88b, 0xca, 0x1000, 0x8, 0x7, 0x0, 0xa, 0x8, 0x400e5, 0x8001, 0x7, 0xe21, 0x1, 0x1ff7, 0x100, 0x0, 0x5, 0x6, 0x5, 0x6, 0xf, 0x57, 0x400, 0x200, 0x8b, 0x4, 0x7, 0x8001, 0x5, 0x1, 0x7, 0x5bd0dbf3, 0xd, 0x6, 0x4, 0x9b28, 0x8, 0x8, 0x2, 0xfc0, 0x81, 0x6, 0x8, 0x2, 0x9, 0x3, 0x7, 0x7, 0x0, 0x3, 0x1, 0xc, 0x0, 0x8, 0x7, 0x55ab192a, 0xffda, 0x6, 0x756, 0x803, 0x5, 0x893, 0x3d0, 0x3, 0x5, 0x0, 0x6, 0x4, 0x10000, 0x80000000, 0x3, 0xf, 0x9, 0x3, 0x4, 0x2, 0x100, 0x63, 0x0, 0x97, 0x2, 0x2, 0x0, 0x8, 0x5, 0x1, 0x7, 0x1, 0x10000, 0x7f7, 0x100, 0x1, 0xff, 0x8, 0x7, 0xe, 0x8, 0x6, 0x7, 0xfffff800, 0x9, 0x4, 0x33debe10, 0x100, 0x8, 0x8, 0x9, 0x7f, 0x7, 0x3, 0x3, 0x7, 0x7, 0x3, 0x8001, 0x5, 0x5, 0x6, 0x1, 0x2, 0x4, 0x1, 0x345c, 0x3, 0x1, 0xffffff7f, 0x3, 0xd142, 0x96, 0x3, 0x8, 0x0, 0x4, 0x3, 0xffffffa5, 0x8, 0x6, 0x80, 0x4, 0x800, 0x7, 0x2, 0xfffffff7, 0x8, 0x8, 0x0, 0x3e99, 0x0, 0x0, 0x3, 0x6, 0x9, 0x7, 0xd9, 0x9, 0xfffffff8, 0x1, 0x0, 0x7, 0x2, 0x3, 0x3, 0x800, 0x3, 0x800, 0x8, 0x5, 0x9, 0x9e, 0x2, 0x3ff, 0x0, 0x100, 0x8, 0x7, 0x80000001, 0x6, 0x3, 0x2, 0x6, 0x7, 0x9, 0x3, 0x2b4, 0x2, 0xbb1, 0x6, 0xf, 0x0, 0x2000000, 0x8e2, 0x9, 0x7ff, 0x61, 0x8001, 0xffff, 0x2, 0xc27, 0x2, 0x2, 0xa, 0x627, 0x3a4c07d, 0x8000, 0xfffffff8, 0x9, 0xd, 0x6, 0x7ff, 0x5, 0x16, 0x5, 0xe, 0x2d8, 0x3, 0xffffffff, 0x2, 0x3, 0xfffffffa, 0x5, 0x8, 0x7, 0x9, 0x10000, 0x5, 0x5a50bac5, 0xc, 0x1, 0x32a1, 0x9212cf98, 0x6, 0x6, 0x10, 0x1, 0xfffffffa, 0x2, 0x80000000, 0x9, 0x0, 0x6, 0xb5, 0x0, 0x4, 0x1, 0xe, 0x8, 0x81, 0x99, 0x3, 0x5, 0x1, 0x1, 0xbd8, 0x6e0, 0x0, 0x5, 0x4, 0x3, 0x4, 0x670, 0x3ff, 0x7ff, 0x401, 0x400, 0x6, 0x3, 0x8, 0x3, 0x6, 0x80000000, 0x9, 0x2, 0x0, 0x40, 0x5, 0x10001, 0x10d8, 0x10, 0x4, 0x4, 0x0, 0x7, 0x8001, 0x1, 0x5, 0x4, 0x7, 0x6, 0x7, 0xd1, 0x1, 0x7, 0x7fff, 0x7f, 0x8, 0x245, 0x0, 0x81, 0xffff751a, 0xc943, 0x0, 0x7fff, 0xf, 0x2, 0x0, 0xef, 0x7, 0x1, 0x3, 0x6, 0xff, 0x1, 0xf, 0x6, 0x6, 0x6, 0x7fffffff, 0x8b1a, 0x1, 0x9e98, 0x80000001, 0xc88e, 0xcbe, 0x40, 0x3, 0xfffffff1, 0xd, 0x68, 0xfffffff9, 0x1, 0x3, 0xa5, 0x2, 0xffffffff, 0x5, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x2, 0x2, 0x867d, 0x6f, 0x1, 0x3, 0x8, 0x1, 0x100, 0x6, 0xba49, 0x10, 0x1, 0x7, 0x4, 0x4, 0x0, 0x7c6, 0x0, 0x6, 0x4, 0x3]}) (fail_nth: 3)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)

7m1.588052621s ago: executing program 6 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000008000100000a000000", @ANYRES32=r1, @ANYBLOB="080008000004000014000100ff"], 0x34}}, 0x0)
read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x0, 0xa77d, 0x9, r2})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TCFLSH(r3, 0x540b, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_SYS_OFFSET(r4, 0x40043d0d, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fstat(r5, 0x0)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@raw=[@exit, @map_fd={0x18, 0xa, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0x6, 0x5, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6m58.468342254s ago: executing program 6 (id=297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r4, 0x400, 0x0)

6m52.717223821s ago: executing program 6 (id=309):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0)
bpf$ITER_CREATE(0x1d, 0x0, 0x0)
r2 = inotify_init()
inotify_rm_watch(r2, 0x0)
poll(&(0x7f0000000400), 0x0, 0xffffffff)

6m50.426229308s ago: executing program 6 (id=313):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x10000001, 0x10000003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000044}, 0x10)
socket(0x80000000000000a, 0x1, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x10000000, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r5)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00'})

6m49.120157682s ago: executing program 6 (id=316):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0), 0x4)

6m47.624035213s ago: executing program 6 (id=319):
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf2508000300010000001e004a0001000000080001000000000008004b0013001000"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)

6m47.286525499s ago: executing program 35 (id=319):
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf2508000300010000001e004a0001000000080001000000000008004b0013001000"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)

6m6.776388359s ago: executing program 4 (id=391):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@any, 0x2})
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd609d008000000000000000000000000000aaff0200000000000000000000000000018900907800000000ff"], 0x0)
openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000190000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRESHEX=r1], 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@alg={0xe8, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {{'sha224-avx\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020)
lseek(r4, 0xfffffffffffffff5, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r4)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0xc018480b, &(0x7f0000000080)={0x2, 0x100})

6m1.558019531s ago: executing program 4 (id=406):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
gettid()
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

6m0.249391171s ago: executing program 4 (id=407):
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6m0.049489914s ago: executing program 4 (id=410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x1ffffd, 0x10100, 0x1}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80800, 0x1})
io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='K', 0x1, 0x4, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000001540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
lstat(&(0x7f0000000600)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x144}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (fail_nth: 3)
sendto$inet(r8, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
io_uring_setup(0xfb, &(0x7f0000000140)={0x0, 0xd391, 0x4, 0xffffffff, 0x2b})
bind$unix(r7, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)

5m57.438437046s ago: executing program 4 (id=413):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r4, &(0x7f00000002c0)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0)
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000400)={[{@dyn}]})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1}, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={<r6=>0x0}, &(0x7f00000000c0)=0xc)
syz_open_procfs(r6, &(0x7f0000000100)='personality\x00')

5m54.78069702s ago: executing program 4 (id=417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
gettid()
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

5m38.690364748s ago: executing program 36 (id=417):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
gettid()
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

2m21.276568598s ago: executing program 9 (id=855):
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x0, 0x7, 0x800, 0x2, 0x6b, 0x0, 0x465, 0x4, 0x5, 0x3ff, 0xc9cc})
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x29, 0x665, 0xceaff8639f8d2a, 0x1, 0xdf0, 0x8, 0x6, 0x0, 0x0, 0x180, 0x8}}, 0x50)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x142f, &(0x7f00000021c0)={0x0, 0xb9d1, 0x40, 0x0, 0x378}, &(0x7f0000002240), &(0x7f0000002280)=<r4=>0x0)
socketpair(0x1d, 0xa, 0x2e0, &(0x7f00000022c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r4, &(0x7f00000023c0)=@IORING_OP_ACCEPT={0xd, 0x18, 0x0, r5, &(0x7f0000002300)=0x80, &(0x7f0000002340)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x0, 0x0, 0x1, {0x0, r7}})
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000002400)={0x0, 0x2d67, 0x5, 0x80, <r8=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000002440)={r8}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002480)={{0x1, 0x1, 0x18, <r9=>r5, {0x1}}, './file0\x00'})
ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000024c0)={0x1, 0x80000001})
ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000026c0)={0x74, 0x0, &(0x7f00000025c0)=[@increfs_done={0x40106308, 0x1}, @increfs, @acquire={0x40046305, 0x1}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002500)={@flat=@binder={0x73622a85, 0x110b}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000002580)={0x0, 0x18, 0x30}}, 0x400}], 0x61, 0x0, &(0x7f0000002640)="9be01ef0d3420aa232ee3387246bde406738e95801848d5fab53c798b7b138a98272a76a34eb8a398813fd738576f78b0f669c7ff665e797f142b1823c3bec5969251c726a25a32820f930c3f3441a16f297d0f6c505fd6b715b245a157ffe0dce"})
ioctl$SG_SET_DEBUG(r9, 0x227e, &(0x7f0000002700))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002740)={'wlan1\x00'})
ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000027c0)={0x0, 0x0, <r10=>0x0, 0x0, 0x0, 0x1, &(0x7f0000002780)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000002800)={0x0, 0xfffffffc, 0x5, 0x2d34, 0x1, [<r11=>0x0], [0x9, 0x5, 0x80000001, 0x9], [0x7, 0x9, 0x3c59ec37, 0xffffff16], [0xf, 0x9, 0x5, 0xa455]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000002880)={<r12=>0x0, 0x0, r9})
ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f00000028c0)={0x0, <r13=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000002900)={r10, 0x800, 0x0, 0x100, 0x0, [r11, r12, 0x0, r13], [0x0, 0x45, 0xfffffffa, 0x7fff], [0x6, 0x8, 0x7, 0x5], [0xc20, 0x80000000, 0x5585, 0x101]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000002980)={0x0, 0x0, r9})
r14 = open_tree(r9, &(0x7f00000029c0)='./file0\x00', 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f0000002a00)={0xa3, 0x2})
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0)
read$FUSE(r14, &(0x7f0000002a80)={0x2020}, 0x2020)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000004ac0)=r9, 0x4)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000004b00), &(0x7f0000004b40), 0x2, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000004c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x2000010)

2m21.008081423s ago: executing program 9 (id=856):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async, rerun: 64)
r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (rerun: 64)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040))
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e0003001000000002800000128c", 0x2e}], 0x1}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r7, 0x0)
r9 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil)
setreuid(0x0, 0x0) (async)
shmctl$IPC_SET(r9, 0x1, &(0x7f0000000280)={{0x0, 0x0, r8, r7, r8, 0x102}, 0x63, 0x9a99, 0x6, 0x7b0f, r6, 0x0, 0x688}) (async)
shmctl$IPC_RMID(r9, 0x0)
write$tun(r4, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x2, 0x9, 0x6, 0x8}, @eth={@random="f5db1e035b12", @link_local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@x25={0x805, {0x2, 0xd, 0xf, "fe12801585954f5fef0e91af47339a58ee7015"}}}}}, 0x32)

2m20.384523774s ago: executing program 9 (id=857):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x401}], 0x3, 0x0, 0x0)

2m18.691240191s ago: executing program 9 (id=858):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x6, 0x104, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x8800)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x10000}, 0x0, &(0x7f00000002c0))
r5 = creat(0x0, 0x80)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x48)
fsetxattr$security_evm(r5, &(0x7f0000000400), &(0x7f0000000680)=@v2={0x5, 0x2, 0xc, 0x7, 0x96, "88e72295fe8243b3e9a0f94115378b36cea8fbe1d23cc63ba4cab3e21dacd19c197021232cf5eb9785c50f32a479db1ab9a66edff9f920732fbf75a22d29f70f8863966b58466b6f3e9b80b42b0fe7f7837214b6c60f5b261df9aee3ca80949ca84b570bc2baeefd443c360d39750dfeeabb696b4d5891ea01452ee042e1bafeec1a7ee84f50ea36df6d940a90374bc884249ec15552"}, 0x9f, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2004c000)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>r1, 0x4, 0x0, 0x2, 0xfffffffa, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8, 0x700, 0x1, 0xc4}})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0xd24, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0xcdc, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x8, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "80f271fa7151c372fa805411e083e86b1231bdff436af3399132f7c3de061e2f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}]}, {0x2d0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x59, @private0}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x21}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x26c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8c8bba3434e564eac41d9890c37f8400249f892d45d11f0a181ff13c8479c07"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfb}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0xd24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x100, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {0xc}, {0x5, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4044010)

2m17.766627845s ago: executing program 9 (id=861):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8000, 0x0, 0x1, 0x5, 0xe, 0x5930}, {0x1, 0x3fcc, 0xc, 0x9, 0x8, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = socket(0x21, 0x6, 0x7f)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x101841, 0x0)
fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r1, {0xee01, r4}}, './file0\x00'})
r6 = semget(0x2, 0x3, 0x0)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000340)=[0x8, 0xfffc, 0x80, 0x8, 0x8, 0xfb])
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x40000, 0x0, <r7=>0xffffffffffffffff})
recvmsg$can_raw(r7, &(0x7f00000005c0)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/32, 0x20}], 0x1, &(0x7f0000000500)=""/150, 0x96}, 0x12000)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x8008b, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@version_u}], [{@fowner_lt={'fowner<', r3}}]}})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2100, 0x0)
fcntl$getown(r7, 0x9)
lstat(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00))
getgid()
stat(&(0x7f0000002d80)='./file0/file0\x00', &(0x7f0000002dc0))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000003500)=0xffffffc0)

2m16.87654384s ago: executing program 9 (id=863):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socket(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, 0x0, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0)
r4 = fanotify_init(0x200, 0x0)
r5 = memfd_create(0x0, 0x0)
r6 = dup(r5)
fanotify_mark(r4, 0x1, 0x40000010, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

2m4.391600516s ago: executing program 5 (id=890):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "ea02cefa5c8008535d47000000504fffff00", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecd816800", r1, <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0x40103e05, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000104de00ed00000000000000", @ANYRES64=r2, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x8000)

2m4.223884291s ago: executing program 5 (id=891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r0, &(0x7f00000002c0)="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", 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc200000400000109022400010000400009042000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000500164272"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000ca3cf475a519aa4e9252ff33996c236fe2e94f6969b8f96c636638b60fdbe297613a068475778244ce8fe5fd442831096b390dd7f22803fb81388651627a4d6571a3deddae2b167cc1bcb2f05a0744422f97166f9d0f8a74ec065be59da3716676b2e3e862954638b7", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf25020000000c000f000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
listen(r5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r2, 0x9)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r11 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fe0300000004030b00"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000070060000000020000"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x4008550c, 0x200000000000000)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000025080003002400ff0304000000080001080100"/36], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

2m1.493952476s ago: executing program 37 (id=863):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
socket(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, 0x0, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0)
r4 = fanotify_init(0x200, 0x0)
r5 = memfd_create(0x0, 0x0)
r6 = dup(r5)
fanotify_mark(r4, 0x1, 0x40000010, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

2m1.137271254s ago: executing program 5 (id=895):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa601, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r6, &(0x7f0000000180)='\x00', 0x1001}])
dup3(r0, r1, 0x0)

2m0.810260517s ago: executing program 5 (id=896):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0, 0x340})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB='9C'], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

2m0.051824628s ago: executing program 5 (id=899):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000fdff0000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000a900"/20, @ANYRES32=r1, @ANYBLOB="900c0100000000000c002b80060001"], 0x34}}, 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@redirect_dir_follow}], [{@smackfsroot}]}) (async, rerun: 64)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r3, &(0x7f0000000000)="2d000000010001", 0x7) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (rerun: 64)
process_vm_readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1, &(0x7f0000000500)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000280)=""/8, 0x8}], 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {0x0, r7, 0x1b}}, 0x18)
mmap(&(0x7f0000312000/0x1000)=nil, 0x1000, 0x0, 0x110, r4, 0x2000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
dup(r11)

1m59.544627685s ago: executing program 5 (id=900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x35, 0x8, 0x2001, "14074195f8ff200012ee3cf29a9b2d4024cac629a795bcfab3d478caa34d7b31ec1832a7e71383c95b0500ddaef5d1e9b91fe2c9aa"})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1m59.068694091s ago: executing program 38 (id=900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)={0x35, 0x8, 0x2001, "14074195f8ff200012ee3cf29a9b2d4024cac629a795bcfab3d478caa34d7b31ec1832a7e71383c95b0500ddaef5d1e9b91fe2c9aa"})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1m20.434500144s ago: executing program 1 (id=975):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800018014000200"], 0x2c}}, 0x0)

1m20.324498927s ago: executing program 1 (id=976):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe800000000000000000000000edb1f0022de48a645ad5d6c4390000bb0000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002005c0001"], 0xac}}, 0x0)

1m17.419171408s ago: executing program 1 (id=981):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0)

1m8.536065137s ago: executing program 1 (id=1005):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe4616000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1m3.32706468s ago: executing program 1 (id=1018):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

1m0.568861221s ago: executing program 1 (id=1020):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe800000000000000000000000edb1f0022de48a645ad5d6c4390000bb0000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002005c0001"], 0xac}}, 0x0)

45.429880369s ago: executing program 39 (id=1020):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe800000000000000000000000edb1f0022de48a645ad5d6c4390000bb0000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002005c0001"], 0xac}}, 0x0)

16.738727518s ago: executing program 8 (id=1145):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x7ff, 0xc419, 0x0, 0x34343452, [0x4e2e, 0x1], [0x6, 0x601], 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0xfff, 0x1, 0x1, "eee98fa706178704cb4dfd93e33c9b6b7bd103000000000000007d064f0800e2"})

