last executing test programs:

17.255870957s ago: executing program 0 (id=564):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/pid\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a80)='ns/pid\x00')
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x200006, &(0x7f0000000040))
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64], 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)

15.680351261s ago: executing program 0 (id=569):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
syz_open_dev$video4linux(0x0, 0x101, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3)
r1 = syz_open_dev$usbfs(0x0, 0x3, 0x40000)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x6fd})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0xe, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "98000001", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0xfffffffffffffffe, 0x4, 0x0, 0x5, 0x4063, "57c1169b0964ea61ee64feabb03d583f"})
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc02990000000076", 0x21, r6)

13.980285302s ago: executing program 4 (id=575):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d50, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_BLACKHOLE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x1c, 0x2c, 0x9, 0x70bd2b, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)

12.367692161s ago: executing program 0 (id=578):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x4004)
chown(&(0x7f00000002c0)='./file0\x00', r0, r1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x62, 0xff, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bond\x00'}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x8000)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x6e, r6})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'gretap0\x00', @random="638ed382f0f0"})

11.073091883s ago: executing program 0 (id=581):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xffff, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0xabf2511, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x800]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040))
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0x2f01)
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000080)=0x9)
r9 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000001380)=@udp=r9}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001240)=""/113, 0x71}], 0x1}, 0x0)
sendmmsg$unix(r9, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000013c0)="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", 0x1000}, {0x0}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000030014000040000000170001000000010000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20040041}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000b40)="be27c7dec8a84a498860a1d0df0a74f1b43a42edf560eee6210c43966f73302c3485ec8c67c43ab5f89d640ce75410ad88176cf092e4823db6de693cfb432da9013c86bd9afc5548f7331878145f5791051a3882249faf9ace634095065ab3e6b78e45a3fba52dd076cea0968285158444a30dca456ce22107236ca373ae5b", 0x7f}, {&(0x7f0000000bc0)="a109c7ac1d03d932339160f772a783520daa28a913d5b3fe9674df", 0x1b}, {&(0x7f0000000d40)="6ba6bb2a9516ee80191a61d429a47f8376d3b9c3894a083b24c91a9dcaac408ff2b441dbb647568633bf9d4cdc5ebff7c493ad552c96811f1c225f3b8d4a3e0ad7d97c3ddabcda18e47135bd10b90a81b8ef3a96c1cb7b9a0a87017e85822ecfeccf7236976adc5e966e95f87291c2f0ea919c3382ce3c3fc60b8dc0108950141da28f1aacbbaaa13e5031e4215e77", 0x8f}, {&(0x7f0000000c00)}, {&(0x7f0000000e40)="fe4e83950f41a712539dfca486d81e5c9e4174c4aa132a513521b3f5c2e40bdcce6972fbaa34b339f0f0c31b2a3e506cdf0b69f39195bd34ac2a85716d3beb9e6db9a0a7c094c46e8f2310b1c7f4a54118c90dc8e6981c0a461b9f49ddfeeaf604367a0d65ffe5608ec40bf0962dbf6a76e916ccc90c415d83aee7783dfbaf05dc27c525aabc", 0x86}, {0x0}], 0x6, 0x0, 0x0, 0x8000000}}], 0x3, 0x48090)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

11.064331433s ago: executing program 2 (id=582):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x7, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
shutdown(r5, 0x1)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15)
setfsuid(0x0)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121)

10.732026263s ago: executing program 3 (id=583):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
syz_open_dev$video4linux(0x0, 0x101, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3)
r1 = syz_open_dev$usbfs(0x0, 0x3, 0x40000)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x6fd})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0xe, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "98000001", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0xfffffffffffffffe, 0x4, 0x0, 0x5, 0x4063, "57c1169b0964ea61ee64feabb03d583f"})
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc02990000000076", 0x21, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

9.304346924s ago: executing program 3 (id=585):
socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000004c00)=""/4105, 0x1009}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000640)=""/24, 0x18}, {&(0x7f0000000940)=""/188, 0xbc}], 0x8, &(0x7f0000000680)=""/28, 0x1c}, 0x7}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/97, 0xfe7a}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000cc0)=""/121, 0x79}], 0x4}, 0x8}], 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0xc01, 0x3, 0x228, 0xd0, 0x5002004a, 0x6, 0x0, 0x3, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@empty, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x3fa}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xfffff716, 0x8942, 0x0, 0x8}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, r4})

9.108360879s ago: executing program 1 (id=586):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
syz_open_procfs(r0, &(0x7f00000002c0)='net/protocols\x00')
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000280)={0x28, 0x2, r2, r3, 0x3, 0x35})
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81)
r5 = dup(r4)
read$dsp(r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)

8.648242838s ago: executing program 0 (id=587):
unshare(0x6a040000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000340)=""/74, 0x328000, 0x1000, 0x0, 0x3}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)

8.237440341s ago: executing program 3 (id=588):
r0 = socket$igmp6(0xa, 0x3, 0x2)
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x4d, 0xfffffffc, 0x7}, 0x9c)
mkdir(0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0}, 0x18)
syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e04001120"], 0x7)
syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0)
r5 = syz_io_uring_setup(0x342c, &(0x7f00000000c0)={0x0, 0xd3a1, 0x2, 0x3, 0x32}, 0x0, &(0x7f0000000340))
io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x0, 0x2}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x60, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66e0025c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x5, [{}, {}, {0x0, 0xfe}], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
r6 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, &(0x7f0000000580)={0x20, 0x9, 0x48, {0x48, 0x24, "62bc529e53f51fcd4e23dc355f17ff796808aaba10115c372f488fcefb80695d3639f6ad11ee72e10cf746c877e7fb54707e807e6dcd36cb2b10f2a6bfdf78aa0635bb3200b2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x2, 0x3, 0x411}}, 0x0, 0x0}, 0x0)

7.388350807s ago: executing program 1 (id=589):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000073010d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty, 0x4e26, 0xffff, 0x4e21, 0x800, 0xa, 0x80, 0x80}, {0x0, 0x2000000000000401, 0xb8, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x3fffffe, 0x1}, {0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x4000040) (async)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4d790908556cabd0207de9e96fa61c122803b5a9d41d72b6bb40802794777fffbc4772d843c6df67f741a8b053de9957aa0edbc736ff3ce8d8db1a6c3a6307c749fc0b97bcca7cc5b877d6a29a6fc4dcc26f7dac66381d9293c21fccc8da9c4d1af2b3038afebf288393a4efeaa88dd4a2a9525f6e5a690a", 0x78}], 0x1}], 0x1, 0x0)
r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r4, 0x4fbc, 0xfac7, 0x0, 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$HIDIOCSFLAG(r8, 0x4004480f, &(0x7f0000000240)=0x2)

7.003777768s ago: executing program 2 (id=590):
r0 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {0x0, 0xfef2}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x800000000000, 0x0, 0x0, 0x778a, 0xffff}, {0x3}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, 0x0, &(0x7f0000000700)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080))
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000240)={0x48})
recvmmsg(r6, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
close(r0)

6.992462494s ago: executing program 4 (id=591):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
unshare(0x44030e80)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f000082f000/0x1000)=nil, &(0x7f000097f000/0x3000)=nil, 0x9, &(0x7f0000000180)=[{0x8001, 0xad5, 0x7}], 0x1, 0xfffffffffffffff3, 0x0, 0x40, 0x4})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="41000000010001", 0x7)
close(r1)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0xa4, 0x0, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

5.480407855s ago: executing program 1 (id=592):
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

5.279410121s ago: executing program 2 (id=593):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r5, @ANYBLOB="54002d80050001000000000005000400000000000800020003000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x2, &(0x7f0000000040)=0x2, 0x5b54fff4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r8)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"/282], 0x34}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x14000, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x1a4, r10, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb7ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1a3}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff7, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8a0d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb702}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x73}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2000c000}, 0x44000)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="170000007200010300000000000000000700007d8a0de4e402bc7a7f5422b024c96f2c753803ec70ff7a7275b98cfa8acfb8018a3b8d03338ad49c1cfe898e69f41c2da0f800b2aaa8d4819cc2", @ANYRES16=r7, @ANYBLOB], 0x20}, 0x1, 0xf00}, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xb6}, &(0x7f00000000c0)=0x8)

5.127089969s ago: executing program 4 (id=594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x208c00, 0x0)
r2 = getpgid(0xffffffffffffffff)
timer_create(0x6, &(0x7f0000000080)={0x0, 0x1b, 0x2, @tid=r2}, &(0x7f00000000c0))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000000, 0x80000000, 0x5, 0x6, 0xc, 0x0, 0x58b}, 0x1c)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xb, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x2, 0xb, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001300)=[{0x4, 0x7, 0x10, 0x6}, {0x4, 0x5, 0xd, 0xb}], 0x10, 0xa, @void, @value}, 0x94)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001400), 0x400, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001500)={r5, r6, 0x2e, 0x0, @val=@uprobe_multi={&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)=[0x5, 0x1, 0x2d, 0x2], &(0x7f00000014c0)=[0x3, 0x2, 0x3, 0x0], 0xfff, 0x4, 0x0, r2}}, 0x40)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x9)
epoll_create1(0x80000)
socket(0x5, 0x2, 0x6)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000001540)=0x4000000)
r7 = syz_open_dev$ptys(0xc, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000015c0)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000016c0)=0xe8)
lstat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0})
statx(r6, &(0x7f00000017c0)='./file0\x00', 0x800, 0xa0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0})
r14 = getegid()
read$FUSE(r6, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
fsetxattr$system_posix_acl(r7, &(0x7f0000001580)='system.posix_acl_default\x00', &(0x7f0000003940)={{}, {0x1, 0x3}, [{0x2, 0x4, r9}, {0x2, 0x6, r10}], {0x4, 0x6}, [{0x8, 0x1, r13}, {0x8, 0x5, r14}, {0x8, 0x2, r15}], {0x10, 0x4}, {0x20, 0xa}}, 0x4c, 0x0)
write$dsp(r6, &(0x7f00000039c0)="46ad46c95eae24255a860b3eb69396c7898db7873236e309c418f172416fd178ec535c835f5d06e7ce3b334246d3aa3f7bfdf775659d198a8cda7c600c411de5aa2b7e4e2010b1623433298f0f8ce77e106d3a2f6f2d010a3960e42b21a311207ef460655fea89d59135a9ded367d04f8ccaf653b8de6b89d5efbf0678a40f73d08c6eedb51358fda4b45770833da06cacebb6c4907f35241c9a8277a2803e2581ea6cccb5d9c8b0e01bb5967e8cd590f564f29ac8bf5254f051863ec2da44f75b9530e684f8075de59cc0e5f72ff4ceedead0c226ee0f53530d80e0f2edc26a14a116ae8b04e614f808", 0xea)
statx(r6, &(0x7f0000003ac0)='./file0\x00', 0x6000, 0x200, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000003c00)={{0x1, 0x1, 0x18, r1, {r12, <r17=>r11}}, './file0\x00'})
setgroups(0x5, &(0x7f0000003c40)=[r16, r14, r17, r13, r11])
ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000003c80))
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
semget$private(0x0, 0x1, 0x10)
sendmmsg$inet(r6, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003cc0)="e8b1895b51a8bfbe1984", 0xa}, {&(0x7f0000003d00)="dfe3653027fbe18bc34313ac4b2d1ed0f98ecfc69247abe5d4ec67d6cd7b2c8036dd239ac028d38def7c32bf33d1efadb93d12191cd02ff316e7f1eb738d68208e7a0a276ee34437b74f71a338ab7a36d20ec996d64a08934754685d7db2612c3b7eaee5093d1f8b37264aeb7215717eadcfc3", 0x73}, {&(0x7f0000003d80)="5244b1f083295dc42174d2641155e2bdb0b6ececcf171909f9f125be20489bdad0c7a1a82b3f91b40b25e733d0223e55f4c2241701ca93221b0eab9628c367d82509342437160807c3d74d199f4132ea2b2050b55a2e8bd52b4b5a0930b98a6a3238fc1646bf8e625bb6a89fdc4b44aae2f517a21b16660ce23ea0876d1073b447c99b42b593399a335f6cd579400dce24dec94b40fc3f", 0x97}, {&(0x7f0000003e40)="3f94bc2de00817972142cfe83c4091106bc24e211b8399322497c6acce28115c66bbd62af8a6c49372e6ac278e20bcbf70e02c216d6fddb0d408d4b355872e7fce1a7ef03c66ecfd24ae07fe8e063adb955d6351b5025c252404c309ba5c130d3423be8806a97cc5fca11ec1b187a4ee1b46a40521db2b863b0dbddca4f7ecea62bcda2d496e6001e63a9ce60322f24359e4f29b64cf47a91e1ca06b72bda7e995792e3b931b7cd2c8", 0xa9}, {&(0x7f0000003f00)="8fcb068c239f4d658fa04b5ff9c7ba72a9c452f5b2bef299d9f664d680955577d420778a0f9cbd3c4e1ec9949090677ecdbcd429e9b253a5658a6eedb6c4509306f56a5856b18c110253595c73cacbace9d6b8ddd1adfd290c49f4b895e6b697332afb83ef6f49952a6f2659761082a679fc95770e4a7c23145194c3a82a8a02019edbe3b61e32e5bd69d1830c65b3996f37c901b97bc8ddabc9c08670932158a292fa0d62334aa6ec1ef1b040375b522badd7336a6424f59961e831118cdb9085e6dc4aeb57be7fb0da376c422e6051", 0xd0}, {&(0x7f0000004000)="5e2b2d60c0d550cf426d2cf930690d187b656de448118ea5185157ded4917d58c552237bc9e56d628ffd867a1d1ed3e9e368435f38", 0x35}, {&(0x7f0000004040)="b4f913e611e60049b35ce6b72afce1e4fd507df01737ca38255ac414d45689ac51c250ad6e80cd119d482fe459161fe66a3cbbcff833d8e2bb5cbad492fa594d9205b88fe3b6210316ee7e75f3ea275d8d80abe0d4b4adad05f770ee30133769446def15426d5e76568c1f29d3ff5da8226fbdd01109d4b23e16ea96c1cef647ab66c441f00ee3dc7b6b242ea59905326dc5c2f9ec33a39736d732bbd6accfa88ad1b08f605e", 0xa6}, {&(0x7f0000004100)="a11f612bae04b612f3101f9792bcbd42f5b8863f7832930dc8d838aab997434306c182b625756daa52ee56ef715060a53f584ece2fb300a44a42", 0x3a}, {&(0x7f0000004140)="988de695e35d20aefe8bc9c758566ddbcb58ee22b57431cb42938794c190357932e11e0626cb66e2f677a25517d597998bef65fa00ecd80628681f0a0d59950f24b59be234f25e43b78b928c5e36b09173106b823acb49285ec80486dd2741b6dac277358bf567ad772b158da4891eafbcae27b53ce40493368657543a1d899806a360c4ea09c826780eeadac366e962e5e885f24a5b78f2c8f138b2d73c9dcdddfd9cf06a90fb4c3ce4fe6fb75847e6793b322df73530f9", 0xb8}], 0x9, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xae74}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0x4, [{@remote, 0x9}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x98}}, {{&(0x7f0000004380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000004640)=[{&(0x7f00000043c0)="3a5119200836fa98f03970376c9b82e1b3a6ef19e0894a3f9faecc0022ab811ab3ffc25347aa", 0x26}, {&(0x7f0000004400)="74a5136f52151b567ccc75c4a57c401a62b9d1b6686837cfe91b925bc1c129d56ad54c033ec3a2289f1a08c67d04ece8d0dcea6a33c72dea38638efe03b1b78aedc68a01fa45159fbd2aba94c36f1a542b252973b66f1ff9700a0d6c67e0e67833d6d544525454d12cfd25d8be6051d3cad03a8731e7b6748230b5d7a37297d8322ef382d06f75af985a56c5fc8b5499cfeab6fe9b0f69ea8f2ab1a2ea2057577fe3511766239170f178d9d20570ff89e5f52c86", 0xb4}, {&(0x7f00000044c0)="01b08d4cd4bfb4e943f7cdeaf286bf6d46674bb62334aa91d8b85c017943e91d25", 0x21}, {&(0x7f0000004500)="8fde3f455264be3c09f2bb68bd70294cdcdee2c9407a0b21c7cdf9ff1e", 0x1d}, {&(0x7f0000004540)="7b0b384ef5b2a2dc20ba3d3ed7f5f4", 0xf}, {&(0x7f0000004580)="234026c13d7d4b1a0cad5e99838df87bcbf2aec4b5a727a5dab997752973e129f0742a7ab5172c52f65c2f0e35fe66e72c0277b1983540d70f9286d85a18032fcff44a1181881a367477f7bdc45186fba66591f7813cfe0a4ffa0e5e6b0bfa456d094e983ee42fd962790a6d0f3217360118dc66562f7038c35ac7e0056b8020cbd060dcb90c", 0x86}], 0x6, &(0x7f00000046c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x78}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004740)="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", 0xfe}, {&(0x7f0000004840)="3d231fb1ce778df789b4831971c3f6d05631f58e2143eb00b3dead48ea7a26a11d3b3b7a7b1ae589b00a6f2d7495050335c6391db1d2731ab7608d26af692a15f2840a", 0x43}, {&(0x7f00000048c0)="172eb28a4ab3b6ce7e259962ff26041aa4876846ab715e1fac59048e966df379f1ea05790dc79d532794cdbe5aa79b0305f0e8936472d442a389b10d768a9a747ded26aa65deadeb56898534fe720f8ca5035cbabc79eeacaf51984b2fa321c1fe1d7e5420d3751e00c9b786c40528e651ea45", 0x73}, {&(0x7f0000004940)="0be6ddb16478522b04c2f5ea857cf2f1dc7f20da930d9cd2f0bd3099bc293c1194194fac994d24dbbddc1f9b9c81ef919871caec86ed4372333f2722683eae81f17bd9d2e4ccb2675d5020d9f6b0e2d7da94aa4aa1a82e19f73b80dc8fc898b3f3d33c013d65640cc5235cc866090e1d", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004a00)="bc9a47eb456669168bf1fbe03c2a03ac864b5bd5f4ca14efcd43f936422636eca08847c9f5dd86a9ba55b5f8b2f54fc4e2c03103b1fa28fe3ee18bbab7e0a6663ebaa4f6cd66af1d3457f1f093772573a1c61ceb7cc710a7bf33ffa4fde1f0ebc94a72a625e7c2fb11cc63923fafda33a8160d0ff781474e25044600b09c307ff4abc8cfaa40536bb48cc484726d3bee1d794016884d3f37c5f66e88050a5f3486649f84e013", 0xa6}, {&(0x7f0000004ac0)="dea8942b8b293f46adb29fde346e4befc0c8c352ccc162ac8be4a8d1df4f3dd053", 0x21}, {&(0x7f0000004b00)="35b28f0683f6c390128d2f89b24347cd961755aa6a9910e823bfe7873e1cb38e74926efbd5667ef500740abba6705e5526b33b1429e80d4581b7ca7155e65b6819f02616ef729da86ccd241deccc21e89d0b665542935a049aa3e434", 0x5c}, {&(0x7f0000004b80)="736546e8ba17153e53aa619f1a7e4b864fe4eadee626ac31b690a770e8b9082dd8f21c21e1589f2ea6d7d6dc92ca5cf52659b04325743a37a2dc5436", 0x3c}, {&(0x7f0000004bc0)="149782ebd0b33d61a058b03276b2df4a882ca1ae0038c2ba94783d2cb9ad44b1a0043e329d736d9cb3d4234d1b0907b3595130c7e28a207f30ff1bb2b20b089af7391380e9cefae18dab8b7839e50c3532195f8a9c4ed253b6fb99f0e7", 0x5d}, {&(0x7f0000004c40)="1a5c9efb65846e89022725ff22b2ee5353ebe3f9b8b7ecd4e0093680fe3b708ff5ac45e8435a6c5f83956416b1c4065ef7479c10645eb905ff3b1f3c859fd4f51cf8a24b8ef9f04884aac7714963e31fd2e1555c635955169406e71b4e1699c59e05b45072c3a6636c51b47d7abec827", 0x70}, {&(0x7f0000004cc0)="945fe0f698f1cd1b421493eebb4cc3b548f7a309827597c09ec5f1", 0x1b}, {&(0x7f0000004d00)="affa99d9bb2844e59410ee61ce8daa981f2905378e81492f01b7cb227a505e9f3ace6e8c58fa06577ede59eccb67d8fc7d7b6691c169c56c8fa03c6b9b38ff6880aba471581764691983418273fbf747d077a469a8a70bfbf70fc371e50bac98d929fe4a3340a007746d868905489f74e2f49332b35ce14a3743e816eb819b20b68c1ef0104c3d34427a90b4ae7773c6c026d11732f7035d2d486d46f5aaf895ff0b7a6fa7f9f14096ef9c38906d9a898371db56121158e434a96a2c46679848e9ba05f71ade991963f904419ded177b0794e462e64f18a6a79317a40159e093341d0afadc5db64b90119b04b8db7cb63e718a8f344674", 0xf7}, {&(0x7f0000004e00)="26fdba034c107377f05c208c17c8f64f8b101ad7f1f611a021afc82dc6ec5161350b4d9aae92362b8f5b7921dc4dc9a49bff9ffa8dd20581b629a36e385a01df7e", 0x41}, {&(0x7f0000004e80)="ee27e168594db76e9a7cfd36112524a366d75b9ccc85", 0x16}], 0xa, &(0x7f0000005100)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xa8}}], 0x4, 0x84)

