last executing test programs:

1m40.708661637s ago: executing program 1 (id=102):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r2, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)
r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r10, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]})
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20004000)

1m39.109946052s ago: executing program 1 (id=103):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sync_file_range(r2, 0x38e, 0xd8cf, 0x7)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000180)=0x2}})

1m38.818038194s ago: executing program 1 (id=106):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket(0x28, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

1m15.509199775s ago: executing program 1 (id=106):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket(0x28, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

48.949931343s ago: executing program 1 (id=106):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket(0x28, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

25.518082295s ago: executing program 1 (id=106):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket(0x28, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

12.685585333s ago: executing program 2 (id=315):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x48}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000400)="48e53948e958bc9fe0ab6d77ebc7333c3c9430c9f0d6be464444f041f04c0cdeb8d5f924d580f37c50c9794c636a996b2cfd378476ec69703c101761de5cfddcc1854c3b5ef3d3a39acded60dcd12ce966221b83f32b0122eabcc90e22091cf8184d3dcb43e461dea112964e0c7974e0b9f0f1dc7ef8737dae8c010643de8b7501079f8a1e59f0f10e6b59623e7a01894f60ce4051663e3e56fe77fd5c0f0c", 0x9f, r4)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)=0x3)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x3fa}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)
mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}, {@userxattr}, {@uuid_on}, {@verity_off}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x5e, 0x35, 0x62, 0x36, 0x50, 0x31], 0x2d, [0x66, 0x62, 0x65, 0x39], 0x2d, [0x0, 0x39, 0x35, 0x63], 0x2d, [0x61, 0x32, 0x65, 0x66], 0x2d, [0x35, 0x61, 0x63, 0x56, 0x33, 0x32, 0x64, 0x61]}}}, {@dont_measure}, {@flag='nomand'}]})
socket$nl_route(0x10, 0x3, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000006c0)={{0x3, 0x5}, 'port1\x00', 0x8, 0xa1855, 0x1d, 0xb279, 0x7, 0x6, 0x0, 0x0, 0x2, 0x7f})
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55728016d20fd419884", 0xb5c, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4)

12.585901334s ago: executing program 0 (id=316):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x48}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000400)="48e53948e958bc9fe0ab6d77ebc7333c3c9430c9f0d6be464444f041f04c0cdeb8d5f924d580f37c50c9794c636a996b2cfd378476ec69703c101761de5cfddcc1854c3b5ef3d3a39acded60dcd12ce966221b83f32b0122eabcc90e22091cf8184d3dcb43e461dea112964e0c7974e0b9f0f1dc7ef8737dae8c010643de8b7501079f8a1e59f0f10e6b59623e7a01894f60ce4051663e3e56fe77fd5c0f0c", 0x9f, r4)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)=0x3)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x3fa}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)
mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}, {@userxattr}, {@uuid_on}, {@verity_off}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x5e, 0x35, 0x62, 0x36, 0x50, 0x31], 0x2d, [0x66, 0x62, 0x65, 0x39], 0x2d, [0x0, 0x39, 0x35, 0x63], 0x2d, [0x61, 0x32, 0x65, 0x66], 0x2d, [0x35, 0x61, 0x63, 0x56, 0x33, 0x32, 0x64, 0x61]}}}, {@dont_measure}, {@flag='nomand'}]})
socket$nl_route(0x10, 0x3, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000006c0)={{0x3, 0x5}, 'port1\x00', 0x8, 0xa1855, 0x1d, 0xb279, 0x7, 0x6, 0x0, 0x0, 0x2, 0x7f})
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55728016d20fd419884", 0xb5c, 0x1}, 0x3c)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4)

11.304655367s ago: executing program 3 (id=318):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x190, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000640))
r6 = socket$inet6(0xa, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)

9.867573835s ago: executing program 2 (id=320):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000008c0)='\xa3\x05-$\x00', &(0x7f0000000900)='#-(-+\xa2-.^\x00', 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000048000000b7030000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r8 = dup(r7)
ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, <r10=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r10, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) (async, rerun: 64)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xa}, 0xc) (async, rerun: 64)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r13}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) (async)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r14, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r14, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) (async)
r15 = syz_open_dev$vcsn(&(0x7f0000000600), 0x6f88, 0x80000) (async)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x0, 0x4, 0x200, 0x4900c, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xc83, 0x0, @value, @void, @void, @value}, 0x50)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x1c, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffca71, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x7, 0x5, 0x9, 0x40, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x1, 0x9, 0x6, 0x5, 0x3}, @jmp={0x5, 0x0, 0x2, 0x6, 0x2, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x40, '\x00', r3, @fallback=0x36, r8, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x9f2, 0x290}, 0x10, r10, r11, 0x6, &(0x7f0000000740)=[r12, r13, 0xffffffffffffffff, r14, r15, r16, r17], &(0x7f0000000780)=[{0x2, 0x3, 0xa, 0x4}, {0x2, 0x4, 0xf, 0x9}, {0x4, 0x2, 0x8, 0xa}, {0x1, 0x5, 0xa, 0x1}, {0x1, 0x4, 0xa}, {0x2, 0x1, 0x9, 0x3}], 0x10, 0x0, @void, @value}, 0x94)

9.824118495s ago: executing program 0 (id=321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r3 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x1ff)
sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="ab", 0xbb8, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0)
r6 = syz_usbip_server_init(0x4)
write$usbip_server(r6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r6, @ANYRESDEC=r6], 0x30)

9.400187748s ago: executing program 3 (id=322):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450800200000000000119078000000000000000000014e20000c907801000000"], 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
syz_emit_ethernet(0x122, &(0x7f0000000480)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x114, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0xfd1d]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0], "350c51d8b477943e7d7e9a4b2a346596a70e1759fb40b4b35f7982b37c0c24a57b75b80e04b14ce60f8077973344696166f0ed735d6b2d287a4e23e1c6883e4172b126958c02a8afd6095f4c88d01cf7a10bfd201b07ed94ee955f9f1087afca5e854147c8227fd0275280c81dff72ba36d3c3a61a2be7111a01437cc21b06602315ddea2a8af190459737018dd0b3b00d278b07c42cb6c54ef555d608629aba58dcb931bdd025b23500"/184}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x14}, 0x2, {0xe000}}}}}}}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x200)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000400)=@urb_type_bulk={0x3, {0xa, 0x1}, 0x9, 0x2, &(0x7f00000002c0)="6f24c348c95d7b84bfa4fcdf560bfcf0031586a03ca9a906316d6844e1502133a810eb5e68ae329716f1b001b20f93737fb36d1746a33d6c076a4aeefef2da636619fd1ff1589b58513e5753c9646af283a784f3e08b0d5785d139e37eb76a84a20dd9691ffa8687a7a6138f06123869fe077226897d02a39837eeb075779585c295f9edc6de6e7ecf1998ad647c682b4945929350fd2fe217c9ada980ac685a6dbf97e7886c4b6656166764e0499240188fae590f9251dc96eb45775c05e9fe45dcc32671bb", 0xc6, 0x3, 0xffffffff, 0x9, 0x8, 0xff7, &(0x7f00000003c0)="54956140fc4d9e27e797673bea4a367be0063931f6be677c2e59e1a56561cd100cf30e"})
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x1}, 0x18)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)

8.761981299s ago: executing program 2 (id=323):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(0x0, 0x27)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)

8.207407559s ago: executing program 0 (id=324):
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "8cae5c2ba870cf8332c44080390ccfab55a54fcdb1e936e9f7cb93da03274b08aa62ae5494c2171c241f22fe0a4229b07a204683ae863556b3b5a0e2f3515ee2"}, 0x48, 0xfffffffffffffffc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ff4829bd7000000100002500000008000200", @ANYRES32, @ANYBLOB="050029000000000005002b"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x20008050)

7.448242529s ago: executing program 2 (id=325):
socket$kcm(0x10, 0x2, 0x0)
socket(0x200000000000011, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0)
mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x715fbeb4}, {0x6, 0x10, 0x10}]})

7.353809759s ago: executing program 4 (id=326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x200000100000011, 0x3, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000500)=0xfffffffffffffff8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
socket$kcm(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x400002}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x8]}}, 0x5c)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
ioperm(0x0, 0xf1, 0x7)
r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
shmat(r8, &(0x7f0000ff8000/0x5000)=nil, 0x7000)
shmctl$IPC_RMID(r8, 0x0)

6.86298548s ago: executing program 3 (id=327):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{0x0}], 0x1)
recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff}, 0xfe}, 0x18, &(0x7f0000000100)={&(0x7f00000001c0)="7882876feb78c37628c37c67f251b7c472f27fb6052c52641139474cd23beab30f9353c00f2ee6e813ae88ed3ff437be5886316077f5385f6fb04505826780ec1e9aa041a93469baed4bd13476307ac67476229c727a094c0c6d4d6206dd2c26375043278a0d14acae21a8f26c152091a94022e8fb5c68973f4ae979b1e786b5d91ad8a3ef48a16e29bffd845bcedfcffd71e58ef09909efa634ee76e219c597d5efeb400c89141415218c934344a9afb675fe3d3c49348ac89ce9fe4a23743b7ffbb296631877341c8cd92444b1b20231653dd589332d7e29c04b9aa54ae2418590949f86802b946c77f873d2559042e97e9d137ce2", 0xf6}, 0x1, 0x0, 0x0, 0x40040880}, 0x44)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)

6.488414615s ago: executing program 2 (id=328):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002680)=@newtclass={0xb4, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0xfff3, 0x10}, {0x1, 0x35aea0f595dba25c}}, [@c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xbb}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x8e}}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xf}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x11, 0x3, "31bde19d0bfeb9656a1b64fa2b"}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
io_setup(0x6, &(0x7f0000003b80)=<r3=>0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xffff, r2, 0x0, 0x0, 0x800}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
r7 = getpid()
sched_setscheduler(r7, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001680)=""/4084, 0xff4}, {&(0x7f0000000000)=""/109, 0x6d}], 0x2}, 0x2)

6.326313915s ago: executing program 4 (id=329):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r3 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14)
listen(r5, 0x1ff)

4.370684862s ago: executing program 4 (id=330):
msgctl$IPC_SET(0x0, 0x1, 0x0)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40004)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)=ANY=[], 0x34}}, 0x40)
ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000640)={0x10000, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x9, 0x4, 0x33524742, 0x7, 0x1, 0x200, 0x4, 0x4, 0x1, 0x3, 0x2, 0x7}})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e04000620"], 0x7)

4.274044978s ago: executing program 3 (id=331):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$kcm(0xa, 0x6, 0x0)
listen(r2, 0x4)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000), 0x4)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0)
eventfd(0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xfffffffd, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="8f151fed65"], 0x1000f)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket(0x18, 0x3, 0x0)
mkdir(0x0, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000001c40)=""/4112, &(0x7f0000001080)=0x1010)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r5, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e000100ffffffc3000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0)

3.570335238s ago: executing program 4 (id=332):
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="f8fcff00", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000183b0000020000000000000000000000850000006e000000"], &(0x7f0000000280)='syzkaller\x00', 0x400, 0x0, &(0x7f00000004c0), 0x41100, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x8, 0x1, 0x1}, 0x10, 0xf020, 0xffffffffffffffff, 0x5, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x4, 0x4, 0x2}, {0x0, 0x2, 0x8, 0x9}, {0x4, 0x4, 0xb, 0x2}, {0x5, 0x3, 0x1, 0x5}, {0x4, 0x2, 0x0, 0x2}], 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff0000}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0xb, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, r1, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$igmp6(0xa, 0x3, 0x2)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0xfffffffffffffffd}}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x7)
r4 = socket(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8)
fcntl$setlease(r7, 0x400, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

3.193368615s ago: executing program 0 (id=333):
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3, 0x0, 0xfffffffffffffffd}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffeff, 0xb, 0x1ff8000000000, 0x62d5, 0x8, 0x8000000000000000], 0x3, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000240)={0x4cc2, 0x0, 0x8})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, 0x0, 0x4, 0xff3, &(0x7f0000001e00)=""/4083, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0x26, 0x66, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0)
r7 = semget$private(0x0, 0x4000000009, 0x0)
r8 = socket$inet6(0xa, 0x802, 0x0)
getsockopt$sock_timeval(r8, 0x1, 0x1, 0x0, &(0x7f0000000040))
semop(r7, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)

2.866274117s ago: executing program 3 (id=334):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x101000, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$cgroup_pid(r3, &(0x7f0000000340)=r0, 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
dup(r9) (async)
r10 = dup(r9)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xa, 0x6}, {0x2, 0xb}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1, 0x1fffe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x88, 0x2, {{0xda2, 0x3, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x55, 0xfffffff7}}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9680, 0x200, 0x4d, 0x100}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc3d4, 0x400, 0xe, 0x44caa44e, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffff4e16, 0x7ff, 0x9, 0x6}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8000, 0x6}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x6}}]}}}]}, 0xb8}}, 0x4000000)

2.548231424s ago: executing program 4 (id=335):
socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newqdisc={0x57, 0x24, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0x7}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x24000000)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r1, 0x4b41, 0x4000000000001)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0xe})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5)

2.205990007s ago: executing program 2 (id=336):
syz_io_uring_setup(0x69b6, &(0x7f0000000240)={0x0, 0xf1eb, 0x8, 0x0, 0x322}, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, '/'}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff]})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r6, 0x0, 0x1ff}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x7a, 0x91, 0x9, 0x2e, @mcast1, @private0, 0x700, 0x8000, 0xb9, 0x100}})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'bond0\x00'})
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.634106582s ago: executing program 0 (id=337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r3 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x1ff)
sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="ab", 0xbb8, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0)
syz_usbip_server_init(0x4)

436.755673ms ago: executing program 4 (id=338):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket(0x28, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

130.242707ms ago: executing program 3 (id=339):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 10)