16.354289426s ago: executing program 8 (id=1149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@local, @private=0xa010100, 0xff000000, 0xffffffff, 0x3, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x40, 0xa, 0x7ff, 0x8000, 0xa, 0x81, 'ip6gretap0\x00', 'nicvf0\x00', {}, {0xff}, 0x0, 0x122}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @loopback, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x400, 'system_u:object_r:mouse_device_t:s0\x00'}}}, {{@arp={@broadcast, @private=0xa010102, 0xffffffff, 0xffffffff, 0x1, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="f9cc5a335b49", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xfffa, 0x1, 0x3, 0x3, 0x7, 0x6, 'nicvf0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x62, 0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r4 = dup(r3)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
sendfile(r6, r4, 0x0, 0x89ffc)

15.764541072s ago: executing program 8 (id=1150):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b8680300021093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de000000000000000000", 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc200000400000109022400010000400009042000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000500164272"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000ca3cf475a519aa4e9252ff33996c236fe2e94f6969b8f96c636638b60fdbe297613a068475778244ce8fe5fd442831096b390dd7f22803fb81388651627a4d6571a3deddae2b167cc1bcb2f05a0744422f97166f9d0f8a74ec065be59da3716676b2e3e862954638b7", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf25020000000c000f000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
listen(r5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r2, 0x9)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r11 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fe0300000004030b00"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x4008550c, 0x200000000000000)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

14.526561099s ago: executing program 3 (id=1154):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$sock_int(r2, 0x1, 0x3, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x23000000}}, 0x18}}, 0x0)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r8 = add_key$user(&(0x7f0000000480), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000a00)="c218b8fb4f2711662cda1925942565487e7d348d3cb55586a0b8af4c8b0e15dd9b6a54e2b1949a11fd43529b6d7178ad1bca2c14db39ff5a5cc5653035257088bc479654863b4172cad06d296711c31da28fd6ee8733d014bdff64c5adb64d1df761b14bf856875d2ccbe1d4559c3a7600ffffff237a5aa929be91720ce0468e265d13f9ce80c2d474cff4fabd20cfa00fdc867ccd24521a769b61fd609b55a3672c221fc7ad9d29bb5a826e9e", 0xad, r7)
r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000003c0)="d1", 0x1, r7)
r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

11.369226226s ago: executing program 3 (id=1160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@local, @private=0xa010100, 0xff000000, 0xffffffff, 0x3, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x40, 0xa, 0x7ff, 0x8000, 0xa, 0x81, 'ip6gretap0\x00', 'nicvf0\x00', {}, {0xff}, 0x0, 0x122}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @loopback, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x400, 'system_u:object_r:mouse_device_t:s0\x00'}}}, {{@arp={@broadcast, @private=0xa010102, 0xffffffff, 0xffffffff, 0x1, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="f9cc5a335b49", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xfffa, 0x1, 0x3, 0x3, 0x7, 0x6, 'nicvf0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x62, 0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc)

10.461928581s ago: executing program 3 (id=1163):
r0 = syz_usb_connect$printer(0x0, 0x499ddfad048b6af5, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xb, 0xfc}}}}}]}}]}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x17ba7a97)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd2(0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x3ff}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x7ffffffffffffffc})
close_range(r2, 0xffffffffffffffff, 0x0)

8.068225332s ago: executing program 0 (id=1167):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
timer_create(0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48880)
sendmmsg$unix(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x89f2, &(0x7f0000000100)={0xfffffff8, 0x1, 0x0, 0xfffffffa, 0xd, "bb40af000080000700"})
r7 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="25030000000c0801807f728d8708000100", @ANYRES32=r8, @ANYBLOB="05000500030000000500030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)

8.019022954s ago: executing program 8 (id=1168):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003f40)=@acquire={0x1b4, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x1, 0x32}, @in=@loopback, {@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@mcast1, @in6=@private0, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x0, 0xff, 0x8, 0xfffffffb, 0x7}, {{@in6=@mcast2, 0x4d2, 0x32}, 0x8, @in=@loopback, 0x34ff, 0x1, 0x3, 0x1, 0x0, 0xe5d}]}, @tfcpad={0x8, 0x16, 0x4a1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x40014)

7.272027749s ago: executing program 3 (id=1169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)

7.264573154s ago: executing program 8 (id=1170):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0)
r2 = inotify_init()
inotify_rm_watch(r2, 0x0)
poll(&(0x7f0000000400), 0x0, 0xffffffff)

6.175073449s ago: executing program 3 (id=1171):
socket$inet(0x2, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "f9ffffffffffffff"})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408)
socket$l2tp6(0xa, 0x2, 0x73)
semget$private(0x0, 0x1, 0x4a)
r1 = semget(0x3, 0x4, 0x108)
semop(r1, &(0x7f0000000080), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='jfs\x00', 0x808800, 0x0)

5.706353237s ago: executing program 7 (id=1172):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r3)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@local, @private=0xa010100, 0xff000000, 0xffffffff, 0x3, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x40, 0xa, 0x7ff, 0x8000, 0xa, 0x81, 'ip6gretap0\x00', 'nicvf0\x00', {}, {0xff}, 0x0, 0x122}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @loopback, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x400, 'system_u:object_r:mouse_device_t:s0\x00'}}}, {{@arp={@broadcast, @private=0xa010102, 0xffffffff, 0xffffffff, 0x1, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="f9cc5a335b49", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xfffa, 0x1, 0x3, 0x3, 0x7, 0x6, 'nicvf0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x62, 0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc)

5.700227702s ago: executing program 0 (id=1173):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0xa185, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x10, 0x4, 0x4, 0x2, 0x22042, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'sy\xa4', 0x20, 0xffd}, 0x2a, 0x0)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$P9_RVERSION(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15)
r7 = dup(r4)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240), &(0x7f0000000280))
read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020)

5.631552645s ago: executing program 8 (id=1174):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001100)=ANY=[@ANYBLOB="12010003fc3d4f10a4150010ea510102030109021b0002ff0c60860904f96e0051274308326ab60517254d91de247b77d8a1130d04610400e9811ef9"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000001480))
r4 = dup(r2)
write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000010c0)=@arm64={0xff, 0x4, 0x0, '\x00', 0x9})
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000001240), 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000200)={0x40, 0x8, 0x3, "e9d0f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033", @ANYRESHEX=r5], 0xfc}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8)
syz_usb_control_io$hid(r1, &(0x7f0000001400)={0x24, &(0x7f0000001280)={0x40, 0x1, 0x86, {0x86, 0x24, "9bd27bb69756448942ced651c4f323d653916af8edd5534abfb191915a938f801472d0d2a0edc3c9bdb40be7b05880e62005a30286fad1c12e400ea58352e01a4b4e6a10f366d96166be6cf4cab06d87927f5e6c24f601b97a37e29b9c329a3d82b397124f4da616552a3e645fc90026d12f1cef762bfa66a3fbf829f1ec29df4dcc9b7f"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000001380)=ANY=[@ANYBLOB="00221d000040c394241bcc856720c12f5a01a924f25e93a26218cf"], &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x59b}}}}, &(0x7f0000001700)={0x2c, &(0x7f00000014c0)={0x0, 0x1, 0x8f, "c7813c5d5cde08f00609d91fb243c7aead71c558884a37b71f8c58759e58d711254dd7c443e468f14d4a088ec61574e781375105d38a86d4cb3d7640564e553b8833700758050cff49a53868a74db7d5ad28b520ab436584bf1b2262139ea9880c1ca0629f6f8e311870aa408bf89dfa810564d2e9aabbe199cb511e8dd807de59994544f78cbf777044b2be7fc0ff"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x7a}, &(0x7f00000015c0)={0x20, 0x1, 0xc0, "ccba8fb5eef0d13a2509a180b8a4485235ae1302333ce3a69dd518c363f7db83740afaac5055bfde355ba95829c9ad55541207afd3d8041688da6dfa74cddd14daf87534e33f5026d6882b0db5963d246d1cf4304bc576845986a7269d94cda9d68b731e5702cb3d9041bda264e476da60d58bf70871051aee1ba48e6b94bb566e7be5e874014c8a496edf55b81c045b62d4e9cb7e8af734abeaee45f9ca646c908354b2089d29cf10179a13c8054a722b8f1a9e69f52e5857bffb37cac33adc"}, &(0x7f00000016c0)={0x20, 0x3, 0x1, 0x3}})
sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="000f89000000d8"], 0x0, 0x0, 0x0, 0x0, 0x0})

5.599585541s ago: executing program 7 (id=1175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x7, @private1, 0x8}}}, &(0x7f0000000140)=0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000600000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5.555444096s ago: executing program 2 (id=1075):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r0, &(0x7f00000002c0)="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", 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc200000400000109022400010000400009042000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000500164272"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000ca3cf475a519aa4e9252ff33996c236fe2e94f6969b8f96c636638b60fdbe297613a068475778244ce8fe5fd442831096b390dd7f22803fb81388651627a4d6571a3deddae2b167cc1bcb2f05a0744422f97166f9d0f8a74ec065be59da3716676b2e3e862954638b7", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf25020000000c000f000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
listen(r5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r2, 0x9)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r11 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fe0300000004030b00"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x4008550c, 0x200000000000000)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, 0x0, 0x4000000)

4.573681975s ago: executing program 7 (id=1176):
r0 = socket(0xb, 0x805, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xffffffff, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = inotify_init1(0x0)
dup(r4)
socket$inet6(0xa, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
prlimit64(0x0, 0xe, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x1, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
chdir(&(0x7f0000000100)='./file0\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
signalfd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000000)={r0}, 0x1)

4.222930061s ago: executing program 3 (id=1177):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b8680300021093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de000000000000000000", 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc200000400000109022400010000400009042000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000070000000500164272"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000ca3cf475a519aa4e9252ff33996c236fe2e94f6969b8f96c636638b60fdbe297613a068475778244ce8fe5fd442831096b390dd7f22803fb81388651627a4d6571a3deddae2b167cc1bcb2f05a0744422f97166f9d0f8a74ec065be59da3716676b2e3e862954638b7", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf25020000000c000f000500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
listen(r5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r2, 0x9)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r11 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fe0300000004030b00"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r11, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r9], 0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x4008550c, 0x200000000000000)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

4.156885643s ago: executing program 0 (id=1178):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
timer_create(0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48880)
sendmmsg$unix(r6, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x89f2, &(0x7f0000000100)={0xfffffff8, 0x1, 0x0, 0xfffffffa, 0xd, "bb40af000080000700"})
r7 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="25030000000c0801807f728d8708000100", @ANYRES32=r8, @ANYBLOB="05000500030000000500030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
getpid()
getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=0x48)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)

3.332341233s ago: executing program 0 (id=1179):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003f40)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x1, 0x32}, @in=@loopback, {@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@mcast1, @in6=@private0, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x0, 0xff, 0x8, 0xfffffffb, 0x7}, {{@in6=@mcast2, 0x4d2, 0x32}, 0x8, @in=@loopback, 0x34ff, 0x1, 0x3, 0x1, 0x0, 0xe5d}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40014)

3.167333202s ago: executing program 0 (id=1180):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt(r0, 0x14000, 0x5, &(0x7f00000010c0)="4d257ac709620f87f1afa81511b88d1352c5cb3b6fb77b1ec8beaf2b2b04aa905e8ca9a63b0c18e9f66feb0938202f6d53b4cf4af3fd239d1b5cfc38426dfdd84f3cff5ac45ad640fb0d45197a543e0511aee6e13b1945e187be3d54f539ccbfc772d922e52b3c990b6478586f37ab5df534a8904dbb51601165b967f07d1b41005dd87fa634e32a22e2906115bc976ea6b2d8f9e45fd674b2fa77b46be6932b0973ee639fdbcf327682364e14c2956764b99d941e9cbb1b945511be6723aba0d4822e366c05d4c5951005aac4c4c07b14ec1f2517f4563074107989a44ed58e74c7e0f12de6858e942a1fbda33dd0acd01d85cab11d4b3c4135d4fff78a98d0232633fce90480bd0a0e1f701680d62927e1e5bfc8ce2c45887fbdc121db3f876e5dd6a00080d381a12f8f5ea24af5ad8ac36437ffb5a3336bbc15a57ab749f3a6c360127fae649c6dea747932dd973498f63db51c3b6e5b74fcb3ec281aa74ca9780398f71db67422da628e3e572ecffcea518e1be04468a9c0b881b73e27af38c9b4c230cfc937028a8f185099cdb29d0e0673634ff53aa36294e1338ea7e047f57d008a8ec87a0c7d7a32ec494029d14c84e7bb8dc8661162cfd303574b2ce5f50ee4d65bf42337914b3b4181a7dbe80a71da18e53d68cfdd60be190922df41eae0ec12e6e4cdafb061c98c6ae13638531290dae05d92e63fef4a0c6dc2f2ff3bd2620554c471a8de26b12641e53c57f935da866927fd07f573e8c9c31b43c22a5e28a18ac0512af00ae7bbfe7e236043197249d6c694d51ca937b853ef4109ddca66d3791f3b2cb30fe7c0d4c8c382ddf4ca51b2e1d42c5e515b61173237a2ff957f0341b63565d60b3bded8c2bd5e610516eabce8f1e4da568056fd0759fb0094e1eda789eaa4b6d9a277262a30e70813a8bf536ce594fec2d1854e721def9c68cbcd3a8ff047e87b0e367293b88f2ed6b91ad06f4f394ad1706bb909089cab6f6913f826d4cb89bb3f0bafb541618d855b9f27bc0589f1f83bb85dc3a838c089170efc105f4a603e757bb077c9921ae4c44ce95a96c72665cdb02096eaa926b7b16caa13d4141c8e030ca1d527ac9dd0f0ffc16f58c6b99d8ed4d104babe8630a2e05b2fbd0e0ca037ac8a3e302fe14f751cf7ba3462a37aae36908df3ea40344759ce655bbff4d94d748900c05e8ea87c831eb5607001b3077259a5ebe9b6d9decfd26febe24bce68db38405a1988be5d4e30863eb422982c161d60301b34020697be3e89217339f9cb4caa911d6037939790dbf4a7b95b535ac11ad0f3471a925724f0dacf0878f5ae1d820a142c5285073b9503edfbd5a428debe3c3193c6ced6d044922a9bd810c8998905f2ee3a8a495761cf94830a727e325eed0a1650b62a695fbe8f190949d5861060b73f34ed670436b4c2de4271042391bfbe0f1b6f531464671341585116f04a67372e0e733f34112434e4f0925b57ceba1cba81a64cf3e4a7ea12f5df0f7cacedc52f6149881dc4ff9b6ecbb941cf6a801a10ce625c00c46ae5c46d061817c7c547fcd10f27b6614b9aae3ee5ba377bfffb30f0add0478f5e3f97b2d96b5795fce51f916047f7cf77e15534982bf77c038477b160e80e81b12fbf0a532b9540c17435a74bdc5e5214a6cbabf24dba8db36fe7c60b0db6cb07a8b7a11b2822849caee7126c4538f81c382064da0ce1552509a9ac55c7bd70fbdaf836b37ceb9b1c9e37a9b18bbec2286d811c2e0dcff3850586d02731d34205866d268299a86246f51ebe0f0a974ef4bd52ea8e9847a4fffd200a0127f7f57e9d3eed79e397db20ed95c8353fc2649eb2e5b2c40b1ff9e713a797216b6508dcadf224fc4110983047a21521cd08f96e98e34dae3cd325e4ae4f477045987d0f60d9e4476ab998fc9afed41a4cb7978b914a911d27af0271ebfeae3db93b8a766729b14b878f5e279dcb21ef6e40a05617dd2687aa7012548216c271bc77b4dd83818de1226927abe5d4edce57a343e455a96d41e4b8892a01a87c001a42b912087f18207b4d7aec4217644a29c3173c095bbe1374cd0e6e5387c5e23eb524db68078840124d3c6eaec807fa854dfc251e73254dd0dc1cb751a03d416fc948e39ba77ae87ab76110e53d1a67b70dc7e9bfe1c18043b379568e10b11534fa711dfd354799ab1b51b92b4fa6113dbdfbe27972e21557a2d40db3b3639e0683558f3a8af57b5d9424ebd54d31e179cc359d5fb865a22e9ffea3469859408a2dc68987a12c23354c33dd24e23caf747c4c3feda24be86afb78570bb56d272fb11fabcdea9ca70d7216399ffa71ee72ca5fc15b58bb0da256497be11e716de353e78b680dbc3604575ed784e3604a8f8077504c4f3bceb08ce941bcb33749cf1c0d29a8c2b08658ac7ed027d3b8a4b67b8d54c04765d357f74c761c33c53491b82157d4bb34296b0ac9f48de4e80dd90d2c05319d9fb3388e51c0e65f28ef0907ff2ce428c750e3109d90ecf8ec1aa0c2ddeeaf4799c7a2076bd0f8ac48271e821470a061fde9a2c750273ea17cf74e2c17aa3e610f547b01405b62d8a56dcfadb8d5dbb0255e01f3bf72445d64ee61c8acc21057b9034b50192a72a57463b4bcd2bc0b863bfe4a91e5f4c105a763d8d82183db7130c56ad94c30fd2ee464a66afae97edb1b2f80461c65ecd4ebacea944fd19180aea8c607592ae0371cdd547ba60db37f54fc1e3b86911df7403f75ddc27f6eb6bbf909293c0c26cc53a5e30c8fd72a3196a5874889844090ce830167a89e7439dfd8355a1d6acfd61171df40f2f57d7292ec62b51fea423e233375320f3834fa43df9a7e5e4c0a5055a4858eebb087be7ec11d5f3a3695d42e80924deb54d55269ab096c3b9f3968f8075c59d4e66ec76715141df3ade75cf672eb35bf1dcc5e7572b7b135a3af0383bbac720880b1c6a221a2b76fef2369d32abacbd3d64900fef63b1daa1013819fd4b8a6ac486a8b3f33baac60ff688d0d2c707ca5929dcc067eb2c3e87404731adc5e4af61eb9230bdce0bc927880a33f2121a14c745b60f073d25453d0195073f13040238a5b87fb0c3cebf32e77121896aa891806c61821839b1cdfcc297738cb6c3c6649219bdaf1453c0660ef627bc8222f4c7d7a751901a1ff9f953aaeb8fd352012768811e0ed4a4c94bd6441c4843c3f024d4d38803543ac300108b3ab06875cbd7846f0304837f955e3306a9ae425fcde3700c38c2e4e07a1f6e9cc1efd9ca076941686d8c258873d6372f10daf83eaae952dd39abe0d619410e1ad91882b0c8c93d90088e17c81a5c38797115dc9d977391d507adab0f378564e4c59dc32b9f7b8ff1050e107d8ae9708ff9b3f9696955b8f0352e23b267d59abb1b52bae85ec46f39bb6a94602eb2615816a680876f43480c87786dd2017f55025100fcfda77272581bef26691c7972e7e3fd1badc0333e1148a475d561665d4ec76cc527d45248c01176b158110a0d1d1db10a48ebf42bb516044cb916d048ed4c622321d19ca5896a59a47bd658c69255ba39184f1a4f637b9a7f4a37675f4801f19ffe24db5cca2349e71c93e4ef849f321e349dc2c2f02e9397173057baf84107ef1b5d4086897681377d88be287b8501f64453febcef55f0e1d75f10d3a8463ecf075df2b08c0c0fd742c4bd64f04e106ba3a45c18d1de0235fdbcdaf14dc3c97ecb48afff79b12983aea290d2b7cccec2a1e0ecd0a69bc594e4377e7000107f8996a7c0322f61967002fd465b5a123a0606da3b8a5680e6d5a7ca59a2a993c17db10f7a6fb23ea193d4d0f3b5f2350cbdaa3b1c0272377f90f11a1da19cd53f77866256dbf204844f3bd557ef3e118e748f810e3f09380c92ffdf61514ecad395a9aad7966c62d40005e09eea8cef6e8c37f91752b490977ef9b8d7fdcdd178be3b50f4d2bf243f593e7d2ee880c17caa218e913cded25d0ba509668c63014605d4a93fec709f32f7678d4f5de2b4c33ad3e334e7e82980a13176dc5903fb5853f77bbc8fcafe3a95bb232564eff089f2cf2c22d6488f603aaa42d548afa0a686378b38bb2be65171cb4bffe1aaec16193caeb8bc283ca619fdce013d9497a698ca1b22454e32b14e18ca6ead90db18ae24700aad7bdb426c99440b51246294e4dff77add5995d54104c295d26f0ed98aced017db92e498beeff402d313bf605f0524a15f776fe9a0cb5a45e87b8008285d25bb0d078057fd2bea9aadab40de98e0dc1b4701202846b7017002fa80cc76c353f037fa73cc6cb1a230b967e55b6b04fcf2e41dd4d0a6118535a13b9ddc6c23ba6b7f7ea3b7008b733bbfe1caed168e6e8f061b539a04ca94da7dafed86947e83c7615e4593a52cbf1673aa141b8ee1d8d4f4f274dbec1e47d62caa54d7f50c7098ce5241de0c879a3d7ebece3470a311bb1ffb556d74dd12726d76d18078279a78ed0992667cde8f3269d7d1ceeb23fa5e28d9bf8d78b22306f822b2cb21768d354222b9741392abe68cb2a68dfaecb8c801ab3f14989d399e06e3dfaa1ffc273086b98bb2852156a8fb9f34ce489f1ae8e9a9a51a866bcaf54096dd2e2b97b5241b10a0e388436c2cfdb53a42aa093a0651a8cd253c24aa6a9ace2aca7530b11e4ab8a7902b33fd6cca253496d3510eee46c8d14964271b44da4d39530c7a7f5ca512bf78a587153b27d6384b86973fbcedb6ee44b82aa924c89511426378d54a810aafa2d5ea1274088f3e6216257cc2d0995ae883749e00554e8db9b539b96f3157d684e1ccbd22531c08d11fee23d34d6ef9c0c7c56f980b40277c6fc197e47a442abeabf20c0af32ee37ba206c8c757cf56ae1b76350b957b2dd7939463e6ceb81cb6e505f180f9acf5edaf14ab752d6bb35ab59a6f04fa881b0a8566994882ffe5d4dfbbc29e7df77dd2694c1f0d790619b65cd8069f589c45caf5d3c7d614d00b26d5d26baca02cbcf66ada50614c57b6bad1465499c1856bd31cb52b8f44846a1b3df68347fb75d6c8fef53b5e9a260b04397f3f4e812cca1f65b368da812b5180396829ee6899bd9868311bdec404fc50440fcd0da6a7de50a8bc424cc46e0eeb6092b546d01973aa234f842c5ba132e659e75a157e995ba5357a15b4cd4455b7aa35b547784a99e8bea22c9d8d16388c9667025e6de0f86504ca599341e1260a5c4af11f79d62d3e0ade50ae0fddee3f7930cc79bae0b587fa35ce2a25ad530bdaca9cb8b5b056bcc97c7958d9439408d53cdc2e2b4e84eaea2fad79c77f39cfd24fd7ddb3b8bc8bad9721b933e86d5aa1f22e30055f77e5f9f3b50c071b7c8684ec1a60772a5b30eef021e0bfc45d73d8f8d953cf52f7ee7cf81fa283f5cbda5d8d3ce14c781356bfd57d3d3a83a8f2a867849a3bdb1ff6b51625c20815d8803580182addb5fb12be70ac52742635e7fbf46d6a8545c7d9302d5536ef64e874a3a03cbab2e0fa7859e2b2a3e591934b000afd5004fad3e8ead46dded4f3316e1a5744143aa3302ef634585c7d9e9dc9deb58a8f94a1ada6633e0ec1b03c8ede03aba22a34963c8efc3487374a3025de24f56fb9b49b1890a6e018d1a8af80b4199bb4d4f8e952dbad7708aeb37085e68068dae1f733633be682dbaab0bfc885d5825f2f4a242f94d91df2fad8c130018531d7e32ddb352c5d458bac0d6ea7095cbdfd215ef8db29fcc2cb1ccb6db9880cc9f7bfdba501fec542d6f0a8cc8b4279da79c2f0c540a6f3186d3d0e47507164cc9227695772a8bd591e002d105878ae7b060291a9ad8932d413aed821dc35683c2f70c", 0x1010)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20)