4.636330482s ago: executing program 1 (id=595):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
syz_open_dev$video4linux(0x0, 0x101, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3)
r1 = syz_open_dev$usbfs(0x0, 0x3, 0x40000)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x6fd})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0xe, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "98000001", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0xfffffffffffffffe, 0x4, 0x0, 0x5, 0x4063, "57c1169b0964ea61ee64feabb03d583f"})
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc02990000000076", 0x21, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

4.635872311s ago: executing program 4 (id=596):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r0, 0x0, 0x0, 0x40045)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x401, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x7378, &(0x7f00000002c0)={0x0, 0xe48a, 0x800, 0x0, 0x203}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r8 = socket$inet(0x2b, 0x801, 0x0)
r9 = creat(0x0, 0xd931d3864d39dcca)
ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x40010020})
ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @pic={0xd7, 0x6b, 0xf, 0x20, 0x5, 0x14, 0x40, 0x4, 0x3, 0x2, 0xb, 0x9, 0x7, 0x30, 0x6, 0x6}})
io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x604a90391652681, 0x0)

3.384567766s ago: executing program 3 (id=597):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5884, 0x0, 0x0, 0x40109}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
fchdir(r0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x501000, 0x2, 0x5}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES64=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYRES16=r5], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x80, 0xc, 0x103, 0x0, 0x0, 0x0, 0x0})

2.837931208s ago: executing program 2 (id=598):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x2, &(0x7f0000000200)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
r2 = io_uring_setup(0x1613, &(0x7f0000000180)={0x0, 0xcfa6, 0x800, 0x3, 0x291})
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x6, 0x4000, r2, 0x0, 0x0, 0x38000000000000, 0x0, 0x1, r1}]) (fail_nth: 5)

2.772417289s ago: executing program 4 (id=599):
r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080))
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x35a4d706)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000003c0), 0x7fff, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000bc0), &(0x7f0000000cc0)=""/251}, 0x20)
syz_usb_connect(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESOCT=r2], 0x0)

2.501206155s ago: executing program 1 (id=600):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$sock_int(r3, 0x1, 0x13, &(0x7f00000000c0)=0x91, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYBLOB="339d37e167856f664712ee41549961df1e3cc9514c9ddd5ff0ae70d8b3fc42ec471265595d6e69cb2e44f9c8a02850340f4b159427bd5698176490dcd119d6bedd46feee40b815785e8397d35860018ffc119d6910af204960bef6bede69", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)

1.344961172s ago: executing program 2 (id=601):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d50, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_BLACKHOLE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x1c, 0x2c, 0x9, 0x70bd2b, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26000000}, 0x4000)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)

1.280544045s ago: executing program 3 (id=602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0)
unshare(0x2c020400)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fadvise64(r4, 0x401, 0x0, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
bind$inet6(r2, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0, <r5=>0x0})
ptrace$setregs(0xf, r5, 0x1, &(0x7f0000000380)="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")
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setrlimit(0x2, &(0x7f00000000c0))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6)

349.471566ms ago: executing program 1 (id=603):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x8c4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
dup2(r3, r4)

268.40722ms ago: executing program 3 (id=604):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r1, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
close(0x4)
sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5)

251.420655ms ago: executing program 4 (id=605):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0) (fail_nth: 5)

88.193563ms ago: executing program 0 (id=606):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x8c4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) (fail_nth: 3)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
dup2(r3, r4)

0s ago: executing program 2 (id=607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa0000ef"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

kernel console output (not intermixed with test programs):