0s ago: executing program 0 (id=340):
prlimit64(0x0, 0xe, 0x0, 0x0)
socket(0x200000100000011, 0x3, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000500)=0xfffffffffffffff8, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
socket$kcm(0x2, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x400002}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x8]}}, 0x5c)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
ioperm(0x0, 0xf1, 0x7)
r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
shmat(r8, &(0x7f0000ff8000/0x5000)=nil, 0x7000)
shmctl$IPC_RMID(r8, 0x0)

kernel console output (not intermixed with test programs):

][   T25] usb 3-1: config 0 descriptor??
[   89.653305][   T25] usbhid 3-1:0.0: can't add hid device: -71
[   89.659598][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   89.741201][ T6131] Can't find a SQUASHFS superblock on nullb0
[   89.794281][   T25] usb 3-1: USB disconnect, device number 4
[   90.352741][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   91.100764][ T5863] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   91.167908][ T6142] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.358621][ T5863] usb 4-1: Using ep0 maxpacket: 16
[   91.477874][ T5863] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[   91.572156][ T5863] usb 4-1: config 0 has no interface number 0
[   91.660118][ T5863] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   91.741780][ T5863] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   91.772819][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   91.793134][ T5863] usb 4-1: Product: syz
[   91.802221][ T5863] usb 4-1: SerialNumber: syz
[   91.824556][ T5863] usb 4-1: config 0 descriptor??
[   91.843250][ T5863] cm109 4-1:0.8: invalid payload size 208, expected 4
[   91.852786][ T5863] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7
[   92.022984][ T6134] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0
[   92.038426][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.042102][ T6134] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[   92.059741][ T6134] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[   92.076631][ T6134] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[   92.218366][ T5918] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   92.248344][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   92.307884][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.351459][ T6147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   92.393016][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   92.548335][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[   92.550336][ T5918] usb 4-1: USB disconnect, device number 4
[   92.555319][    C1] cm109 4-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[   92.702151][ T5918] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   93.447948][ T5918] usb 1-1: USB disconnect, device number 3
[   94.596056][ T6196] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[   94.602898][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   94.611178][ T6197] vhci_hcd: connection closed
[   94.613939][ T6196] vhci_hcd vhci_hcd.0: Device attached
[   94.654214][ T6069] vhci_hcd: stop threads
[   94.675059][ T6069] vhci_hcd: release socket
[   94.733237][ T5862] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   94.790522][ T6069] vhci_hcd: disconnect device
[   94.974071][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.019010][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.215732][ T5862] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   95.257550][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.284480][ T5862] usb 2-1: config 0 descriptor??
[   95.300349][ T6204] FAULT_INJECTION: forcing a failure.
[   95.300349][ T6204] name failslab, interval 1, probability 0, space 0, times 1
[   95.348545][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.4.66 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[   95.348571][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   95.348585][ T6204] Call Trace:
[   95.348591][ T6204]  <TASK>
[   95.348598][ T6204]  dump_stack_lvl+0x241/0x360
[   95.348635][ T6204]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.348659][ T6204]  ? __pfx__printk+0x10/0x10
[   95.348684][ T6204]  ? fs_reclaim_acquire+0x93/0x130
[   95.348700][ T6204]  ? __pfx___might_resched+0x10/0x10
[   95.348721][ T6204]  should_fail_ex+0x40a/0x550
[   95.348750][ T6204]  should_failslab+0xac/0x100
[   95.348769][ T6204]  __kmalloc_noprof+0xdd/0x4c0
[   95.348787][ T6204]  ? kstrtouint_from_user+0x128/0x190
[   95.348805][ T6204]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[   95.348827][ T6204]  tomoyo_realpath_from_path+0xcf/0x5e0
[   95.348852][ T6204]  tomoyo_path_number_perm+0x236/0x860
[   95.348870][ T6204]  ? __lock_acquire+0x1397/0x2100
[   95.348891][ T6204]  ? tomoyo_path_number_perm+0x206/0x860
[   95.348913][ T6204]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   95.348971][ T6204]  ? __fget_files+0x2a/0x410
[   95.348992][ T6204]  ? __fget_files+0x2a/0x410
[   95.349014][ T6204]  security_file_ioctl+0xc6/0x2a0
[   95.349036][ T6204]  __se_sys_ioctl+0x46/0x170
[   95.349054][ T6204]  do_syscall_64+0xf3/0x230
[   95.349076][ T6204]  ? clear_bhb_loop+0x35/0x90
[   95.349099][ T6204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.349117][ T6204] RIP: 0033:0x7f96a598cde9
[   95.349137][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.349150][ T6204] RSP: 002b:00007f96a684e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.349167][ T6204] RAX: ffffffffffffffda RBX: 00007f96a5ba5fa0 RCX: 00007f96a598cde9
[   95.349178][ T6204] RDX: 0000400000000040 RSI: 0000000000004b44 RDI: 0000000000000003
[   95.349189][ T6204] RBP: 00007f96a684e090 R08: 0000000000000000 R09: 0000000000000000
[   95.349199][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.349208][ T6204] R13: 0000000000000000 R14: 00007f96a5ba5fa0 R15: 00007fff5f48a758
[   95.349231][ T6204]  </TASK>
[   95.349261][ T6204] ERROR: Out of memory at tomoyo_realpath_from_path.
[   95.708341][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.526743][ T5862] usbhid 2-1:0.0: can't add hid device: -71
[   96.541033][ T5862] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   96.555620][ T5862] usb 2-1: USB disconnect, device number 5
[   96.598516][ T5918] usb 1-1: Using ep0 maxpacket: 16
[   96.609816][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.620202][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0
[   96.627737][ T5918] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[   96.644436][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.654327][ T5918] usb 1-1: config 0 descriptor??
[   96.814941][  T910] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   96.872523][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   97.100331][ T5899] usb 4-1: Using ep0 maxpacket: 32
[   97.129466][  T910] usb 5-1: Using ep0 maxpacket: 32
[   97.159040][ T5899] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config
[   97.173302][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   97.174009][ T5918] hid (null): unknown global tag 0xe
[   97.237721][ T5899] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   97.308009][  T910] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   97.322982][ T5918] hid (null): report_id 58501 is invalid
[   97.328351][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.351243][  T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.373655][ T5899] usb 4-1: config 0 descriptor??
[   97.381676][ T5918] hid (null): unknown global tag 0x1c
[   97.387940][ T5918] hid (null): unknown global tag 0xe
[   97.393459][  T910] usb 5-1: Product: syz
[   97.406650][  T910] usb 5-1: Manufacturer: syz
[   97.411609][ T5918] hid (null): unknown global tag 0xe
[   97.416936][ T5918] hid (null): unknown global tag 0xe
[   97.427320][  T910] usb 5-1: SerialNumber: syz
[   97.437326][  T910] usb 5-1: config 0 descriptor??
[   97.448553][ T5918] hid (null): unknown global tag 0xe
[   97.457201][  T910] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   97.468289][ T5918] hid (null): invalid report_count 1640429044
[   97.472046][ T6228] netlink: 'syz.1.76': attribute type 30 has an invalid length.
[   97.474724][ T5918] hid (null): unknown global tag 0xd
[   97.488153][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'.
[   97.506705][ T5918] hid (null): report_id 2863014418 is invalid
[   97.519372][ T5918] hid (null): report_id 2384115945 is invalid
[   97.525530][ T5918] hid (null): unknown global tag 0xd
[   97.532874][ T6228] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   97.557064][ T5918] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[   97.566348][ T5918] cougar 0003:060B:500A.0004: unknown main item tag 0x3
[   97.573430][ T6228] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   97.583267][ T5918] cougar 0003:060B:500A.0004: unknown main item tag 0x4
[   97.591982][ T5918] cougar 0003:060B:500A.0004: unknown main item tag 0x6
[   97.599285][ T5918] cougar 0003:060B:500A.0004: unexpected long global item
[   97.616285][ T5918] cougar 0003:060B:500A.0004: parse failed
[   97.634618][ T5899] usb 4-1: string descriptor 0 read error: -71
[   97.643093][ T5918] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22
[   97.670545][  T910] gspca_stk1135: reg_w 0x2 err -71
[   97.678762][ T5899] usb 4-1: USB disconnect, device number 5
[   97.689292][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   97.710255][  T910] gspca_stk1135: Sensor write failed
[   97.715612][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   97.722952][ T5918] usb 1-1: USB disconnect, device number 4
[   97.759308][  T910] gspca_stk1135: Sensor write failed
[   97.779216][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   97.785916][ T6233] FAULT_INJECTION: forcing a failure.
[   97.785916][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.786532][  T910] gspca_stk1135: Sensor read failed
[   97.807557][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   97.814411][  T910] gspca_stk1135: Sensor read failed
[   97.820613][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.2.78 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[   97.820635][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   97.820644][ T6233] Call Trace:
[   97.820650][ T6233]  <TASK>
[   97.820657][ T6233]  dump_stack_lvl+0x241/0x360
[   97.820687][ T6233]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.820709][ T6233]  ? __pfx__printk+0x10/0x10
[   97.820732][ T6233]  ? rcu_is_watching+0x15/0xb0
[   97.820753][ T6233]  ? __pfx_lock_release+0x10/0x10
[   97.820771][ T6233]  ? __alloc_frozen_pages_noprof+0x350/0x710
[   97.820796][ T6233]  should_fail_ex+0x40a/0x550
[   97.820818][ T6233]  _copy_from_iter+0x1e9/0x1c20
[   97.820846][ T6233]  ? alloc_pages_mpol+0x4bd/0x660
[   97.820870][ T6233]  ? __pfx__copy_from_iter+0x10/0x10
[   97.820892][ T6233]  ? tun_get_user+0x875/0x48a0
[   97.820917][ T6233]  ? set_page_refcounted+0xa1/0x1e0
[   97.820935][ T6233]  ? alloc_pages_noprof+0x136/0x190
[   97.820950][ T6233]  ? page_copy_sane+0x46/0x260
[   97.820972][ T6233]  copy_page_from_iter+0x7a/0x100
[   97.820994][ T6233]  tun_get_user+0x2035/0x48a0
[   97.821016][ T6233]  ? tun_get_user+0x875/0x48a0
[   97.821052][ T6233]  ? __pfx_tun_get_user+0x10/0x10
[   97.821088][ T6233]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   97.821106][ T6233]  ? tun_get+0x1e/0x2f0
[   97.821126][ T6233]  ? __pfx_lock_release+0x10/0x10
[   97.821155][ T6233]  ? tun_get+0x1e/0x2f0
[   97.821174][ T6233]  ? tun_get+0x27d/0x2f0
[   97.821196][ T6233]  tun_chr_write_iter+0x10d/0x1f0
[   97.821220][ T6233]  vfs_write+0xacf/0xd10
[   97.821238][ T6233]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   97.821259][ T6233]  ? __pfx_vfs_write+0x10/0x10
[   97.821272][ T6233]  ? do_sys_openat2+0x17a/0x1d0
[   97.821294][ T6233]  ? __fget_files+0x2a/0x410
[   97.821315][ T6233]  ? __fget_files+0x2a/0x410
[   97.821341][ T6233]  ksys_write+0x18f/0x2b0
[   97.821358][ T6233]  ? __pfx_ksys_write+0x10/0x10
[   97.821374][ T6233]  ? do_syscall_64+0x100/0x230
[   97.821399][ T6233]  ? do_syscall_64+0xb6/0x230
[   97.821428][ T6233]  do_syscall_64+0xf3/0x230
[   97.821448][ T6233]  ? clear_bhb_loop+0x35/0x90
[   97.821472][ T6233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.821491][ T6233] RIP: 0033:0x7f79de98b89f
[   97.821506][ T6233] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   97.821519][ T6233] RSP: 002b:00007f79df7d8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   97.821537][ T6233] RAX: ffffffffffffffda RBX: 00007f79deba5fa0 RCX: 00007f79de98b89f
[   97.821549][ T6233] RDX: 000000000000004a RSI: 0000400000000500 RDI: 00000000000000c8
[   97.821559][ T6233] RBP: 00007f79df7d8090 R08: 0000000000000000 R09: 0000000000000000
[   97.821569][ T6233] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[   97.821578][ T6233] R13: 0000000000000000 R14: 00007f79deba5fa0 R15: 00007ffecc9e8568
[   97.821603][ T6233]  </TASK>
[   97.827788][  T910] gspca_stk1135: Detected sensor type unknown (0x0)
[   98.125454][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   98.131878][  T910] gspca_stk1135: Sensor read failed
[   98.137203][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   98.144095][  T910] gspca_stk1135: Sensor read failed
[   98.148509][   T58] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   98.234024][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   98.240607][  T910] gspca_stk1135: Sensor write failed
[   98.246212][  T910] gspca_stk1135: serial bus timeout: status=0x00
[   98.257905][  T910] gspca_stk1135: Sensor write failed
[   98.327163][  T910] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[   98.344230][   T58] usb 2-1: config 0 has an invalid interface number: 175 but max is 0
[   98.355701][ T6246] loop6: detected capacity change from 0 to 524287999
[   98.362983][   T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.379367][  T910] usb 5-1: USB disconnect, device number 3
[   98.392585][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.397281][   T58] usb 2-1: config 0 has no interface number 0
[   98.401972][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.476904][   T58] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[   98.498548][   T58] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[   98.511795][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.521681][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.543461][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.552753][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.561878][   T58] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   98.572155][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.572193][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.602254][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.611532][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.621285][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.630545][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.643279][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.651064][ T5862] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   98.652556][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.703917][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.713177][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.721146][ T6246] ldm_validate_partition_table(): Disk read failed.
[   98.728528][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.731934][   T58] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[   98.737728][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.747964][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.753926][   T58] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[   98.758735][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   98.771675][ T6246] Dev loop6: unable to read RDB block 0
[   98.953590][ T5862] usb 1-1: Using ep0 maxpacket: 16
[   99.115778][ T6246]  loop6: unable to read partition table
[   99.424854][   T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.433566][   T58] usb 2-1: Product: syz
[   99.438009][   T58] usb 2-1: Manufacturer: syz
[   99.442805][   T58] usb 2-1: SerialNumber: syz
[   99.454967][ T5862] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[   99.458724][ T6246] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   99.478804][ T5862] usb 1-1: config 0 has no interface number 0
[   99.484962][ T5862] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.499838][   T58] usb 2-1: config 0 descriptor??