3.007897738s ago: executing program 0 (id=1181):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x14)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16b300, 0x0)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030030000000600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
openat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x80, 0xc0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040804ffc800877f"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8a8a0004ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000280)='rxrpc_conn\x00', r6}, 0x18)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, 0xfffffffffffffffc)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2.311923457s ago: executing program 7 (id=1182):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x9, 0x0, 0x0, [], [], [0x0, 0x0, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')

1.114032045s ago: executing program 7 (id=1183):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0)
r2 = inotify_init()
inotify_rm_watch(r2, 0x0)
poll(0x0, 0x0, 0xffffffff)

907.849406ms ago: executing program 2 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r4)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@local, @private=0xa010100, 0xff000000, 0xffffffff, 0x3, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x40, 0xa, 0x7ff, 0x8000, 0xa, 0x81, 'ip6gretap0\x00', 'nicvf0\x00', {}, {0xff}, 0x0, 0x122}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @loopback, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x400, 'system_u:object_r:mouse_device_t:s0\x00'}}}, {{@arp={@broadcast, @private=0xa010102, 0xffffffff, 0xffffffff, 0x1, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="f9cc5a335b49", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xfffa, 0x1, 0x3, 0x3, 0x7, 0x6, 'nicvf0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x62, 0x1000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x89ffc)

0s ago: executing program 7 (id=1185):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x75, r1}, 0x38)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000b70400003b8200008500000003000010950000000000000043a3dd1410f9af63620a6af348cc5083a5ab727b6fe8a214545c2e482bde85314b5df2a67b5b77d529867a17d9ca48fa80fe982f286ea620c1fbbff2ebaceb5e591e003658fd9e5b521a6ff3adfea11b59da0f0967fbf758dde443637abd55c061d7a735a5ade6f8a251dbb0e8015d8042909f1cab623fc6878e7ed76b0159caf414d41b81925e060577dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x400)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)

kernel console output (not intermixed with test programs):