state
[   93.559498][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.572668][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.579827][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.595748][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.602939][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.616308][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   93.646964][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.654257][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.664970][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.672139][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.839735][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.933258][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   93.963156][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.970386][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.010347][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.017569][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.139187][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.183202][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.276473][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.409142][ T5833] veth0_vlan: entered promiscuous mode
[   94.462414][ T5833] veth1_vlan: entered promiscuous mode
[   94.533365][ T5829] veth0_vlan: entered promiscuous mode
[   94.600004][ T5833] veth0_macvtap: entered promiscuous mode
[   94.615263][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.644542][ T5829] veth1_vlan: entered promiscuous mode
[   94.659618][ T5833] veth1_macvtap: entered promiscuous mode
[   94.690779][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.702722][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.728392][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.738339][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.771770][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.784290][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.793777][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.803854][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.909670][ T5829] veth0_macvtap: entered promiscuous mode
[   94.961997][ T5838] veth0_vlan: entered promiscuous mode
[   94.981589][ T5829] veth1_macvtap: entered promiscuous mode
[   95.021193][   T55] Bluetooth: hci3: command tx timeout
[   95.026671][   T55] Bluetooth: hci0: command tx timeout
[   95.045489][ T5838] veth1_vlan: entered promiscuous mode
[   95.084442][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.095878][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.117001][   T55] Bluetooth: hci1: command tx timeout
[   95.122612][ T5846] Bluetooth: hci4: command tx timeout
[   95.122624][ T5837] Bluetooth: hci2: command tx timeout
[   95.138709][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.146151][ T5828] veth0_vlan: entered promiscuous mode
[   95.175903][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.191915][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.203329][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.231166][ T5828] veth1_vlan: entered promiscuous mode
[   95.271541][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.282375][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.292397][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.301326][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.341923][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.347674][ T5828] veth0_macvtap: entered promiscuous mode
[   95.358203][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.369027][ T5838] veth0_macvtap: entered promiscuous mode
[   95.403608][ T5838] veth1_macvtap: entered promiscuous mode
[   95.413759][ T5828] veth1_macvtap: entered promiscuous mode
[   95.484103][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.484638][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.498702][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.510853][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.520854][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.531378][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.543403][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.573141][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.585034][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.597616][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.608273][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.619485][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.650672][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.661388][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.670560][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.679592][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.692899][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.705145][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.720537][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.732777][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.743721][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.755946][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.768932][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.783614][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.801973][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.832578][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.835289][ T5839] veth0_vlan: entered promiscuous mode
[   95.860726][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.872299][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.883074][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.893739][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.904181][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.914730][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.925793][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.964131][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.980178][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.989655][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.998630][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.036305][ T5839] veth1_vlan: entered promiscuous mode
[   96.072590][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.092122][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.161224][ T5839] veth0_macvtap: entered promiscuous mode
[   96.220791][ T5839] veth1_macvtap: entered promiscuous mode
[   96.292562][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.323889][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.400415][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.414538][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.425531][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.439525][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.451040][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.467504][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.478812][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.489203][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.500188][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.513916][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.536635][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.557062][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.572513][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.584838][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.599979][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.612634][ T5893] usb 2-1: Using ep0 maxpacket: 8
[   96.628020][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.645357][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.656035][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.667103][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.678346][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.689832][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.707638][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.720774][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.726686][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[   96.738249][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.745520][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.746678][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.177655][   T55] Bluetooth: hci0: command tx timeout
[   97.192292][   T55] Bluetooth: hci3: command tx timeout
[   97.202377][   T55] Bluetooth: hci1: command tx timeout
[   97.208478][ T5846] Bluetooth: hci4: command tx timeout
[   97.225207][   T55] Bluetooth: hci2: command tx timeout
[   97.296775][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.310638][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.319934][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.332996][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.432987][ T5893] usb 2-1: config 0 descriptor??
[   97.517003][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.542921][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.842346][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.577633][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.789130][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.821614][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.730161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   99.839345][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.848273][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.857080][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.242269][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.537716][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  100.570297][ T5893] usbhid 2-1:0.0: can't add hid device: -71
[  100.576667][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  100.638027][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.944270][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  101.267495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  101.470780][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.410638][ T5893] usb 2-1: USB disconnect, device number 2
[  103.800784][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[  103.814286][ T5941] dccp_close: ABORT with 15584 bytes unread
[  104.012064][ T5959] netlink: zone id is out of range
[  104.126835][ T5959] netlink: zone id is out of range
[  104.557315][ T5959] netlink: zone id is out of range
[  104.642717][ T5959] netlink: zone id is out of range
[  104.686973][ T5956] Bluetooth: MGMT ver 1.23
[  104.698543][ T5959] netlink: zone id is out of range
[  104.726333][ T5959] netlink: zone id is out of range
[  104.765302][ T5966] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  104.814327][ T5959] netlink: zone id is out of range
[  104.866446][ T5959] netlink: zone id is out of range
[  104.887267][ T5959] netlink: zone id is out of range
[  108.207974][ T5984] mmap: syz.4.16 (5984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  110.316524][ T5999] tmpfs: Unknown parameter 'usrquotauencer'
[  112.667347][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  112.855713][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  112.886286][ T5831] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  112.917190][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.943059][ T5831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  112.963505][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.983998][ T5831] usb 1-1: Product: syz
[  112.995030][ T5831] usb 1-1: Manufacturer: syz
[  113.005490][ T5831] usb 1-1: SerialNumber: syz
[  113.266078][ T5831] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  113.293682][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.347600][ T5831] usb 1-1: USB disconnect, device number 2
[  113.408910][ T5831] usblp0: removed
[  113.427313][ T5843] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  114.011215][ T5843] usb 3-1: unable to get BOS descriptor or descriptor too short
[  114.071287][ T5843] usb 3-1: config 8 has an invalid interface number: 150 but max is 0
[  114.116169][ T6018] net_ratelimit: 16 callbacks suppressed
[  114.116187][ T6018] dccp_close: ABORT with 15584 bytes unread
[  114.129634][ T5843] usb 3-1: config 8 has no interface number 0
[  114.135804][ T5843] usb 3-1: config 8 interface 150 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  114.153197][ T5843] usb 3-1: config 8 interface 150 altsetting 1 endpoint 0x2 has invalid maxpacket 32, setting to 8
[  115.287251][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.379844][ T5843] usb 3-1: config 8 interface 150 has no altsetting 0
[  115.405006][ T5843] usb 3-1: string descriptor 0 read error: -22
[  115.435261][ T5843] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=c5.3c
[  115.486715][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.527336][ T5831] usb 4-1: Using ep0 maxpacket: 32
[  115.557931][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short
[  115.784291][ T5831] usb 4-1: config 135 has an invalid interface number: 255 but max is 0
[  115.802755][ T5831] usb 4-1: config 135 has no interface number 0
[  115.813610][ T5831] usb 4-1: config 135 interface 255 has no altsetting 0
[  117.247074][ T5831] usb 4-1: string descriptor 0 read error: -71
[  117.253804][ T5831] usb 4-1: New USB device found, idVendor=12d1, idProduct=a8a0, bcdDevice=37.e8
[  117.263360][ T5843] peak_usb 3-1:8.150 can0: unable to request usb[type=0 value=1] err=-71
[  117.288167][ T5843] peak_usb 3-1:8.150: unable to read PCAN-Chip USB firmware info (err -71)
[  117.327342][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.556561][ T5831] usb 4-1: can't set config #135, error -71
[  117.879165][ T5831] usb 4-1: USB disconnect, device number 2
[  117.942386][ T6043] netlink: 'syz.2.31': attribute type 2 has an invalid length.
[  117.961659][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'.
[  117.992515][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.006781][ T5843] peak_usb 3-1:8.150: probe with driver peak_usb failed with error -71
[  118.183417][ T6043] : entered promiscuous mode
[  118.200189][ T6046] netlink: 68 bytes leftover after parsing attributes in process `syz.3.32'.
[  118.227409][ T5843] usb 3-1: USB disconnect, device number 2
[  118.305587][ T6047] tmpfs: Unknown parameter 'usrquotauencer'
[  120.268332][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  120.393762][ T6063] Zero length message leads to an empty skb
[  120.608929][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  120.793729][ T5918] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  120.864015][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.073863][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  121.093209][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.107178][ T5918] usb 4-1: Product: syz
[  121.813809][ T5918] usb 4-1: Manufacturer: syz
[  121.818951][ T5918] usb 4-1: SerialNumber: syz
[  122.018872][ T6071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.065066][ T5918] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  122.269895][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.212294][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.425971][ T5831] usb 4-1: USB disconnect, device number 3
[  124.589061][ T5831] usblp0: removed
[  124.667738][ T6088] netlink: 'syz.0.45': attribute type 2 has an invalid length.
[  124.701471][ T6088] : entered promiscuous mode
[  124.748494][  T977] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.869817][ T6092] netlink: zone id is out of range
[  124.875051][ T6092] netlink: zone id is out of range
[  124.880267][ T6092] netlink: zone id is out of range
[  124.885574][ T6092] netlink: zone id is out of range
[  124.890870][ T6092] netlink: zone id is out of range
[  124.896067][ T6092] netlink: zone id is out of range
[  124.901315][ T6092] netlink: zone id is out of range
[  124.906514][ T6092] netlink: zone id is out of range
[  124.911871][ T6092] netlink: zone id is out of range
[  124.917052][ T6092] netlink: zone id is out of range
[  124.977340][  T977] usb 3-1: Using ep0 maxpacket: 32
[  126.183707][  T977] usb 3-1: device descriptor read/all, error -71
[  126.703044][ T6112] tmpfs: Unknown parameter 'usrquotauencer'
[  127.607281][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  127.750077][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[  128.219146][ T5918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.235407][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.259752][ T5918] usb 4-1: config 0 descriptor??
[  128.298210][ T5918] cp210x 4-1:0.0: cp210x converter detected
[  128.870289][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.891006][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.936383][ T6107] warning: `syz.3.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  129.357876][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.52'.
[  129.444846][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.165922][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.269244][ T6136] net_ratelimit: 15 callbacks suppressed
[  130.269267][ T6136] netlink: zone id is out of range
[  130.280568][ T6136] netlink: zone id is out of range
[  130.285790][ T6136] netlink: zone id is out of range
[  130.291053][ T6136] netlink: zone id is out of range
[  130.296236][ T6136] netlink: zone id is out of range
[  130.301732][ T6136] netlink: zone id is out of range
[  130.306958][ T6136] netlink: zone id is out of range
[  130.312264][ T6136] netlink: zone id is out of range
[  130.317597][ T6136] netlink: zone id is out of range
[  130.433796][ T6136] netlink: zone id is out of range
[  130.880036][ T6132] netlink: 'syz.0.60': attribute type 2 has an invalid length.
[  131.267449][  T883] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.464013][ T6141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.500370][  T883] usb 5-1: Using ep0 maxpacket: 8
[  131.510689][ T5918] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  131.617222][ T5918] cp210x 4-1:0.0: querying part number failed
[  131.710504][ T5918] usb 4-1: cp210x converter now attached to ttyUSB0
[  131.809520][  T883] usb 5-1: device descriptor read/all, error -71
[  131.893946][ T5918] usb 4-1: USB disconnect, device number 4
[  131.966524][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.058664][ T5918] cp210x 4-1:0.0: device disconnected
[  132.117880][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  132.306576][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.316913][  T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  132.360898][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  132.403604][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.587717][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.074699][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.092022][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.223792][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  133.235190][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.249209][   T10] usb 1-1: Product: syz
[  133.253436][   T10] usb 1-1: Manufacturer: syz
[  133.260524][   T10] usb 1-1: SerialNumber: syz
[  133.297440][  T977] usb 3-1: Using ep0 maxpacket: 32
[  133.315897][  T977] usb 3-1: unable to get BOS descriptor or descriptor too short
[  133.344949][  T977] usb 3-1: config 135 has an invalid interface number: 255 but max is 0
[  133.397161][  T977] usb 3-1: config 135 has no interface number 0