[   99.520690][   T58] symbolserial 2-1:0.175: symbol converter detected
[   99.562705][   T58] usb 2-1: symbol converter now attached to ttyUSB0
[   99.607996][ T5862] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   99.638279][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   99.674089][ T5862] usb 1-1: Product: syz
[   99.707122][ T5862] usb 1-1: SerialNumber: syz
[   99.735778][ T5862] usb 1-1: config 0 descriptor??
[   99.750880][ T5862] cm109 1-1:0.8: invalid payload size 208, expected 4
[   99.766013][   T25] usb 2-1: USB disconnect, device number 6
[   99.793440][   T25] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[   99.803467][ T5862] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8
[   99.819999][   T25] symbolserial 2-1:0.175: device disconnected
[  100.183186][    C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  100.184412][   T25] usb 1-1: USB disconnect, device number 5
[  100.190180][    C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  101.218092][   T25] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  101.328809][ T6266] =======================================================
[  101.328809][ T6266] WARNING: The mand mount option has been deprecated and
[  101.328809][ T6266]          and is ignored by this kernel. Remove the mand
[  101.328809][ T6266]          option from the mount to silence this warning.
[  101.328809][ T6266] =======================================================
[  102.292963][ T6281] input: syz0 as /devices/virtual/input/input9
[  102.565166][ T6297] random: crng reseeded on system resumption
[  102.766514][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  103.325081][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'.
[  104.848054][ T6318] loop6: detected capacity change from 0 to 524287999
[  104.870492][    C0] blk_print_req_error: 7 callbacks suppressed
[  104.870511][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.885926][    C0] buffer_io_error: 7 callbacks suppressed
[  104.885942][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  104.923512][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  104.932821][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.198245][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.207539][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.218304][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.227534][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.872469][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.881732][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.894510][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.903731][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.912274][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.921503][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.930270][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.939495][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  105.948116][ T6318] ldm_validate_partition_table(): Disk read failed.
[  105.955282][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  105.964522][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.197771][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  106.207070][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  106.216368][ T6318] Dev loop6: unable to read RDB block 0
[  106.237356][ T6318]  loop6: unable to read partition table
[  106.245575][ T6318] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  106.251065][ T6325] netlink: 'syz.4.101': attribute type 1 has an invalid length.
[  106.397788][ T6325] bond1: entered allmulticast mode
[  106.666375][ T6335] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  106.748958][ T5982] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.763888][ T5982] Bluetooth: hci0: Frame reassembly failed (-84)
[  106.773844][ T5866] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  106.823902][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.838880][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[  106.942762][ T5866] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  106.970810][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.981870][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.012376][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[  107.014912][ T5866] usb 3-1: Product: syz
[  107.050620][ T5866] usb 3-1: Manufacturer: syz
[  107.055298][ T5866] usb 3-1: SerialNumber: syz
[  107.080495][ T5866] usb 3-1: config 0 descriptor??
[  107.190464][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.206714][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[  107.289802][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'.
[  107.306470][ T5866] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  107.326633][ T5866] usb 3-1: USB disconnect, device number 5
[  107.366604][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.395474][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[  107.659664][   T35] bridge_slave_1: left allmulticast mode
[  107.678904][   T35] bridge_slave_1: left promiscuous mode
[  107.700159][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.765204][   T35] bridge_slave_0: left allmulticast mode
[  107.785597][   T35] bridge_slave_0: left promiscuous mode
[  107.805355][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.927498][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  107.937240][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  107.946741][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  107.956686][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  107.965515][ T5820] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  107.973194][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  108.288608][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  108.453089][ T5865] usb 3-1: Using ep0 maxpacket: 16
[  108.471411][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.495754][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0
[  108.513115][ T5865] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  108.523255][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.569300][ T5865] usb 3-1: config 0 descriptor??
[  108.818546][ T5820] Bluetooth: hci0: command 0x1003 tx timeout
[  108.826827][ T5827] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  109.003115][ T5865] hid (null): unknown global tag 0xe
[  109.013053][ T5865] hid (null): report_id 58501 is invalid
[  109.118333][ T6366] ALSA: mixer_oss: invalid OSS volume ''
[  109.298900][ T5865] hid (null): unknown global tag 0x1c
[  109.329174][ T5865] hid (null): unknown global tag 0xe
[  109.335281][ T5865] hid (null): unknown global tag 0xe
[  109.412515][ T5865] hid (null): unknown global tag 0xe
[  109.421159][ T5865] hid (null): unknown global tag 0xe
[  109.429333][ T5865] hid (null): invalid report_count 1640429044
[  109.438175][ T5865] hid (null): unknown global tag 0xd
[  109.448309][ T5865] hid (null): report_id 2863014418 is invalid
[  109.551229][ T5865] hid (null): report_id 2384115945 is invalid
[  109.558438][ T5865] hid (null): unknown global tag 0xd
[  109.567854][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.582942][ T5865] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  109.591944][ T5865] cougar 0003:060B:500A.0005: unknown main item tag 0x3
[  109.592828][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.599340][ T5865] cougar 0003:060B:500A.0005: unknown main item tag 0x4
[  109.673648][   T35] bond0 (unregistering): Released all slaves
[  109.685190][ T6369] FAULT_INJECTION: forcing a failure.
[  109.685190][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.706887][ T5865] cougar 0003:060B:500A.0005: unknown main item tag 0x6
[  109.707371][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.3.111 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  109.707391][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  109.707400][ T6369] Call Trace:
[  109.707406][ T6369]  <TASK>
[  109.707413][ T6369]  dump_stack_lvl+0x241/0x360
[  109.707443][ T6369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.707465][ T6369]  ? __pfx__printk+0x10/0x10
[  109.707489][ T6369]  ? __pfx_lock_release+0x10/0x10
[  109.707516][ T6369]  should_fail_ex+0x40a/0x550
[  109.707537][ T6369]  _copy_from_user+0x2d/0xb0
[  109.707554][ T6369]  core_sys_select+0x639/0x910
[  109.707580][ T6369]  ? __pfx_core_sys_select+0x10/0x10
[  109.707599][ T6369]  ? ksys_write+0x22a/0x2b0
[  109.707637][ T6369]  ? __pfx_set_user_sigmask+0x10/0x10
[  109.707654][ T6369]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  109.707674][ T6369]  ? __fget_files+0x2a/0x410
[  109.707698][ T6369]  __se_sys_pselect6+0x321/0x3e0
[  109.707723][ T6369]  ? __pfx___se_sys_pselect6+0x10/0x10
[  109.707740][ T6369]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  109.707761][ T6369]  ? do_syscall_64+0x100/0x230
[  109.707783][ T6369]  ? __x64_sys_pselect6+0x21/0xf0
[  109.707802][ T6369]  do_syscall_64+0xf3/0x230
[  109.707821][ T6369]  ? clear_bhb_loop+0x35/0x90
[  109.707843][ T6369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.707862][ T6369] RIP: 0033:0x7f296fd8cde9
[  109.707877][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.707889][ T6369] RSP: 002b:00007f2970b21038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  109.707906][ T6369] RAX: ffffffffffffffda RBX: 00007f296ffa5fa0 RCX: 00007f296fd8cde9
[  109.707917][ T6369] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040
[  109.707926][ T6369] RBP: 00007f2970b21090 R08: 0000000000000000 R09: 0000000000000000
[  109.707936][ T6369] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  109.707946][ T6369] R13: 0000000000000000 R14: 00007f296ffa5fa0 R15: 00007ffd45a8a4f8
[  109.707970][ T6369]  </TASK>
[  109.967821][ T5865] cougar 0003:060B:500A.0005: unexpected long global item
[  110.019175][ T5827] Bluetooth: hci5: command tx timeout
[  110.070455][ T5865] cougar 0003:060B:500A.0005: parse failed
[  110.102474][ T5865] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22
[  110.167292][ T5865] usb 3-1: USB disconnect, device number 6
[  111.140507][ T6386] trusted_key: syz.4.116 sent an empty control message without MSG_MORE.
[  111.498335][ T5862] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  111.536119][   T35] hsr_slave_0: left promiscuous mode
[  111.563157][   T35] hsr_slave_1: left promiscuous mode
[  111.581354][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.657101][ T6398] Can't find a SQUASHFS superblock on nullb0
[  111.673740][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.700924][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.713121][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.790565][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.798588][ T5862] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00
[  111.824107][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.836479][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.881184][ T5862] usb 1-1: config 0 descriptor??
[  112.030427][   T35] veth1_macvtap: left promiscuous mode
[  112.089858][   T35] veth0_macvtap: left promiscuous mode
[  112.098538][ T5827] Bluetooth: hci5: command tx timeout
[  112.447240][ T5862] wacom 0003:056A:0031.0006: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0
[  112.675906][ T5862] usb 1-1: USB disconnect, device number 6
[  112.911240][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  113.032785][   T35] team0 (unregistering): Port device team_slave_1 removed
[  113.072236][   T35] team0 (unregistering): Port device team_slave_0 removed
[  113.079533][ T5863] usb 3-1: Using ep0 maxpacket: 16
[  113.086266][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  113.101620][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  113.111092][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.128839][ T5863] usb 3-1: config 0 descriptor??
[  113.141010][ T5863] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  114.182212][ T5827] Bluetooth: hci5: command tx timeout
[  114.261477][ T6416] tty tty2: ldisc open failed (-12), clearing slot 1
[  114.549464][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.709029][ T6346] chnl_net:caif_netlink_parms(): no params data found
[  114.709414][ T5918] usb 5-1: Using ep0 maxpacket: 16
[  114.772501][ T5918] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.804707][ T5862] usb 3-1: USB disconnect, device number 7
[  114.833202][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0
[  114.866887][ T5918] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  115.059617][ T6450] netlink: 10 bytes leftover after parsing attributes in process `syz.2.125'.
[  115.081972][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.106068][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[  115.145854][ T5918] usb 5-1: config 0 descriptor??
[  115.179568][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.186716][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.208763][ T6346] bridge_slave_0: entered allmulticast mode
[  115.256376][ T6346] bridge_slave_0: entered promiscuous mode
[  115.402659][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.452495][ T6459] syz.3.124: attempt to access beyond end of device
[  115.452495][ T6459] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  115.471795][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.479605][ T6346] bridge_slave_1: entered allmulticast mode
[  115.488534][ T6346] bridge_slave_1: entered promiscuous mode
[  115.560556][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.563488][ T6459] XFS (nbd3): SB validate failed with error -5.
[  115.627236][ T5918] hid (null): unknown global tag 0xe
[  115.647584][ T5918] hid (null): report_id 58501 is invalid
[  115.657286][ T5918] hid (null): unknown global tag 0x1c
[  115.665095][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.676351][ T5918] hid (null): unknown global tag 0xe
[  115.711023][ T5918] hid (null): unknown global tag 0xe
[  115.723516][ T6468] cgroup: Bad value for 'name'
[  115.755318][ T5918] hid (null): unknown global tag 0xe
[  115.761049][ T5918] hid (null): unknown global tag 0xe
[  115.766661][ T5918] hid (null): invalid report_count 1640429044
[  115.784234][ T5918] hid (null): unknown global tag 0xd
[  115.790425][ T5918] hid (null): report_id 2863014418 is invalid
[  115.816607][ T5918] hid (null): report_id 2384115945 is invalid
[  115.850988][ T5918] hid (null): unknown global tag 0xd
[  115.868549][ T5918] cougar 0003:060B:500A.0007: unknown main item tag 0x0
[  115.891583][ T5918] cougar 0003:060B:500A.0007: unknown main item tag 0x3
[  115.907799][ T5918] cougar 0003:060B:500A.0007: unknown main item tag 0x4
[  115.910518][ T6346] team0: Port device team_slave_0 added
[  115.915710][ T5918] cougar 0003:060B:500A.0007: unknown main item tag 0x6
[  115.937781][ T5918] cougar 0003:060B:500A.0007: unexpected long global item
[  115.957184][ T5918] cougar 0003:060B:500A.0007: parse failed
[  115.964529][ T5918] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22
[  116.001762][ T5918] usb 5-1: USB disconnect, device number 4
[  116.111687][ T6346] team0: Port device team_slave_1 added
[  116.120167][ T6475] 9pnet_fd: Insufficient options for proto=fd
[  116.258524][ T5827] Bluetooth: hci5: command tx timeout
[  116.341935][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'.
[  116.370557][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.449851][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.560626][ T6481] loop6: detected capacity change from 0 to 524287999
[  116.568468][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.585324][    C0] blk_print_req_error: 7 callbacks suppressed
[  116.585336][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.600623][    C0] buffer_io_error: 7 callbacks suppressed
[  116.600631][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.618491][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.627658][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.637989][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.647158][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.655340][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.664543][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.674161][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.683507][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.819274][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.828506][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.843065][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.852252][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.868517][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  116.877660][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  116.885539][ T6481] ldm_validate_partition_table(): Disk read failed.