17365][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  454.227453][ T9308] Call Trace:
[  454.230753][ T9308]  <TASK>
[  454.233703][ T9308]  dump_stack_lvl+0x241/0x360
[  454.238423][ T9308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.243654][ T9308]  ? __pfx__printk+0x10/0x10
[  454.248282][ T9308]  ? snprintf+0xda/0x120
[  454.252558][ T9308]  should_fail_ex+0x3b0/0x4e0
[  454.257279][ T9308]  _copy_to_user+0x31/0xb0
[  454.261744][ T9308]  simple_read_from_buffer+0xca/0x150
[  454.264353][ T5874] usb 9-1: Using ep0 maxpacket: 8
[  454.267139][ T9308]  proc_fail_nth_read+0x1e9/0x250
[  454.267175][ T9308]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  454.282735][ T9308]  ? rw_verify_area+0x55e/0x6f0
[  454.287584][ T9308]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  454.293125][ T9308]  vfs_read+0x1fc/0xb70
[  454.297277][ T9308]  ? __pfx___mutex_lock+0x10/0x10
[  454.302294][ T9308]  ? __pfx_vfs_read+0x10/0x10
[  454.306961][ T9308]  ? __fget_files+0x2a/0x410
[  454.311547][ T9308]  ? __fget_files+0x395/0x410
[  454.316212][ T9308]  ? __fget_files+0x2a/0x410
[  454.320806][ T9308]  ksys_read+0x18f/0x2b0
[  454.325061][ T9308]  ? __pfx_ksys_read+0x10/0x10
[  454.329829][ T9308]  ? do_syscall_64+0x100/0x230
[  454.334611][ T9308]  ? do_syscall_64+0xb6/0x230
[  454.339297][ T9308]  do_syscall_64+0xf3/0x230
[  454.343808][ T9308]  ? clear_bhb_loop+0x35/0x90
[  454.348483][ T9308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.354370][ T9308] RIP: 0033:0x7f295c38472c
[  454.358780][ T9308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  454.378388][ T9308] RSP: 002b:00007f295d1ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  454.386798][ T9308] RAX: ffffffffffffffda RBX: 00007f295c575fa0 RCX: 00007f295c38472c
[  454.394775][ T9308] RDX: 000000000000000f RSI: 00007f295d1ea0a0 RDI: 0000000000000004
[  454.402744][ T9308] RBP: 00007f295d1ea090 R08: 0000000000000000 R09: 0000000000000000
[  454.410729][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.418701][ T9308] R13: 0000000000000000 R14: 00007f295c575fa0 R15: 00007fffdc430178
[  454.426768][ T9308]  </TASK>
[  454.925196][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.031110][ T5874] usb 9-1: config 0 has an invalid interface number: 32 but max is 0
[  455.039422][ T5874] usb 9-1: config 0 has no interface number 0
[  455.057339][ T5874] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.452049][ T5874] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.464187][ T5874] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  455.473625][ T5874] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  455.794921][ T5874] usb 9-1: Manufacturer: syz
[  455.803879][ T5874] usb 9-1: config 0 descriptor??
[  456.232999][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.243479][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.017076][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  457.147226][   T29] audit: type=1326 audit(1734145055.649:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9335 comm="syz.7.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cb85d19 code=0x0
[  459.148703][ T9365] program syz.1.735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.094242][ T5874] usbhid 9-1:0.32: can't add hid device: -32
[  461.131338][ T5874] usbhid 9-1:0.32: probe with driver usbhid failed with error -32
[  461.660172][  T973] usb 9-1: USB disconnect, device number 13
[  462.436618][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  462.455172][ T9386] CIFS: VFS: Malformed UNC in devname
[  464.822768][ T9409] binder: 9406:9409 ioctl c0306201 0 returned -14
[  464.870913][ T5904] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  464.940997][  T973] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  465.868517][ T5904] usb 9-1: device descriptor read/64, error -71
[  465.962229][  T973] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.984519][  T973] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  465.999177][  T973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.022794][  T973] usb 10-1: config 0 descriptor??
[  466.030358][  T973] pwc: Askey VC010 type 2 USB webcam detected.
[  466.110947][ T5904] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  467.624060][ T9440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.079012][  T973] pwc: recv_control_msg error -32 req 02 val 2b00
[  468.107194][  T973] pwc: recv_control_msg error -32 req 02 val 2700
[  468.208634][  T973] pwc: recv_control_msg error -32 req 02 val 2c00
[  468.392618][  T973] pwc: recv_control_msg error -32 req 04 val 1000
[  468.399669][  T973] pwc: recv_control_msg error -32 req 04 val 1300
[  468.408015][  T973] pwc: recv_control_msg error -32 req 04 val 1400
[  468.416949][ T9451] netlink: 232 bytes leftover after parsing attributes in process `syz.1.754'.
[  468.426581][  T973] pwc: recv_control_msg error -32 req 02 val 2000
[  468.822033][ T9447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  469.171118][  T973] pwc: recv_control_msg error -71 req 04 val 1500
[  469.178039][  T973] pwc: recv_control_msg error -71 req 02 val 2500
[  469.186770][  T973] pwc: recv_control_msg error -71 req 02 val 2400
[  469.211628][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  469.230012][  T973] pwc: recv_control_msg error -71 req 02 val 2600
[  469.261428][  T973] pwc: recv_control_msg error -71 req 02 val 2900
[  469.278676][  T973] pwc: recv_control_msg error -71 req 02 val 2800
[  469.319575][  T973] pwc: recv_control_msg error -71 req 04 val 1100
[  469.357230][  T973] pwc: recv_control_msg error -71 req 04 val 1200
[  469.394960][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  469.421201][ T5904] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  469.437654][ T5904] usb 2-1: config 0 has no interface number 0
[  469.451183][  T973] pwc: Registered as video103.
[  469.481323][ T5904] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.513609][  T973] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input9
[  469.545621][ T5904] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.602298][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  469.638622][ T5904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  469.659026][  T973] usb 10-1: USB disconnect, device number 9
[  469.750373][ T5904] usb 2-1: Manufacturer: syz
[  469.814181][ T5904] usb 2-1: config 0 descriptor??
[  470.289401][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.854600][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.235629][ T9466] futex_wake_op: syz.9.756 tries to shift op by 144; fix this program
[  471.920581][ T9473] overlayfs: failed to resolve './file0': -2
[  472.221042][  T973] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  472.372272][  T973] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[  472.382837][  T973] usb 6-1: config 5 has no interface number 0
[  472.396882][  T973] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  472.436577][  T973] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  472.448744][    T8] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  472.496530][  T973] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[  472.532480][  T973] usb 6-1: config 5 interface 123 has no altsetting 0
[  472.552550][  T973] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  472.565076][  T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.580354][  T973] usb 6-1: Product: syz
[  472.592926][  T973] usb 6-1: Manufacturer: syz
[  472.610026][  T973] usb 6-1: SerialNumber: syz
[  472.642616][    T8] usb 9-1: Using ep0 maxpacket: 16
[  472.659641][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.686824][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.717825][    T8] usb 9-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  472.738175][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.785224][    T8] usb 9-1: config 0 descriptor??
[  472.817677][ T9486] fuse: Bad value for 'fd'
[  472.936092][ T9475] netlink: 92 bytes leftover after parsing attributes in process `syz.5.755'.
[  473.077255][  T973] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[  473.130193][  T973] usb 6-1: USB disconnect, device number 19
[  473.213892][    T8] glorious 0003:258A:0036.0005: item fetching failed at offset 2/5
[  473.228008][    T8] glorious 0003:258A:0036.0005: probe with driver glorious failed with error -22
[  473.347920][ T5904] usbhid 2-1:0.32: can't add hid device: -71
[  473.417831][  T973] usb 9-1: USB disconnect, device number 16
[  473.434395][ T5904] usbhid 2-1:0.32: probe with driver usbhid failed with error -71
[  473.501787][ T5904] usb 2-1: USB disconnect, device number 18
[  473.515319][ T9497] CIFS: VFS: Malformed UNC in devname
[  474.780934][ T5904] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  475.109706][ T5904] usb 2-1: config 0 has an invalid interface number: 28 but max is 0
[  475.140889][ T5904] usb 2-1: config 0 has no interface number 0
[  475.147054][ T5904] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.258672][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'.
[  475.309670][ T5904] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.371931][ T9510] netlink: 'syz.5.762': attribute type 34 has an invalid length.
[  475.382024][ T5904] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  475.445718][ T9510] Bluetooth: MGMT ver 1.23
[  475.452809][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.507768][ T5904] usb 2-1: config 0 descriptor??
[  475.671145][ T5906] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  475.744315][  T973] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  476.091397][  T973] usb 8-1: device descriptor read/64, error -71
[  476.120205][ T5906] usb 9-1: unable to get BOS descriptor or descriptor too short
[  476.209728][ T5906] usb 9-1: unable to read config index 0 descriptor/start: -71
[  476.217829][ T5906] usb 9-1: can't read configurations, error -71
[  476.750022][  T973] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  476.781814][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'.
[  476.926627][  T973] usb 8-1: device descriptor read/64, error -71
[  477.041304][  T973] usb usb8-port1: attempt power cycle
[  477.790456][ T5904] usb 2-1: USB disconnect, device number 19
[  477.840942][  T973] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  477.861593][  T973] usb 8-1: device descriptor read/8, error -71
[  478.140968][ T9558] netlink: 232 bytes leftover after parsing attributes in process `syz.9.770'.
[  478.181377][  T973] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  478.201821][  T973] usb 8-1: device descriptor read/8, error -71
[  478.323371][  T973] usb usb8-port1: unable to enumerate USB device
[  478.451250][ T5874] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  478.531131][  T973] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  478.631863][ T5874] usb 10-1: Using ep0 maxpacket: 8
[  478.646152][ T5874] usb 10-1: config 0 has an invalid interface number: 32 but max is 0
[  478.655610][ T5874] usb 10-1: config 0 has no interface number 0
[  478.678636][ T5874] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.727947][ T5874] usb 10-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.750107][  T973] usb 2-1: Using ep0 maxpacket: 16
[  478.810004][  T973] usb 2-1: unable to get BOS descriptor or descriptor too short
[  478.811107][ T5874] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  478.821939][  T973] usb 2-1: config 255 has an invalid interface number: 249 but max is 1
[  478.919585][ T5874] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  478.947456][  T973] usb 2-1: config 255 has an invalid interface number: 97 but max is 1
[  478.956069][  T973] usb 2-1: config 255 has no interface number 0
[  478.962484][  T973] usb 2-1: config 255 has no interface number 1
[  478.968791][  T973] usb 2-1: config 255 interface 249 has no altsetting 0
[  478.975948][  T973] usb 2-1: config 255 interface 97 has no altsetting 0
[  478.994706][ T5874] usb 10-1: Manufacturer: syz
[  479.032072][ T5874] usb 10-1: config 0 descriptor??
[  480.077734][  T973] usb 2-1: New USB device found, idVendor=15a4, idProduct=1000, bcdDevice=51.ea
[  480.496150][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.543618][   T29] audit: type=1326 audit(1734145079.039:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.7.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cb85d19 code=0x0
[  480.573114][  T973] usb 2-1: Product: syz
[  480.604605][  T973] usb 2-1: Manufacturer: syz
[  480.649404][  T973] usb 2-1: SerialNumber: syz
[  481.036523][  T973] usb 2-1: USB disconnect, device number 20
[  481.078801][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.141403][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.459895][ T9587] CIFS: VFS: Malformed UNC in devname
[  482.417820][ T5874] usbhid 10-1:0.32: can't add hid device: -71
[  482.466293][ T5874] usbhid 10-1:0.32: probe with driver usbhid failed with error -71
[  482.506703][ T5874] usb 10-1: USB disconnect, device number 10
[  483.511943][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.780'.
[  483.908577][ T9629] FAULT_INJECTION: forcing a failure.
[  483.908577][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.922254][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.5.781 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  483.932868][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  483.942937][ T9629] Call Trace:
[  483.946226][ T9629]  <TASK>
[  483.949175][ T9629]  dump_stack_lvl+0x241/0x360
[  483.953881][ T9629]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.959103][ T9629]  ? __pfx__printk+0x10/0x10
[  483.963734][ T9629]  should_fail_ex+0x3b0/0x4e0
[  483.968435][ T9629]  _copy_to_user+0x31/0xb0
[  483.972871][ T9629]  sctp_getsockopt_assoc_ids+0x2b8/0x350
[  483.978531][ T9629]  sctp_getsockopt+0x67b/0xbb0
[  483.983319][ T9629]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  483.989232][ T9629]  do_sock_getsockopt+0x3c4/0x7e0
[  483.994275][ T9629]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  483.999833][ T9629]  ? __fget_files+0x2a/0x410
[  484.004435][ T9629]  ? __fget_files+0x395/0x410
[  484.009121][ T9629]  ? __fget_files+0x2a/0x410
[  484.013734][ T9629]  __x64_sys_getsockopt+0x2a1/0x370
[  484.018946][ T9629]  ? irqentry_exit+0x63/0x90
[  484.023562][ T9629]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  484.029304][ T9629]  do_syscall_64+0xf3/0x230
[  484.033826][ T9629]  ? clear_bhb_loop+0x35/0x90
[  484.038521][ T9629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.044437][ T9629] RIP: 0033:0x7f8bc9585d19
[  484.048866][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.068492][ T9629] RSP: 002b:00007f8bca355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  484.076934][ T9629] RAX: ffffffffffffffda RBX: 00007f8bc9776160 RCX: 00007f8bc9585d19
[  484.084923][ T9629] RDX: 000000000000001d RSI: 0000000000000084 RDI: 0000000000000003
[  484.092907][ T9629] RBP: 00007f8bca355090 R08: 0000000020000140 R09: 0000000000000000
[  484.101248][ T9629] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  484.109242][ T9629] R13: 0000000000000000 R14: 00007f8bc9776160 R15: 00007ffe03188608
[  484.117233][ T9629]  </TASK>
[  484.968653][    T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  485.141113][    T8] usb 9-1: device descriptor read/64, error -71
[  485.171437][ T5874] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  485.331600][ T5874] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  485.360478][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.374064][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.380963][    T8] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  485.432803][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.442083][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.450505][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.461380][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.470353][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.480703][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.498280][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.510931][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.511087][    T8] usb 9-1: device descriptor read/64, error -71
[  485.559224][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.568465][   T46] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  485.592491][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.621826][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.642463][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.651571][    T8] usb usb9-port1: attempt power cycle
[  485.672198][ T5874] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  485.704816][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[  485.722759][ T5874] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  485.735109][   T46] usb 6-1: Using ep0 maxpacket: 16
[  485.745124][   T46] usb 6-1: unable to get BOS descriptor or descriptor too short
[  485.761403][ T5874] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  485.770024][   T46] usb 6-1: unable to read config index 0 descriptor/start: -71
[  485.787634][ T5874] usb 10-1: Product: syz
[  485.792496][   T46] usb 6-1: can't read configurations, error -71
[  485.799927][ T5874] usb 10-1: Manufacturer: syz
[  485.819400][ T5874] usb 10-1: SerialNumber: syz
[  485.833327][ T5874] usb 10-1: config 0 descriptor??
[  485.862023][ T5874] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  486.020987][    T8] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  486.059378][    T8] usb 9-1: device descriptor read/8, error -71
[  486.067392][ T5906] usb 10-1: USB disconnect, device number 11
[  486.093370][ T5906] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  486.342419][    T8] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  486.393653][    T8] usb 9-1: device descriptor read/8, error -71
[  486.514160][    T8] usb usb9-port1: unable to enumerate USB device
[  487.038853][ T9678] netlink: 232 bytes leftover after parsing attributes in process `syz.8.790'.
[  488.560164][    T8] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  488.750863][    T8] usb 9-1: Using ep0 maxpacket: 8
[  488.758772][    T8] usb 9-1: config 0 has an invalid interface number: 32 but max is 0
[  488.787121][    T8] usb 9-1: config 0 has no interface number 0
[  488.815831][    T8] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.857549][    T8] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.901800][    T8] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  488.911498][    T8] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  488.919529][    T8] usb 9-1: Manufacturer: syz
[  488.949822][ T9705] CIFS: VFS: Malformed UNC in devname
[  489.161934][    T8] usb 9-1: config 0 descriptor??
[  490.168817][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.219176][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.771288][ T5874] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  490.924102][ T5045] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  490.951060][ T5874] usb 6-1: Using ep0 maxpacket: 16
[  490.970083][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short
[  491.003714][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -71
[  491.029253][ T5874] usb 6-1: can't read configurations, error -71
[  491.071423][ T5045] usb 10-1: device descriptor read/64, error -71
[  491.331531][ T5045] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  491.742559][ T5045] usb 10-1: device descriptor read/64, error -71
[  491.904439][ T5045] usb usb10-port1: attempt power cycle
[  493.089764][ T5045] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  493.130960][ T5829] Bluetooth: hci0: unexpected event for opcode 0x002f
[  493.144209][ T5045] usb 10-1: device descriptor read/8, error -71
[  495.300432][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'.
[  495.419047][    T8] usbhid 9-1:0.32: can't add hid device: -32
[  495.426221][    T8] usbhid 9-1:0.32: probe with driver usbhid failed with error -32
[  495.483815][    T8] usb 9-1: USB disconnect, device number 23
[  495.494409][ T9774] 9pnet_virtio: no channels available for device syz
[  496.119337][ T9790] CIFS: VFS: Malformed UNC in devname
[  496.258777][ T9795] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  496.518715][ T9805] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  497.161087][ T5906] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  497.261137][ T5905] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  497.331017][ T5906] usb 6-1: Using ep0 maxpacket: 32
[  497.377195][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  497.427983][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  497.471450][ T5905] usb 8-1: Using ep0 maxpacket: 16
[  497.518635][ T5905] usb 8-1: unable to get BOS descriptor or descriptor too short
[  497.537702][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  497.548342][ T5905] usb 8-1: unable to read config index 0 descriptor/start: -71
[  497.580042][ T5905] usb 8-1: can't read configurations, error -71
[  497.606907][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  497.668963][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  497.680948][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  497.701606][ T9820] netlink: 'syz.1.815': attribute type 32 has an invalid length.
[  497.718435][ T5906] usb 6-1: Product: syz
[  497.722906][ T5906] usb 6-1: Manufacturer: syz
[  497.727540][ T5906] usb 6-1: SerialNumber: syz
[  497.769714][ T5906] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10
[  498.079482][ T5831] usb 6-1: USB disconnect, device number 24
[  498.157154][ T5831] appletouch 6-1:1.0: input: appletouch disconnected
[  498.271224][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  498.481153][ T5906] usb 2-1: device descriptor read/64, error -71
[  498.721089][ T5906] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  498.911149][ T5906] usb 2-1: device descriptor read/64, error -71
[  499.021261][ T5906] usb usb2-port1: attempt power cycle
[  499.154702][ T9844] netlink: 232 bytes leftover after parsing attributes in process `syz.5.820'.
[  499.169227][ T9845] loop2: detected capacity change from 0 to 7
[  499.211383][ T9845] Dev loop2: unable to read RDB block 7
[  499.218978][ T9845]  loop2: unable to read partition table
[  499.227697][ T9845] loop2: partition table beyond EOD, truncated
[  499.238781][ T9845] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  499.865290][ T9856] fuse: Unknown parameter '0xffffffffffffffff'
[  499.991207][   T46] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  500.271372][   T46] usb 6-1: Using ep0 maxpacket: 8
[  500.414420][   T46] usb 6-1: config 0 has an invalid interface number: 32 but max is 0
[  500.435206][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  500.507257][ T5906] usb 2-1: device descriptor read/8, error -71
[  500.550939][   T46] usb 6-1: config 0 has no interface number 0
[  500.557093][   T46] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.592635][   T46] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.669310][ T9867] netlink: 'syz.8.827': attribute type 32 has an invalid length.