[  133.412140][  T977] usb 3-1: config 135 interface 255 has no altsetting 0
[  133.446422][  T977] usb 3-1: New USB device found, idVendor=12d1, idProduct=a8a0, bcdDevice=37.e8
[  133.538381][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  133.557499][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.529729][  T977] usb 3-1: Product: syz
[  134.550903][  T977] usb 3-1: Manufacturer: syz
[  134.558184][  T977] usb 3-1: SerialNumber: syz
[  134.568643][   T10] usb 1-1: USB disconnect, device number 3
[  135.209477][   T10] usblp0: removed
[  135.366589][  T977] usb 3-1: USB disconnect, device number 5
[  137.287336][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  138.103504][ T5843] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  138.140776][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.182377][ T5843] usb 1-1: config 0 descriptor??
[  138.410594][ T5843] cp210x 1-1:0.0: cp210x converter detected
[  138.445169][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.503466][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.537264][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  139.586422][ T5831] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.586489][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.590504][ T5831] usb 2-1: config 0 descriptor??
[  139.893877][ T6200] tty tty29: ldisc open failed (-12), clearing slot 28
[  140.044806][ T5831] cp210x 2-1:0.0: cp210x converter detected
[  140.151333][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.183145][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.244192][ T5843] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  140.519011][ T5843] cp210x 1-1:0.0: querying part number failed
[  140.735554][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'.
[  140.835494][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.846553][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.587876][ T5843] usb 1-1: cp210x converter now attached to ttyUSB0
[  142.118176][ T5843] usb 1-1: USB disconnect, device number 4
[  142.183305][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  142.319458][ T5843] cp210x 1-1:0.0: device disconnected
[  143.375941][ T5831] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  143.617403][ T5831] cp210x 2-1:0.0: querying part number failed
[  143.729598][ T5831] usb 2-1: cp210x converter now attached to ttyUSB0
[  144.144992][ T5831] usb 2-1: USB disconnect, device number 3
[  144.371586][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  144.457809][ T5831] cp210x 2-1:0.0: device disconnected
[  146.948930][ T6239] tmpfs: Unknown parameter 'usrquotauencer'
[  146.992159][ T6241] tmpfs: Unknown parameter 'usrquotauencer'
[  148.771967][ T5843] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  148.884121][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  149.157321][ T5843] usb 3-1: Using ep0 maxpacket: 8
[  149.164036][ T5831] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  149.187716][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.207509][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.221237][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.234798][ T5831] usb 4-1: config 0 descriptor??
[  149.258970][ T5843] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  149.292264][ T5831] cp210x 4-1:0.0: cp210x converter detected
[  149.305926][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.381419][ T5843] usb 3-1: config 0 descriptor??
[  149.498804][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.557415][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.320501][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'.
[  150.621830][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.632796][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.810409][ T5831] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  152.999017][ T5831] cp210x 4-1:0.0: querying part number failed
[  153.347495][ T5831] usb 4-1: cp210x converter now attached to ttyUSB0
[  153.378460][ T5831] usb 4-1: USB disconnect, device number 5
[  153.404058][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  153.424197][ T5831] cp210x 4-1:0.0: device disconnected
[  153.433553][ T6286] tmpfs: Unknown parameter 'usrquotauencer'
[  153.867286][ T5843] usbhid 3-1:0.0: can't add hid device: -71
[  153.876874][ T5843] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  153.908846][ T5843] usb 3-1: USB disconnect, device number 6
[  154.491515][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  154.907177][   T10] usb 5-1: Using ep0 maxpacket: 16
[  154.950430][   T10] usb 5-1: config index 0 descriptor too short (expected 49803, got 41)
[  154.978791][   T10] usb 5-1: config 0 has an invalid interface number: 87 but max is 0
[  154.987070][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.010167][   T10] usb 5-1: config 0 has no interface number 0
[  155.021068][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0879, bcdDevice= b.28
[  155.037518][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.055765][   T10] usb 5-1: Product: syz
[  155.198102][   T10] usb 5-1: Manufacturer: syz
[  155.203574][   T10] usb 5-1: SerialNumber: syz
[  155.233082][   T10] usb 5-1: config 0 descriptor??
[  156.068597][ T6311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  157.726526][ T5935] usb 5-1: USB disconnect, device number 4
[  158.196649][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  158.524306][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.623847][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.868317][ T5885] usb 3-1: config 0 descriptor??
[  158.881011][ T5885] cp210x 3-1:0.0: cp210x converter detected
[  159.098631][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.137662][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.048348][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'.
[  160.897849][ T6344] tty tty27: ldisc open failed (-12), clearing slot 26
[  160.995905][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.004664][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.668400][ T6354] tmpfs: Unknown parameter 'usrquotauencer'
[  163.205828][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  163.363266][ T5885] cp210x 3-1:0.0: querying part number failed
[  163.418452][ T5885] usb 3-1: cp210x converter now attached to ttyUSB0
[  163.446249][ T5885] usb 3-1: USB disconnect, device number 7
[  163.478291][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  163.494410][ T5885] cp210x 3-1:0.0: device disconnected
[  168.621257][   T30] audit: type=1326 audit(1744798620.025:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.1.124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952618e169 code=0x0
[  170.054079][ T6397] tmpfs: Unknown parameter 'usrquotauencer'
[  171.574843][ T6418] netlink: 'syz.3.135': attribute type 11 has an invalid length.
[  172.207788][ T6414] trusted_key: syz.0.136 sent an empty control message without MSG_MORE.
[  172.583233][ T6429] FAULT_INJECTION: forcing a failure.
[  172.583233][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  173.328644][ T5885] kernel read not supported for file /dsp (pid: 5885 comm: kworker/0:5)
[  173.391478][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.1.140 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  173.391510][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  173.391527][ T6429] Call Trace:
[  173.391536][ T6429]  <TASK>
[  173.391545][ T6429]  dump_stack_lvl+0x241/0x360
[  173.391599][ T6429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.391634][ T6429]  ? __pfx__printk+0x10/0x10
[  173.391680][ T6429]  should_fail_ex+0x424/0x570
[  173.391710][ T6429]  _copy_to_user+0x31/0xb0
[  173.391744][ T6429]  simple_read_from_buffer+0xc4/0x170
[  173.391772][ T6429]  proc_fail_nth_read+0x1ef/0x260
[  173.391803][ T6429]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.391834][ T6429]  ? rw_verify_area+0x246/0x630
[  173.391862][ T6429]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.391891][ T6429]  vfs_read+0x21f/0xb90
[  173.391928][ T6429]  ? __pfx_vfs_read+0x10/0x10
[  173.391956][ T6429]  ? irqentry_exit+0x63/0x90
[  173.391980][ T6429]  ? lockdep_hardirqs_on+0x9d/0x150
[  173.392025][ T6429]  ksys_read+0x19d/0x2d0
[  173.392057][ T6429]  ? __pfx_ksys_read+0x10/0x10
[  173.392093][ T6429]  ? do_syscall_64+0xb6/0x230
[  173.392122][ T6429]  do_syscall_64+0xf3/0x230
[  173.392149][ T6429]  ? clear_bhb_loop+0x45/0xa0
[  173.392174][ T6429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.392200][ T6429] RIP: 0033:0x7f952618cb7c
[  173.392223][ T6429] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  173.392240][ T6429] RSP: 002b:00007f9526f11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.392263][ T6429] RAX: ffffffffffffffda RBX: 00007f95263b5fa0 RCX: 00007f952618cb7c
[  173.392278][ T6429] RDX: 000000000000000f RSI: 00007f9526f110a0 RDI: 0000000000000004
[  173.392290][ T6429] RBP: 00007f9526f11090 R08: 0000000000000000 R09: 0000000000000000
[  173.392302][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.392314][ T6429] R13: 0000000000000000 R14: 00007f95263b5fa0 R15: 00007fff75b7df68
[  173.392350][ T6429]  </TASK>
[  173.523488][ T6433] xt_HMARK: proto mask must be zero with L3 mode
[  173.527994][ T5843] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  173.890826][ T5843] usb 4-1: device descriptor read/64, error -71
[  174.647281][ T5843] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  174.787521][ T5893] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  174.795941][ T5843] usb 4-1: device descriptor read/64, error -71
[  174.813386][ T6444] tmpfs: Unknown parameter 'usrquotauencer'
[  174.967660][ T5843] usb usb4-port1: attempt power cycle
[  175.019189][ T5893] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  175.045574][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.065832][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.076228][ T6450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.147'.
[  175.321083][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.338765][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.347010][ T5893] usb 3-1: Product: syz
[  175.351362][ T5893] usb 3-1: Manufacturer: syz
[  175.355972][ T5893] usb 3-1: SerialNumber: syz
[  175.393197][ T5843] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  176.518225][ T6465] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[  176.799031][ T5843] usb 4-1: device not accepting address 8, error -71
[  177.438506][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[  178.905237][ T5893] usb 3-1: 0:2 : does not exist
[  179.009161][ T5893] usb 3-1: USB disconnect, device number 8
[  179.943521][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.119405][ T6499] autofs: Bad value for 'fd'
[  180.381963][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'.
[  181.270926][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'.
[  181.927578][  T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  182.473294][ T5954] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  182.895699][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  182.903461][  T977] usb 1-1: Using ep0 maxpacket: 8
[  183.441081][  T977] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  183.893629][   T10] usb 2-1: Using ep0 maxpacket: 16
[  183.941252][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.949917][  T977] usb 1-1: Product: syz
[  183.954349][  T977] usb 1-1: Manufacturer: syz
[  183.959218][  T977] usb 1-1: SerialNumber: syz
[  183.985253][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  184.013248][   T10] usb 2-1: config 0 has no interface number 0
[  184.057528][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  185.179578][  T977] usb 1-1: config 0 descriptor??
[  185.229490][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  185.374647][  T977] usb 1-1: can't set config #0, error -71
[  185.383954][   T10] usb 2-1: string descriptor 0 read error: -71
[  185.466147][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  185.484539][  T977] usb 1-1: USB disconnect, device number 5
[  185.599624][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  187.438480][   T10] usb 2-1: config 0 descriptor??
[  187.674332][   T10] usb 2-1: can't set config #0, error -71
[  187.684634][ T6548] trusted_key: encrypted_key: master key parameter 'ur:syz' is invalid
[  187.732110][   T10] usb 2-1: USB disconnect, device number 4
[  187.739252][ T6550] trusted_key: encrypted_key: master key parameter 'ec�k' is invalid
[  189.911984][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.176'.
[  190.320354][  T977] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  190.714368][  T977] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  190.729578][  T977] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  190.749610][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  190.793229][  T977] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  190.832094][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  190.836060][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  190.964893][ T6584] FAULT_INJECTION: forcing a failure.
[  190.964893][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.972387][  T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  190.996282][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.4.182 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  190.996309][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  190.996320][ T6584] Call Trace:
[  190.996328][ T6584]  <TASK>
[  190.996335][ T6584]  dump_stack_lvl+0x241/0x360
[  190.996382][ T6584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.996407][ T6584]  ? __pfx__printk+0x10/0x10
[  190.996443][ T6584]  should_fail_ex+0x424/0x570
[  190.996468][ T6584]  _copy_to_user+0x31/0xb0
[  190.996495][ T6584]  copy_to_sockptr+0x57/0xb0
[  190.996523][ T6584]  do_tcp_getsockopt+0x28b2/0x3850
[  190.996560][ T6584]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  190.996585][ T6584]  ? _parse_integer_limit+0x1b4/0x200
[  190.996615][ T6584]  ? kstrtoull+0x1d3/0x2f0
[  190.996638][ T6584]  ? __pfx_kstrtoull+0x10/0x10
[  190.996671][ T6584]  ? kstrtouint+0xfc/0x190
[  190.996701][ T6584]  ? __lock_acquire+0xad5/0xd80
[  190.996758][ T6584]  tcp_getsockopt+0x105/0x1d0
[  190.996792][ T6584]  ? __pfx_tcp_getsockopt+0x10/0x10
[  190.996827][ T6584]  ? sock_common_getsockopt+0x2e/0xb0
[  190.996855][ T6584]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  190.996886][ T6584]  do_sock_getsockopt+0x391/0x740
[  190.996915][ T6584]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  190.996933][ T6584]  ? __fget_files+0x2a/0x420
[  190.996960][ T6584]  ? __fget_files+0x39d/0x420
[  190.996982][ T6584]  ? __fget_files+0x2a/0x420
[  190.997013][ T6584]  __x64_sys_getsockopt+0x2a3/0x370
[  190.997042][ T6584]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  190.997078][ T6584]  ? do_syscall_64+0xb6/0x230
[  190.997106][ T6584]  do_syscall_64+0xf3/0x230
[  190.997132][ T6584]  ? clear_bhb_loop+0x45/0xa0
[  190.997156][ T6584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.997177][ T6584] RIP: 0033:0x7f171678e169
[  190.997201][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.997218][ T6584] RSP: 002b:00007f1717536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  190.997248][ T6584] RAX: ffffffffffffffda RBX: 00007f17169b5fa0 RCX: 00007f171678e169
[  190.997263][ T6584] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  190.997274][ T6584] RBP: 00007f1717536090 R08: 0000200000000180 R09: 0000000000000000
[  190.997288][ T6584] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  190.997300][ T6584] R13: 0000000000000000 R14: 00007f17169b5fa0 R15: 00007fff25b14b98
[  190.997331][ T6584]  </TASK>
[  191.387247][  T977] usb 3-1: string descriptor 0 read error: -22
[  191.393857][  T977] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  191.403161][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.420212][  T977] usb 3-1: config 0 descriptor??
[  191.461067][ T6569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  191.866947][ T6580] net_ratelimit: 15 callbacks suppressed
[  191.866966][ T6580] sctp: failed to load transform for md5: -2
[  191.910323][  T977] hub 3-1:0.0: bad descriptor, ignoring hub
[  191.916316][  T977] hub 3-1:0.0: probe with driver hub failed with error -5
[  191.929095][  T977] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[  192.242698][  T883] usb 3-1: USB disconnect, device number 9
[  192.248675][    C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19
[  192.447326][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  192.669074][ T5831] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  192.702383][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.110339][ T5831] usb 5-1: config 0 descriptor??
[  193.140878][ T5831] cp210x 5-1:0.0: cp210x converter detected
[  193.432422][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.567690][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.537503][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.184'.
[  194.562873][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.570465][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.784547][ T6618] input: syz1 as /devices/virtual/input/input6
[  195.089682][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.124384][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.797279][ T5831] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  197.809751][ T5831] cp210x 5-1:0.0: querying part number failed
[  198.087515][ T5843] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  198.095531][ T6635] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET)
[  198.680482][ T5831] usb 5-1: cp210x converter now attached to ttyUSB0
[  198.727338][ T5843] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.756167][ T5831] usb 5-1: USB disconnect, device number 5
[  198.771133][ T5843] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  198.824083][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  198.842370][ T5843] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.891000][ T5831] cp210x 5-1:0.0: device disconnected
[  198.896718][ T6644] capability: warning: `syz.1.199' uses 32-bit capabilities (legacy support in use)
[  198.967462][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.950473][ T6647] FAULT_INJECTION: forcing a failure.
[  199.950473][ T6647] name failslab, interval 1, probability 0, space 0, times 1
[  199.973187][    C1] raw-gadget.3 gadget.3: ignoring, device is not running
[  199.983718][ T5843] usb 4-1: can't set config #27, error -32
[  200.019533][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.0.200 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  200.019571][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  200.019584][ T6647] Call Trace:
[  200.019592][ T6647]  <TASK>
[  200.019601][ T6647]  dump_stack_lvl+0x241/0x360
[  200.019639][ T6647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.019669][ T6647]  ? __pfx__printk+0x10/0x10
[  200.019695][ T6647]  ? __lock_acquire+0xad5/0xd80
[  200.019729][ T6647]  should_fail_ex+0x424/0x570
[  200.019757][ T6647]  should_failslab+0xac/0x100
[  200.019781][ T6647]  kmem_cache_alloc_noprof+0x78/0x390
[  200.019802][ T6647]  ? skb_clone+0x20c/0x390
[  200.019832][ T6647]  skb_clone+0x20c/0x390