[  117.480645][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.488446][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.489720][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  117.518226][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.523658][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.546008][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  117.555199][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.578810][ T6481] Dev loop6: unable to read RDB block 0
[  117.642622][ T6481]  loop6: unable to read partition table
[  117.654685][ T6481] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  117.827464][ T6346] hsr_slave_0: entered promiscuous mode
[  117.856119][ T6346] hsr_slave_1: entered promiscuous mode
[  118.068547][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  118.327868][ T5918] usb 3-1: Using ep0 maxpacket: 8
[  118.644463][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  118.674301][ T5918] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  118.706098][ T5918] usb 3-1: Product: syz
[  118.738344][ T5918] usb 3-1: Manufacturer: syz
[  118.772443][ T5918] usb 3-1: SerialNumber: syz
[  118.799236][ T5918] usb 3-1: config 0 descriptor??
[  118.822896][ T5918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  119.092398][ T6499] netlink: 'syz.4.132': attribute type 40 has an invalid length.
[  119.130651][ T6499] netlink: 4112 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.763814][ T6512] tmpfs: Cannot disable swap on remount
[  120.089902][ T5918] gspca_zc3xx: reg_w_i err -110
[  120.094828][ T5918] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  120.431785][ T5918] libceph: connect (1)[c::]:6789 error -101
[  120.438711][ T5918] libceph: mon0 (1)[c::]:6789 connect error
[  120.883669][  T910] libceph: connect (1)[c::]:6789 error -101
[  120.894322][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  121.096942][ T6512] ceph: No mds server is up or the cluster is laggy
[  121.135487][   T25] usb 3-1: USB disconnect, device number 8
[  121.307569][ T6346] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.339927][ T6346] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.809015][ T6346] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  122.100576][ T6346] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  123.053513][ T6538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.062621][ T6538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.071691][ T6538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.080437][ T6538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.100110][ T6536] ALSA: mixer_oss: invalid OSS volume 'u'
[  123.253032][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.789018][ T6545] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.797826][ T6545] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.807155][ T6545] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.816377][ T6545] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.835840][ T6543] ALSA: mixer_oss: invalid OSS volume 'u'
[  123.911319][ T6346] 8021q: adding VLAN 0 to HW filter on device team0
[  123.935153][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.942333][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.995953][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.003180][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.308298][ T6557] syz_tun: entered promiscuous mode
[  125.027954][ T6346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.048246][ T6346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.398425][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  125.901221][ T6588] random: crng reseeded on system resumption
[  126.308445][ T5865] usb 4-1: Using ep0 maxpacket: 16
[  126.350696][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.510373][ T5865] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  126.550501][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.749368][ T5827] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  126.759186][ T5827] Bluetooth: hci2: Injecting HCI hardware error event
[  126.772098][ T5827] Bluetooth: hci2: hardware error 0x00
[  126.811804][ T5865] usb 4-1: config 0 descriptor??
[  127.240507][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.272090][ T6346] veth0_vlan: entered promiscuous mode
[  127.283028][ T6346] veth1_vlan: entered promiscuous mode
[  127.374321][ T6346] veth0_macvtap: entered promiscuous mode
[  127.399407][ T6346] veth1_macvtap: entered promiscuous mode
[  127.445482][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.458602][ T5820] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  127.467896][ T5820] Bluetooth: hci4: Injecting HCI hardware error event
[  127.476247][ T5820] Bluetooth: hci4: hardware error 0x00
[  127.488299][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.498327][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.509417][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.528415][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.546317][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.556339][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.566984][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.610942][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.670882][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.698320][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.754060][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.791240][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.826330][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.858810][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.878586][ T6346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.910494][ T6346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.935725][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.949161][ T5865] usbhid 4-1:0.0: can't add hid device: -71
[  127.962947][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  127.981159][ T6346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.007005][ T5865] usb 4-1: USB disconnect, device number 6
[  128.013006][ T6346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.043765][ T6346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.072038][ T6346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.396285][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.450125][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.529094][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.170406][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.299491][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  129.704378][ T5820] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  129.777636][ T6660] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  130.018712][  T910] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  130.150273][   T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.164425][ T6675] input: syz1 as /devices/virtual/input/input13
[  130.193937][  T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  130.241118][  T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  130.257935][  T910] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00
[  130.273789][  T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.286496][  T910] usb 1-1: config 0 descriptor??
[  130.323226][ T6675] capability: warning: `syz.2.161' uses deprecated v2 capabilities in a way that may be insecure
[  130.374886][   T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.531564][   T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.757843][   T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.784844][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.815344][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.836755][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.853261][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.861437][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.874593][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  130.886433][  T910] steelseries 0003:1038:12C2.0008: unknown main item tag 0x0
[  131.529309][    T8] usb 1-1: USB disconnect, device number 7
[  131.758630][   T63] bridge_slave_1: left allmulticast mode
[  131.966624][   T63] bridge_slave_1: left promiscuous mode
[  131.986468][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.027609][   T63] bridge_slave_0: left allmulticast mode
[  132.039206][   T63] bridge_slave_0: left promiscuous mode
[  132.083485][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.223247][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.252331][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.261357][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.270886][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.281238][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  132.294078][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.234275][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  133.244081][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.293215][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.307888][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.326819][   T63] bond0 (unregistering): Released all slaves
[  133.352320][ T6723] vlan2: entered promiscuous mode
[  133.357440][ T6723] bridge0: entered promiscuous mode
[  133.364242][ T6723] bridge0: port 3(vlan2) entered blocking state
[  133.370609][ T6723] bridge0: port 3(vlan2) entered disabled state
[  133.377053][ T6723] vlan2: entered allmulticast mode
[  133.383927][ T6723] vlan2: left allmulticast mode
[  133.390293][ T6723] bridge0: left promiscuous mode
[  133.424927][ T6725] vlan2: entered promiscuous mode
[  133.430088][ T6725] bridge0: entered promiscuous mode
[  133.436623][ T6725] bridge0: port 3(vlan2) entered blocking state
[  133.443107][ T6725] bridge0: port 3(vlan2) entered disabled state
[  133.449593][ T6725] vlan2: entered allmulticast mode
[  133.454724][ T6725] bridge0: entered allmulticast mode
[  133.467397][ T6725] vlan2: left allmulticast mode
[  133.472433][ T6725] bridge0: left allmulticast mode
[  133.478534][ T6725] bridge0: left promiscuous mode
[  134.338370][ T5827] Bluetooth: hci0: command tx timeout
[  135.798739][   T63] hsr_slave_0: left promiscuous mode
[  135.829414][   T63] hsr_slave_1: left promiscuous mode
[  135.835207][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.895981][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.935750][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.950806][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.171087][   T63] veth1_macvtap: left promiscuous mode
[  136.204466][   T63] veth0_macvtap: left promiscuous mode
[  136.991632][ T5827] Bluetooth: hci0: command tx timeout
[  137.074382][   T63] veth1_vlan: left promiscuous mode
[  137.200789][   T63] veth0_vlan: left promiscuous mode
[  139.059529][ T5827] Bluetooth: hci0: command tx timeout
[  139.192981][ T6822] Driver unsupported XDP return value 0 on prog  (id 43) dev N/A, expect packet loss!
[  139.494221][   T63] team0 (unregistering): Port device team_slave_1 removed
[  139.511399][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  139.562944][   T63] team0 (unregistering): Port device team_slave_0 removed
[  139.680871][ T5918] usb 1-1: Using ep0 maxpacket: 16
[  139.690295][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.704962][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.717238][ T5918] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  139.726960][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.747339][ T5918] usb 1-1: config 0 descriptor??
[  140.017946][ T6805] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.026797][ T6805] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.035928][ T6805] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.044680][ T6805] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.062157][ T6801] ALSA: mixer_oss: invalid OSS volume 'u'
[  140.190680][ T5918] glorious 0003:22D4:1503.0009: item fetching failed at offset 3/5
[  140.202960][ T5918] glorious 0003:22D4:1503.0009: probe with driver glorious failed with error -22
[  140.925845][ T6834] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  140.932404][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  140.940079][ T6834] vhci_hcd vhci_hcd.0: Device attached
[  141.158484][ T5827] Bluetooth: hci0: command tx timeout
[  141.164144][ T6835] vhci_hcd: connection closed
[  141.187299][ T6067] vhci_hcd: stop threads
[  141.257506][ T5865] vhci_hcd: vhci_device speed not set
[  141.312718][ T6067] vhci_hcd: release socket
[  141.351037][ T6719] chnl_net:caif_netlink_parms(): no params data found
[  141.418314][ T5865] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  141.479471][ T6067] vhci_hcd: disconnect device
[  141.545491][ T5865] usb 39-1: enqueue for inactive port 0
[  141.579823][ T5918] usb 1-1: USB disconnect, device number 8
[  141.698578][ T5865] vhci_hcd: vhci_device speed not set
[  141.797734][ T6841] msdos: Unknown parameter 'discard³Q}R¿dGFÊ<7B/ÐR‚wl&íÈiÜ\ƒO*Ûc]Ó‰±"¼"ÿwiÚ1Le¿�‘á¸?ÇàmZžoEçAzý�*ºøA‘I/œ~Ú¿®'
[  141.837964][ T6851] msdos: Unknown parameter 'discard³Q}R¿dGFÊ<7B/ÐR‚wl&íÈiÜ\ƒO*Ûc]Ó‰±"¼"ÿwiÚ1Le¿�‘á¸?ÇàmZžoEçAzý�*ºøA‘I/œ~Ú¿®'
[  141.949715][   T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  142.128316][   T25] usb 3-1: Using ep0 maxpacket: 8
[  142.166006][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  142.246050][   T25] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  142.385600][   T25] usb 3-1: Product: syz
[  142.419858][ T5827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  142.428834][ T5827] Bluetooth: hci3: Injecting HCI hardware error event
[  142.439400][ T5820] Bluetooth: hci3: hardware error 0x00
[  142.475193][   T25] usb 3-1: Manufacturer: syz
[  142.571174][   T25] usb 3-1: SerialNumber: syz
[  142.621081][   T25] usb 3-1: config 0 descriptor??
[  142.643927][   T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  142.652388][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.667718][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.675825][ T6719] bridge_slave_0: entered allmulticast mode
[  142.689686][ T6719] bridge_slave_0: entered promiscuous mode
[  142.717628][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.728601][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.753847][ T6719] bridge_slave_1: entered allmulticast mode
[  142.764407][ T6719] bridge_slave_1: entered promiscuous mode
[  142.863877][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.971064][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.170490][ T6719] team0: Port device team_slave_0 added
[  143.214197][ T6719] team0: Port device team_slave_1 added
[  143.539163][   T25] gspca_zc3xx: reg_w_i err -110
[  143.564027][   T25] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  143.940509][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.966408][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.999420][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.578511][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  144.610510][ T6882] netlink: 176 bytes leftover after parsing attributes in process `syz.0.199'.
[  144.889707][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.897281][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.923808][    T8] usb 3-1: USB disconnect, device number 9
[  144.939579][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.857039][ T6890] vlan2: entered promiscuous mode
[  145.862316][ T6890] bond0: entered promiscuous mode
[  145.867913][ T6890] bond_slave_0: entered promiscuous mode
[  145.873753][ T6890] bond_slave_1: entered promiscuous mode
[  145.881387][ T6890] bond0: left promiscuous mode
[  145.886163][ T6890] bond_slave_0: left promiscuous mode
[  145.891736][ T6890] bond_slave_1: left promiscuous mode
[  145.916074][ T6884] ALSA: mixer_oss: invalid OSS volume 'u'
[  145.964063][ T6719] hsr_slave_0: entered promiscuous mode
[  145.966423][ T6894] FAULT_INJECTION: forcing a failure.
[  145.966423][ T6894] name failslab, interval 1, probability 0, space 0, times 0
[  145.985832][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.3.203 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  145.985855][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  145.985864][ T6894] Call Trace:
[  145.985870][ T6894]  <TASK>
[  145.985877][ T6894]  dump_stack_lvl+0x241/0x360
[  145.985907][ T6894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.985928][ T6894]  ? __pfx__printk+0x10/0x10
[  145.985951][ T6894]  ? fs_reclaim_acquire+0x93/0x130
[  145.985967][ T6894]  ? __pfx___might_resched+0x10/0x10
[  145.985989][ T6894]  should_fail_ex+0x40a/0x550
[  145.986013][ T6894]  should_failslab+0xac/0x100
[  145.986034][ T6894]  __kmalloc_cache_noprof+0x70/0x390
[  145.986053][ T6894]  ? netlbl_catmap_setbit+0x1bc/0x3a0
[  145.986079][ T6894]  netlbl_catmap_setbit+0x1bc/0x3a0
[  145.986102][ T6894]  smk_netlbl_mls+0x1e0/0x630
[  145.986128][ T6894]  smk_import_entry+0x35e/0x610
[  145.986150][ T6894]  smk_write_net4addr+0x37d/0xf10
[  145.986181][ T6894]  ? __pfx_smk_write_net4addr+0x10/0x10
[  145.986203][ T6894]  ? rcu_read_lock_any_held+0xb7/0x160
[  145.986231][ T6894]  ? __pfx_smk_write_net4addr+0x10/0x10
[  145.986254][ T6894]  vfs_write+0x29f/0xd10
[  145.986270][ T6894]  ? fdget_pos+0x254/0x320
[  145.986289][ T6894]  ? __mutex_unlock_slowpath+0x227/0x800
[  145.986314][ T6894]  ? __pfx_vfs_write+0x10/0x10
[  145.986327][ T6894]  ? do_sys_openat2+0x17a/0x1d0
[  145.986349][ T6894]  ? __fget_files+0x2a/0x410
[  145.986369][ T6894]  ? __fget_files+0x395/0x410
[  145.986386][ T6894]  ? __fget_files+0x2a/0x410
[  145.986410][ T6894]  ksys_write+0x18f/0x2b0
[  145.986425][ T6894]  ? __pfx_ksys_write+0x10/0x10
[  145.986439][ T6894]  ? do_syscall_64+0x100/0x230
[  145.986460][ T6894]  ? do_syscall_64+0xb6/0x230
[  145.986481][ T6894]  do_syscall_64+0xf3/0x230
[  145.986500][ T6894]  ? clear_bhb_loop+0x35/0x90
[  145.986523][ T6894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.986542][ T6894] RIP: 0033:0x7f296fd8cde9
[  145.986558][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.986569][ T6894] RSP: 002b:00007f2970b21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.986596][ T6894] RAX: ffffffffffffffda RBX: 00007f296ffa5fa0 RCX: 00007f296fd8cde9
[  145.986607][ T6894] RDX: 000000000000006f RSI: 0000400000000000 RDI: 0000000000000003
[  145.986617][ T6894] RBP: 00007f2970b21090 R08: 0000000000000000 R09: 0000000000000000
[  145.986626][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.986635][ T6894] R13: 0000000000000000 R14: 00007f296ffa5fa0 R15: 00007ffd45a8a4f8
[  145.986660][ T6894]  </TASK>
[  146.248715][ T6719] hsr_slave_1: entered promiscuous mode
[  146.349989][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.202'.
[  147.338427][ T6909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  147.345002][ T6909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  147.353636][ T6909] vhci_hcd vhci_hcd.0: Device attached
[  147.360261][ T6910] vhci_hcd: connection closed
[  147.370577][   T52] vhci_hcd: stop threads
[  147.400792][   T52] vhci_hcd: release socket
[  147.420602][   T52] vhci_hcd: disconnect device
[  147.793325][ T6719] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  147.835431][ T6719] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  147.847375][ T6719] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  148.726054][ T6719] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  149.501820][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.534030][ T6719] 8021q: adding VLAN 0 to HW filter on device team0
[  149.551375][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.558525][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.568309][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  149.613301][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.620484][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.715621][ T6962] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  149.749185][ T5865] usb 5-1: Using ep0 maxpacket: 16
[  149.781841][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.818620][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  149.830133][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  149.840455][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.855860][ T5865] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  149.865708][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.885305][ T5865] usb 5-1: Product: syz
[  149.894795][ T5865] usb 5-1: Manufacturer: syz
[  149.909083][ T5865] usb 5-1: SerialNumber: syz
[  149.924212][ T5865] usb 5-1: config 0 descriptor??
[  149.939647][ T5865] xbox_remote_probe: Unexpected endpoint_in
[  150.088156][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.135601][ T6719] veth0_vlan: entered promiscuous mode
[  150.144031][ T6916] netlink: 48 bytes leftover after parsing attributes in process `syz.4.207'.
[  150.146799][ T6719] veth1_vlan: entered promiscuous mode
[  150.173390][ T5865] usb 5-1: USB disconnect, device number 5
[  150.220994][ T6719] veth0_macvtap: entered promiscuous mode
[  150.240257][ T6719] veth1_macvtap: entered promiscuous mode
[  150.248494][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  150.271713][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.288239][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.318284][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.338681][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.345184][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'.
[  150.350866][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.368350][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.378857][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.380348][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  150.408253][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.418524][ T5862] usb 4-1: Using ep0 maxpacket: 8
[  150.431564][ T5862] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  150.444818][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.462134][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.472771][ T5862] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  150.481571][ T5862] usb 4-1: Product: syz
[  150.485825][ T5862] usb 4-1: Manufacturer: syz
[  150.490758][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.500881][ T5862] usb 4-1: SerialNumber: syz
[  150.509242][ T5862] usb 4-1: config 0 descriptor??
[  150.517799][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.531660][ T5862] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  150.538423][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.548428][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.559025][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.569039][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.581059][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.596666][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.631032][ T6719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.657576][ T6719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.667269][ T6719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.676188][ T6719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.865532][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.897802][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.107065][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.391394][ T6998] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  151.397967][ T6998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  151.405779][ T6998] vhci_hcd vhci_hcd.0: Device attached
[  151.878262][ T5862] gspca_zc3xx: reg_w_i err -110
[  151.883231][ T5862] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  151.891951][ T7000] vhci_hcd: connection closed
[  151.933898][ T1107] vhci_hcd: stop threads
[  151.961653][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.968849][ T1107] vhci_hcd: release socket
[  151.988703][ T5865] vhci_hcd: vhci_device speed not set
[  152.013638][ T1107] vhci_hcd: disconnect device
[  152.083800][ T5865] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  152.198514][ T5865] usb 37-1: enqueue for inactive port 0
[  152.280889][ T5865] vhci_hcd: vhci_device speed not set
[  152.587505][ T5863] usb 4-1: USB disconnect, device number 7
[  152.711298][ T7011] Can't find a SQUASHFS superblock on nullb0
[  152.891715][ T5918] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  153.444093][ T5918] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  154.194723][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.209583][ T7016] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  154.216238][ T7016] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  154.224136][ T7016] vhci_hcd vhci_hcd.0: Device attached
[  154.225871][ T7018] vhci_hcd: connection closed
[  154.269789][ T1107] vhci_hcd: stop threads
[  154.279100][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.309499][ T1107] vhci_hcd: release socket
[  154.315133][ T1107] vhci_hcd: disconnect device
[  154.325692][ T7004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  154.850594][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  155.416675][ T5918] usb 1-1: USB disconnect, device number 9
[  155.689059][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.979540][ T7040] random: crng reseeded on system resumption
[  156.596625][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.693897][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.765222][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.805492][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  156.815920][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.825999][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.836347][   T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  156.957211][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.967762][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  156.979915][ T5918] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  156.996511][ T5918] usb 3-1: config 0 has no interface number 0
[  157.022168][ T5918] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  157.069767][ T5918] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  157.080804][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  157.099070][ T5918] usb 3-1: Product: syz
[  157.110943][ T5918] usb 3-1: SerialNumber: syz
[  157.268377][   T25] usb 1-1: Using ep0 maxpacket: 16
[  157.350519][ T7059] serio: Serial port pts0
[  157.782184][ T5918] usb 3-1: config 0 descriptor??
[  157.790922][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.807795][ T5918] cm109 3-1:0.8: invalid payload size 208, expected 4
[  157.816885][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14
[  157.944212][   T25] usb 1-1: unable to get BOS descriptor or descriptor too short
[  157.960345][   T25] usb 1-1: config 3 has an invalid interface number: 7 but max is 1
[  157.979675][   T25] usb 1-1: config 3 has no interface number 0
[  157.986136][   T25] usb 1-1: config 3 interface 1 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  158.002128][   T25] usb 1-1: config 3 interface 7 has no altsetting 0
[  158.013722][   T25] usb 1-1: config 3 interface 1 has no altsetting 0
[  158.024712][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.060627][   T25] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2
[  158.075557][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.098391][   T25] usb 1-1: Product: syz
[  158.107852][   T25] usb 1-1: Manufacturer: syz
[  158.127113][   T25] usb 1-1: SerialNumber: syz
[  158.341350][ T6071] bridge_slave_1: left allmulticast mode
[  158.347084][ T6071] bridge_slave_1: left promiscuous mode
[  158.368406][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.394561][ T6071] bridge_slave_0: left allmulticast mode
[  158.410433][   T25] xr_serial 1-1:3.7: xr_serial converter detected
[  158.424590][ T6071] bridge_slave_0: left promiscuous mode
[  158.438476][   T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  158.444900][   T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  158.453460][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.494047][   T25] usb 1-1: USB disconnect, device number 10
[  158.517883][   T25] xr_serial 1-1:3.7: device disconnected
[  158.774667][ T5863] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  158.783354][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.796953][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.807558][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.822354][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.831811][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.844105][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.953138][ T5863] usb 5-1: Using ep0 maxpacket: 32
[  158.984536][ T5863] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  158.994044][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.010358][ T5863] usb 5-1: Product: syz
[  159.022361][ T5863] usb 5-1: Manufacturer: syz
[  159.027673][ T5863] usb 5-1: SerialNumber: syz
[  159.035435][ T5863] usb 5-1: config 0 descriptor??
[  159.070354][ T5863] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  159.204615][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.395230][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.483184][ T6071] bond0 (unregistering): Released all slaves
[  159.494417][ T5863] gspca_stk1135: reg_w 0x2 err -71
[  159.553611][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.619032][ T5863] gspca_stk1135: Sensor write failed
[  159.671238][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.687070][ T5863] gspca_stk1135: Sensor write failed
[  159.697660][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.710505][ T5863] gspca_stk1135: Sensor read failed
[  159.716169][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.732179][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  159.739470][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.747951][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.755488][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.762681][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.769785][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.776908][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.784045][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.791247][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.798454][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.805656][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  159.813647][ T5862] usb 3-1: USB disconnect, device number 10
[  159.819613][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  159.835012][ T5863] gspca_stk1135: Sensor read failed
[  159.866078][ T5863] gspca_stk1135: Detected sensor type unknown (0x0)
[  159.901742][ T5862] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  159.910824][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.917218][ T5863] gspca_stk1135: Sensor read failed
[  159.961905][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  159.979437][ T5863] gspca_stk1135: Sensor read failed
[  159.984748][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  160.006320][ T5863] gspca_stk1135: Sensor write failed
[  160.032622][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  160.142285][ T5863] gspca_stk1135: Sensor write failed
[  160.150718][ T5863] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  160.447697][ T5863] usb 5-1: USB disconnect, device number 6
[  160.920804][ T5827] Bluetooth: hci0: command tx timeout
[  161.084412][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[  161.251259][ T7105] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  161.303240][ T7105] bond1: (slave vti0): Error -95 calling set_mac_address
[  162.025423][ T6071] hsr_slave_0: left promiscuous mode
[  162.229694][ T6071] hsr_slave_1: left promiscuous mode
[  162.251708][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.391630][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.672584][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.701675][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.978486][ T5827] Bluetooth: hci0: command tx timeout
[  163.076740][ T6071] veth1_macvtap: left promiscuous mode
[  163.088605][ T6071] veth0_macvtap: left promiscuous mode
[  163.104800][ T6071] veth1_vlan: left promiscuous mode
[  163.128730][ T6071] veth0_vlan: left promiscuous mode
[  163.229493][ T7133] random: crng reseeded on system resumption
[  163.868841][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  164.016323][ T6071] team0 (unregistering): Port device team_slave_1 removed
[  164.107267][ T6071] team0 (unregistering): Port device team_slave_0 removed
[  164.318295][ T5863] usb 4-1: Using ep0 maxpacket: 32