[  500.780970][ T5906] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  500.811817][ T5906] usb 2-1: device descriptor read/8, error -71
[  500.919011][   T46] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  500.921338][ T5906] usb usb2-port1: unable to enumerate USB device
[  500.928991][   T46] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  500.942700][   T46] usb 6-1: Manufacturer: syz
[  500.949903][   T46] usb 6-1: config 0 descriptor??
[  501.769003][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.850658][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.900449][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.907959][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  503.541082][   T46] usbhid 6-1:0.32: can't add hid device: -71
[  503.548144][   T46] usbhid 6-1:0.32: probe with driver usbhid failed with error -71
[  504.034484][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.836'.
[  504.043826][ T9912] team_slave_1: Device is already in use.
[  504.071026][   T46] usb 6-1: USB disconnect, device number 25
[  504.251139][   T29] audit: type=1326 audit(1734145102.719:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9915 comm="syz.9.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f295c385d19 code=0x0
[  505.661293][   T46] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  505.716729][ T9937] FAULT_INJECTION: forcing a failure.
[  505.716729][ T9937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.742360][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.9.841 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  505.753009][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  505.763083][ T9937] Call Trace:
[  505.766366][ T9937]  <TASK>
[  505.769301][ T9937]  dump_stack_lvl+0x241/0x360
[  505.773981][ T9937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.779197][ T9937]  ? __pfx__printk+0x10/0x10
[  505.783780][ T9937]  ? __pfx_lock_release+0x10/0x10
[  505.788799][ T9937]  should_fail_ex+0x3b0/0x4e0
[  505.793474][ T9937]  _copy_from_iter+0x1e9/0x1c20
[  505.798320][ T9937]  ? __virt_addr_valid+0x183/0x530
[  505.803429][ T9937]  ? __alloc_skb+0x28f/0x440
[  505.808027][ T9937]  ? __pfx__copy_from_iter+0x10/0x10
[  505.813336][ T9937]  ? __virt_addr_valid+0x183/0x530
[  505.818440][ T9937]  ? __virt_addr_valid+0x183/0x530
[  505.823541][ T9937]  ? __virt_addr_valid+0x45f/0x530
[  505.828638][ T9937]  ? __phys_addr_symbol+0x2f/0x70
[  505.833651][ T9937]  ? __check_object_size+0x47a/0x730
[  505.838926][ T9937]  netlink_sendmsg+0x73d/0xcb0
[  505.843689][ T9937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.848967][ T9937]  ? get_pid_task+0x23/0x1f0
[  505.853556][ T9937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.858827][ T9937]  __sock_sendmsg+0x221/0x270
[  505.863518][ T9937]  sock_write_iter+0x2d7/0x3f0
[  505.868316][ T9937]  ? __pfx_sock_write_iter+0x10/0x10
[  505.873628][ T9937]  ? bpf_lsm_file_permission+0x9/0x10
[  505.878998][ T9937]  ? security_file_permission+0x74/0x280
[  505.884623][ T9937]  vfs_write+0xaeb/0xd30
[  505.888874][ T9937]  ? __pfx_sock_write_iter+0x10/0x10
[  505.894172][ T9937]  ? __pfx_vfs_write+0x10/0x10
[  505.898953][ T9937]  ? __fget_files+0x2a/0x410
[  505.903555][ T9937]  ? __fget_files+0x2a/0x410
[  505.908141][ T9937]  ksys_write+0x18f/0x2b0
[  505.912485][ T9937]  ? __pfx_ksys_write+0x10/0x10
[  505.917351][ T9937]  ? do_syscall_64+0x100/0x230
[  505.922138][ T9937]  ? do_syscall_64+0xb6/0x230
[  505.926828][ T9937]  do_syscall_64+0xf3/0x230
[  505.931346][ T9937]  ? clear_bhb_loop+0x35/0x90
[  505.936032][ T9937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.941929][ T9937] RIP: 0033:0x7f295c385d19
[  505.946344][ T9937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.965946][ T9937] RSP: 002b:00007f295d1c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  505.974361][ T9937] RAX: ffffffffffffffda RBX: 00007f295c576080 RCX: 00007f295c385d19
[  505.982334][ T9937] RDX: 0000000000000014 RSI: 0000000020000100 RDI: 0000000000000003
[  505.990296][ T9937] RBP: 00007f295d1c9090 R08: 0000000000000000 R09: 0000000000000000
[  505.998260][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.006225][ T9937] R13: 0000000000000001 R14: 00007f295c576080 R15: 00007fffdc430178
[  506.014212][ T9937]  </TASK>
[  506.018871][ T5831] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  506.132880][   T46] usb 6-1: Using ep0 maxpacket: 16
[  506.170900][ T5831] usb 9-1: device descriptor read/64, error -71
[  506.265074][   T46] usb 6-1: unable to get BOS descriptor or descriptor too short
[  506.273854][   T46] usb 6-1: unable to read config index 0 descriptor/start: -71
[  506.284131][   T46] usb 6-1: can't read configurations, error -71
[  506.421541][ T5831] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  506.561527][ T5831] usb 9-1: device descriptor read/64, error -71
[  506.678048][ T5831] usb usb9-port1: attempt power cycle
[  507.190393][ T9949] netlink: 232 bytes leftover after parsing attributes in process `syz.7.844'.
[  507.251558][ T5831] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  507.318561][ T5831] usb 9-1: device descriptor read/8, error -71
[  507.583632][ T5831] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  507.663884][ T5831] usb 9-1: device descriptor read/8, error -71
[  508.208847][ T5831] usb usb9-port1: unable to enumerate USB device
[  508.352659][   T46] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  508.490951][ T5831] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  508.650969][   T46] usb 8-1: Using ep0 maxpacket: 8
[  508.657770][   T46] usb 8-1: config 0 has an invalid interface number: 32 but max is 0
[  508.676289][   T46] usb 8-1: config 0 has no interface number 0
[  508.702507][ T9980] fuse: Bad value for 'rootmode'
[  508.718179][   T46] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.762604][   T46] usb 8-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.837194][   T46] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  508.862903][   T29] audit: type=1326 audit(1734145107.369:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9982 comm="syz.5.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc9585d19 code=0x0
[  508.877432][   T46] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  508.951010][   T46] usb 8-1: Manufacturer: syz
[  508.967760][   T46] usb 8-1: config 0 descriptor??
[  509.514520][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.590632][T10002] : renamed from hsr_slave_0 (while UP)
[  509.591243][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.905891][   T46] usbhid 8-1:0.32: can't add hid device: -71
[  511.913991][   T46] usbhid 8-1:0.32: probe with driver usbhid failed with error -71
[  512.155607][   T46] usb 8-1: USB disconnect, device number 14
[  513.355462][ T5045] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  513.510978][ T5045] usb 6-1: device descriptor read/64, error -71
[  513.855348][   T29] audit: type=1326 audit(1734145112.359:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10047 comm="syz.8.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x0
[  514.446366][ T5045] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  515.041103][ T5045] usb 6-1: device descriptor read/64, error -71
[  515.167223][ T5045] usb usb6-port1: attempt power cycle
[  516.786640][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  516.977230][T10083] netlink: 232 bytes leftover after parsing attributes in process `syz.5.870'.
[  517.312329][T10086] netlink: 'syz.7.871': attribute type 32 has an invalid length.
[  518.040938][ T5045] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  518.066578][ T5045] usb 6-1: Using ep0 maxpacket: 8
[  518.081130][ T5045] usb 6-1: config 0 has an invalid interface number: 32 but max is 0
[  518.092554][ T5045] usb 6-1: config 0 has no interface number 0
[  518.098703][ T5045] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.342072][ T5045] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.356448][ T5045] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  518.476775][T10091] netlink: 64 bytes leftover after parsing attributes in process `syz.7.872'.
[  518.511007][ T5906] usb 2-1: Using ep0 maxpacket: 32
[  518.576222][T10093] netlink: 172 bytes leftover after parsing attributes in process `syz.7.872'.
[  518.861509][ T5905] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  519.034109][ T5045] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  519.035505][ T5905] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  519.042319][ T5045] usb 6-1: Manufacturer: syz
[  519.070959][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.079018][ T5905] usb 8-1: Product: syz
[  519.083728][ T5905] usb 8-1: Manufacturer: syz
[  519.088358][ T5905] usb 8-1: SerialNumber: syz
[  519.105348][ T5905] usb 8-1: config 0 descriptor??
[  519.123760][ T5905] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  519.176758][ T5045] usb 6-1: config 0 descriptor??
[  519.673501][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.731656][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.734943][T10097] veth1_to_team: entered promiscuous mode
[  519.820558][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short
[  519.867560][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -71
[  519.876148][ T5906] usb 2-1: can't read configurations, error -71
[  519.997131][T10101] loop2: detected capacity change from 0 to 7
[  520.020678][T10101] Dev loop2: unable to read RDB block 7
[  520.027245][T10101]  loop2: unable to read partition table
[  520.044647][T10101] loop2: partition table beyond EOD, truncated
[  520.059019][T10101] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  520.081333][ T5905] gspca_sunplus: reg_r err -110
[  520.086305][ T5905] sunplus 8-1:0.0: probe with driver sunplus failed with error -110
[  520.242297][ T5906] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  520.421142][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  520.430359][   T29] audit: type=1326 audit(1734145118.929:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10102 comm="syz.8.877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x0
[  520.436080][ T5906] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  520.469286][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.501997][ T5906] usb 2-1: Product: syz
[  520.517689][ T5906] usb 2-1: Manufacturer: syz
[  520.544296][ T5906] usb 2-1: SerialNumber: syz
[  520.581976][ T5906] r8152-cfgselector 2-1: Unknown version 0x0000
[  520.603949][ T5906] r8152-cfgselector 2-1: config 0 descriptor??
[  520.969478][ T5906] usb 8-1: USB disconnect, device number 15
[  521.108665][ T5045] usbhid 6-1:0.32: can't add hid device: -71
[  521.121046][ T5045] usbhid 6-1:0.32: probe with driver usbhid failed with error -71
[  521.140604][ T5905] r8152-cfgselector 2-1: USB disconnect, device number 26
[  521.159858][ T5045] usb 6-1: USB disconnect, device number 30
[  521.470870][ T5906] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  521.620743][T10114] fuse: Unknown parameter 'use00000000000000000000'
[  521.661087][ T5906] usb 8-1: device descriptor read/64, error -71
[  521.988467][ T5906] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  523.157458][ T5906] usb 8-1: device descriptor read/64, error -71
[  523.281734][ T5906] usb usb8-port1: attempt power cycle
[  523.614328][ T5829] Bluetooth: Wrong link type (-22)
[  523.681077][ T5906] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  523.721388][ T5906] usb 8-1: device descriptor read/8, error -71
[  524.921103][   T29] audit: type=1326 audit(1734145123.419:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10133 comm="syz.7.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd6cb85d19 code=0x0
[  526.089612][T10180] netlink: 232 bytes leftover after parsing attributes in process `syz.5.891'.
[  526.781993][T10126] sched: DL replenish lagged too much
[  529.282447][T10322] fuse: Unknown parameter 'use00000000000000000000'
[  529.533792][T10329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  529.544647][T10329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  529.569324][T10329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  529.577810][T10329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  529.588448][T10329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  529.597140][T10329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  530.036965][   T29] audit: type=1804 audit(1734145128.539:50): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.896" name="/newroot/138/bus/bus" dev="overlay" ino=778 res=1 errno=0
[  530.330624][T10327] chnl_net:caif_netlink_parms(): no params data found
[  530.440922][ T5904] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  530.632487][T10351] netlink: 'syz.1.898': attribute type 10 has an invalid length.
[  530.641935][ T5904] usb 8-1: device descriptor read/64, error -71
[  530.727254][T10356] netlink: 'syz.1.898': attribute type 10 has an invalid length.
[  530.890948][ T5904] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  531.032891][ T5904] usb 8-1: device descriptor read/64, error -71
[  531.056899][ T6657] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.177523][ T5904] usb usb8-port1: attempt power cycle
[  531.185100][T10327] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.194742][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.215031][T10327] bridge_slave_0: entered allmulticast mode
[  531.257812][T10327] bridge_slave_0: entered promiscuous mode
[  531.333298][ T6657] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.488317][T10327] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.510988][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.570932][ T5904] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  531.667682][T10327] bridge_slave_1: entered allmulticast mode
[  531.675814][ T5904] usb 8-1: device descriptor read/8, error -71
[  531.691073][T10327] bridge_slave_1: entered promiscuous mode
[  531.700998][T10329] Bluetooth: hci5: command tx timeout
[  531.921086][ T5904] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  531.971684][ T5904] usb 8-1: device descriptor read/8, error -71
[  533.012078][ T5904] usb usb8-port1: unable to enumerate USB device
[  533.952180][T10375] netlink: 232 bytes leftover after parsing attributes in process `syz.1.904'.
[  534.012801][T10329] Bluetooth: hci5: command tx timeout
[  534.242916][T10382] fuse: Unknown parameter 'use00000000000000000000'
[  534.298429][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  534.367357][ T6657] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.384589][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  534.395340][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  534.404060][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  534.415096][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  534.430481][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  534.693832][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.709886][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.763979][   T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  534.810724][ T6657] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.951988][   T46] usb 2-1: Using ep0 maxpacket: 8
[  534.960631][   T46] usb 2-1: config 0 has an invalid interface number: 32 but max is 0
[  534.969683][T10327] team0: Port device team_slave_0 added
[  534.980508][   T46] usb 2-1: config 0 has no interface number 0
[  535.370593][   T46] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.381894][   T46] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.393427][   T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  535.411385][   T46] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  535.419440][   T46] usb 2-1: Manufacturer: syz
[  535.451031][ T5045] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  535.486408][T10327] team0: Port device team_slave_1 added
[  535.534972][   T46] usb 2-1: config 0 descriptor??
[  535.660740][ T6657] bridge_slave_1: left allmulticast mode
[  535.669977][ T6657] bridge_slave_1: left promiscuous mode
[  535.681267][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.706414][ T6657] bridge_slave_0: left allmulticast mode
[  535.733419][ T6657] bridge_slave_0: left promiscuous mode
[  535.747266][ T5045] usb 8-1: too many configurations: 72, using maximum allowed: 8
[  535.747332][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.777967][ T5045] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  535.787343][ T5045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.822151][ T5045] usb 8-1: config 0 descriptor??
[  536.028756][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.042326][ T5829] Bluetooth: hci5: command tx timeout
[  536.109310][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.349182][T10410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  536.427645][T10411] No such timeout policy "syz1"
[  536.526702][ T5829] Bluetooth: hci2: command tx timeout
[  536.830679][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.843420][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.854635][ T6657] bond0 (unregistering): Released all slaves
[  536.861427][ T5045] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  536.930992][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.960574][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.010249][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.057173][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.071679][ T5045] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  537.084518][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.111707][ T5045] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  537.133647][ T5045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  537.147901][ T5045] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  537.156967][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.174860][ T5045] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  537.205313][ T5045] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  537.227174][ T5045] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.256611][ T5045] usb 9-1: config 0 descriptor??
[  537.273179][T10410] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  537.465149][T10327] hsr_slave_0: entered promiscuous mode
[  537.490746][T10327] hsr_slave_1: entered promiscuous mode
[  537.507033][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.519761][T10327] Cannot create hsr debugfs directory
[  537.614275][ T6657] hsr_slave_0: left promiscuous mode
[  537.629346][ T6657] hsr_slave_1: left promiscuous mode
[  537.638438][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.651156][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.665976][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.673674][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.748496][ T6657] veth1_macvtap: left promiscuous mode
[  537.754315][ T6657] veth0_macvtap: left promiscuous mode
[  537.760220][ T6657] veth1_vlan: left promiscuous mode
[  537.773441][ T6657] veth0_vlan: left promiscuous mode
[  537.790120][ T5045] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  537.798605][ T5831] usb 8-1: USB disconnect, device number 24
[  537.810313][ T5045] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  537.826851][ T5045] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  537.916995][   T46] usbhid 2-1:0.32: can't add hid device: -71
[  537.930281][   T46] usbhid 2-1:0.32: probe with driver usbhid failed with error -71
[  537.968190][   T46] usb 2-1: USB disconnect, device number 27
[  538.027629][T10432] fuse: Unknown parameter '0x0000000000000004'
[  538.124687][ T5829] Bluetooth: hci5: command tx timeout
[  538.601404][   T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  538.620441][ T5829] Bluetooth: hci2: command tx timeout
[  538.730881][   T46] usb 2-1: device descriptor read/64, error -71
[  538.828837][ T6657] team0 (unregistering): Port device team_slave_0 removed
[  538.972633][   T46] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  539.291012][ T5831] usb 9-1: reset high-speed USB device number 29 using dummy_hcd
[  539.299383][   T46] usb 2-1: device descriptor read/64, error -71
[  539.449088][   T46] usb usb2-port1: attempt power cycle
[  539.919033][   T46] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  539.974978][   T46] usb 2-1: device descriptor read/8, error -71
[  540.240928][   T46] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  540.291898][   T46] usb 2-1: device descriptor read/8, error -71
[  540.422650][   T46] usb usb2-port1: unable to enumerate USB device
[  540.424602][T10376] chnl_net:caif_netlink_parms(): no params data found
[  540.692016][ T5829] Bluetooth: hci2: command tx timeout
[  541.357424][ T5873] usb 9-1: USB disconnect, device number 29
[  541.570977][T10463] netlink: 'syz.1.918': attribute type 32 has an invalid length.
[  541.868282][T10376] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.878093][T10376] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.887306][T10376] bridge_slave_0: entered allmulticast mode
[  541.894996][T10376] bridge_slave_0: entered promiscuous mode
[  541.925174][T10376] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.943060][T10376] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.950416][T10376] bridge_slave_1: entered allmulticast mode
[  541.958890][T10376] bridge_slave_1: entered promiscuous mode
[  542.760942][ T5829] Bluetooth: hci2: command tx timeout
[  543.010597][T10376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.048798][T10376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.094427][T10376] team0: Port device team_slave_0 added
[  543.179044][T10376] team0: Port device team_slave_1 added
[  543.228066][T10476] netlink: 'syz.1.920': attribute type 32 has an invalid length.
[  543.845669][ T6657] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.978196][T10376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.988218][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.086414][T10376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.186186][ T6657] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.476684][T10376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.509703][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.535707][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.553777][T10376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.595004][ T6657] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.358945][ T6657] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.467789][T10523] FAULT_INJECTION: forcing a failure.
[  545.467789][T10523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  545.481287][T10523] CPU: 0 UID: 0 PID: 10523 Comm: syz.1.925 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  545.491995][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  545.502160][T10523] Call Trace:
[  545.505454][T10523]  <TASK>
[  545.508395][T10523]  dump_stack_lvl+0x241/0x360
[  545.513104][T10523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.518322][T10523]  ? __pfx__printk+0x10/0x10