[  200.019860][ T6647]  __netlink_deliver_tap+0x3c4/0x7f0
[  200.019905][ T6647]  ? netlink_deliver_tap+0x2e/0x1b0
[  200.019934][ T6647]  netlink_deliver_tap+0x19d/0x1b0
[  200.019966][ T6647]  netlink_unicast+0x7c6/0x9a0
[  200.020004][ T6647]  ? __pfx_netlink_unicast+0x10/0x10
[  200.020034][ T6647]  ? skb_put+0x114/0x1f0
[  200.020059][ T6647]  netlink_sendmsg+0x8c3/0xcd0
[  200.020117][ T6647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.020163][ T6647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.020192][ T6647]  __sock_sendmsg+0x221/0x270
[  200.020225][ T6647]  ____sys_sendmsg+0x523/0x860
[  200.020258][ T6647]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.020279][ T6647]  ? __fget_files+0x2a/0x420
[  200.020307][ T6647]  ? __fget_files+0x2a/0x420
[  200.020342][ T6647]  __sys_sendmsg+0x271/0x360
[  200.020372][ T6647]  ? __pfx___sys_sendmsg+0x10/0x10
[  200.020458][ T6647]  ? do_syscall_64+0xb6/0x230
[  200.020489][ T6647]  do_syscall_64+0xf3/0x230
[  200.020516][ T6647]  ? clear_bhb_loop+0x45/0xa0
[  200.020543][ T6647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.020564][ T6647] RIP: 0033:0x7f007538e169
[  200.020583][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.020599][ T6647] RSP: 002b:00007f00731f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.020622][ T6647] RAX: ffffffffffffffda RBX: 00007f00755b5fa0 RCX: 00007f007538e169
[  200.020636][ T6647] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000006
[  200.020650][ T6647] RBP: 00007f00731f6090 R08: 0000000000000000 R09: 0000000000000000
[  200.020662][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.020674][ T6647] R13: 0000000000000000 R14: 00007f00755b5fa0 R15: 00007fff549ee4e8
[  200.020707][ T6647]  </TASK>
[  200.570121][ T5885] usb 4-1: USB disconnect, device number 11
[  200.844813][ T6653] can0: slcan on ptm0.
[  201.195730][ T6651] can0 (unregistered): slcan off ptm0.
[  201.620946][ T6671] input: syz1 as /devices/virtual/input/input7
[  202.757394][  T883] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  202.965216][  T883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.995529][  T883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.092707][  T883] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  203.230857][  T883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  203.718625][  T883] usb 5-1: SerialNumber: syz
[  204.049244][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'.
[  205.824003][  T883] usb 5-1: 0:2 : does not exist
[  205.839067][ T6701] netlink: 'syz.1.211': attribute type 10 has an invalid length.
[  205.941632][ T6701] macvlan0: entered promiscuous mode
[  205.957659][ T6701] macvlan0: entered allmulticast mode
[  207.244546][  T883] usb 5-1: USB disconnect, device number 6
[  207.274305][ T6701] veth1_vlan: entered allmulticast mode
[  208.727199][ T6697] sctp: failed to load transform for md5: -2
[  208.819287][ T6701] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  208.855005][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.009371][ T6729] 9pnet_fd: Insufficient options for proto=fd
[  210.349408][ T6736] input: syz1 as /devices/virtual/input/input8
[  211.893146][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  211.899416][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  211.905506][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  211.912621][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  217.016612][ T6776] block device autoloading is deprecated and will be removed.
[  217.026242][ T6776] syz.4.232: attempt to access beyond end of device
[  217.026242][ T6776] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  217.200840][ T6783] netlink: 'syz.3.235': attribute type 4 has an invalid length.
[  217.209035][ T6783] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.235'.
[  219.420423][ T6814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.427947][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  219.435639][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  219.442959][ T6814] IPv6: NLM_F_CREATE should be set when creating new route
[  219.573485][ T6810] netlink: 'syz.3.242': attribute type 10 has an invalid length.
[  220.177543][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'.
[  220.192063][ T6815] sctp: failed to load transform for md5: -2
[  220.288032][ T6810] macvlan0: entered promiscuous mode
[  220.293411][ T6810] macvlan0: entered allmulticast mode
[  220.336401][ T6810] veth1_vlan: entered allmulticast mode
[  220.345494][ T6810] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  220.707223][ T5843] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  220.760116][ T6840] Set syz0 is full, maxelem 0 reached
[  221.290578][ T5843] usb 3-1: config 64 has an invalid interface number: 4 but max is 0
[  221.302722][ T5843] usb 3-1: config 64 has no interface number 0
[  221.905688][ T5843] usb 3-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=23.2b
[  221.920343][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.928568][ T5843] usb 3-1: Product: syz
[  221.933096][ T5843] usb 3-1: Manufacturer: syz
[  221.937859][ T5843] usb 3-1: SerialNumber: syz
[  223.048421][ T5843] usb 3-1: USB disconnect, device number 10
[  223.135947][ T6831] capability: warning: `syz.0.246' uses deprecated v2 capabilities in a way that may be insecure
[  223.202109][ T6831] program syz.0.246 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.212170][ T6862] FAULT_INJECTION: forcing a failure.
[  223.212170][ T6862] name failslab, interval 1, probability 0, space 0, times 0
[  223.225139][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.4.256 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  223.225166][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  223.225178][ T6862] Call Trace:
[  223.225186][ T6862]  <TASK>
[  223.225194][ T6862]  dump_stack_lvl+0x241/0x360
[  223.225229][ T6862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.225258][ T6862]  ? __pfx__printk+0x10/0x10
[  223.225284][ T6862]  ? __lock_acquire+0xad5/0xd80
[  223.225315][ T6862]  should_fail_ex+0x424/0x570
[  223.225343][ T6862]  should_failslab+0xac/0x100
[  223.225367][ T6862]  kmem_cache_alloc_noprof+0x78/0x390
[  223.225387][ T6862]  ? skb_clone+0x20c/0x390
[  223.225416][ T6862]  skb_clone+0x20c/0x390
[  223.225443][ T6862]  __netlink_deliver_tap+0x3c4/0x7f0
[  223.225485][ T6862]  ? netlink_deliver_tap+0x2e/0x1b0
[  223.225513][ T6862]  netlink_deliver_tap+0x19d/0x1b0
[  223.225543][ T6862]  netlink_unicast+0x7c6/0x9a0
[  223.225580][ T6862]  ? __pfx_netlink_unicast+0x10/0x10
[  223.225608][ T6862]  ? skb_put+0x114/0x1f0
[  223.225633][ T6862]  netlink_sendmsg+0x8c3/0xcd0
[  223.225676][ T6862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.225720][ T6862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.225746][ T6862]  __sock_sendmsg+0x221/0x270
[  223.225776][ T6862]  ____sys_sendmsg+0x523/0x860
[  223.225805][ T6862]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.225823][ T6862]  ? __fget_files+0x2a/0x420
[  223.225858][ T6862]  ? __fget_files+0x2a/0x420
[  223.225892][ T6862]  __sys_sendmsg+0x271/0x360
[  223.225920][ T6862]  ? __pfx___sys_sendmsg+0x10/0x10
[  223.226001][ T6862]  ? do_syscall_64+0xb6/0x230
[  223.226030][ T6862]  do_syscall_64+0xf3/0x230
[  223.226054][ T6862]  ? clear_bhb_loop+0x45/0xa0
[  223.226079][ T6862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.226098][ T6862] RIP: 0033:0x7f171678e169
[  223.226116][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.226133][ T6862] RSP: 002b:00007f1717536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.226154][ T6862] RAX: ffffffffffffffda RBX: 00007f17169b5fa0 RCX: 00007f171678e169
[  223.226169][ T6862] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  223.226181][ T6862] RBP: 00007f1717536090 R08: 0000000000000000 R09: 0000000000000000
[  223.226193][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.226204][ T6862] R13: 0000000000000000 R14: 00007f17169b5fa0 R15: 00007fff25b14b98
[  223.226236][ T6862]  </TASK>
[  225.390524][ T6891] xt_HMARK: proto mask must be zero with L3 mode
[  226.354326][ T5893] IPVS: starting estimator thread 0...
[  226.537482][ T6897] IPVS: using max 31 ests per chain, 74400 per kthread
[  227.638783][ T6912] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  227.638783][ T6912] S�Ș�ȞZ�6��'
[  227.917495][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  228.239158][ T5954] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  228.257188][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.272045][ T5954] usb 2-1: config 0 descriptor??
[  228.340730][ T6925] Bluetooth: MGMT ver 1.23
[  228.779363][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.853065][ T5954] cp210x 2-1:0.0: cp210x converter detected
[  228.920425][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.002144][ T6923] Process accounting resumed
[  229.292668][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'.
[  229.381693][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.391776][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.534573][ T6934] FAULT_INJECTION: forcing a failure.
[  230.534573][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.548718][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.3.274 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  230.548738][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  230.548747][ T6934] Call Trace:
[  230.548753][ T6934]  <TASK>
[  230.548759][ T6934]  dump_stack_lvl+0x241/0x360
[  230.548786][ T6934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.548806][ T6934]  ? __pfx__printk+0x10/0x10
[  230.548845][ T6934]  should_fail_ex+0x424/0x570
[  230.548865][ T6934]  _copy_from_user+0x2d/0xb0
[  230.548887][ T6934]  copy_msghdr_from_user+0xb3/0x580
[  230.548912][ T6934]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  230.548930][ T6934]  ? __fget_files+0x2a/0x420
[  230.548950][ T6934]  ? __fget_files+0x2a/0x420
[  230.548973][ T6934]  __sys_sendmsg+0x20a/0x360
[  230.548993][ T6934]  ? __pfx___sys_sendmsg+0x10/0x10
[  230.549044][ T6934]  ? __secure_computing+0xef/0x2f0
[  230.549069][ T6934]  do_syscall_64+0xf3/0x230
[  230.549088][ T6934]  ? clear_bhb_loop+0x45/0xa0
[  230.549105][ T6934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.549120][ T6934] RIP: 0033:0x7f7915d8e169
[  230.549134][ T6934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.549145][ T6934] RSP: 002b:00007f7916b86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.549161][ T6934] RAX: ffffffffffffffda RBX: 00007f7915fb5fa0 RCX: 00007f7915d8e169
[  230.549171][ T6934] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000008
[  230.549181][ T6934] RBP: 00007f7916b86090 R08: 0000000000000000 R09: 0000000000000000
[  230.549190][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.549198][ T6934] R13: 0000000000000000 R14: 00007f7915fb5fa0 R15: 00007ffd359bd348
[  230.549220][ T6934]  </TASK>
[  230.734804][    C1] vkms_vblank_simulate: vblank timer overrun
[  231.125718][ T5954] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  231.161787][ T5954] cp210x 2-1:0.0: querying part number failed
[  231.210433][ T5954] usb 2-1: cp210x converter now attached to ttyUSB0
[  231.315552][ T6945] zonefs (nullb0) ERROR: Not a zoned block device
[  232.101860][ T5954] usb 2-1: USB disconnect, device number 5
[  232.132648][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.142073][ T5954] cp210x 2-1:0.0: device disconnected
[  232.667331][ T5954] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  232.917381][ T5954] usb 2-1: Using ep0 maxpacket: 16
[  233.056898][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.547398][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.560157][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  233.573567][ T5954] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  233.586833][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.627667][ T5954] usb 2-1: config 0 descriptor??
[  234.050662][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.280'.
[  234.206568][ T6093] Bluetooth: hci5: Frame reassembly failed (-84)
[  234.263898][ T6093] Bluetooth: hci5: Frame reassembly failed (-84)
[  234.612107][ T6946] random: crng reseeded on system resumption
[  234.689613][ T5954] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  234.696610][ T5954] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  234.696690][ T5954] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  234.776809][ T5954] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  234.811566][ T5954] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  234.847284][ T5954] input: HID 0955:7214 Haptics as /devices/virtual/input/input9
[  234.992190][ T5954] shield 0003:0955:7214.0001: Registered Thunderstrike controller
[  235.200774][ T5954] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  235.604199][ T6970] vlan2: entered allmulticast mode
[  235.609503][ T6970] batadv0: entered allmulticast mode
[  236.218921][   T55] Bluetooth: hci5: command 0x1003 tx timeout
[  236.225889][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  236.311327][ T5831] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  236.385779][ T5831] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  236.487709][ T5954] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  236.505088][ T5831] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  236.554690][ T5831] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  236.598458][ T6981] overlayfs: missing 'lowerdir'
[  237.476534][ T6988] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[  237.585579][ T6988] netlink: 'syz.2.286': attribute type 2 has an invalid length.
[  237.733177][ T5893] usb 2-1: USB disconnect, device number 6
[  240.448879][ T7018] input: syz1 as /devices/virtual/input/input10
[  240.651595][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  240.657777][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  243.171544][ T7036] IPv6: NLM_F_CREATE should be specified when creating new route
[  243.657257][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  244.457142][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  246.194554][ T7055] Set syz0 is full, maxelem 0 reached
[  248.047420][ T5843] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  248.181283][    C1] hrtimer: interrupt took 41238 ns
[  248.517724][ T5843] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  248.526839][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.583975][ T5843] usb 3-1: config 0 descriptor??
[  249.958569][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  249.965158][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  250.063870][ T5843] cp210x 3-1:0.0: cp210x converter detected
[  250.438369][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.443997][   T30] audit: type=1804 audit(1744798701.845:3): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.310" name="/newroot/68/file0" dev="tmpfs" ino=377 res=1 errno=0
[  250.589603][ T7088] bond0: entered promiscuous mode
[  250.594783][ T7088] bond_slave_0: entered promiscuous mode
[  250.602615][ T7088] bond_slave_1: entered promiscuous mode
[  250.625493][ T7088] batadv0: entered promiscuous mode
[  250.645828][ T7088] 8021q: adding VLAN 0 to HW filter on device hsr1
[  251.107550][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.551615][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'.
[  251.637750][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.647721][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.295939][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'.
[  252.349840][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[  252.563971][ T7103] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  252.827186][  T977] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  253.243600][ T5843] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  254.031511][ T5843] cp210x 3-1:0.0: querying part number failed
[  254.145363][ T7113] xt_HMARK: proto mask must be zero with L3 mode
[  254.310396][ T5843] usb 3-1: cp210x converter now attached to ttyUSB0
[  254.437199][  T977] usb 5-1: Using ep0 maxpacket: 8
[  254.448690][  T977] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  254.448789][ T5843] usb 3-1: USB disconnect, device number 11
[  254.463535][  T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.823093][  T977] usb 5-1: config 0 descriptor??
[  254.829390][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  254.850319][ T5843] cp210x 3-1:0.0: device disconnected
[  254.852676][ T7124] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  254.907362][  T883] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  255.180594][  T883] usb 4-1: Using ep0 maxpacket: 8
[  255.616355][  T883] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  255.639013][  T977] usb 5-1: string descriptor 0 read error: -71
[  255.659442][  T883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  255.680235][  T977] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  255.697520][  T883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  255.712833][  T977] asix 5-1:0.0: probe with driver asix failed with error -71
[  255.760154][  T883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  255.790851][  T977] usb 5-1: USB disconnect, device number 7
[  255.816822][  T883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  255.835191][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.841875][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.908387][  T883] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  255.956270][  T883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.287635][  T883] usb 4-1: usb_control_msg returned -32
[  256.350717][  T883] usbtmc 4-1:16.0: can't read capabilities
[  256.618348][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  256.627212][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  256.767297][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  256.979182][ T5831] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  256.997247][ T5831] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  257.017548][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.047109][ T5831] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[  257.701046][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[  258.045410][  T977] usb 4-1: USB disconnect, device number 12
[  259.192520][ T5843] usb 2-1: USB disconnect, device number 7
[  260.069105][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  260.417312][ T5831] usb 1-1: Using ep0 maxpacket: 16
[  260.521397][ T5831] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  260.580587][ T5831] usb 1-1: config 0 has no interface number 0
[  260.602066][ T5831] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  260.631219][ T5831] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  260.653375][ T5831] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  260.677126][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  260.690493][ T5831] usb 1-1: Product: syz
[  260.694728][ T5831] usb 1-1: SerialNumber: syz
[  260.707564][ T5831] usb 1-1: config 0 descriptor??
[  260.723249][ T5831] cm109 1-1:0.8: invalid payload size 0, expected 4
[  260.735661][ T5831] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12
[  261.335602][ T7174] xt_HMARK: proto mask must be zero with L3 mode