[  164.328105][ T5863] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  165.055718][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.065018][ T5827] Bluetooth: hci0: command tx timeout
[  165.069976][ T5863] usb 4-1: Product: syz
[  165.074721][ T5863] usb 4-1: Manufacturer: syz
[  165.079498][ T5863] usb 4-1: SerialNumber: syz
[  165.092259][ T5863] usb 4-1: config 0 descriptor??
[  165.106966][ T5863] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  165.331476][ T5863] gspca_stk1135: reg_w 0x2 err -71
[  165.337671][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.359488][ T5863] gspca_stk1135: Sensor write failed
[  165.373011][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.390149][ T5863] gspca_stk1135: Sensor write failed
[  165.408459][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.414840][ T5863] gspca_stk1135: Sensor read failed
[  165.425361][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.432306][ T5863] gspca_stk1135: Sensor read failed
[  165.448281][ T5863] gspca_stk1135: Detected sensor type unknown (0x0)
[  165.454991][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.476689][ T5863] gspca_stk1135: Sensor read failed
[  165.486455][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.498369][ T5863] gspca_stk1135: Sensor read failed
[  165.505238][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.517570][ T5863] gspca_stk1135: Sensor write failed
[  165.525947][ T5863] gspca_stk1135: serial bus timeout: status=0x00
[  165.536680][ T5863] gspca_stk1135: Sensor write failed
[  165.542238][ T5863] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  165.562753][ T5863] usb 4-1: USB disconnect, device number 8
[  165.590734][ T7125] vlan1: entered promiscuous mode
[  165.595828][ T7125] bond0: entered promiscuous mode
[  165.600962][ T7125] bond_slave_0: entered promiscuous mode
[  165.606731][ T7125] bond_slave_1: entered promiscuous mode
[  165.614753][ T7125] bond0: left promiscuous mode
[  165.619685][ T7125] bond_slave_0: left promiscuous mode
[  165.625178][ T7125] bond_slave_1: left promiscuous mode
[  165.828336][  T910] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  165.856507][ T7071] chnl_net:caif_netlink_parms(): no params data found
[  165.998448][  T910] usb 5-1: device descriptor read/64, error -71
[  166.136759][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.359647][ T7169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  166.366215][ T7169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  166.374100][ T7169] vhci_hcd vhci_hcd.0: Device attached
[  166.614605][ T5863] vhci_hcd: vhci_device speed not set
[  166.768480][ T5863] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  166.925773][ T7170] vhci_hcd: connection closed
[  166.937349][ T6067] vhci_hcd: stop threads
[  166.941493][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.953687][ T7071] bridge_slave_0: entered allmulticast mode
[  166.960743][ T7071] bridge_slave_0: entered promiscuous mode
[  166.970447][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.972398][ T6067] vhci_hcd: release socket
[  166.977611][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.977777][ T7071] bridge_slave_1: entered allmulticast mode
[  166.996261][ T7071] bridge_slave_1: entered promiscuous mode
[  167.023133][ T6067] vhci_hcd: disconnect device
[  167.088710][  T910] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  167.141785][ T5827] Bluetooth: hci0: command tx timeout
[  167.485970][  T910] usb 5-1: device descriptor read/64, error -71
[  167.630175][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.648712][  T910] usb usb5-port1: attempt power cycle
[  167.670722][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.018500][  T910] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  168.049917][  T910] usb 5-1: device descriptor read/8, error -71
[  168.293620][ T7071] team0: Port device team_slave_0 added
[  168.298347][  T910] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  168.305589][ T7071] team0: Port device team_slave_1 added
[  168.343980][  T910] usb 5-1: device descriptor read/8, error -71
[  168.389437][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.396432][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.478730][  T910] usb usb5-port1: unable to enumerate USB device
[  169.384575][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.419824][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.426820][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.023667][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.213924][ T7207] warning: `syz.0.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  170.443781][ T7217] ucma_write: process 206 (syz.2.264) changed security contexts after opening file descriptor, this is not allowed.
[  170.463228][ T7071] hsr_slave_0: entered promiscuous mode
[  170.476514][ T7071] hsr_slave_1: entered promiscuous mode
[  170.828401][  T910] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  170.895312][ T7231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  170.901910][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  170.910790][ T7231] vhci_hcd vhci_hcd.0: Device attached
[  171.028420][  T910] usb 5-1: Using ep0 maxpacket: 8
[  171.094425][  T910] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  171.190991][  T910] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  171.256232][  T910] usb 5-1: Product: syz
[  171.294148][  T910] usb 5-1: Manufacturer: syz
[  171.333674][  T910] usb 5-1: SerialNumber: syz
[  171.350886][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  171.377571][  T910] usb 5-1: config 0 descriptor??
[  171.395366][ T7236] tipc: Started in network mode
[  171.421335][  T910] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  171.428796][ T7236] tipc: Node identity 7, cluster identity 5
[  171.434974][ T7236] tipc: Node number set to 7
[  171.551247][ T7232] vhci_hcd: connection closed
[  171.558729][   T52] vhci_hcd: stop threads
[  171.575274][   T52] vhci_hcd: release socket
[  171.592368][   T52] vhci_hcd: disconnect device
[  171.687973][   T25] vhci_hcd: vhci_device speed not set
[  172.036820][ T7071] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  172.552127][  T910] gspca_zc3xx: reg_w_i err -110
[  172.552204][ T5863] vhci_hcd: vhci_device speed not set
[  172.557054][  T910] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  172.634112][ T7071] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  172.712650][ T7071] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  172.749138][ T7071] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  172.824747][ T7257] FAULT_INJECTION: forcing a failure.
[  172.824747][ T7257] name failslab, interval 1, probability 0, space 0, times 0
[  172.837641][ T7257] CPU: 0 UID: 0 PID: 7257 Comm: syz.0.272 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  172.837664][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  172.837674][ T7257] Call Trace:
[  172.837681][ T7257]  <TASK>
[  172.837687][ T7257]  dump_stack_lvl+0x241/0x360
[  172.837708][ T7257]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.837722][ T7257]  ? __pfx__printk+0x10/0x10
[  172.837737][ T7257]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  172.837750][ T7257]  ? __pfx___might_resched+0x10/0x10
[  172.837762][ T7257]  should_fail_ex+0x40a/0x550
[  172.837775][ T7257]  should_failslab+0xac/0x100
[  172.837788][ T7257]  __kmalloc_node_noprof+0xe1/0x4d0
[  172.837800][ T7257]  ? __kvmalloc_node_noprof+0x72/0x190
[  172.837813][ T7257]  ? radix_tree_lookup+0x238/0x290
[  172.837827][ T7257]  __kvmalloc_node_noprof+0x72/0x190
[  172.837841][ T7257]  __do_semtimedop+0x1a9b/0x2100
[  172.837854][ T7257]  ? __do_semtimedop+0x6d7/0x2100
[  172.837873][ T7257]  ? __pfx___do_semtimedop+0x10/0x10
[  172.837892][ T7257]  ? __might_fault+0xaa/0x120
[  172.837910][ T7257]  do_semtimedop+0x208/0x2c0
[  172.837925][ T7257]  ? __pfx_do_semtimedop+0x10/0x10
[  172.837955][ T7257]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  172.837967][ T7257]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  172.837978][ T7257]  ? __irq_exit_rcu+0x105/0x220
[  172.837989][ T7257]  ? do_syscall_64+0xb6/0x230
[  172.838003][ T7257]  do_syscall_64+0xf3/0x230
[  172.838014][ T7257]  ? clear_bhb_loop+0x35/0x90
[  172.838028][ T7257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.838040][ T7257] RIP: 0033:0x7fbcaf38cde9
[  172.838050][ T7257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.838057][ T7257] RSP: 002b:00007fbcb0164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041
[  172.838068][ T7257] RAX: ffffffffffffffda RBX: 00007fbcaf5a6080 RCX: 00007fbcaf38cde9
[  172.838075][ T7257] RDX: 0000000000000001 RSI: 0000400000000080 RDI: 0000000000000001
[  172.838081][ T7257] RBP: 00007fbcb0164090 R08: 0000000000000000 R09: 0000000000000000
[  172.838087][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.838092][ T7257] R13: 0000000000000000 R14: 00007fbcaf5a6080 R15: 00007ffdf1fb3fa8
[  172.838107][ T7257]  </TASK>
[  172.842915][ T5899] usb 5-1: USB disconnect, device number 11
[  174.946372][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.049331][ T7071] 8021q: adding VLAN 0 to HW filter on device team0
[  175.086363][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.093568][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.155819][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.163031][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.209771][ T7071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.252438][ T7071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.308397][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.401158][ T7287] vlan2: entered promiscuous mode
[  175.406256][ T7287] bond0: entered promiscuous mode
[  175.414133][ T7287] bond_slave_0: entered promiscuous mode
[  175.421059][ T7287] bond_slave_1: entered promiscuous mode
[  175.430220][ T7287] bond0: left promiscuous mode
[  175.435038][ T7287] bond_slave_0: left promiscuous mode
[  175.440688][ T7287] bond_slave_1: left promiscuous mode
[  175.482997][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.528387][    T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  175.567577][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.029226][    T8] usb 4-1: config 0 descriptor??
[  176.067266][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  176.280585][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.411672][ T7296] process 'syz.2.280' launched './file2' with NULL argv: empty string added
[  176.474781][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.483623][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[  176.483922][ T7071] veth0_vlan: entered promiscuous mode
[  176.548338][ T5918] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  176.653722][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.010299][ T7308] ALSA: mixer_oss: invalid OSS volume 'u'
[  177.015159][ T7071] veth1_vlan: entered promiscuous mode
[  177.382746][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short
[  177.390755][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[  177.399269][ T5918] usb 5-1: not running at top speed; connect to a high speed hub
[  177.458714][    T8] pwc: recv_control_msg error -32 req 02 val 2c00
[  177.539637][ T5918] usb 5-1: config 129 has an invalid interface number: 153 but max is 0
[  177.631086][ T5918] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  177.641583][    T8] pwc: recv_control_msg error -32 req 04 val 1000
[  177.654723][ T5918] usb 5-1: config 129 has no interface number 0
[  177.662042][    T8] pwc: recv_control_msg error -32 req 04 val 1300
[  177.678312][ T5918] usb 5-1: config 129 interface 153 altsetting 241 endpoint 0x4 has invalid wMaxPacketSize 0
[  177.689337][ T5918] usb 5-1: config 129 interface 153 altsetting 241 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.703217][    T8] pwc: recv_control_msg error -32 req 04 val 1400
[  177.718424][ T5918] usb 5-1: config 129 interface 153 has no altsetting 0
[  177.724639][ T7071] veth0_macvtap: entered promiscuous mode
[  177.732340][ T5918] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ea.39
[  177.754535][    T8] pwc: recv_control_msg error -32 req 02 val 2000
[  177.761327][ T7071] veth1_macvtap: entered promiscuous mode
[  177.779102][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.803479][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.807243][ T5918] usb 5-1: Product: syz
[  177.822014][    T8] pwc: recv_control_msg error -32 req 02 val 2100
[  177.846167][ T5918] usb 5-1: Manufacturer: syz
[  177.851748][    T8] pwc: recv_control_msg error -32 req 04 val 1500
[  177.857920][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.866152][ T5918] usb 5-1: SerialNumber: syz
[  177.893409][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[  177.898228][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.903723][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[  177.912849][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.927545][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.938868][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.955051][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[  177.961582][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.976182][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[  177.982805][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.997038][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.000173][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[  178.007978][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.022113][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.025648][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[  178.044687][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[  178.047366][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.069105][ T5866] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  178.092768][    T8] pwc: Registered as video103.
[  178.216799][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15
[  178.361572][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'.
[  178.396254][ T5866] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  178.594463][    T8] usb 4-1: USB disconnect, device number 9
[  178.674966][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  178.679411][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.695018][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.705890][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.739758][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.750404][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.786776][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.798737][ T7322] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  178.842044][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.907020][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  178.944919][ T7071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.001915][ T7071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.047283][ T7071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.074833][ T7071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.318386][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  179.447742][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.455797][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.519362][    T8] usb 4-1: Using ep0 maxpacket: 8
[  179.529574][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  179.546460][    T8] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  179.547182][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.568251][    T8] usb 4-1: Product: syz
[  179.572511][    T8] usb 4-1: Manufacturer: syz
[  179.587957][    T8] usb 4-1: SerialNumber: syz
[  179.591533][   T25] usb 3-1: USB disconnect, device number 11
[  179.610715][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.653855][    T8] usb 4-1: config 0 descriptor??
[  179.683995][    T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  179.738324][ T5899] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  179.924472][ T5899] usb 1-1: Using ep0 maxpacket: 16
[  179.931586][ T5899] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  179.958562][ T5899] usb 1-1: config 0 has no interface number 0
[  179.964713][ T5899] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  180.005651][ T5899] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  180.028217][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.036263][ T5899] usb 1-1: Product: syz
[  180.057927][ T5899] usb 1-1: Manufacturer: syz