[  545.522938][T10523]  ? __pfx_lock_release+0x10/0x10
[  545.527984][T10523]  should_fail_ex+0x3b0/0x4e0
[  545.532775][T10523]  _copy_from_user+0x2f/0xc0
[  545.537408][T10523]  copy_msghdr_from_user+0xae/0x680
[  545.542645][T10523]  ? finish_task_switch+0x1e5/0x870
[  545.547874][T10523]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  545.553702][T10523]  ? __fget_files+0x2a/0x410
[  545.558310][T10523]  ? __fget_files+0x2a/0x410
[  545.562921][T10523]  __sys_sendmsg+0x209/0x350
[  545.567540][T10523]  ? __pfx___sys_sendmsg+0x10/0x10
[  545.572693][T10523]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  545.579061][T10523]  do_syscall_64+0xf3/0x230
[  545.583609][T10523]  ? clear_bhb_loop+0x35/0x90
[  545.588329][T10523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.594262][T10523] RIP: 0033:0x7f70f9f85d19
[  545.598697][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.618331][T10523] RSP: 002b:00007f70f7db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.626776][T10523] RAX: ffffffffffffffda RBX: 00007f70fa176160 RCX: 00007f70f9f85d19
[  545.634767][T10523] RDX: 0000000000000000 RSI: 0000000020000bc0 RDI: 0000000000000003
[  545.642752][T10523] RBP: 00007f70f7db4090 R08: 0000000000000000 R09: 0000000000000000
[  545.650734][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  545.658716][T10523] R13: 0000000000000000 R14: 00007f70fa176160 R15: 00007ffd67240e28
[  545.666719][T10523]  </TASK>
[  545.669767][    C0] vkms_vblank_simulate: vblank timer overrun
[  545.941366][T10376] hsr_slave_0: entered promiscuous mode
[  545.951528][T10376] hsr_slave_1: entered promiscuous mode
[  545.960207][T10376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.983169][T10376] Cannot create hsr debugfs directory
[  546.141297][ T5905] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  546.287600][T10327] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  546.425117][ T5905] usb 8-1: device descriptor read/64, error -71
[  546.526629][T10327] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  546.546312][T10327] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  546.614497][T10327] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  546.681126][ T5905] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  547.087647][ T6657] bridge_slave_1: left allmulticast mode
[  547.096591][ T5905] usb 8-1: device descriptor read/64, error -71
[  547.113530][ T6657] bridge_slave_1: left promiscuous mode
[  547.184244][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.264885][ T6657] bridge_slave_0: left allmulticast mode
[  547.267222][ T5905] usb usb8-port1: attempt power cycle
[  547.276131][ T6657] bridge_slave_0: left promiscuous mode
[  547.276395][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.661052][ T5905] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  547.692062][ T5905] usb 8-1: device descriptor read/8, error -71
[  547.973331][ T5905] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  548.034260][ T5905] usb 8-1: device descriptor read/8, error -71
[  548.161383][ T5905] usb usb8-port1: unable to enumerate USB device
[  548.621297][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.661645][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.684198][ T6657] bond0 (unregistering): Released all slaves
[  548.811188][ T5905] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  549.010920][ T5905] usb 8-1: Using ep0 maxpacket: 8
[  549.027842][ T5905] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  549.055444][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.082901][ T5905] usb 8-1: Product: syz
[  549.091435][ T5905] usb 8-1: Manufacturer: syz
[  549.103683][ T5905] usb 8-1: SerialNumber: syz
[  549.151778][ T5905] usb 8-1: config 0 descriptor??
[  550.496846][ T5905] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  550.986004][T10577] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[  551.267156][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.446431][T10584] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  551.476044][T10584] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98
[  551.769730][ T6657] : left promiscuous mode
[  551.814413][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.952978][ T6657] hsr_slave_1: left promiscuous mode
[  551.981300][ T5905] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  552.022479][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.047731][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.091852][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.113084][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.218516][ T6657] veth1_macvtap: left promiscuous mode
[  552.254087][ T6657] veth0_macvtap: left promiscuous mode
[  552.260398][ T6657] veth1_vlan: left promiscuous mode
[  552.265912][ T6657] veth0_vlan: left promiscuous mode
[  553.453689][ T5875] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  553.761083][ T5875] usb 9-1: Using ep0 maxpacket: 32
[  553.854403][ T5875] usb 9-1: config 0 interface 0 has no altsetting 0
[  553.918588][ T5875] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  554.030952][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.057757][   T46] usb 8-1: USB disconnect, device number 29
[  554.084970][ T5875] usb 9-1: config 0 descriptor??
[  554.397661][ T6657] team0 (unregistering): Port device team_slave_1 removed
[  554.455211][ T6657] team0 (unregistering): Port device team_slave_0 removed
[  554.586663][ T5875] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0935.0008/input/input12
[  554.671397][ T5875] uclogic 0003:28BD:0935.0008: input,hidraw0: USB HID vb.51 Mouse [HID 28bd:0935] on usb-dummy_hcd.8-1/input0
[  554.955888][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.964746][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.975018][   T46] hid (null): unknown global tag 0xd
[  554.980680][   T46] hid (null): invalid report_count -437012996
[  555.024688][   T46] hid (null): unknown global tag 0xd
[  555.084113][   T46] hid-generic 0081:0000:0006.0009: unexpected long global item
[  555.108857][   T46] hid-generic 0081:0000:0006.0009: probe with driver hid-generic failed with error -22
[  556.166489][   T46] usb 9-1: USB disconnect, device number 30
[  556.230323][T10327] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.304519][T10327] 8021q: adding VLAN 0 to HW filter on device team0
[  556.387234][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.394447][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.449622][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.456830][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.481896][T10376] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  557.541155][T10376] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  557.566470][T10376] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  557.629631][T10376] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  558.889655][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  558.969904][T10376] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.009264][T10376] 8021q: adding VLAN 0 to HW filter on device team0
[  559.188874][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.196060][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.243980][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.251204][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.863318][T10327] veth0_vlan: entered promiscuous mode
[  560.012303][T10327] veth1_vlan: entered promiscuous mode
[  560.077056][T10376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  560.140161][T10327] veth0_macvtap: entered promiscuous mode
[  560.176071][T10327] veth1_macvtap: entered promiscuous mode
[  560.208545][T10666] xt_CT: No such helper "pptp"
[  560.231634][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.281128][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.298417][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.328279][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.363224][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.386639][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.429147][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.454819][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.611984][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.670188][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.723423][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.780322][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  560.836215][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.899251][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.977494][T10327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.994714][T10327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.008794][T10327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.030909][T10327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.197857][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.222706][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.302710][T10376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.344963][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.378317][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.433450][T10376] veth0_vlan: entered promiscuous mode
[  561.482063][T10376] veth1_vlan: entered promiscuous mode
[  561.570519][T10376] veth0_macvtap: entered promiscuous mode
[  561.595646][T10376] veth1_macvtap: entered promiscuous mode
[  561.626014][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.657865][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.678064][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.709537][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.738584][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.759448][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.790305][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.811228][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.841110][ T5875] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  561.841155][T10376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.868501][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.879533][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.931214][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.961187][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.980888][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.010332][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.044572][T10376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.067168][T10376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.090570][T10376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.135685][T10376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.149502][T10376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.180631][T10376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.201018][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  562.205643][T10376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.211196][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  562.269472][ T5875] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  562.286046][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  562.301398][ T5875] usb 1-1: SerialNumber: syz
[  562.330634][T10692] netlink: 32 bytes leftover after parsing attributes in process `syz.8.955'.
[  562.515717][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.529349][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.534216][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.544640][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.575475][ T5875] usb 1-1: 0:2 : does not exist
[  562.580437][ T5875] usb 1-1: unit 5 not found!
[  562.654617][ T5875] usb 1-1: USB disconnect, device number 3
[  563.426647][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  563.455024][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  565.822849][  T973] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  566.082690][  T973] usb 1-1: Using ep0 maxpacket: 32
[  566.093500][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.116771][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.155819][  T973] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  566.206249][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.248132][  T973] usb 1-1: config 0 descriptor??
[  567.041814][T10741] FAULT_INJECTION: forcing a failure.
[  567.041814][T10741] name failslab, interval 1, probability 0, space 0, times 0
[  567.283300][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.3.968 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  567.294053][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  567.304147][T10741] Call Trace:
[  567.307470][T10741]  <TASK>
[  567.310432][T10741]  dump_stack_lvl+0x241/0x360
[  567.315162][T10741]  ? __pfx_dump_stack_lvl+0x10/0x10
[  567.320406][T10741]  ? __pfx__printk+0x10/0x10
[  567.325055][T10741]  ? __kmalloc_noprof+0xb5/0x4c0
[  567.330024][T10741]  ? __pfx___might_resched+0x10/0x10
[  567.335347][T10741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.341451][T10741]  should_fail_ex+0x3b0/0x4e0
[  567.346180][T10741]  should_failslab+0xac/0x100
[  567.350900][T10741]  __kmalloc_noprof+0xdd/0x4c0
[  567.355684][T10741]  ? copy_splice_read+0x18d/0xb60
[  567.360751][T10741]  copy_splice_read+0x18d/0xb60
[  567.365635][T10741]  ? __asan_memset+0x23/0x50
[  567.370267][T10741]  ? __pfx_copy_splice_read+0x10/0x10
[  567.375680][T10741]  ? __raw_spin_lock_init+0x45/0x100
[  567.381010][T10741]  ? alloc_pipe_info+0x370/0x4d0
[  567.385989][T10741]  splice_direct_to_actor+0x4fa/0xc80
[  567.391421][T10741]  ? __pfx_direct_splice_actor+0x10/0x10
[  567.397080][T10741]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  567.402993][T10741]  ? __fget_files+0x2a/0x410
[  567.407603][T10741]  ? __pfx_lock_release+0x10/0x10
[  567.412641][T10741]  do_splice_direct+0x289/0x3e0
[  567.417512][T10741]  ? __pfx_do_splice_direct+0x10/0x10
[  567.422905][T10741]  ? __fget_files+0x2a/0x410
[  567.427528][T10741]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  567.433443][T10741]  ? bpf_lsm_file_permission+0x9/0x10
[  567.438828][T10741]  ? security_file_permission+0x74/0x280
[  567.444468][T10741]  ? rw_verify_area+0x1c3/0x6f0
[  567.449322][T10741]  do_sendfile+0x564/0x8a0
[  567.453764][T10741]  ? __pfx_do_sendfile+0x10/0x10
[  567.458729][T10741]  ? __fget_files+0x2a/0x410
[  567.463341][T10741]  __se_sys_sendfile64+0x17c/0x1e0
[  567.468471][T10741]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  567.474115][T10741]  ? do_syscall_64+0x100/0x230
[  567.478894][T10741]  ? do_syscall_64+0xb6/0x230
[  567.483574][T10741]  do_syscall_64+0xf3/0x230
[  567.488089][T10741]  ? clear_bhb_loop+0x35/0x90
[  567.492804][T10741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.498698][T10741] RIP: 0033:0x7f6dc9585d19
[  567.503108][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  567.522724][T10741] RSP: 002b:00007f6dc73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  567.531145][T10741] RAX: ffffffffffffffda RBX: 00007f6dc9775fa0 RCX: 00007f6dc9585d19
[  567.539118][T10741] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009
[  567.547117][T10741] RBP: 00007f6dc73f6090 R08: 0000000000000000 R09: 0000000000000000
[  567.555089][T10741] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001
[  567.563064][T10741] R13: 0000000000000000 R14: 00007f6dc9775fa0 R15: 00007fff6b159218
[  567.571042][T10741]  </TASK>
[  569.366063][T10756] fuse: Unknown parameter 'user_id00000000000000000000'
[  569.660954][  T973] usbhid 1-1:0.0: can't add hid device: -71
[  569.668366][  T973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  569.712271][  T973] usb 1-1: USB disconnect, device number 4
[  573.641092][   T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  573.810884][   T46] usb 4-1: Using ep0 maxpacket: 16
[  573.898552][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  574.825853][   T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  574.835039][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.844067][   T46] usb 4-1: Product: syz
[  574.848268][   T46] usb 4-1: Manufacturer: syz
[  574.853978][   T46] usb 4-1: SerialNumber: syz
[  574.900322][   T46] usb 4-1: config 0 descriptor??
[  574.974658][   T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  575.002317][   T46] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  575.427124][T10829] loop2: detected capacity change from 0 to 7
[  575.447432][T10829] Dev loop2: unable to read RDB block 7
[  575.453453][T10829]  loop2: unable to read partition table
[  575.459600][T10829] loop2: partition table beyond EOD, truncated
[  575.466188][T10829] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  575.581842][   T46] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  576.840525][   T46] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  576.980912][   T46] em28xx 4-1:0.0: board has no eeprom
[  577.771492][   T46] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  577.789642][   T46] em28xx 4-1:0.0: dvb set to bulk mode.
[  577.807866][ T5872] em28xx 4-1:0.0: Binding DVB extension
[  577.834404][   T46] usb 4-1: USB disconnect, device number 3
[  577.901594][   T46] em28xx 4-1:0.0: Disconnecting em28xx
[  578.079755][ T5872] em28xx 4-1:0.0: Registering input extension
[  578.407116][   T46] em28xx 4-1:0.0: Closing input extension
[  578.434823][   T46] em28xx 4-1:0.0: Freeing device
[  579.769974][T10897] loop2: detected capacity change from 0 to 7
[  579.805613][T10897] Dev loop2: unable to read RDB block 7
[  579.855467][T10897]  loop2: unable to read partition table
[  579.908005][T10897] loop2: partition table beyond EOD, truncated
[  579.980891][T10897] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  584.149221][T10942] 9pnet_fd: Insufficient options for proto=fd
[  589.681379][T10985] loop2: detected capacity change from 0 to 7
[  589.689861][T10985] Dev loop2: unable to read RDB block 7
[  589.709521][T10985]  loop2: unable to read partition table
[  589.720057][T10985] loop2: partition table beyond EOD, truncated
[  589.728318][T10985] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  590.030908][   T46] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  590.191941][   T46] usb 8-1: Using ep0 maxpacket: 8
[  590.224276][   T46] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  590.250919][   T46] usb 8-1: config 0 has no interface number 0
[  590.348456][   T46] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  590.761799][   T46] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  590.821005][   T46] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  590.830110][   T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.903107][   T46] usb 8-1: config 0 descriptor??
[  590.933903][   T46] hso 8-1:0.1: Failed to find BULK IN ep
[  591.340043][T11035] evm: overlay not supported
[  591.371474][  T973] usb 8-1: USB disconnect, device number 30
[  591.857832][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1027'.
[  591.880392][T11037] netlink: 'syz.3.1027': attribute type 1 has an invalid length.
[  591.896514][T11037] netlink: 'syz.3.1027': attribute type 2 has an invalid length.
[  591.904536][T11037] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1027'.
[  592.070741][T10329] Bluetooth: hci3: sending frame failed (-49)
[  592.092872][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  592.486287][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'.
[  592.945630][T11059] netlink: 'syz.0.1033': attribute type 34 has an invalid length.
[  595.085145][T11102] hub 2-0:1.0: USB hub found
[  595.096351][T11102] hub 2-0:1.0: 1 port detected
[  595.571185][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  595.741828][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  595.771213][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55
[  595.812963][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.844376][ T5906] usb 4-1: config 0 descriptor??
[  595.881954][ T5906] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  595.900358][ T5906] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  595.994896][T11118] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[  596.001475][T11118] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  596.038424][T11118] vhci_hcd vhci_hcd.0: Device attached
[  596.089826][ T5906] usb 4-1: USB disconnect, device number 4
[  596.112255][T11121] vhci_hcd: connection closed
[  596.113703][   T52] vhci_hcd: stop threads
[  596.126812][ T5829] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  596.142576][   T52] vhci_hcd: release socket
[  596.147299][   T52] vhci_hcd: disconnect device
[  596.182454][T11126] loop2: detected capacity change from 0 to 7
[  596.203019][T11126] Dev loop2: unable to read RDB block 7
[  596.209011][T11126]  loop2: unable to read partition table
[  596.215115][T11126] loop2: partition table beyond EOD, truncated
[  596.241405][T11126] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  600.828559][  T973] libceph: connect (1)[c::]:6789 error -101
[  601.030831][T11198] FAULT_INJECTION: forcing a failure.
[  601.030831][T11198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.044051][T11198] CPU: 1 UID: 0 PID: 11198 Comm: syz.7.1060 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  601.054837][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  601.064907][T11198] Call Trace:
[  601.068204][T11198]  <TASK>
[  601.071153][T11198]  dump_stack_lvl+0x241/0x360
[  601.075866][T11198]  ? __pfx_dump_stack_lvl+0x10/0x10
[  601.081083][T11198]  ? __pfx__printk+0x10/0x10
[  601.085705][T11198]  ? snprintf+0xda/0x120
[  601.089964][T11198]  should_fail_ex+0x3b0/0x4e0
[  601.094674][T11198]  _copy_to_user+0x31/0xb0
[  601.099110][T11198]  simple_read_from_buffer+0xca/0x150
[  601.104516][T11198]  proc_fail_nth_read+0x1e9/0x250
[  601.109568][T11198]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  601.115137][T11198]  ? rw_verify_area+0x55e/0x6f0
[  601.120009][T11198]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  601.125575][T11198]  vfs_read+0x1fc/0xb70
[  601.129757][T11198]  ? __pfx___mutex_lock+0x10/0x10
[  601.134804][T11198]  ? __pfx_vfs_read+0x10/0x10
[  601.139499][T11198]  ? __rcu_read_unlock+0xa1/0x110
[  601.144537][T11198]  ? __fget_files+0x2a/0x410
[  601.149142][T11198]  ? __fget_files+0x395/0x410
[  601.153833][T11198]  ? __fget_files+0x2a/0x410
[  601.158448][T11198]  ksys_read+0x18f/0x2b0
[  601.162712][T11198]  ? __pfx_ksys_read+0x10/0x10
[  601.167494][T11198]  ? do_syscall_64+0x100/0x230
[  601.172279][T11198]  ? do_syscall_64+0xb6/0x230
[  601.176978][T11198]  do_syscall_64+0xf3/0x230
[  601.181507][T11198]  ? clear_bhb_loop+0x35/0x90
[  601.186206][T11198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.192119][T11198] RIP: 0033:0x7fcd6cb8472c
[  601.196544][T11198] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  601.216179][T11198] RSP: 002b:00007fcd6da2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  601.224619][T11198] RAX: ffffffffffffffda RBX: 00007fcd6cd76160 RCX: 00007fcd6cb8472c
[  601.232612][T11198] RDX: 000000000000000f RSI: 00007fcd6da2e0a0 RDI: 000000000000000a