[  261.977189][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  261.986116][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  261.993395][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.000527][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.007727][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.014854][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.021990][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.029141][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.036270][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.043442][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  262.077177][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  262.086460][ T5954] usb 1-1: USB disconnect, device number 6
[  262.249174][ T5954] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  263.273466][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  263.291755][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  264.293191][ T5831] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  264.446871][   T30] audit: type=1804 audit(1744798715.835:4): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.337" name="/newroot/61/file0" dev="tmpfs" ino=332 res=1 errno=0
[  264.557256][ T5831] usb 5-1: Using ep0 maxpacket: 8
[  264.572931][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.588979][ T7193] ref_ctr_offset mismatch. inode: 0x14c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  264.619785][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.650562][ T5831] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  264.673832][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.682421][ T7193] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  264.717701][ T7193] ref_ctr decrement failed for inode: 0x14c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a718000
[  264.759838][ T5831] usb 5-1: config 0 descriptor??
[  264.800782][ T7193] uprobe: syz.1.337:7193 failed to unregister, leaking uprobe
[  265.200953][ T5954] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  265.753526][ T5831] usbhid 5-1:0.0: can't add hid device: -71
[  265.777251][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  265.810814][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  265.832712][ T5831] usb 5-1: USB disconnect, device number 8
[  265.841832][ T5954] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  265.877366][ T5954] usb 1-1: config 0 has no interface number 0
[  265.883904][ T5954] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  265.945494][ T5954] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  265.969599][ T5954] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  266.002346][ T7210] cifs: Unknown parameter '��IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  266.002346][ T7210] S�Ș�ȞZ�6��'
[  266.027972][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  266.036131][ T5954] usb 1-1: Product: syz
[  266.053289][ T7211] overlayfs: missing 'lowerdir'
[  266.212290][ T5954] usb 1-1: SerialNumber: syz
[  266.221257][ T5954] usb 1-1: config 0 descriptor??
[  266.231166][ T5954] cm109 1-1:0.8: invalid payload size 0, expected 4
[  266.240597][ T5954] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input13
[  267.198072][ T7219] xt_HMARK: proto mask must be zero with L3 mode
[  267.591108][    C1] cm109_urb_ctl_callback: 133 callbacks suppressed
[  267.591137][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.605037][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.612287][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.620981][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.637251][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.644759][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.657095][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.667112][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.674390][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  267.687116][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.018666][ T5954] usb 1-1: USB disconnect, device number 7
[  268.024587][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  269.060609][ T5954] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  270.022812][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  270.058527][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  270.932162][ T7234] bond0: entered promiscuous mode
[  270.937536][ T7234] bond_slave_0: entered promiscuous mode
[  270.944065][ T7234] bond_slave_1: entered promiscuous mode
[  270.954697][ T7234] batadv0: entered promiscuous mode
[  270.961687][ T7234] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  270.969462][ T7234] Cannot create hsr debugfs directory
[  270.976076][ T7234] 8021q: adding VLAN 0 to HW filter on device hsr1
[  274.095149][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  274.292521][ T7277] xt_HMARK: proto mask must be zero with L3 mode
[  274.734876][ T5843] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.829201][ T7278] FAULT_INJECTION: forcing a failure.
[  274.829201][ T7278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.878481][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.927338][ T7278] CPU: 0 UID: 0 PID: 7278 Comm: syz.1.360 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  274.927367][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  274.927378][ T7278] Call Trace:
[  274.927384][ T7278]  <TASK>
[  274.927392][ T7278]  dump_stack_lvl+0x241/0x360
[  274.927427][ T7278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.927451][ T7278]  ? __pfx__printk+0x10/0x10
[  274.927487][ T7278]  should_fail_ex+0x424/0x570
[  274.927515][ T7278]  _copy_to_iter+0x1f6/0x1c90
[  274.927542][ T7278]  ? lockdep_hardirqs_on+0x9d/0x150
[  274.927574][ T7278]  ? __pfx__copy_to_iter+0x10/0x10
[  274.927596][ T7278]  ? trace_irq_disable+0x3b/0x120
[  274.927624][ T7278]  ? preempt_schedule_irq+0x145/0x1c0
[  274.927645][ T7278]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  274.927664][ T7278]  ? tipc_wait_for_rcvmsg+0x54a/0x6a0
[  274.927696][ T7278]  __skb_datagram_iter+0x101/0x940
[  274.927722][ T7278]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  274.927752][ T7278]  skb_copy_datagram_iter+0xd1/0x250
[  274.927778][ T7278]  tipc_recvstream+0x7ac/0xf90
[  274.927817][ T7278]  ? __pfx_tipc_recvstream+0x10/0x10
[  274.927840][ T7278]  ? __import_iovec+0x585/0x830
[  274.927865][ T7278]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  274.927890][ T7278]  ? __pfx_tipc_recvstream+0x10/0x10
[  274.927911][ T7278]  sock_recvmsg+0x22f/0x280
[  274.927940][ T7278]  ____sys_recvmsg+0x1c8/0x480
[  274.927969][ T7278]  ? __pfx_____sys_recvmsg+0x10/0x10
[  274.928012][ T7278]  __sys_recvmsg+0x2a5/0x3a0
[  274.928038][ T7278]  ? __pfx___sys_recvmsg+0x10/0x10
[  274.928072][ T7278]  ? __fget_files+0x2a/0x420
[  274.928119][ T7278]  ? do_syscall_64+0xb6/0x230
[  274.928144][ T7278]  do_syscall_64+0xf3/0x230
[  274.928175][ T7278]  ? clear_bhb_loop+0x45/0xa0
[  274.928197][ T7278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.928215][ T7278] RIP: 0033:0x7f952618e169
[  274.928231][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.928246][ T7278] RSP: 002b:00007f9523ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  274.928266][ T7278] RAX: ffffffffffffffda RBX: 00007f95263b6080 RCX: 00007f952618e169
[  274.928279][ T7278] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000007
[  274.928291][ T7278] RBP: 00007f9523ff6090 R08: 0000000000000000 R09: 0000000000000000
[  274.928302][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.928312][ T7278] R13: 0000000000000000 R14: 00007f95263b6080 R15: 00007fff75b7df68
[  274.928341][ T7278]  </TASK>
[  274.983764][ T5843] usb 5-1: config 0 descriptor??
[  274.984476][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.196777][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.302806][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.312552][ T5843] cp210x 5-1:0.0: cp210x converter detected
[  276.460437][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.292601][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.777748][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  277.805095][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  277.937176][   T30] audit: type=1804 audit(1744798729.335:5): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.362" name="/newroot/76/file0" dev="tmpfs" ino=410 res=1 errno=0
[  278.017261][ T5843] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  278.025505][ T5843] cp210x 5-1:0.0: querying part number failed
[  278.049977][ T7283] ref_ctr_offset mismatch. inode: 0x19a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  278.065055][ T5843] usb 5-1: cp210x converter now attached to ttyUSB0
[  278.080940][   T30] audit: type=1804 audit(1744798729.485:6): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.364" name="/newroot/68/file0" dev="tmpfs" ino=368 res=1 errno=0
[  278.127710][ T5843] usb 5-1: USB disconnect, device number 9
[  278.156822][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  278.172660][ T7283] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  278.192328][ T5843] cp210x 5-1:0.0: device disconnected
[  278.213305][ T7283] ref_ctr decrement failed for inode: 0x19a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a4b6400
[  278.290444][ T7283] uprobe: syz.0.362:7283 failed to unregister, leaking uprobe
[  279.180509][ T7300] netlink: 'syz.2.367': attribute type 10 has an invalid length.
[  279.200356][ T7300] macvlan0: entered promiscuous mode
[  279.205709][ T7300] macvlan0: entered allmulticast mode
[  279.278216][ T7300] veth1_vlan: entered allmulticast mode
[  279.343180][ T7300] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  280.507564][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  280.512747][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  280.884324][ T7326] program syz.1.374 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.722038][   T30] audit: type=1804 audit(1744798733.125:7): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.376" name="/newroot/74/file0" dev="tmpfs" ino=403 res=1 errno=0
[  282.497536][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  282.819714][ T5893] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  282.887129][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.133533][ T5893] usb 5-1: config 0 descriptor??
[  283.295156][ T5893] cp210x 5-1:0.0: cp210x converter detected
[  283.419975][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.443025][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.741045][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  283.747638][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  283.814725][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'.
[  284.185001][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.196708][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.481693][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  284.514744][ T7371] veth0_vlan: entered allmulticast mode
[  284.822623][ T5843] usb 2-1: Using ep0 maxpacket: 8
[  284.923421][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.006797][ T5843] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  285.016450][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.109876][ T5843] usb 2-1: config 0 descriptor??
[  285.119641][ T5843] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  285.453952][ T5893] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  285.461641][ T5893] cp210x 5-1:0.0: querying part number failed
[  286.157437][ T5893] usb 5-1: cp210x converter now attached to ttyUSB0
[  286.307161][ T5843] usb 2-1: USB disconnect, device number 8
[  287.012659][ T5893] usb 5-1: USB disconnect, device number 10
[  287.051083][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  287.089485][ T5893] cp210x 5-1:0.0: device disconnected
[  289.177250][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  289.183643][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  289.319653][ T7410] FAULT_INJECTION: forcing a failure.
[  289.319653][ T7410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.332849][ T7410] CPU: 1 UID: 0 PID: 7410 Comm: syz.2.398 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  289.332878][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  289.332891][ T7410] Call Trace:
[  289.332899][ T7410]  <TASK>
[  289.332907][ T7410]  dump_stack_lvl+0x241/0x360
[  289.332944][ T7410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.332974][ T7410]  ? __pfx__printk+0x10/0x10
[  289.333016][ T7410]  should_fail_ex+0x424/0x570
[  289.333045][ T7410]  _copy_from_user+0x2d/0xb0
[  289.333086][ T7410]  __se_sys_sendfile64+0xcf/0x1e0
[  289.333114][ T7410]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  289.333143][ T7410]  ? do_syscall_64+0xb6/0x230
[  289.333174][ T7410]  do_syscall_64+0xf3/0x230
[  289.333200][ T7410]  ? clear_bhb_loop+0x45/0xa0
[  289.333226][ T7410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.333246][ T7410] RIP: 0033:0x7fa453b8e169
[  289.333266][ T7410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.333283][ T7410] RSP: 002b:00007fa454a74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  289.333305][ T7410] RAX: ffffffffffffffda RBX: 00007fa453db6080 RCX: 00007fa453b8e169
[  289.333320][ T7410] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004
[  289.333333][ T7410] RBP: 00007fa454a74090 R08: 0000000000000000 R09: 0000000000000000
[  289.333346][ T7410] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  289.333358][ T7410] R13: 0000000000000000 R14: 00007fa453db6080 R15: 00007ffdd97e2d38
[  289.333389][ T7410]  </TASK>
[  290.437433][ T5831] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  290.658254][ T5831] usb 4-1: Using ep0 maxpacket: 16
[  290.688615][ T5831] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  290.713055][ T5831] usb 4-1: config 0 has no interface number 0
[  290.721688][ T2968] Bluetooth: hci5: Frame reassembly failed (-84)
[  290.733265][ T5831] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  290.749002][ T5831] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  290.824550][ T5831] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  291.210988][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  291.300830][ T5831] usb 4-1: Product: syz
[  291.307177][ T5831] usb 4-1: SerialNumber: syz
[  291.325239][ T5831] usb 4-1: config 0 descriptor??
[  291.431150][ T7397] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  291.471223][ T7415] dccp_close: ABORT with 15584 bytes unread
[  291.505619][ T5831] usb 4-1: can't set config #0, error -71
[  291.535711][   T30] audit: type=1326 audit(1744798742.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7393 comm="syz.4.394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f171678e169 code=0x0
[  291.567505][ T5831] usb 4-1: USB disconnect, device number 13
[  292.097156][ T5831] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  292.780740][   T55] Bluetooth: hci5: command 0x1003 tx timeout
[  292.787766][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  293.117202][ T5831] usb 4-1: Using ep0 maxpacket: 32
[  293.308290][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.327095][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.336936][ T5831] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  293.458525][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.497107][ T5831] usb 4-1: config 0 descriptor??
[  293.503565][ T7436] syz_tun: entered allmulticast mode
[  293.542493][ T7435] syz_tun: left allmulticast mode
[  293.787177][ T5843] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  294.273898][ T7423] netlink: 'syz.3.401': attribute type 21 has an invalid length.
[  294.344507][ T7423] netlink: 128 bytes leftover after parsing attributes in process `syz.3.401'.
[  294.461513][ T7444] netlink: 'syz.0.408': attribute type 39 has an invalid length.
[  294.472619][ T7423] netlink: 'syz.3.401': attribute type 4 has an invalid length.
[  294.515824][ T7423] netlink: 3 bytes leftover after parsing attributes in process `syz.3.401'.
[  294.626331][ T5831] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  294.649407][ T7444] veth0_macvtap: left promiscuous mode
[  294.777347][ T5843] usb 2-1: Using ep0 maxpacket: 16
[  294.790677][ T5843] usb 2-1: config 0 has an invalid interface number: 8 but max is 2
[  294.812741][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  295.036076][ T5843] usb 2-1: config 0 has no interface number 0
[  295.043061][ T5843] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  295.054624][ T5843] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  295.065589][ T5843] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  295.078516][ T5843] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=db.8f
[  295.097140][ T5843] usb 2-1: New USB device strings: Mfr=171, Product=24, SerialNumber=3
[  295.105460][ T5843] usb 2-1: Product: syz
[  295.122091][ T5843] usb 2-1: Manufacturer: syz
[  295.126846][ T5843] usb 2-1: SerialNumber: syz
[  295.450187][ T5843] usb 2-1: config 0 descriptor??
[  295.487360][ T5831] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  295.799460][ T5935] usb 4-1: USB disconnect, device number 14
[  295.830916][ T5843] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  295.917337][ T5831] usb 1-1: Using ep0 maxpacket: 32
[  295.925909][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.072091][ T5831] usb 1-1: config 135 has an invalid interface number: 255 but max is 0
[  296.312861][ T5831] usb 1-1: config 135 has no interface number 0
[  296.328293][ T5831] usb 1-1: config 135 interface 255 has no altsetting 0
[  296.590559][ T5831] usb 1-1: New USB device found, idVendor=12d1, idProduct=a8a0, bcdDevice=37.e8
[  296.794758][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.838417][ T5843] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  296.981420][ T5831] usb 1-1: Product: syz
[  297.024656][ T5831] usb 1-1: Manufacturer: syz
[  297.040559][ T5831] usb 1-1: SerialNumber: syz
[  297.097238][ T5935] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  297.187340][ T5843] usb 3-1: Using ep0 maxpacket: 16
[  297.199442][ T5843] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  297.211900][ T5843] usb 3-1: config 0 has no interface number 0
[  297.218121][ T5843] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  297.234314][ T5843] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  297.253473][ T5843] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  297.286871][ T5935] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  297.299991][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  297.309168][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.317651][ T5843] usb 3-1: Product: syz
[  297.330253][ T5831] usb 1-1: USB disconnect, device number 8
[  297.344760][ T5843] usb 3-1: SerialNumber: syz
[  297.352233][ T5935] usb 4-1: Product: syz
[  297.356437][ T5935] usb 4-1: Manufacturer: syz
[  297.368062][ T5843] usb 3-1: config 0 descriptor??
[  297.378513][ T5935] usb 4-1: SerialNumber: syz
[  297.386774][ T5843] cm109 3-1:0.8: invalid payload size 0, expected 4
[  297.407519][ T5843] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14
[  297.421006][ T5935] r8152-cfgselector 4-1: Unknown version 0x0000
[  297.427451][ T5935] r8152-cfgselector 4-1: config 0 descriptor??