[  180.074117][ T5899] usb 1-1: SerialNumber: syz
[  180.093244][ T5899] usb 1-1: config 0 descriptor??
[  180.224017][ T6069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.609044][    T8] gspca_zc3xx: reg_w_i err -110
[  180.642825][    T8] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  182.090444][ T6069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.240774][ T5863] usb 4-1: USB disconnect, device number 10
[  182.256725][ T6069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.335299][ T5918] ti_usb_3410_5052 5-1:129.153: TI USB 3410 1 port adapter converter detected
[  182.359620][ T5918] ti_usb_3410_5052 5-1:129.153: missing endpoints
[  182.394179][ T6069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.423744][ T5918] usb 5-1: USB disconnect, device number 12
[  182.592823][ T6069] bridge_slave_1: left allmulticast mode
[  182.612857][ T6069] bridge_slave_1: left promiscuous mode
[  182.628705][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.638031][ T6069] bridge_slave_0: left allmulticast mode
[  182.644231][ T6069] bridge_slave_0: left promiscuous mode
[  182.652436][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.824754][ T5863] IPVS: starting estimator thread 0...
[  182.958493][ T7387] IPVS: using max 21 ests per chain, 50400 per kthread
[  182.990130][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  183.007071][ T5899] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[  183.025836][ T5899] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  183.047561][ T5899] usb 1-1: USB disconnect, device number 11
[  183.238242][ T5898] usb 3-1: Using ep0 maxpacket: 32
[  183.358251][ T5898] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  183.658963][ T5898] usb 3-1: config 0 has no interface number 0
[  183.748250][ T5898] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.789045][ T5898] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  183.837446][ T5898] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  183.858497][ T5898] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  183.876196][ T5898] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  183.893623][ T7389] could not allocate digest TFM handle ghash-ce-sync
[  183.948358][ T5898] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  184.001544][ T5898] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  184.032234][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.060036][ T5898] usb 3-1: Product: syz
[  184.068493][ T5898] usb 3-1: Manufacturer: syz
[  184.073508][ T5898] usb 3-1: SerialNumber: syz
[  184.105331][ T5898] usb 3-1: config 0 descriptor??
[  184.113401][ T7385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  184.121741][ T7385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  184.174139][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.185435][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.194579][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.358827][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.374747][ T5898] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz)
[  184.376318][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  184.391585][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.392266][ T5898] etas_es58x 3-1:0.219: could not retrieve the product info string
[  184.479594][ T7419] FAULT_INJECTION: forcing a failure.
[  184.479594][ T7419] name failslab, interval 1, probability 0, space 0, times 0
[  184.492734][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.3.297 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  184.492756][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  184.492767][ T7419] Call Trace:
[  184.492774][ T7419]  <TASK>
[  184.492782][ T7419]  dump_stack_lvl+0x241/0x360
[  184.492815][ T7419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.492839][ T7419]  ? __pfx__printk+0x10/0x10
[  184.492864][ T7419]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  184.492887][ T7419]  ? __pfx___might_resched+0x10/0x10
[  184.492910][ T7419]  should_fail_ex+0x40a/0x550
[  184.492934][ T7419]  should_failslab+0xac/0x100
[  184.492956][ T7419]  kmem_cache_alloc_node_noprof+0x77/0x380
[  184.492976][ T7419]  ? __alloc_skb+0x1c3/0x440
[  184.493003][ T7419]  __alloc_skb+0x1c3/0x440
[  184.493031][ T7419]  ? __pfx___alloc_skb+0x10/0x10
[  184.493064][ T7419]  netlink_dump+0x239/0xe10
[  184.493094][ T7419]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  184.493118][ T7419]  ? __pfx_netlink_dump+0x10/0x10
[  184.493160][ T7419]  ? __netlink_dump_start+0x1be/0x790
[  184.493185][ T7419]  ? kasan_check_range+0x82/0x290
[  184.493212][ T7419]  __netlink_dump_start+0x5a2/0x790
[  184.493251][ T7419]  rtnetlink_rcv_msg+0xb3d/0xcf0
[  184.493276][ T7419]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  184.493295][ T7419]  ? __pfx_neigh_dump_info+0x10/0x10
[  184.493330][ T7419]  netlink_rcv_skb+0x1e3/0x430
[  184.493355][ T7419]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  184.493376][ T7419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.493422][ T7419]  ? __rcu_read_unlock+0xa1/0x110
[  184.493445][ T7419]  netlink_unicast+0x7f6/0x990
[  184.493475][ T7419]  ? __pfx_netlink_unicast+0x10/0x10
[  184.493493][ T7419]  ? __virt_addr_valid+0x45f/0x530
[  184.493516][ T7419]  ? __phys_addr_symbol+0x2f/0x70
[  184.493536][ T7419]  ? __check_object_size+0x47a/0x730
[  184.493560][ T7419]  netlink_sendmsg+0x8e4/0xcb0
[  184.493588][ T7419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.493618][ T7419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.493630][ T7419]  __sock_sendmsg+0x221/0x270
[  184.493654][ T7419]  sock_write_iter+0x2d7/0x3f0
[  184.493675][ T7419]  ? __pfx_sock_write_iter+0x10/0x10
[  184.493705][ T7419]  ? bpf_lsm_file_permission+0x9/0x10
[  184.493731][ T7419]  vfs_write+0xacf/0xd10
[  184.493751][ T7419]  ? __pfx_sock_write_iter+0x10/0x10
[  184.493771][ T7419]  ? __pfx_vfs_write+0x10/0x10
[  184.493784][ T7419]  ? do_sys_openat2+0x17a/0x1d0
[  184.493807][ T7419]  ? __fget_files+0x2a/0x410
[  184.493831][ T7419]  ? __fget_files+0x2a/0x410
[  184.493860][ T7419]  ksys_write+0x18f/0x2b0
[  184.493879][ T7419]  ? __pfx_ksys_write+0x10/0x10
[  184.493895][ T7419]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  184.493919][ T7419]  ? do_syscall_64+0xb6/0x230
[  184.493944][ T7419]  do_syscall_64+0xf3/0x230
[  184.493964][ T7419]  ? clear_bhb_loop+0x35/0x90
[  184.493988][ T7419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.494009][ T7419] RIP: 0033:0x7f296fd8cde9
[  184.494025][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.494039][ T7419] RSP: 002b:00007f296dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  184.494057][ T7419] RAX: ffffffffffffffda RBX: 00007f296ffa6160 RCX: 00007f296fd8cde9
[  184.494069][ T7419] RDX: 0000000000000073 RSI: 0000400000000400 RDI: 0000000000000003
[  184.494079][ T7419] RBP: 00007f296dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  184.494090][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.494100][ T7419] R13: 0000000000000000 R14: 00007f296ffa6160 R15: 00007ffd45a8a4f8
[  184.494127][ T7419]  </TASK>
[  185.128019][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.271769][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.336258][ T6069] bond0 (unregistering): Released all slaves
[  185.712904][ T7426] bridge0: entered allmulticast mode
[  185.739311][ T5898] usb 3-1: USB disconnect, device number 12
[  185.746344][ T5898] etas_es58x 3-1:0.219: Disconnecting syz syz
[  186.283278][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  186.382510][ T6069] hsr_slave_0: left promiscuous mode
[  186.398941][ T6069] hsr_slave_1: left promiscuous mode
[  186.404955][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.413971][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  186.431615][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.448964][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.457715][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.473034][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  186.501431][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.539547][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.553910][ T6069] veth1_macvtap: left promiscuous mode
[  186.584696][ T6069] veth0_macvtap: left promiscuous mode
[  186.586289][ T7437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  186.595102][ T6069] veth1_vlan: left promiscuous mode
[  186.603053][ T5898] usb 3-1: Using ep0 maxpacket: 16
[  186.616430][ T6069] veth0_vlan: left promiscuous mode
[  186.616437][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  186.638040][ T5898] usb 3-1: New USB device found, idVendor=f144, idProduct=8080, bcdDevice= 0.02
[  186.686540][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.711219][ T5898] usb 3-1: Product: syz
[  186.715444][ T5898] usb 3-1: Manufacturer: syz
[  186.753862][ T5898] usb 3-1: SerialNumber: syz
[  186.787925][ T7449] FAULT_INJECTION: forcing a failure.
[  186.787925][ T7449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.790927][ T5898] usb 3-1: config 0 descriptor??
[  186.886199][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.4.302 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  186.886224][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  186.886234][ T7449] Call Trace:
[  186.886240][ T7449]  <TASK>
[  186.886247][ T7449]  dump_stack_lvl+0x241/0x360
[  186.886278][ T7449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.886301][ T7449]  ? __pfx__printk+0x10/0x10
[  186.886323][ T7449]  ? tomoyo_path_number_perm+0x679/0x860
[  186.886352][ T7449]  should_fail_ex+0x40a/0x550
[  186.886375][ T7449]  _copy_from_user+0x2d/0xb0
[  186.886393][ T7449]  get_user_ifreq+0xc3/0x200
[  186.886413][ T7449]  sock_do_ioctl+0x1a5/0x460
[  186.886437][ T7449]  ? __pfx_sock_do_ioctl+0x10/0x10
[  186.886465][ T7449]  ? __asan_memset+0x23/0x50
[  186.886489][ T7449]  ? smack_file_ioctl+0x29e/0x3a0
[  186.886512][ T7449]  sock_ioctl+0x626/0x8e0
[  186.886532][ T7449]  ? __pfx_sock_ioctl+0x10/0x10
[  186.886550][ T7449]  ? __fget_files+0x2a/0x410
[  186.886573][ T7449]  ? __fget_files+0x2a/0x410
[  186.886596][ T7449]  ? __pfx_sock_ioctl+0x10/0x10
[  186.886616][ T7449]  __se_sys_ioctl+0xf5/0x170
[  186.886634][ T7449]  do_syscall_64+0xf3/0x230
[  186.886655][ T7449]  ? clear_bhb_loop+0x35/0x90
[  186.886678][ T7449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.886698][ T7449] RIP: 0033:0x7f96a598cde9
[  186.886713][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.886726][ T7449] RSP: 002b:00007f96a684e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  186.886744][ T7449] RAX: ffffffffffffffda RBX: 00007f96a5ba5fa0 RCX: 00007f96a598cde9
[  186.886756][ T7449] RDX: 0000400000000000 RSI: 0000000000008924 RDI: 0000000000000004
[  186.886767][ T7449] RBP: 00007f96a684e090 R08: 0000000000000000 R09: 0000000000000000
[  186.886777][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.886787][ T7449] R13: 0000000000000000 R14: 00007f96a5ba5fa0 R15: 00007fff5f48a758
[  186.886813][ T7449]  </TASK>
[  187.086058][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.098395][ T5820] Bluetooth: hci0: command tx timeout
[  187.419652][ T5863] usb 4-1: USB disconnect, device number 11
[  188.212199][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  188.378624][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  188.398729][ T5863] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  188.422189][ T5863] usb 1-1: config 0 has no interface number 0
[  188.447780][ T5863] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  188.530968][ T5863] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  188.574038][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.593572][ T5863] usb 1-1: Product: syz
[  188.600409][ T5863] usb 1-1: Manufacturer: syz
[  188.605386][ T5863] usb 1-1: SerialNumber: syz
[  188.661009][ T5863] usb 1-1: config 0 descriptor??
[  189.095532][ T6069] team0 (unregistering): Port device team_slave_1 removed
[  189.757404][ T5827] Bluetooth: hci0: command tx timeout
[  189.811702][ T6069] team0 (unregistering): Port device team_slave_0 removed
[  190.314003][ T5898] usb 3-1: USB disconnect, device number 13
[  190.496329][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.309'.
[  190.515463][ T7411] chnl_net:caif_netlink_parms(): no params data found
[  191.781161][ T5827] Bluetooth: hci0: command tx timeout
[  191.786626][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  191.938053][ T5863] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[  191.947937][ T5863] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  191.965234][ T5863] usb 1-1: USB disconnect, device number 12
[  192.288287][ T7493] bridge0: entered allmulticast mode
[  192.360915][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.383793][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.730413][ T7411] bridge_slave_0: entered allmulticast mode
[  192.748664][ T7411] bridge_slave_0: entered promiscuous mode
[  192.758140][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.770631][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.817316][ T7411] bridge_slave_1: entered allmulticast mode
[  192.835625][ T7411] bridge_slave_1: entered promiscuous mode
[  193.014913][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.075953][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.329953][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  193.368354][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  193.418310][   T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  193.548402][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  193.556254][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.566689][ T5899] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  193.576018][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.603985][   T25] usb 1-1: Using ep0 maxpacket: 16
[  193.615660][   T25] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  193.626370][ T5899] usb 5-1: config 0 descriptor??
[  193.631451][   T25] usb 1-1: config 0 has no interface number 0
[  193.638644][   T25] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.656928][   T25] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  193.666493][   T25] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  193.674721][   T25] usb 1-1: Product: syz
[  193.679314][   T25] usb 1-1: SerialNumber: syz
[  193.689146][   T25] usb 1-1: config 0 descriptor??
[  193.703931][   T25] cm109 1-1:0.8: invalid payload size 208, expected 4
[  193.713405][   T25] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input18
[  193.860939][ T5918] usb 3-1: Using ep0 maxpacket: 16
[  193.866230][   T54] Bluetooth: hci0: command tx timeout
[  193.869987][ T7513] Bluetooth: MGMT ver 1.23
[  193.898249][ T5918] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  193.906301][ T5918] usb 3-1: config 0 has no interface number 0
[  193.919033][ T5918] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.925142][ T5899] usbhid 5-1:0.0: can't add hid device: -71
[  193.968989][ T5918] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  193.978073][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  193.978281][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  193.991982][ T5918] usb 3-1: Product: syz
[  194.010406][ T5899] usb 5-1: USB disconnect, device number 13
[  194.010471][ T5918] usb 3-1: SerialNumber: syz
[  194.043506][ T5918] usb 3-1: config 0 descriptor??
[  194.069996][ T5918] cm109 3-1:0.8: invalid payload size 208, expected 4
[  194.077846][ T5918] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input19
[  194.406053][ T7411] team0: Port device team_slave_0 added
[  194.450139][ T7411] team0: Port device team_slave_1 added
[  194.468924][ T7528] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.318'.
[  194.518052][ T7528] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.318'.
[  194.535305][ T7528] netlink: 69 bytes leftover after parsing attributes in process `syz.3.318'.
[  194.551479][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  194.552227][ T5898] usb 1-1: USB disconnect, device number 13
[  194.558466][    C1] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  194.571600][ T5899] usb 3-1: USB disconnect, device number 14