[  601.240598][T11198] RBP: 00007fcd6da2e090 R08: 0000000000000000 R09: 0000000000000000
[  601.248584][T11198] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001
[  601.256569][T11198] R13: 0000000000000000 R14: 00007fcd6cd76160 R15: 00007ffe144af0e8
[  601.264583][T11198]  </TASK>
[  601.353696][  T973] libceph: mon0 (1)[c::]:6789 connect error
[  601.369782][T11185] ceph: No mds server is up or the cluster is laggy
[  601.382270][  T973] libceph: connect (1)[c::]:6789 error -101
[  601.388396][  T973] libceph: mon0 (1)[c::]:6789 connect error
[  601.422188][T11200] syz.7.1061: attempt to access beyond end of device
[  601.422188][T11200] nbd7: rw=0, sector=16, nr_sectors = 1 limit=0
[  601.477660][T11200] qnx6: unable to read the first superblock
[  601.553390][T11200] syz.7.1061: attempt to access beyond end of device
[  601.553390][T11200] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  601.671226][T11200] qnx6: unable to read the first superblock
[  601.724249][T11200] qnx6: unable to read the first superblock
[  603.233888][T11223] FAULT_INJECTION: forcing a failure.
[  603.233888][T11223] name failslab, interval 1, probability 0, space 0, times 0
[  603.430295][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.0.1064 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  603.441132][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  603.451216][T11223] Call Trace:
[  603.454511][T11223]  <TASK>
[  603.457459][T11223]  dump_stack_lvl+0x241/0x360
[  603.462171][T11223]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.467415][T11223]  ? __pfx__printk+0x10/0x10
[  603.472038][T11223]  ? kmem_cache_alloc_noprof+0x48/0x380
[  603.477614][T11223]  ? __pfx___might_resched+0x10/0x10
[  603.482941][T11223]  should_fail_ex+0x3b0/0x4e0
[  603.487650][T11223]  should_failslab+0xac/0x100
[  603.492350][T11223]  ? mas_alloc_nodes+0x25b/0x7e0
[  603.497304][T11223]  kmem_cache_alloc_noprof+0x70/0x380
[  603.502703][T11223]  mas_alloc_nodes+0x25b/0x7e0
[  603.507495][T11223]  mas_preallocate+0x575/0x8d0
[  603.512283][T11223]  ? __pfx_mas_preallocate+0x10/0x10
[  603.517597][T11223]  ? __mas_set_range+0x133/0x3c0
[  603.522555][T11223]  __split_vma+0x302/0xc50
[  603.526993][T11223]  ? ima_match_policy+0x111/0x2230
[  603.532136][T11223]  ? __pfx___split_vma+0x10/0x10
[  603.537095][T11223]  ? __pfx_validate_chain+0x10/0x10
[  603.542316][T11223]  ? __pfx_up_write+0x10/0x10
[  603.547040][T11223]  ? ima_get_action+0x75/0xb0
[  603.551775][T11223]  vms_gather_munmap_vmas+0x2e6/0x1600
[  603.557296][T11223]  ? mtree_range_walk+0x6fd/0x8e0
[  603.562621][T11223]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  603.568575][T11223]  ? mas_find+0x8c0/0xbb0
[  603.572946][T11223]  __mmap_region+0x7de/0x2cd0
[  603.577671][T11223]  ? __pfx_lock_release+0x10/0x10
[  603.582722][T11223]  ? __pfx___mmap_region+0x10/0x10
[  603.587859][T11223]  ? __lock_acquire+0x1397/0x2100
[  603.593277][T11223]  ? __pfx_validate_chain+0x10/0x10
[  603.598514][T11223]  ? mark_lock+0x9a/0x360
[  603.602878][T11223]  ? arch_get_unmapped_area_topdown+0x28e/0xc50
[  603.609175][T11223]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  603.615812][T11223]  ? cap_mmap_addr+0x163/0x2c0
[  603.620612][T11223]  mmap_region+0x1d0/0x2c0
[  603.625049][T11223]  ? security_mmap_addr+0x6f/0x250
[  603.630184][T11223]  do_mmap+0x8f0/0x1000
[  603.634369][T11223]  ? __pfx_do_mmap+0x10/0x10
[  603.638977][T11223]  ? __pfx_down_write_killable+0x10/0x10
[  603.644630][T11223]  ? __pfx_lock_acquire+0x10/0x10
[  603.649677][T11223]  vm_mmap_pgoff+0x1dd/0x3d0
[  603.654290][T11223]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  603.659422][T11223]  ? __fget_files+0x2a/0x410
[  603.664040][T11223]  ? __fget_files+0x395/0x410
[  603.668731][T11223]  ? __fget_files+0x2a/0x410
[  603.673342][T11223]  ksys_mmap_pgoff+0x4eb/0x720
[  603.678109][T11223]  ? __x64_sys_mmap+0x7f/0x140
[  603.682876][T11223]  do_syscall_64+0xf3/0x230
[  603.687374][T11223]  ? clear_bhb_loop+0x35/0x90
[  603.692051][T11223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.697933][T11223] RIP: 0033:0x7f3730b85d19
[  603.702336][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.721964][T11223] RSP: 002b:00007f3731a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  603.730385][T11223] RAX: ffffffffffffffda RBX: 00007f3730d75fa0 RCX: 00007f3730b85d19
[  603.738349][T11223] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020ffd000
[  603.746329][T11223] RBP: 00007f3731a29090 R08: 0000000000000003 R09: 0000000100000000
[  603.754291][T11223] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  603.762247][T11223] R13: 0000000000000000 R14: 00007f3730d75fa0 R15: 00007fff92437198
[  603.770229][T11223]  </TASK>
[  603.773350][    C0] vkms_vblank_simulate: vblank timer overrun
[  604.322097][ T5905] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  604.704581][ T5905] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  604.745252][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.807164][ T5905] usb 1-1: config 0 descriptor??
[  604.822680][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1072'.
[  604.843607][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1072'.
[  605.294234][ T5905] usb 1-1: Cannot read MAC address
[  605.441429][ T5905] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  605.458116][ T5905] usb 1-1: USB disconnect, device number 5
[  607.880710][T10329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  607.895104][T10329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  607.905704][T10329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  607.914393][T10329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  607.945974][T10329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  607.957105][T10329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  609.101822][T11286] FAULT_INJECTION: forcing a failure.
[  609.101822][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.166415][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.7.1082 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  609.177233][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  609.187299][T11286] Call Trace:
[  609.190592][T11286]  <TASK>
[  609.193549][T11286]  dump_stack_lvl+0x241/0x360
[  609.198265][T11286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  609.203506][T11286]  ? __pfx__printk+0x10/0x10
[  609.208132][T11286]  should_fail_ex+0x3b0/0x4e0
[  609.212825][T11286]  strncpy_from_user+0x36/0x270
[  609.217682][T11286]  getname_flags+0xf1/0x540
[  609.222194][T11286]  do_sys_openat2+0xd2/0x1d0
[  609.226786][T11286]  ? __pfx_do_sys_openat2+0x10/0x10
[  609.231978][T11286]  ? __fget_files+0x2a/0x410
[  609.236576][T11286]  ? __fget_files+0x2a/0x410
[  609.241163][T11286]  __x64_sys_openat+0x247/0x2a0
[  609.246014][T11286]  ? __pfx___x64_sys_openat+0x10/0x10
[  609.251385][T11286]  ? do_syscall_64+0x100/0x230
[  609.256163][T11286]  ? do_syscall_64+0xb6/0x230
[  609.260845][T11286]  do_syscall_64+0xf3/0x230
[  609.265357][T11286]  ? clear_bhb_loop+0x35/0x90
[  609.270041][T11286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.275947][T11286] RIP: 0033:0x7fcd6cb84680
[  609.280371][T11286] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  609.299979][T11286] RSP: 002b:00007fcd6da6fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  609.308408][T11286] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcd6cb84680
[  609.316382][T11286] RDX: 0000000000000002 RSI: 00007fcd6da6fc10 RDI: 00000000ffffff9c
[  609.324358][T11286] RBP: 00007fcd6da6fc10 R08: 0000000000000000 R09: 00007fcd6da6f986
[  609.332337][T11286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  609.340302][T11286] R13: 0000000000000000 R14: 00007fcd6cd75fa0 R15: 00007ffe144af0e8
[  609.348282][T11286]  </TASK>
[  609.919747][T11271] chnl_net:caif_netlink_parms(): no params data found
[  610.041770][T10329] Bluetooth: hci3: command tx timeout
[  610.117839][T11303] TCP: TCP_TX_DELAY enabled
[  610.395988][T11320] 9pnet_fd: Insufficient options for proto=fd
[  612.522431][T10329] Bluetooth: hci3: command tx timeout
[  613.047660][T11342] bridge0: port 3(syz_tun) entered blocking state
[  613.054759][T11342] bridge0: port 3(syz_tun) entered disabled state
[  613.063234][T11342] syz_tun: entered allmulticast mode
[  613.071651][T11342] syz_tun: entered promiscuous mode
[  613.077995][T11342] bridge0: port 3(syz_tun) entered blocking state
[  613.086230][T11342] bridge0: port 3(syz_tun) entered forwarding state
[  613.951046][ T6793] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.035587][T11271] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.051161][T11271] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.071765][T11271] bridge_slave_0: entered allmulticast mode
[  614.086903][T11373] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1100'.
[  614.141800][T11271] bridge_slave_0: entered promiscuous mode
[  614.178874][T11271] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.196849][T11271] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.206620][T11271] bridge_slave_1: entered allmulticast mode
[  614.232273][T11271] bridge_slave_1: entered promiscuous mode
[  614.408953][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  614.557847][ T6793] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.641711][T10329] Bluetooth: hci3: command tx timeout
[  614.671148][ T5906] usb 1-1: Using ep0 maxpacket: 8
[  614.711619][ T5906] usb 1-1: config 0 has an invalid interface number: 32 but max is 0
[  614.887526][ T5906] usb 1-1: config 0 has no interface number 0
[  614.900458][ T5906] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.946203][ T5906] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.279921][ T6793] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.931388][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  615.944184][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  615.985860][ T5906] usb 1-1: Manufacturer: syz
[  616.004368][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.086318][ T5906] usb 1-1: config 0 descriptor??
[  616.152419][ T6793] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.652367][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.693826][T10329] Bluetooth: hci3: command tx timeout
[  617.872899][T11271] team0: Port device team_slave_0 added
[  618.786291][T11271] team0: Port device team_slave_1 added
[  618.946894][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.971198][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.998647][T11373] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  619.119495][ T5906] usbhid 1-1:0.32: can't add hid device: -71
[  620.073178][ T5906] usbhid 1-1:0.32: probe with driver usbhid failed with error -71
[  620.595785][T11432] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.704713][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.733641][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  620.741127][ T5906] usb 1-1: USB disconnect, device number 6
[  620.878260][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.910061][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.917312][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  620.971025][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.031194][T11441] fuse: Bad value for 'fd'
[  621.081899][ T6793] bridge_slave_1: left allmulticast mode
[  621.087719][ T6793] bridge_slave_1: left promiscuous mode
[  621.098009][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.211427][ T6793] bridge_slave_0: left allmulticast mode
[  621.217170][ T6793] bridge_slave_0: left promiscuous mode
[  621.282428][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.481092][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  621.661937][ T5906] usb 4-1: Using ep0 maxpacket: 32
[  621.703724][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.785005][ T5906] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  621.870630][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.961603][ T5906] usb 4-1: Product: syz
[  621.965842][ T5906] usb 4-1: Manufacturer: syz
[  621.971262][ T5906] usb 4-1: SerialNumber: syz
[  621.983645][ T5906] usb 4-1: config 0 descriptor??
[  622.001918][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub
[  622.007888][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5
[  622.266631][T11451] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  622.273233][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  622.323351][T11451] vhci_hcd vhci_hcd.0: Device attached
[  622.411992][T11474] vhci_hcd: connection closed
[  622.420991][ T2904] vhci_hcd: stop threads
[  622.452786][ T2904] vhci_hcd: release socket
[  622.501239][ T2904] vhci_hcd: disconnect device
[  622.512201][ T5872] usb 4-1: USB disconnect, device number 5
[  622.519165][ T5873] vhci_hcd: vhci_device speed not set
[  622.901798][T11486] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1123'.
[  623.241454][ T5906] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  624.722263][ T5906] usb 9-1: Using ep0 maxpacket: 8
[  624.734846][ T5906] usb 9-1: config 0 has an invalid interface number: 32 but max is 0
[  624.744167][ T5906] usb 9-1: config 0 has no interface number 0
[  624.750313][ T5906] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.768334][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.774773][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  624.784872][ T5906] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.796650][ T5906] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  624.806010][ T5906] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  624.814522][ T5906] usb 9-1: Manufacturer: syz
[  624.824680][ T5906] usb 9-1: config 0 descriptor??
[  624.841477][T11504] tmpfs: Unknown parameter 'usrquotaþ€'
[  624.946403][   T29] audit: type=1326 audit(1734145223.439:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz.3.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9585d19 code=0x0
[  625.311479][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.424575][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.638364][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  625.657566][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  625.673415][ T6793] bond0 (unregistering): Released all slaves
[  625.736059][T11271] hsr_slave_0: entered promiscuous mode
[  625.767251][T11271] hsr_slave_1: entered promiscuous mode
[  625.785077][T11271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  625.813115][T11271] Cannot create hsr debugfs directory
[  626.379601][ T6793] hsr_slave_0: left promiscuous mode
[  626.424631][ T6793] hsr_slave_1: left promiscuous mode
[  626.445682][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  626.471157][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.511732][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.578837][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.038957][ T6793] veth1_macvtap: left promiscuous mode
[  627.053323][ T6793] veth0_macvtap: left promiscuous mode
[  627.916433][ T6793] veth1_vlan: left promiscuous mode
[  627.939853][ T6793] veth0_vlan: left promiscuous mode
[  628.308481][T11554] FAULT_INJECTION: forcing a failure.
[  628.308481][T11554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.321958][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.3.1134 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  628.332747][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  628.342821][T11554] Call Trace:
[  628.346112][T11554]  <TASK>
[  628.349051][T11554]  dump_stack_lvl+0x241/0x360
[  628.353752][T11554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  628.358967][T11554]  ? __pfx__printk+0x10/0x10
[  628.363581][T11554]  ? snprintf+0xda/0x120
[  628.367839][T11554]  should_fail_ex+0x3b0/0x4e0
[  628.372542][T11554]  _copy_to_user+0x31/0xb0
[  628.377522][T11554]  simple_read_from_buffer+0xca/0x150
[  628.382946][T11554]  proc_fail_nth_read+0x1e9/0x250
[  628.388002][T11554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  628.393571][T11554]  ? rw_verify_area+0x55e/0x6f0
[  628.398438][T11554]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  628.404002][T11554]  vfs_read+0x1fc/0xb70
[  628.408188][T11554]  ? __pfx___mutex_lock+0x10/0x10
[  628.413230][T11554]  ? __pfx_vfs_read+0x10/0x10
[  628.417928][T11554]  ? __fget_files+0x2a/0x410
[  628.422530][T11554]  ? __fget_files+0x395/0x410
[  628.427217][T11554]  ? __fget_files+0x2a/0x410
[  628.431831][T11554]  ksys_read+0x18f/0x2b0
[  628.436091][T11554]  ? __pfx_ksys_read+0x10/0x10
[  628.440884][T11554]  do_syscall_64+0xf3/0x230
[  628.445415][T11554]  ? clear_bhb_loop+0x35/0x90
[  628.450115][T11554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.456030][T11554] RIP: 0033:0x7f6dc958472c
[  628.460459][T11554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  628.480087][T11554] RSP: 002b:00007f6dc73b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  628.488532][T11554] RAX: ffffffffffffffda RBX: 00007f6dc9776160 RCX: 00007f6dc958472c
[  628.496518][T11554] RDX: 000000000000000f RSI: 00007f6dc73b40a0 RDI: 0000000000000006
[  628.504508][T11554] RBP: 00007f6dc73b4090 R08: 0000000000000000 R09: 0000000000000000
[  628.512491][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.520479][T11554] R13: 0000000000000000 R14: 00007f6dc9776160 R15: 00007fff6b159218
[  628.528483][T11554]  </TASK>
[  629.307895][T11576] FAULT_INJECTION: forcing a failure.
[  629.307895][T11576] name failslab, interval 1, probability 0, space 0, times 0
[  629.324835][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.3.1139 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  629.335665][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  629.345858][T11576] Call Trace:
[  629.349174][T11576]  <TASK>
[  629.352135][T11576]  dump_stack_lvl+0x241/0x360
[  629.356857][T11576]  ? __pfx_dump_stack_lvl+0x10/0x10
[  629.362090][T11576]  ? __pfx__printk+0x10/0x10
[  629.366720][T11576]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  629.372123][T11576]  ? __pfx___might_resched+0x10/0x10
[  629.377455][T11576]  should_fail_ex+0x3b0/0x4e0
[  629.382169][T11576]  should_failslab+0xac/0x100
[  629.386892][T11576]  __kmalloc_node_noprof+0xe1/0x4d0
[  629.392123][T11576]  ? __vmalloc_node_range_noprof+0x561/0x1380
[  629.398231][T11576]  __vmalloc_node_range_noprof+0x561/0x1380
[  629.404168][T11576]  ? mark_lock+0x9a/0x360
[  629.408561][T11576]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  629.414937][T11576]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.420552][T11576]  __vmalloc_noprof+0x79/0x90
[  629.425263][T11576]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.430853][T11576]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.436257][T11576]  ? bpf_prog_alloc+0x28/0x1b0
[  629.441055][T11576]  bpf_prog_alloc+0x3a/0x1b0
[  629.445674][T11576]  bpf_prog_load+0x7f7/0x20f0
[  629.450399][T11576]  ? __pfx_bpf_prog_load+0x10/0x10
[  629.455535][T11576]  ? __pfx___might_resched+0x10/0x10
[  629.460876][T11576]  ? __might_fault+0xc6/0x120
[  629.465603][T11576]  __sys_bpf+0x4ee/0x810
[  629.469887][T11576]  ? __pfx___sys_bpf+0x10/0x10
[  629.474695][T11576]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  629.480718][T11576]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  629.487083][T11576]  ? do_syscall_64+0x100/0x230
[  629.491897][T11576]  __x64_sys_bpf+0x7c/0x90
[  629.496357][T11576]  do_syscall_64+0xf3/0x230
[  629.500900][T11576]  ? clear_bhb_loop+0x35/0x90
[  629.505615][T11576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.511545][T11576] RIP: 0033:0x7f6dc9585d19
[  629.515989][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.535628][T11576] RSP: 002b:00007f6dc73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  629.544093][T11576] RAX: ffffffffffffffda RBX: 00007f6dc9775fa0 RCX: 00007f6dc9585d19
[  629.552102][T11576] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005
[  629.560127][T11576] RBP: 00007f6dc73f6090 R08: 0000000000000000 R09: 0000000000000000
[  629.568135][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.576147][T11576] R13: 0000000000000001 R14: 00007f6dc9775fa0 R15: 00007fff6b159218
[  629.584169][T11576]  </TASK>
[  629.612208][T11576] syz.3.1139: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  629.637501][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.3.1139 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  629.648322][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  629.658498][T11576] Call Trace:
[  629.661850][T11576]  <TASK>
[  629.664809][T11576]  dump_stack_lvl+0x241/0x360
[  629.669533][T11576]  ? __pfx_dump_stack_lvl+0x10/0x10
[  629.674788][T11576]  ? __pfx__printk+0x10/0x10
[  629.679424][T11576]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  629.685883][T11576]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  629.692452][T11576]  warn_alloc+0x278/0x410
[  629.696822][T11576]  ? __pfx___might_resched+0x10/0x10
[  629.702154][T11576]  ? __pfx_warn_alloc+0x10/0x10
[  629.707048][T11576]  ? should_fail_ex+0x295/0x4e0
[  629.711963][T11576]  ? rcu_is_watching+0x15/0xb0
[  629.716861][T11576]  ? trace_kmalloc+0x1f/0xd0
[  629.721487][T11576]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  629.726982][T11576]  ? __vmalloc_node_range_noprof+0x561/0x1380
[  629.733093][T11576]  __vmalloc_node_range_noprof+0x62f/0x1380
[  629.739031][T11576]  ? mark_lock+0x9a/0x360
[  629.743421][T11576]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  629.749798][T11576]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.755380][T11576]  __vmalloc_noprof+0x79/0x90
[  629.760095][T11576]  ? bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.765678][T11576]  bpf_prog_alloc_no_stats+0x4d/0x4d0
[  629.771092][T11576]  ? bpf_prog_alloc+0x28/0x1b0
[  629.775900][T11576]  bpf_prog_alloc+0x3a/0x1b0
[  629.781014][T11576]  bpf_prog_load+0x7f7/0x20f0
[  629.785757][T11576]  ? __pfx_bpf_prog_load+0x10/0x10
[  629.790903][T11576]  ? __pfx___might_resched+0x10/0x10
[  629.796246][T11576]  ? __might_fault+0xc6/0x120
[  629.800964][T11576]  __sys_bpf+0x4ee/0x810
[  629.805263][T11576]  ? __pfx___sys_bpf+0x10/0x10
[  629.810065][T11576]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  629.816092][T11576]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  629.822559][T11576]  ? do_syscall_64+0x100/0x230
[  629.827372][T11576]  __x64_sys_bpf+0x7c/0x90
[  629.831842][T11576]  do_syscall_64+0xf3/0x230
[  629.836386][T11576]  ? clear_bhb_loop+0x35/0x90
[  629.841105][T11576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.847037][T11576] RIP: 0033:0x7f6dc9585d19
[  629.851493][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.871136][T11576] RSP: 002b:00007f6dc73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  629.879858][T11576] RAX: ffffffffffffffda RBX: 00007f6dc9775fa0 RCX: 00007f6dc9585d19
[  629.887864][T11576] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005
[  629.895875][T11576] RBP: 00007f6dc73f6090 R08: 0000000000000000 R09: 0000000000000000
[  629.903878][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.911883][T11576] R13: 0000000000000001 R14: 00007f6dc9775fa0 R15: 00007fff6b159218