[  297.889619][ T5935] r8152-cfgselector 4-1: USB disconnect, device number 15
[  298.132233][   T10] usb 2-1: USB disconnect, device number 9
[  298.613423][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'.
[  299.117428][    C1] cm109_urb_ctl_callback: 1627 callbacks suppressed
[  299.117453][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  299.131220][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  299.138421][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  299.140006][   T10] usb 3-1: USB disconnect, device number 12
[  299.145381][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  299.415327][   T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  301.534273][ T7504] xt_TPROXY: Can be used only with -p tcp or -p udp
[  302.472501][ T7510] xt_HMARK: proto mask must be zero with L3 mode
[  302.919973][ T7516] veth0_vlan: entered allmulticast mode
[  302.953357][ T7516] veth0_vlan: left promiscuous mode
[  302.961813][ T7516] veth0_vlan: entered promiscuous mode
[  304.740756][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  304.740874][   T55] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  306.188312][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  306.787506][   T10] usb 1-1: Using ep0 maxpacket: 16
[  306.809263][   T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  306.820284][   T10] usb 1-1: config 0 has no interface number 0
[  306.826454][   T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  306.838131][   T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  306.858331][   T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  306.887834][   T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  306.895976][   T10] usb 1-1: Product: syz
[  306.905156][   T10] usb 1-1: SerialNumber: syz
[  307.011527][ T7542] Process accounting resumed
[  307.036485][  T883] IPVS: starting estimator thread 0...
[  307.084092][   T10] usb 1-1: config 0 descriptor??
[  307.110857][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  307.177962][ T7547] IPVS: using max 28 ests per chain, 67200 per kthread
[  307.357899][ T5893] usb 2-1: Using ep0 maxpacket: 16
[  307.453756][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.506198][   T10] cm109 1-1:0.8: invalid payload size 0, expected 4
[  307.579307][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  307.646869][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.671953][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15
[  307.679580][ T5893] usb 2-1: config 0 descriptor??
[  307.742452][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.749700][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.756842][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.764006][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.771264][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.778435][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.785819][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.792977][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.800174][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.807411][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  307.872949][   T10] usb 1-1: USB disconnect, device number 9
[  307.878988][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  307.910762][   T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  307.957601][ T5935] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  308.198293][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'.
[  308.285772][ T5893] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  308.300500][ T5893] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  308.307835][ T5893] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x4
[  308.315224][ T5893] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 3/5
[  308.324536][ T5935] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  308.334380][ T5893] mcp2221 0003:04D8:00DD.0003: can't parse reports
[  308.341934][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.351427][ T5893] mcp2221 0003:04D8:00DD.0003: probe with driver mcp2221 failed with error -22
[  308.862242][ T5935] usb 4-1: config 0 descriptor??
[  308.878605][ T5935] cp210x 4-1:0.0: cp210x converter detected
[  309.509635][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.566582][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.645214][ T7582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.653993][ T7582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.745553][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'.
[  311.661566][ T5893] usb 2-1: USB disconnect, device number 10
[  312.517320][  T883] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  312.927302][  T883] usb 2-1: Using ep0 maxpacket: 8
[  313.192900][ T5935] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  313.208335][ T5935] cp210x 4-1:0.0: querying part number failed
[  313.220081][  T883] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  313.220245][ T5935] usb 4-1: cp210x converter now attached to ttyUSB0
[  313.247162][  T883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.274049][ T5935] usb 4-1: USB disconnect, device number 16
[  313.282319][  T883] usb 2-1: Product: syz
[  313.293667][  T883] usb 2-1: Manufacturer: syz
[  313.308515][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  313.327448][ T5935] cp210x 4-1:0.0: device disconnected
[  314.052793][  T883] usb 2-1: SerialNumber: syz
[  314.104560][  T883] usb 2-1: config 0 descriptor??
[  314.396239][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  314.402515][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  314.727565][  T883] gspca_main: se401-2.14.0 probing 047d:5003
[  315.308127][ T7657] xt_TPROXY: Can be used only with -p tcp or -p udp
[  316.518741][  T883] usb 2-1: reset high-speed USB device number 11 using dummy_hcd
[  316.887990][  T883] usb 2-1: device descriptor read/64, error -71
[  317.263751][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.270234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.358413][  T883] usb 2-1: reset high-speed USB device number 11 using dummy_hcd
[  318.024607][ T7672] dccp_close: ABORT with 15584 bytes unread
[  319.250497][  T883] gspca_se401: read req failed req 0x06 error -19
[  319.259911][  T883] usb 2-1: USB disconnect, device number 11
[  319.524231][ T7688] Cannot find del_set index 2 as target
[  319.747160][ T5954] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  320.079808][ T7697] Set syz0 is full, maxelem 0 reached
[  320.365628][  T883] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  320.375762][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  320.381281][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  320.405703][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  320.420438][ T5954] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  320.429869][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.447167][ T5954] usb 1-1: Product: syz
[  320.455566][ T5954] usb 1-1: Manufacturer: syz
[  320.467117][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  320.474493][ T5954] usb 1-1: SerialNumber: syz
[  320.521625][ T5954] usb 1-1: config 0 descriptor??
[  320.529003][ T5954] hub 1-1:0.0: bad descriptor, ignoring hub
[  320.535071][ T5954] hub 1-1:0.0: probe with driver hub failed with error -5
[  320.553231][ T5954] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17
[  321.962804][ T5954] usb 1-1: USB disconnect, device number 10
[  322.077731][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'.
[  322.093362][ T7718] FAULT_INJECTION: forcing a failure.
[  322.093362][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.128798][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.3.467 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  322.128827][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  322.128839][ T7718] Call Trace:
[  322.128847][ T7718]  <TASK>
[  322.128861][ T7718]  dump_stack_lvl+0x241/0x360
[  322.128896][ T7718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.128923][ T7718]  ? __pfx__printk+0x10/0x10
[  322.128959][ T7718]  should_fail_ex+0x424/0x570
[  322.128984][ T7718]  _copy_to_user+0x31/0xb0
[  322.129015][ T7718]  simple_read_from_buffer+0xc4/0x170
[  322.129041][ T7718]  proc_fail_nth_read+0x1ef/0x260
[  322.129069][ T7718]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.129096][ T7718]  ? rw_verify_area+0x246/0x630
[  322.129121][ T7718]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.129147][ T7718]  vfs_read+0x21f/0xb90
[  322.129178][ T7718]  ? __pfx___mutex_lock+0x10/0x10
[  322.129203][ T7718]  ? __pfx_vfs_read+0x10/0x10
[  322.129232][ T7718]  ? __fget_files+0x2a/0x420
[  322.129255][ T7718]  ? __fget_files+0x39d/0x420
[  322.129275][ T7718]  ? __fget_files+0x2a/0x420
[  322.129306][ T7718]  ksys_read+0x19d/0x2d0
[  322.129334][ T7718]  ? __pfx_ksys_read+0x10/0x10
[  322.129366][ T7718]  ? do_syscall_64+0xb6/0x230
[  322.129393][ T7718]  do_syscall_64+0xf3/0x230
[  322.129416][ T7718]  ? clear_bhb_loop+0x45/0xa0
[  322.129439][ T7718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.129468][ T7718] RIP: 0033:0x7f7915d8cb7c
[  322.129486][ T7718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  322.129501][ T7718] RSP: 002b:00007f7916b86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  322.129521][ T7718] RAX: ffffffffffffffda RBX: 00007f7915fb5fa0 RCX: 00007f7915d8cb7c
[  322.129534][ T7718] RDX: 000000000000000f RSI: 00007f7916b860a0 RDI: 0000000000000004
[  322.129546][ T7718] RBP: 00007f7916b86090 R08: 0000000000000000 R09: 0000000000000000
[  322.129557][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  322.129567][ T7718] R13: 0000000000000000 R14: 00007f7915fb5fa0 R15: 00007ffd359bd348
[  322.129596][ T7718]  </TASK>
[  322.346761][    C1] vkms_vblank_simulate: vblank timer overrun
[  322.452817][    C1] vkms_vblank_simulate: vblank timer overrun
[  322.827152][ T5843] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  322.983437][ T5843] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  322.995692][ T5843] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.010451][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0
[  323.034388][ T5843] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  323.043956][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.055369][ T5843] usb 5-1: config 0 descriptor??
[  323.648964][ T5843] saitek 0003:06A3:0621.0004: unbalanced delimiter at end of report description
[  323.673054][ T5843] saitek 0003:06A3:0621.0004: parse failed
[  323.690889][ T5843] saitek 0003:06A3:0621.0004: probe with driver saitek failed with error -22
[  323.912122][ T5843] usb 5-1: USB disconnect, device number 12
[  324.975164][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  324.981773][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  325.003975][   T30] audit: type=1326 audit(1744798776.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7747 comm="syz.3.477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7915d8e169 code=0x0
[  326.027121][ T5843] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  326.194050][ T7770] netlink: 'syz.4.483': attribute type 10 has an invalid length.
[  326.207141][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.483'.
[  326.221704][ T7770] batadv0: entered allmulticast mode
[  326.234624][ T7770] bridge0: port 3(batadv0) entered blocking state
[  326.245360][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.268081][ T7770] bridge0: port 3(batadv0) entered disabled state
[  326.274719][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  326.306430][ T5843] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.319772][ T7770] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  326.357259][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.384690][ T5843] usb 1-1: config 0 descriptor??
[  326.394540][ T5843] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  326.977721][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.038473][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.707082][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  329.717385][   T55] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  330.014325][ T7805] netlink: 68 bytes leftover after parsing attributes in process `syz.4.491'.
[  330.990847][  T883] usb 1-1: USB disconnect, device number 11
[  332.130914][ T5954] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  332.297129][ T5954] usb 3-1: Using ep0 maxpacket: 16
[  332.339640][ T7834] xt_HMARK: proto mask must be zero with L3 mode
[  332.452022][ T5954] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  332.513596][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  332.523744][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.534999][ T5954] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  332.544490][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.643224][ T5954] usb 3-1: config 0 descriptor??
[  333.584912][ T7818] process 'syz.2.494' launched './file2' with NULL argv: empty string added
[  333.672997][ T7850] FAULT_INJECTION: forcing a failure.
[  333.672997][ T7850] name failslab, interval 1, probability 0, space 0, times 0
[  333.686530][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.4.503 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  333.686559][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.686571][ T7850] Call Trace:
[  333.686579][ T7850]  <TASK>
[  333.686588][ T7850]  dump_stack_lvl+0x241/0x360
[  333.686624][ T7850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.686651][ T7850]  ? __pfx__printk+0x10/0x10
[  333.686681][ T7850]  ? __pfx___might_resched+0x10/0x10
[  333.686704][ T7850]  should_fail_ex+0x424/0x570
[  333.686723][ T7850]  should_failslab+0xac/0x100
[  333.686739][ T7850]  __kmalloc_noprof+0xdf/0x4d0
[  333.686759][ T7850]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  333.686781][ T7850]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  333.686807][ T7850]  tomoyo_realpath_from_path+0xcf/0x5e0
[  333.686842][ T7850]  tomoyo_path_number_perm+0x245/0x790
[  333.686865][ T7850]  ? tomoyo_path_number_perm+0x215/0x790
[  333.686886][ T7850]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  333.686923][ T7850]  ? ksys_write+0x24e/0x2d0
[  333.686959][ T7850]  ? __lock_acquire+0xad5/0xd80
[  333.686996][ T7850]  ? __fget_files+0x2a/0x420
[  333.687023][ T7850]  ? __fget_files+0x2a/0x420
[  333.687049][ T7850]  ? __fget_files+0x2a/0x420
[  333.687077][ T7850]  security_file_ioctl+0xc6/0x2a0
[  333.687108][ T7850]  __se_sys_ioctl+0x46/0x160
[  333.687148][ T7850]  do_syscall_64+0xf3/0x230
[  333.687176][ T7850]  ? clear_bhb_loop+0x45/0xa0
[  333.687200][ T7850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.687218][ T7850] RIP: 0033:0x7f171678e169
[  333.687236][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.687249][ T7850] RSP: 002b:00007f1717515038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  333.687272][ T7850] RAX: ffffffffffffffda RBX: 00007f17169b6080 RCX: 00007f171678e169
[  333.687286][ T7850] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 0000000000000008
[  333.687298][ T7850] RBP: 00007f1717515090 R08: 0000000000000000 R09: 0000000000000000
[  333.687310][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.687320][ T7850] R13: 0000000000000000 R14: 00007f17169b6080 R15: 00007fff25b14b98
[  333.687351][ T7850]  </TASK>
[  333.926087][ T7850] ERROR: Out of memory at tomoyo_realpath_from_path.
[  333.935588][ T7850] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  334.221125][ T5954] usbhid 3-1:0.0: can't add hid device: -71
[  334.336331][ T7845] xt_CT: No such helper "syz0"
[  334.534210][ T5954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  334.542229][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  334.548321][   T55] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  334.558662][ T5954] usb 3-1: USB disconnect, device number 13
[  336.199773][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  336.262114][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'.
[  336.491029][ T7866] syz.3.506 (7866) used greatest stack depth: 19304 bytes left
[  337.874239][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.4.514'.
[  337.885697][ T7895] 9pnet_fd: Insufficient options for proto=fd
[  337.946180][ T7897] xt_HMARK: proto mask must be zero with L3 mode
[  338.858936][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  338.865402][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  340.607365][   T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  340.947211][   T47] usb 3-1: Using ep0 maxpacket: 8
[  340.968125][   T47] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  340.977590][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.985624][   T47] usb 3-1: Product: syz
[  341.007196][   T47] usb 3-1: Manufacturer: syz
[  341.011838][   T47] usb 3-1: SerialNumber: syz
[  341.029992][   T47] usb 3-1: config 0 descriptor??
[  341.242645][   T47] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  341.740115][ T7933] Smack: duplicate mount options
[  341.846377][ T7934] random: crng reseeded on system resumption
[  342.483685][   T47] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  342.675355][ T7946] FAULT_INJECTION: forcing a failure.
[  342.675355][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.774053][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.3.527 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  342.774084][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  342.774098][ T7946] Call Trace:
[  342.774106][ T7946]  <TASK>
[  342.774115][ T7946]  dump_stack_lvl+0x241/0x360
[  342.774152][ T7946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.774179][ T7946]  ? __pfx__printk+0x10/0x10
[  342.774220][ T7946]  should_fail_ex+0x424/0x570
[  342.774246][ T7946]  _copy_from_user+0x2d/0xb0
[  342.774283][ T7946]  kstrtouint_from_user+0xce/0x1a0
[  342.774311][ T7946]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  342.774338][ T7946]  ? __lock_acquire+0xad5/0xd80
[  342.774367][ T7946]  proc_fail_nth_write+0xac/0x2d0
[  342.774394][ T7946]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  342.774421][ T7946]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  342.774452][ T7946]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  342.774479][ T7946]  vfs_write+0x2bc/0xd10
[  342.774511][ T7946]  ? fdget_pos+0x247/0x310
[  342.774537][ T7946]  ? __pfx_vfs_write+0x10/0x10
[  342.774568][ T7946]  ? __fget_files+0x2a/0x420
[  342.774592][ T7946]  ? __fget_files+0x39d/0x420
[  342.774612][ T7946]  ? __fget_files+0x2a/0x420
[  342.774644][ T7946]  ksys_write+0x19d/0x2d0
[  342.774673][ T7946]  ? __pfx_ksys_write+0x10/0x10
[  342.774708][ T7946]  ? do_syscall_64+0xb6/0x230
[  342.774737][ T7946]  do_syscall_64+0xf3/0x230
[  342.774763][ T7946]  ? clear_bhb_loop+0x45/0xa0
[  342.774788][ T7946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.774808][ T7946] RIP: 0033:0x7f7915d8cc1f
[  342.774826][ T7946] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  342.774843][ T7946] RSP: 002b:00007f7916b44030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  342.774865][ T7946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7915d8cc1f
[  342.774879][ T7946] RDX: 0000000000000001 RSI: 00007f7916b440a0 RDI: 0000000000000008
[  342.774892][ T7946] RBP: 00007f7916b44090 R08: 0000000000000000 R09: 0000000000000000
[  342.774904][ T7946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  342.774916][ T7946] R13: 0000000000000000 R14: 00007f7915fb6160 R15: 00007ffd359bd348
[  342.774954][ T7946]  </TASK>
[  342.998168][    C0] vkms_vblank_simulate: vblank timer overrun
[  343.234774][  T883] usb 3-1: USB disconnect, device number 14
[  343.481047][ T7950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.528'.
[  343.526666][ T7953] xt_HMARK: proto mask must be zero with L3 mode
[  343.897177][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  343.904513][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  344.323279][ T7950] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  344.389243][ T7950] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  344.436823][ T7950] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  344.520591][ T7950] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  345.295372][ T7950] geneve2: entered promiscuous mode
[  345.443010][ T7950] geneve2: entered allmulticast mode
[  345.534286][ T7962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.806210][   T30] audit: type=1804 audit(1744798797.205:10): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.536" name="/newroot/108/file0" dev="tmpfs" ino=579 res=1 errno=0
[  346.285151][  T977] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  346.597624][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.637148][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.656066][  T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  346.712148][  T977] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.737102][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.800147][  T977] usb 2-1: config 0 descriptor??
[  347.709896][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  347.817131][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  348.010586][  T977] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  348.092601][  T977] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  348.242022][ T7997] random: crng reseeded on system resumption
[  349.143306][ T8009] xt_HMARK: proto mask must be zero with L3 mode
[  350.096651][  T977] usb 2-1: USB disconnect, device number 12
[  351.593339][   T30] audit: type=1804 audit(1744798802.995:11): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.548" name="/newroot/112/file0" dev="tmpfs" ino=612 res=1 errno=0
[  352.336458][ T8035] netlink: 116 bytes leftover after parsing attributes in process `syz.2.551'.
[  354.139715][ T5954] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  354.669388][ T8066] xt_HMARK: proto mask must be zero with L3 mode
[  355.009856][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short
[  355.128023][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.152142][ T5954] usb 3-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  355.197800][ T5954] usb 3-1: config 1 interface 0 has no altsetting 0
[  355.229053][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4ff, bcdDevice= 0.40
[  355.247132][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.255255][ T5954] usb 3-1: Product: syz
[  355.277266][ T5954] usb 3-1: Manufacturer: syz
[  355.281937][ T5954] usb 3-1: SerialNumber: syz
[  355.661965][  T883] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  356.560111][   T30] audit: type=1326 audit(1744798807.955:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8076 comm="syz.0.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f007538e169 code=0x0
[  356.622782][  T883] usb 4-1: unable to get BOS descriptor or descriptor too short
[  356.640374][  T883] usb 4-1: not running at top speed; connect to a high speed hub
[  356.652340][  T883] usb 4-1: too many configurations: 225, using maximum allowed: 8
[  356.909891][  T883] usb 4-1: unable to read config index 0 descriptor/start: -61
[  356.933137][  T883] usb 4-1: can't read configurations, error -61
[  357.360797][ T8092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.565'.
[  357.409692][  T883] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  358.268043][ T5954] cdc_ether 3-1:1.0: skipping garbage
[  358.286854][ T5954] usb 3-1: bad CDC descriptors
[  358.487668][ T5954] usb 3-1: USB disconnect, device number 15
[  359.364986][ T8110] xt_HMARK: proto mask must be zero with L3 mode
[  361.752771][ T8128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  361.998955][ T8141] overlayfs: failed to resolve './file1': -2
[  362.082410][ T8141] netlink: 'syz.0.578': attribute type 21 has an invalid length.
[  362.113405][ T8141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'.
[  364.311291][ T8165] veth0_to_team: entered promiscuous mode
[  364.318040][ T8165] veth0_to_team: entered allmulticast mode
[  364.326229][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  364.343251][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  365.144558][ T8173] xt_HMARK: proto mask must be zero with L3 mode
[  366.724107][ T8184] xt_hashlimit: overflow, rate too high: 0
[  367.060698][ T5843] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  367.267320][ T5843] usb 4-1: Using ep0 maxpacket: 8
[  367.284035][ T5843] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  367.317913][ T5843] usb 4-1: config 0 has no interface number 0
[  367.348753][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  367.365925][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.634199][ T5843] usb 4-1: Product: syz
[  367.655605][ T5843] usb 4-1: Manufacturer: syz
[  367.680674][ T5843] usb 4-1: SerialNumber: syz
[  368.648098][ T5843] usb 4-1: config 0 descriptor??
[  369.020427][ T5843] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  369.081149][ T5843] usb 4-1: Failed to initialize entity for entity 6
[  369.130070][ T5843] usb 4-1: Failed to register entities (-22).
[  369.417244][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  369.426914][   T55] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  370.139031][   T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  370.147766][   T55] Bluetooth: hci4: Injecting HCI hardware error event
[  370.156483][ T5837] Bluetooth: hci4: hardware error 0x00
[  370.769847][ T5843] usb 4-1: USB disconnect, device number 19
[  371.523265][ T8238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.597'.
[  373.329561][ T8255] mmap: syz.3.602 (8255): VmData 37613568 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  373.417172][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  374.355324][ T8269] FAULT_INJECTION: forcing a failure.
[  374.355324][ T8269] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  374.379021][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.0.606 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  374.379050][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  374.379061][ T8269] Call Trace:
[  374.379069][ T8269]  <TASK>
[  374.379076][ T8269]  dump_stack_lvl+0x241/0x360
[  374.379124][ T8269]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.379151][ T8269]  ? __pfx__printk+0x10/0x10
[  374.379188][ T8269]  should_fail_ex+0x424/0x570
[  374.379214][ T8269]  prepare_alloc_pages+0x220/0x610
[  374.379248][ T8269]  __alloc_frozen_pages_noprof+0x162/0x5b0
[  374.379280][ T8269]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  374.379328][ T8269]  alloc_pages_mpol+0x339/0x690
[  374.379354][ T8269]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  374.379385][ T8269]  vma_alloc_folio_noprof+0x12d/0x260
[  374.379409][ T8269]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  374.379440][ T8269]  folio_prealloc+0x2e/0x170
[  374.379465][ T8269]  do_wp_page+0x14f6/0x5e00
[  374.379488][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.379520][ T8269]  ? __pfx_do_wp_page+0x10/0x10
[  374.379546][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.379569][ T8269]  ? do_raw_spin_lock+0x151/0x370
[  374.379615][ T8269]  handle_pte_fault+0xfaf/0x61c0
[  374.379638][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.379686][ T8269]  ? __pfx_handle_pte_fault+0x10/0x10
[  374.379708][ T8269]  ? unwind_next_frame+0xb8/0x23b0
[  374.379733][ T8269]  ? unwind_next_frame+0xb8/0x23b0
[  374.379753][ T8269]  ? unwind_next_frame+0x1aa4/0x23b0
[  374.379781][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.379812][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.379835][ T8269]  ? do_raw_spin_lock+0x151/0x370
[  374.379872][ T8269]  handle_mm_fault+0x1030/0x1aa0
[  374.379916][ T8269]  ? __pfx_handle_mm_fault+0x10/0x10
[  374.379936][ T8269]  ? follow_page_pte+0xec9/0x15e0
[  374.379969][ T8269]  ? __pfx_find_vma+0x10/0x10
[  374.379990][ T8269]  ? vma_is_secretmem+0xd/0x50
[  374.380006][ T8269]  ? check_vma_flags+0x51b/0x590
[  374.380032][ T8269]  __get_user_pages+0x1adc/0x4180
[  374.380113][ T8269]  ? __pfx___get_user_pages+0x10/0x10
[  374.380134][ T8269]  ? __gup_longterm_locked+0xd86/0x1850
[  374.380168][ T8269]  ? __pfx_down_read_killable+0x10/0x10
[  374.380213][ T8269]  ? __lock_acquire+0xad5/0xd80
[  374.380249][ T8269]  __gup_longterm_locked+0xec1/0x1850
[  374.380286][ T8269]  ? try_get_folio+0xfd/0x6a0
[  374.380312][ T8269]  ? try_grab_folio_fast+0x373/0x500
[  374.380334][ T8269]  ? __pfx___gup_longterm_locked+0x10/0x10
[  374.380359][ T8269]  ? sanity_check_pinned_pages+0x11b2/0x12a0
[  374.380390][ T8269]  gup_fast_fallback+0x2227/0x2980
[  374.380455][ T8269]  ? __pfx_gup_fast_fallback+0x10/0x10
[  374.380474][ T8269]  ? 0xffffffffa0001fb4
[  374.380492][ T8269]  ? is_bpf_text_address+0x26/0x2a0
[  374.380514][ T8269]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  374.380541][ T8269]  ? kernel_text_address+0xa7/0xe0
[  374.380587][ T8269]  ? __kernel_text_address+0xd/0x40
[  374.380614][ T8269]  ? unwind_get_return_address+0x4d/0x90
[  374.380638][ T8269]  ? arch_stack_walk+0xff/0x150
[  374.380677][ T8269]  ? stack_trace_save+0x11a/0x1d0
[  374.380703][ T8269]  ? is_valid_gup_args+0x124/0x200
[  374.380727][ T8269]  pin_user_pages_fast+0xd2/0x160
[  374.380753][ T8269]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  374.380773][ T8269]  ? smk_access+0x4ab/0x4e0
[  374.380815][ T8269]  iov_iter_extract_pages+0x3bd/0x5c0
[  374.380850][ T8269]  extract_iter_to_sg+0xebc/0x2680
[  374.380888][ T8269]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  374.380947][ T8269]  ? __asan_memset+0x23/0x50
[  374.380975][ T8269]  af_alg_get_rsgl+0x41e/0x860
[  374.381019][ T8269]  skcipher_recvmsg+0x3fa/0x1250
[  374.381065][ T8269]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  374.381095][ T8269]  ? __import_iovec+0x3c2/0x830
[  374.381125][ T8269]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  374.381153][ T8269]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  374.381180][ T8269]  sock_recvmsg+0x22f/0x280
[  374.381212][ T8269]  ____sys_recvmsg+0x1c8/0x480
[  374.381244][ T8269]  ? __pfx_____sys_recvmsg+0x10/0x10
[  374.381291][ T8269]  __sys_recvmsg+0x2a5/0x3a0
[  374.381318][ T8269]  ? __pfx___sys_recvmsg+0x10/0x10
[  374.381354][ T8269]  ? __fget_files+0x2a/0x420
[  374.381404][ T8269]  ? do_syscall_64+0xb6/0x230
[  374.381432][ T8269]  do_syscall_64+0xf3/0x230
[  374.381456][ T8269]  ? clear_bhb_loop+0x45/0xa0
[  374.381479][ T8269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.381499][ T8269] RIP: 0033:0x7f007538e169
[  374.381515][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.381531][ T8269] RSP: 002b:00007f00731d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  374.381554][ T8269] RAX: ffffffffffffffda RBX: 00007f00755b6080 RCX: 00007f007538e169
[  374.381567][ T8269] RDX: 0000000020000253 RSI: 00002000000005c0 RDI: 0000000000000006
[  374.381579][ T8269] RBP: 00007f00731d5090 R08: 0000000000000000 R09: 0000000000000000
[  374.381591][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.381602][ T8269] R13: 0000000000000000 R14: 00007f00755b6080 R15: 00007fff549ee4e8
[  374.381632][ T8269]  </TASK>
[  374.877154][    C1] vkms_vblank_simulate: vblank timer overrun
[  374.939987][ T8271] FAULT_INJECTION: forcing a failure.
[  374.939987][ T8271] name failslab, interval 1, probability 0, space 0, times 0
[  374.952862][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.4.605 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  374.952892][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  374.952906][ T8271] Call Trace:
[  374.952916][ T8271]  <TASK>
[  374.952925][ T8271]  dump_stack_lvl+0x241/0x360
[  374.952962][ T8271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.952992][ T8271]  ? __pfx__printk+0x10/0x10
[  374.953025][ T8271]  ? __pfx___might_resched+0x10/0x10
[  374.953063][ T8271]  should_fail_ex+0x424/0x570
[  374.953091][ T8271]  should_failslab+0xac/0x100
[  374.953115][ T8271]  __kmalloc_cache_noprof+0x73/0x370
[  374.953138][ T8271]  ? landlock_init_hierarchy_log+0xa0/0x640
[  374.953172][ T8271]  landlock_init_hierarchy_log+0xa0/0x640
[  374.953208][ T8271]  landlock_merge_ruleset+0x66e/0x900
[  374.953241][ T8271]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[  374.953289][ T8271]  do_syscall_64+0xf3/0x230
[  374.953317][ T8271]  ? clear_bhb_loop+0x45/0xa0
[  374.953343][ T8271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.953364][ T8271] RIP: 0033:0x7f171678e169
[  374.953382][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.953400][ T8271] RSP: 002b:00007f17145f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[  374.953422][ T8271] RAX: ffffffffffffffda RBX: 00007f17169b6160 RCX: 00007f171678e169
[  374.953438][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  374.953450][ T8271] RBP: 00007f17145f6090 R08: 0000000000000000 R09: 0000000000000000
[  374.953464][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.953476][ T8271] R13: 0000000000000000 R14: 00007f17169b6160 R15: 00007fff25b14b98
[  374.953508][ T8271]  </TASK>
[  374.954220][ T8271] ------------[ cut here ]------------
[  375.079998][    C1] vkms_vblank_simulate: vblank timer overrun
[  375.143586][ T8271] WARNING: CPU: 1 PID: 8271 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250
[  375.153350][ T8271] Modules linked in:
[  375.157335][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.4.605 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  375.169316][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  375.179517][ T8271] RIP: 0010:free_ruleset+0x1f3/0x250
[  375.184846][ T8271] Code: 89 ff e8 a0 5e 71 fd 49 8b 1f 4c 89 ff e8 e5 bb 65 fd 48 85 db 74 36 e8 fb b5 09 fd 49 89 df e9 34 ff ff ff e8 ee b5 09 fd 90 <0f> 0b 90 eb c2 e8 e3 b5 09 fd eb 1c bf 01 00 00 00 89 ee e8 15 ba
[  375.204556][ T8271] RSP: 0018:ffffc9000f0dfdd8 EFLAGS: 00010293
[  375.210747][ T8271] RAX: ffffffff84b98e82 RBX: 0000000000000000 RCX: ffff88802fca0000
[  375.218793][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  375.226783][ T8271] RBP: 1ffff110060f91c4 R08: ffffffff84ba9a1f R09: 1ffff110060f91c1
[  375.234816][ T8271] R10: dffffc0000000000 R11: ffffed10060f91c2 R12: ffff8880307c8e20
[  375.242934][ T8271] R13: dffffc0000000000 R14: ffff888033c66300 R15: ffff8880307c8e00
[  375.251074][ T8271] FS:  00007f17145f66c0(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000
[  375.260247][ T8271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  375.267034][ T8271] CR2: 00007f17145f5f98 CR3: 0000000032764000 CR4: 00000000003526f0
[  375.275059][ T8271] Call Trace:
[  375.278430][ T8271]  <TASK>
[  375.281414][ T8271]  landlock_merge_ruleset+0x6d8/0x900
[  375.286831][ T8271]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[  375.293419][ T8271]  do_syscall_64+0xf3/0x230
[  375.298287][ T8271]  ? clear_bhb_loop+0x45/0xa0
[  375.303024][ T8271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.309226][ T8271] RIP: 0033:0x7f171678e169
[  375.313925][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.333885][ T8271] RSP: 002b:00007f17145f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[  375.342733][ T8271] RAX: ffffffffffffffda RBX: 00007f17169b6160 RCX: 00007f171678e169
[  375.350874][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  375.358949][ T8271] RBP: 00007f17145f6090 R08: 0000000000000000 R09: 0000000000000000
[  375.367052][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.375075][ T8271] R13: 0000000000000000 R14: 00007f17169b6160 R15: 00007fff25b14b98
[  375.383183][ T8271]  </TASK>
[  375.386249][ T8271] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  375.393539][ T8271] CPU: 1 UID: 0 PID: 8271 Comm: syz.4.605 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  375.405433][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  375.415493][ T8271] Call Trace:
[  375.418781][ T8271]  <TASK>
[  375.421719][ T8271]  dump_stack_lvl+0x241/0x360
[  375.426417][ T8271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.431635][ T8271]  ? __pfx__printk+0x10/0x10
[  375.436237][ T8271]  ? vscnprintf+0x5d/0x90
[  375.440571][ T8271]  panic+0x349/0x880
[  375.444476][ T8271]  ? __warn+0x174/0x4d0
[  375.448641][ T8271]  ? __pfx_panic+0x10/0x10
[  375.453083][ T8271]  __warn+0x344/0x4d0
[  375.457079][ T8271]  ? free_ruleset+0x1f3/0x250
[  375.461767][ T8271]  report_bug+0x2b3/0x500
[  375.466102][ T8271]  ? free_ruleset+0x1f3/0x250
[  375.470782][ T8271]  ? free_ruleset+0x1f3/0x250
[  375.475462][ T8271]  ? free_ruleset+0x1f5/0x250
[  375.480144][ T8271]  handle_bug+0x89/0x170
[  375.484398][ T8271]  exc_invalid_op+0x1a/0x50
[  375.488912][ T8271]  asm_exc_invalid_op+0x1a/0x20
[  375.493766][ T8271] RIP: 0010:free_ruleset+0x1f3/0x250
[  375.499066][ T8271] Code: 89 ff e8 a0 5e 71 fd 49 8b 1f 4c 89 ff e8 e5 bb 65 fd 48 85 db 74 36 e8 fb b5 09 fd 49 89 df e9 34 ff ff ff e8 ee b5 09 fd 90 <0f> 0b 90 eb c2 e8 e3 b5 09 fd eb 1c bf 01 00 00 00 89 ee e8 15 ba
[  375.518765][ T8271] RSP: 0018:ffffc9000f0dfdd8 EFLAGS: 00010293
[  375.524841][ T8271] RAX: ffffffff84b98e82 RBX: 0000000000000000 RCX: ffff88802fca0000
[  375.532815][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  375.540788][ T8271] RBP: 1ffff110060f91c4 R08: ffffffff84ba9a1f R09: 1ffff110060f91c1
[  375.548761][ T8271] R10: dffffc0000000000 R11: ffffed10060f91c2 R12: ffff8880307c8e20
[  375.556739][ T8271] R13: dffffc0000000000 R14: ffff888033c66300 R15: ffff8880307c8e00
[  375.564723][ T8271]  ? landlock_log_drop_domain+0x4f/0x1b0
[  375.570365][ T8271]  ? free_ruleset+0x1f2/0x250
[  375.575056][ T8271]  ? free_ruleset+0x1f2/0x250
[  375.579916][ T8271]  landlock_merge_ruleset+0x6d8/0x900
[  375.585303][ T8271]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[  375.591578][ T8271]  do_syscall_64+0xf3/0x230
[  375.596103][ T8271]  ? clear_bhb_loop+0x45/0xa0
[  375.600878][ T8271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.606776][ T8271] RIP: 0033:0x7f171678e169
[  375.611201][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.630931][ T8271] RSP: 002b:00007f17145f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[  375.639468][ T8271] RAX: ffffffffffffffda RBX: 00007f17169b6160 RCX: 00007f171678e169
[  375.647654][ T8271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  375.655629][ T8271] RBP: 00007f17145f6090 R08: 0000000000000000 R09: 0000000000000000
[  375.663607][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.671583][ T8271] R13: 0000000000000000 R14: 00007f17169b6160 R15: 00007fff25b14b98
[  375.679660][ T8271]  </TASK>
[  375.682982][ T8271] Kernel Offset: disabled
[  375.687317][ T8271] Rebooting in 86400 seconds..