[  629.919904][T11576]  </TASK>
[  630.121074][T11576] Mem-Info:
[  630.124771][T11576] active_anon:3324 inactive_anon:9979 isolated_anon:0
[  630.124771][T11576]  active_file:25870 inactive_file:34372 isolated_file:0
[  630.124771][T11576]  unevictable:768 dirty:225 writeback:0
[  630.124771][T11576]  slab_reclaimable:11690 slab_unreclaimable:105170
[  630.124771][T11576]  mapped:39365 shmem:7273 pagetables:1165
[  630.124771][T11576]  sec_pagetables:0 bounce:0
[  630.124771][T11576]  kernel_misc_reclaimable:0
[  630.124771][T11576]  free:1298101 free_pcp:989 free_cma:0
[  630.177668][T11576] Node 0 active_anon:13096kB inactive_anon:39916kB active_file:103408kB inactive_file:137488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157460kB dirty:900kB writeback:0kB shmem:27456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no
[  630.178416][ T5906] usbhid 9-1:0.32: can't add hid device: -32
[  630.247906][ T5906] usbhid 9-1:0.32: probe with driver usbhid failed with error -32
[  630.287187][T11576] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  630.379949][T11576] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  630.458175][T11576] lowmem_reserve[]: 0 2465 2466 0 0
[  630.469438][T11576] Node 0 DMA32 free:1267184kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:13092kB inactive_anon:39848kB active_file:102616kB inactive_file:137436kB unevictable:1536kB writepending:920kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:3704kB local_pcp:688kB free_cma:0kB
[  630.557650][T11576] lowmem_reserve[]: 0 0 0 0 0
[  630.562967][T11576] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  630.563756][T11486] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  630.593391][T11576] lowmem_reserve[]: 0 0 0 0 0
[  630.602421][T11576] Node 1 Normal free:3911408kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  630.638930][ T6793] team0 (unregistering): Port device team_slave_1 removed
[  630.652867][ T5906] usb 9-1: USB disconnect, device number 31
[  630.663990][T11576] lowmem_reserve[]: 0 0 0 0 0
[  630.692830][T11576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  630.692976][T11576] Node 0 DMA32: 7*4kB (E) 397*8kB (UME) 1032*16kB (UME) 1094*32kB (UME) 791*64kB (UME) 289*128kB (UME) 188*256kB (UME) 114*512kB (UM) 30*1024kB (UM) 6*2048kB (UM) 238*4096kB (UM) = 1266692kB
[  630.693156][T11576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  630.693269][T11576] Node 1 Normal: 258*4kB (UME) 63*8kB (UME) 39*16kB (UME) 234*32kB (UME) 105*64kB (UME) 36*128kB (UME) 13*256kB (UME) 8*512kB (UME) 8*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3911408kB
[  630.693456][T11576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  630.693474][T11576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  630.693490][T11576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  630.693506][T11576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  630.693521][T11576] 67468 total pagecache pages
[  630.693530][T11576] 0 pages in swap cache
[  630.693538][T11576] Free swap  = 124356kB
[  630.693546][T11576] Total swap = 124996kB
[  630.693554][T11576] 2097051 pages RAM
[  630.693563][T11576] 0 pages HighMem/MovableOnly
[  630.693571][T11576] 427003 pages reserved
[  630.693579][T11576] 0 pages cma reserved
[  630.861527][ T6793] team0 (unregistering): Port device team_slave_0 removed
[  631.141093][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  631.645313][ T5873] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  631.752831][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.846750][ T5873] usb 4-1: Product: syz
[  631.932036][ T5873] usb 4-1: Manufacturer: syz
[  631.977075][ T5873] usb 4-1: SerialNumber: syz
[  632.101679][ T5873] usb 4-1: config 0 descriptor??
[  632.542257][ T5873] usb 4-1: Firmware version (0.0) predates our first public release.
[  632.550433][ T5873] usb 4-1: Please update to version 0.2 or newer
[  632.583263][ T5873] usb 4-1: Firmware: build 
[  633.691903][T11666] FAULT_INJECTION: forcing a failure.
[  633.691903][T11666] name failslab, interval 1, probability 0, space 0, times 0
[  633.736607][T11666] CPU: 1 UID: 0 PID: 11666 Comm: syz.3.1144 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  633.747465][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  633.757552][T11666] Call Trace:
[  633.760847][T11666]  <TASK>
[  633.763790][T11666]  dump_stack_lvl+0x241/0x360
[  633.768503][T11666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  633.773732][T11666]  ? __pfx__printk+0x10/0x10
[  633.778379][T11666]  ? __kmalloc_cache_noprof+0x48/0x390
[  633.783868][T11666]  ? __pfx___might_resched+0x10/0x10
[  633.789188][T11666]  ? tomoyo_path_number_perm+0x206/0x860
[  633.794863][T11666]  should_fail_ex+0x3b0/0x4e0
[  633.799588][T11666]  should_failslab+0xac/0x100
[  633.804310][T11666]  __kmalloc_cache_noprof+0x70/0x390
[  633.809624][T11666]  ? vhost_iotlb_alloc+0x55/0x180
[  633.814688][T11666]  vhost_iotlb_alloc+0x55/0x180
[  633.819586][T11666]  vhost_net_ioctl+0x4c1/0x14d0
[  633.824461][T11666]  ? smack_file_ioctl+0x29e/0x3a0
[  633.829502][T11666]  ? __pfx_smack_file_ioctl+0x10/0x10
[  633.834884][T11666]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  633.840197][T11666]  ? __fget_files+0x2a/0x410
[  633.844831][T11666]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  633.850153][T11666]  __se_sys_ioctl+0xf5/0x170
[  633.854786][T11666]  do_syscall_64+0xf3/0x230
[  633.859328][T11666]  ? clear_bhb_loop+0x35/0x90
[  633.864040][T11666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.869968][T11666] RIP: 0033:0x7f6dc9585d19
[  633.874412][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.894061][T11666] RSP: 002b:00007f6dc73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  633.902518][T11666] RAX: ffffffffffffffda RBX: 00007f6dc9775fa0 RCX: 00007f6dc9585d19
[  633.910526][T11666] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000003
[  633.918535][T11666] RBP: 00007f6dc73f6090 R08: 0000000000000000 R09: 0000000000000000
[  633.926538][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.934540][T11666] R13: 0000000000000000 R14: 00007f6dc9775fa0 R15: 00007fff6b159218
[  633.942567][T11666]  </TASK>
[  634.040203][ T5873] usb 4-1: USB disconnect, device number 6
[  634.657968][T11683] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1150'.
[  635.001186][ T5831] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  635.296707][ T5831] usb 9-1: Using ep0 maxpacket: 8
[  635.378144][ T5831] usb 9-1: config 0 has an invalid interface number: 32 but max is 0
[  635.755023][ T5831] usb 9-1: config 0 has no interface number 0
[  635.806068][ T5831] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.818777][ T5831] usb 9-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.845611][ T5831] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  635.865132][ T5831] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  635.903401][ T5831] usb 9-1: Manufacturer: syz
[  635.915215][ T5831] usb 9-1: config 0 descriptor??
[  636.648422][T11683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.679802][T11683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.306761][ T5875] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  637.517816][ T5875] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[  637.547148][ T5875] usb 8-1: config 0 has no interface number 0
[  637.582896][ T5875] usb 8-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  637.617448][ T5875] usb 8-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  637.679279][ T5875] usb 8-1: config 0 interface 153 has no altsetting 0
[  637.715637][ T5875] usb 8-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  637.746102][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.779965][ T5875] usb 8-1: Product: syz
[  637.798596][ T5875] usb 8-1: Manufacturer: syz
[  637.800298][T11271] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  637.847473][ T5875] usb 8-1: SerialNumber: syz
[  637.881359][T11271] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  637.898872][ T5875] usb 8-1: config 0 descriptor??
[  637.925950][ T5875] hub 8-1:0.153: bad descriptor, ignoring hub
[  637.930457][T11271] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  637.938831][ T5875] hub 8-1:0.153: probe with driver hub failed with error -5
[  637.961674][ T5875] sierra 8-1:0.153: Sierra USB modem converter detected
[  637.998210][T11271] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  638.212883][ T5875] usb 8-1: USB disconnect, device number 31
[  638.226868][ T5875] sierra 8-1:0.153: device disconnected
[  638.326055][T11271] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.356226][T11271] 8021q: adding VLAN 0 to HW filter on device team0
[  638.377135][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.384335][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.418928][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.426176][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.521992][T11271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  639.873808][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.931121][ T5875] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  639.982763][T11271] veth0_vlan: entered promiscuous mode
[  640.013785][T11271] veth1_vlan: entered promiscuous mode
[  640.083180][T11271] veth0_macvtap: entered promiscuous mode
[  640.102074][ T5875] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  640.131236][ T5875] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  640.143863][T11271] veth1_macvtap: entered promiscuous mode
[  640.150070][ T5875] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  640.179426][ T5875] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  640.189303][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  640.206695][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.215142][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.222749][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.236709][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.247671][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.278263][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.283839][ T5875] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  640.309490][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.321566][ T5875] usb 8-1: invalid MIDI out EP 0
[  640.335080][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.351653][ T5904] usb 4-1: Using ep0 maxpacket: 8
[  640.360050][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.373669][ T5904] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  640.391693][ T5904] usb 4-1: can't read configurations, error -22
[  640.454627][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.546300][ T5875] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22
[  640.559575][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  640.586277][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.637370][ T9206] udevd[9206]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  640.661424][ T5875] usb 8-1: USB disconnect, device number 32
[  640.675770][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.765458][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.127936][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.266644][ T5831] usbhid 9-1:0.32: can't add hid device: -32
[  641.271429][ T5904] usb 4-1: Using ep0 maxpacket: 8
[  641.280199][ T5904] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  641.288554][ T5904] usb 4-1: can't read configurations, error -22
[  641.295081][ T5831] usbhid 9-1:0.32: probe with driver usbhid failed with error -32
[  641.301802][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.318869][ T5904] usb usb4-port1: attempt power cycle
[  641.321700][T11683] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  641.335836][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.391356][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.395951][ T5831] usb 9-1: USB disconnect, device number 32
[  641.429476][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.464841][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.503853][T11271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.721026][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  641.813803][ T5904] usb 4-1: Using ep0 maxpacket: 8
[  641.835940][ T5904] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  641.870003][T11271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.916347][ T5904] usb 4-1: can't read configurations, error -22
[  641.951595][T11271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.041671][T11271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.121575][ T5904] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  642.175261][ T5904] usb 4-1: Using ep0 maxpacket: 8
[  642.189224][ T5904] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  642.241484][ T5904] usb 4-1: can't read configurations, error -22
[  642.373824][ T5904] usb usb4-port1: unable to enumerate USB device
[  642.969207][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.007424][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.124994][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.144812][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.659720][T11812] syz.3.1171: attempt to access beyond end of device
[  644.659720][T11812] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  644.776429][T11812] syz.3.1171: attempt to access beyond end of device
[  644.776429][T11812] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[  644.950567][T11824] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1075'.
[  644.980205][T11812] Mount JFS Failure: -5
[  646.020955][ T5875] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  646.211029][ T5875] usb 3-1: Using ep0 maxpacket: 8
[  646.406076][ T5875] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  646.429846][ T5875] usb 3-1: config 0 has no interface number 0
[  646.489367][ T5875] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.692293][ T5875] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.724534][T11845] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1177'.
[  646.789607][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  646.799286][ T5875] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  646.807465][ T5875] usb 3-1: Manufacturer: syz
[  646.820416][  T973] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  646.829769][ T5875] usb 3-1: config 0 descriptor??
[  647.026052][  T973] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  647.045927][  T973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.064871][  T973] usb 9-1: Product: syz
[  647.074574][  T973] usb 9-1: Manufacturer: syz
[  647.081654][  T973] usb 9-1: SerialNumber: syz
[  647.093495][  T973] usb 9-1: config 0 descriptor??
[  647.173187][ T5872] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  647.351137][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  647.351978][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.357950][ T5872] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  647.408374][ T5872] usb 4-1: config 0 has no interface number 0
[  647.424970][ T5872] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.462959][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.490533][ T5872] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.529582][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.544602][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  647.564779][T11868] syz.0.1181 uses obsolete (PF_INET,SOCK_PACKET)
[  647.600496][ T5872] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  647.605030][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.952176][   T29] audit: type=1326 audit(1734145246.449:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952227][   T29] audit: type=1326 audit(1734145246.449:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952246][   T29] audit: type=1326 audit(1734145246.449:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952289][   T29] audit: type=1326 audit(1734145246.449:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952307][   T29] audit: type=1326 audit(1734145246.449:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952326][   T29] audit: type=1326 audit(1734145246.449:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952363][   T29] audit: type=1326 audit(1734145246.449:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.952381][   T29] audit: type=1326 audit(1734145246.449:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11833 comm="syz.8.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e65185d19 code=0x7ffc0000
[  647.959245][ T5872] usb 4-1: Manufacturer: syz
[  647.963390][ T5872] usb 4-1: config 0 descriptor??
[  648.005025][  T973] usb 9-1: Firmware: major: 233, minor: 208, hardware type: UNKNOWN (243)
[  649.089142][  T973] usb 9-1: failed to fetch extended address, random address set
[  649.089176][  T973] usb 9-1: atusb_probe: initialization failed, error = -524
[  649.089339][  T973] atusb 9-1:0.0: probe with driver atusb failed with error -524
[  649.203869][T11824] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  649.209317][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.247305][    C0] vkms_vblank_simulate: vblank timer overrun
[  649.378132][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.398819][ T5875] usbhid 3-1:0.32: can't add hid device: -71
[  649.398928][ T5875] usbhid 3-1:0.32: probe with driver usbhid failed with error -71
[  649.401483][ T5875] usb 3-1: USB disconnect, device number 4
[  651.041796][ T5829] ------------[ cut here ]------------
[  651.041892][ T5829] WARNING: CPU: 1 PID: 5829 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290
[  651.041936][ T5829] Modules linked in:
[  651.041955][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:4 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  651.042010][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  651.042024][ T5829] Workqueue: hci5 hci_conn_timeout
[  651.042052][ T5829] RIP: 0010:hci_conn_timeout+0xfb/0x290
[  651.042077][ T5829] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 90 4f ed f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 76 4f ed f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48
[  651.042095][ T5829] RSP: 0018:ffffc900040bfb90 EFLAGS: 00010293
[  651.042114][ T5829] RAX: ffffffff8ab20e7a RBX: ffff88802a7cc8e8 RCX: ffff888063d30000
[  651.042155][ T5829] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  651.042170][ T5829] RBP: 00000000ffffffff R08: ffffffff8ab20de3 R09: 1ffff110054f9802
[  651.042186][ T5829] R10: dffffc0000000000 R11: ffffed10054f9803 R12: dffffc0000000000
[  651.042202][ T5829] R13: ffffffff8168de46 R14: ffff88802a7cc000 R15: 0000000002400000
[  651.042219][ T5829] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  651.042236][ T5829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  651.042252][ T5829] CR2: 00007f913f6ddac9 CR3: 000000007c762000 CR4: 00000000003526f0
[  651.042296][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  651.042310][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  651.042324][ T5829] Call Trace:
[  651.042333][ T5829]  <TASK>
[  651.042344][ T5829]  ? __warn+0x165/0x4d0
[  651.042366][ T5829]  ? hci_conn_timeout+0xfb/0x290
[  651.042395][ T5829]  ? report_bug+0x2b3/0x500
[  651.042444][ T5829]  ? hci_conn_timeout+0xfb/0x290
[  651.042475][ T5829]  ? handle_bug+0x60/0x90
[  651.042500][ T5829]  ? exc_invalid_op+0x1a/0x50
[  651.042526][ T5829]  ? asm_exc_invalid_op+0x1a/0x20
[  651.042552][ T5829]  ? process_scheduled_works+0x976/0x1840
[  651.042607][ T5829]  ? hci_conn_timeout+0x63/0x290
[  651.042630][ T5829]  ? hci_conn_timeout+0xfa/0x290
[  651.042656][ T5829]  ? hci_conn_timeout+0xfb/0x290
[  651.042686][ T5829]  process_scheduled_works+0xa66/0x1840
[  651.042764][ T5829]  ? __pfx_process_scheduled_works+0x10/0x10
[  651.042802][ T5829]  ? assign_work+0x364/0x3d0
[  651.042834][ T5829]  worker_thread+0x870/0xd30
[  651.042892][ T5829]  ? __kthread_parkme+0x169/0x1d0
[  651.042918][ T5829]  ? __pfx_worker_thread+0x10/0x10
[  651.042938][ T5829]  kthread+0x2f0/0x390
[  651.042965][ T5829]  ? __pfx_worker_thread+0x10/0x10
[  651.042984][ T5829]  ? __pfx_kthread+0x10/0x10
[  651.043031][ T5829]  ret_from_fork+0x4b/0x80
[  651.043050][ T5829]  ? __pfx_kthread+0x10/0x10
[  651.043072][ T5829]  ret_from_fork_asm+0x1a/0x30
[  651.043114][ T5829]  </TASK>
[  651.043135][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  651.043150][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:4 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0
[  651.043171][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  651.043182][ T5829] Workqueue: hci5 hci_conn_timeout
[  651.043205][ T5829] Call Trace:
[  651.043212][ T5829]  <TASK>
[  651.043220][ T5829]  dump_stack_lvl+0x241/0x360
[  651.043246][ T5829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  651.043270][ T5829]  ? __pfx__printk+0x10/0x10
[  651.043300][ T5829]  ? vscnprintf+0x5d/0x90
[  651.043322][ T5829]  panic+0x349/0x880
[  651.043346][ T5829]  ? __warn+0x174/0x4d0
[  651.043366][ T5829]  ? __pfx_panic+0x10/0x10
[  651.043398][ T5829]  ? ret_from_fork_asm+0x1a/0x30
[  651.043428][ T5829]  __warn+0x344/0x4d0
[  651.043446][ T5829]  ? hci_conn_timeout+0xfb/0x290
[  651.043473][ T5829]  report_bug+0x2b3/0x500
[  651.043494][ T5829]  ? hci_conn_timeout+0xfb/0x290
[  651.043521][ T5829]  handle_bug+0x60/0x90
[  651.043545][ T5829]  exc_invalid_op+0x1a/0x50
[  651.043570][ T5829]  asm_exc_invalid_op+0x1a/0x20
[  651.043592][ T5829] RIP: 0010:hci_conn_timeout+0xfb/0x290
[  651.043615][ T5829] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 90 4f ed f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 76 4f ed f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48
[  651.043630][ T5829] RSP: 0018:ffffc900040bfb90 EFLAGS: 00010293
[  651.043647][ T5829] RAX: ffffffff8ab20e7a RBX: ffff88802a7cc8e8 RCX: ffff888063d30000
[  651.043662][ T5829] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  651.043675][ T5829] RBP: 00000000ffffffff R08: ffffffff8ab20de3 R09: 1ffff110054f9802
[  651.043689][ T5829] R10: dffffc0000000000 R11: ffffed10054f9803 R12: dffffc0000000000
[  651.043704][ T5829] R13: ffffffff8168de46 R14: ffff88802a7cc000 R15: 0000000002400000
[  651.043719][ T5829]  ? process_scheduled_works+0x976/0x1840
[  651.043748][ T5829]  ? hci_conn_timeout+0x63/0x290
[  651.043769][ T5829]  ? hci_conn_timeout+0xfa/0x290
[  651.043802][ T5829]  process_scheduled_works+0xa66/0x1840
[  651.043855][ T5829]  ? __pfx_process_scheduled_works+0x10/0x10
[  651.043889][ T5829]  ? assign_work+0x364/0x3d0
[  651.043919][ T5829]  worker_thread+0x870/0xd30
[  651.043951][ T5829]  ? __kthread_parkme+0x169/0x1d0
[  651.043981][ T5829]  ? __pfx_worker_thread+0x10/0x10
[  651.044000][ T5829]  kthread+0x2f0/0x390
[  651.044019][ T5829]  ? __pfx_worker_thread+0x10/0x10
[  651.044037][ T5829]  ? __pfx_kthread+0x10/0x10
[  651.044058][ T5829]  ret_from_fork+0x4b/0x80
[  651.044075][ T5829]  ? __pfx_kthread+0x10/0x10
[  651.044095][ T5829]  ret_from_fork_asm+0x1a/0x30
[  651.044134][ T5829]  </TASK>
[  651.044410][ T5829] Kernel Offset: disabled