[  194.573745][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  194.586516][    C0] cm109 3-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  194.610537][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.616824][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.635123][ T5899] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  194.690592][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.882548][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.909770][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.913344][ T5898] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  194.923419][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.936254][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.430388][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.961880][ T5918] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.013899][ T7551] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  196.020470][ T7551] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  196.028198][ T7551] vhci_hcd vhci_hcd.0: Device attached
[  196.133442][ T7411] hsr_slave_0: entered promiscuous mode
[  196.238425][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  196.292241][ T7411] hsr_slave_1: entered promiscuous mode
[  196.364708][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  196.426993][ T5866] vhci_hcd: vhci_device speed not set
[  196.620319][ T5866] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  196.630074][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  196.646655][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.687109][ T7552] vhci_hcd: connection reset by peer
[  196.693594][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.706861][ T6071] vhci_hcd: stop threads
[  196.708245][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.712650][ T6071] vhci_hcd: release socket
[  196.720717][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.774255][ T6071] vhci_hcd: disconnect device
[  196.991611][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.007800][ T5898] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  197.045987][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.105806][ T5918] usb 5-1: usb_control_msg returned -71
[  197.194642][ T7564] vlan2: entered promiscuous mode
[  197.199818][ T7564] bond0: entered promiscuous mode
[  197.204859][ T7564] bond_slave_0: entered promiscuous mode
[  197.210737][ T7564] bond_slave_1: entered promiscuous mode
[  197.218710][ T7564] bond0: left promiscuous mode
[  197.224153][ T7564] bond_slave_0: left promiscuous mode
[  197.229764][ T7564] bond_slave_1: left promiscuous mode
[  197.365172][ T5898] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  197.392026][ T5918] usbtmc 5-1:16.0: can't read capabilities
[  197.620416][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.883905][ T5918] usb 5-1: USB disconnect, device number 14
[  197.890036][ T5898] usb 4-1: Product: syz
[  197.894476][ T5898] usb 4-1: Manufacturer: syz
[  197.918452][ T5898] usb 4-1: SerialNumber: syz
[  197.961345][ T5898] usb 4-1: config 0 descriptor??
[  198.183547][ T5898] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  198.198641][ T5899] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  198.239004][ T7573] Can't find a SQUASHFS superblock on nullb0
[  198.272797][ T5898] usb 4-1: USB disconnect, device number 12
[  198.411517][ T5899] usb 1-1: Using ep0 maxpacket: 16
[  198.514651][ T5899] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  198.630495][ T5899] usb 1-1: config 0 has no interface number 0
[  198.749128][ T5899] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  198.983471][ T5899] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  199.008579][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.045607][ T5899] usb 1-1: Product: syz
[  199.066684][ T5899] usb 1-1: Manufacturer: syz
[  199.071857][ T5899] usb 1-1: SerialNumber: syz
[  199.096092][ T5899] usb 1-1: config 0 descriptor??
[  199.329377][ T7411] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.356336][ T7411] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.158090][ T7411] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.160356][ T7411] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.788431][ T5866] vhci_hcd: vhci_device speed not set
[  201.960530][ T7601] ALSA: mixer_oss: invalid OSS volume 'u'
[  202.297122][ T5899] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[  202.471723][ T5899] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  202.610972][ T5899] usb 1-1: USB disconnect, device number 14
[  202.675603][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.010021][ T7411] 8021q: adding VLAN 0 to HW filter on device team0
[  203.269542][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.276929][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.877888][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.885096][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.894892][ T7623] random: crng reseeded on system resumption
[  204.022646][ T7411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.139681][ T7633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  205.146265][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  205.154073][ T7633] vhci_hcd vhci_hcd.0: Device attached
[  205.160782][ T7634] vhci_hcd: connection closed
[  205.169825][   T52] vhci_hcd: stop threads
[  205.357934][   T52] vhci_hcd: release socket
[  205.368667][   T58] vhci_hcd: vhci_device speed not set
[  205.384508][   T52] vhci_hcd: disconnect device
[  205.516258][   T58] usb 33-1: new full-speed USB device number 4 using vhci_hcd
[  205.563818][   T58] usb 33-1: enqueue for inactive port 0
[  205.673719][   T58] vhci_hcd: vhci_device speed not set
[  205.685380][ T7647] FAULT_INJECTION: forcing a failure.
[  205.685380][ T7647] name failslab, interval 1, probability 0, space 0, times 0
[  205.769254][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.3.339 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  205.769282][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  205.769292][ T7647] Call Trace:
[  205.769298][ T7647]  <TASK>
[  205.769306][ T7647]  dump_stack_lvl+0x241/0x360
[  205.769339][ T7647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.769363][ T7647]  ? __pfx__printk+0x10/0x10
[  205.769388][ T7647]  ? fs_reclaim_acquire+0x93/0x130
[  205.769405][ T7647]  ? __pfx___might_resched+0x10/0x10
[  205.769429][ T7647]  should_fail_ex+0x40a/0x550
[  205.769452][ T7647]  should_failslab+0xac/0x100
[  205.769474][ T7647]  __kmalloc_noprof+0xdd/0x4c0
[  205.769493][ T7647]  ? tomoyo_encode+0x26f/0x540
[  205.769514][ T7647]  tomoyo_encode+0x26f/0x540
[  205.769535][ T7647]  tomoyo_mount_permission+0x53d/0xb80
[  205.769564][ T7647]  ? stack_depot_save_flags+0x37/0x940
[  205.769582][ T7647]  ? tomoyo_mount_permission+0x298/0xb80
[  205.769608][ T7647]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  205.769677][ T7647]  ? hook_sb_mount+0x10b/0x420
[  205.769692][ T7647]  ? security_sb_mount+0x22/0x2f0
[  205.769713][ T7647]  security_sb_mount+0xe0/0x2f0
[  205.769733][ T7647]  path_mount+0xb9/0xfa0
[  205.769752][ T7647]  ? kmem_cache_free+0x195/0x410
[  205.769771][ T7647]  ? user_path_at+0x44/0x60
[  205.769800][ T7647]  __se_sys_mount+0x2d6/0x3c0
[  205.769826][ T7647]  ? __pfx___se_sys_mount+0x10/0x10
[  205.769847][ T7647]  ? do_syscall_64+0x100/0x230
[  205.769871][ T7647]  ? __x64_sys_mount+0x20/0xc0
[  205.769893][ T7647]  do_syscall_64+0xf3/0x230
[  205.769914][ T7647]  ? clear_bhb_loop+0x35/0x90
[  205.769938][ T7647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.769958][ T7647] RIP: 0033:0x7f296fd8cde9
[  205.769972][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.769986][ T7647] RSP: 002b:00007f2970b00038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  205.770004][ T7647] RAX: ffffffffffffffda RBX: 00007f296ffa6080 RCX: 00007f296fd8cde9
[  205.770016][ T7647] RDX: 0000400000000140 RSI: 0000400000000300 RDI: 0000000000000000
[  205.770027][ T7647] RBP: 00007f2970b00090 R08: 0000400000000580 R09: 0000000000000000
[  205.770039][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  205.770048][ T7647] R13: 0000000000000001 R14: 00007f296ffa6080 R15: 00007ffd45a8a4f8
[  205.770076][ T7647]  </TASK>
[  206.225870][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.372636][ T7649] page: refcount:3 mapcount:1 mapping:ffff88807e7d1dc0 index:0x3a0 pfn:0x69862
[  206.382214][ T7649] memcg:ffff888012a5a000
[  206.386453][ T7649] aops:shmem_aops ino:422
[  206.390779][ T7649] flags: 0xfff0000002012d(locked|referenced|uptodate|lru|active|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  206.402138][ T7649] raw: 00fff0000002012d ffffea0001a61848 ffffea0001a618c8 ffff88807e7d1dc0
[  206.410726][ T7649] raw: 00000000000003a0 0000000000000000 0000000300000000 ffff888012a5a000
[  206.419292][ T7649] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  206.426591][ T7649] page_owner tracks the page as allocated
[  206.432793][ T7649] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7640, tgid 7638 (syz.4.338), ts 205510112239, free_ts 203022375249
[  206.450408][ T7649]  post_alloc_hook+0x1f4/0x240
[  206.455167][ T7649]  get_page_from_freelist+0x3651/0x37a0
[  206.460707][ T7649]  __alloc_frozen_pages_noprof+0x292/0x710
[  206.466589][ T7649]  alloc_pages_mpol+0x311/0x660
[  206.471428][ T7649]  folio_alloc_mpol_noprof+0x36/0x70
[  206.476718][ T7649]  shmem_alloc_and_add_folio+0x4a0/0x1090
[  206.482427][ T7649]  shmem_get_folio_gfp+0x621/0x1840
[  206.487611][ T7649]  shmem_fault+0x220/0x5b0
[  206.492029][ T7649]  __do_fault+0x135/0x390
[  206.496341][ T7649]  __handle_mm_fault+0x4c44/0x70f0
[  206.501443][ T7649]  handle_mm_fault+0x2c1/0x7e0
[  206.506199][ T7649]  __get_user_pages+0x1a92/0x4140
[  206.511211][ T7649]  populate_vma_page_range+0x264/0x330
[  206.516672][ T7649]  __mm_populate+0x27a/0x460
[  206.521249][ T7649]  vm_mmap_pgoff+0x303/0x430
[  206.525827][ T7649]  do_syscall_64+0xf3/0x230
[  206.530320][ T7649] page last free pid 7588 tgid 7587 stack trace:
[  206.536644][ T7649]  free_unref_folios+0xe2f/0x18a0
[  206.541666][ T7649]  folios_put_refs+0x76c/0x860
[  206.546417][ T7649]  shmem_undo_range+0x593/0x1820
[  206.551342][ T7649]  shmem_evict_inode+0x29b/0xa80
[  206.556263][ T7649]  evict+0x4e8/0x9a0
[  206.560143][ T7649]  __dentry_kill+0x20d/0x630
[  206.564724][ T7649]  dput+0x19f/0x2b0
[  206.568519][ T7649]  __fput+0x60b/0x9f0
[  206.572495][ T7649]  task_work_run+0x24f/0x310
[  206.577072][ T7649]  do_exit+0xa2a/0x28e0
[  206.581220][ T7649]  do_group_exit+0x207/0x2c0
[  206.585798][ T7649]  get_signal+0x16b2/0x1750
[  206.590288][ T7649]  arch_do_signal_or_restart+0x96/0x860
[  206.595819][ T7649]  syscall_exit_to_user_mode+0xce/0x340
[  206.601356][ T7649]  do_syscall_64+0x100/0x230
[  206.605930][ T7649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.611875][ T7649] ------------[ cut here ]------------
[  206.617333][ T7649] kernel BUG at mm/filemap.c:154!
[  206.622366][ T7649] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  206.629304][ T7649] CPU: 1 UID: 0 PID: 7649 Comm: syz.4.338 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0
[  206.640051][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  206.650101][ T7649] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0
[  206.656330][ T7649] Code: de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 8b b2 0f 00 90 0f 0b e8 d3 de c7 ff 48 89 df 48 c7 c6 c0 d2 13 8c e8 74 b2 0f 00 90 <0f> 0b e8 bc de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 5d b2 0f 00
[  206.675927][ T7649] RSP: 0000:ffffc900064a7070 EFLAGS: 00010046
[  206.681999][ T7649] RAX: 268e77ccc3205c00 RBX: ffffea0001a61880 RCX: ffffc900064a6c03
[  206.689955][ T7649] RDX: 0000000000000002 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb780
[  206.697993][ T7649] RBP: 0000000000000000 R08: ffffffff901a2b77 R09: 1ffffffff203456e
[  206.705945][ T7649] R10: dffffc0000000000 R11: fffffbfff203456f R12: dffffc0000000000
[  206.713897][ T7649] R13: 1ffffd400034c311 R14: ffff88807e7d1dc0 R15: ffffea0001a61888
[  206.721852][ T7649] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  206.730767][ T7649] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.737331][ T7649] CR2: 000055f9d7fb0c08 CR3: 000000000e738000 CR4: 00000000003526f0
[  206.745292][ T7649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.753253][ T7649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  206.761209][ T7649] Call Trace:
[  206.764473][ T7649]  <TASK>
[  206.767394][ T7649]  ? __die_body+0x5f/0xb0
[  206.771710][ T7649]  ? die+0x9e/0xc0
[  206.775418][ T7649]  ? do_trap+0x15a/0x3a0
[  206.779640][ T7649]  ? filemap_unaccount_folio+0x73d/0x7d0
[  206.785254][ T7649]  ? do_error_trap+0x1dc/0x2c0
[  206.790012][ T7649]  ? filemap_unaccount_folio+0x73d/0x7d0
[  206.795629][ T7649]  ? __pfx_do_error_trap+0x10/0x10
[  206.800720][ T7649]  ? report_bug+0x3cd/0x500
[  206.805205][ T7649]  ? handle_invalid_op+0x34/0x40
[  206.810122][ T7649]  ? filemap_unaccount_folio+0x73d/0x7d0
[  206.815748][ T7649]  ? exc_invalid_op+0x38/0x50
[  206.820414][ T7649]  ? asm_exc_invalid_op+0x1a/0x20
[  206.825422][ T7649]  ? filemap_unaccount_folio+0x73d/0x7d0
[  206.831038][ T7649]  __filemap_remove_folio+0xc7/0x670
[  206.836319][ T7649]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  206.841671][ T7649]  ? __pfx___filemap_remove_folio+0x10/0x10
[  206.847550][ T7649]  ? _raw_spin_lock_irq+0xdf/0x120
[  206.852646][ T7649]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  206.858183][ T7649]  filemap_remove_folio+0xe1/0x1f0
[  206.863290][ T7649]  truncate_inode_folio+0x5d/0x70
[  206.868299][ T7649]  shmem_undo_range+0x44b/0x1820
[  206.873224][ T7649]  ? validate_chain+0x11e/0x5920
[  206.878154][ T7649]  ? __pfx_shmem_undo_range+0x10/0x10
[  206.883534][ T7649]  ? __pfx_validate_chain+0x10/0x10
[  206.888728][ T7649]  ? percpu_counter_add_batch+0xff/0x1f0
[  206.894341][ T7649]  shmem_evict_inode+0x29b/0xa80
[  206.899265][ T7649]  ? inode_wait_for_writeback+0x111/0x2a0
[  206.904964][ T7649]  ? __pfx_shmem_evict_inode+0x10/0x10
[  206.910492][ T7649]  ? do_raw_spin_unlock+0x13c/0x8b0
[  206.915667][ T7649]  ? __pfx_shmem_evict_inode+0x10/0x10
[  206.921109][ T7649]  evict+0x4e8/0x9a0
[  206.924991][ T7649]  ? __pfx_evict+0x10/0x10
[  206.929389][ T7649]  ? iput+0x713/0xa50
[  206.933354][ T7649]  __dentry_kill+0x20d/0x630
[  206.937923][ T7649]  ? dput+0x37/0x2b0
[  206.941818][ T7649]  dput+0x19f/0x2b0
[  206.945607][ T7649]  __fput+0x60b/0x9f0
[  206.949581][ T7649]  task_work_run+0x24f/0x310
[  206.954156][ T7649]  ? __pfx_task_work_run+0x10/0x10
[  206.959252][ T7649]  ? switch_task_namespaces+0xe4/0x110
[  206.964690][ T7649]  do_exit+0xa2a/0x28e0
[  206.968846][ T7649]  ? __pfx_do_exit+0x10/0x10
[  206.973438][ T7649]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  206.978826][ T7649]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  206.984789][ T7649]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  206.991096][ T7649]  ? _raw_spin_lock_irq+0xdf/0x120
[  206.996212][ T7649]  do_group_exit+0x207/0x2c0
[  207.000787][ T7649]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.005996][ T7649]  ? lockdep_hardirqs_on+0x99/0x150
[  207.011176][ T7649]  get_signal+0x16b2/0x1750
[  207.015666][ T7649]  ? __pfx_get_signal+0x10/0x10
[  207.020520][ T7649]  arch_do_signal_or_restart+0x96/0x860
[  207.026047][ T7649]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  207.032182][ T7649]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  207.038150][ T7649]  ? syscall_exit_to_user_mode+0xa3/0x340
[  207.043864][ T7649]  syscall_exit_to_user_mode+0xce/0x340
[  207.049400][ T7649]  do_syscall_64+0x100/0x230
[  207.053991][ T7649]  ? clear_bhb_loop+0x35/0x90
[  207.058761][ T7649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.064658][ T7649] RIP: 0033:0x7f96a598cde9
[  207.069055][ T7649] Code: Unable to access opcode bytes at 0x7f96a598cdbf.
[  207.076053][ T7649] RSP: 002b:00007f96a680c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  207.085253][ T7649] RAX: fffffffffffffe00 RBX: 00007f96a5ba6168 RCX: 00007f96a598cde9
[  207.093207][ T7649] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f96a5ba6168
[  207.101158][ T7649] RBP: 00007f96a5ba6160 R08: 0000000000000000 R09: 0000000000000000
[  207.109134][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96a5ba616c
[  207.117086][ T7649] R13: 0000000000000000 R14: 00007fff5f48a670 R15: 00007fff5f48a758
[  207.125059][ T7649]  </TASK>
[  207.128057][ T7649] Modules linked in:
[  207.131957][ T7649] ---[ end trace 0000000000000000 ]---
[  207.137390][ T7649] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0
[  207.143622][ T7649] Code: de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 8b b2 0f 00 90 0f 0b e8 d3 de c7 ff 48 89 df 48 c7 c6 c0 d2 13 8c e8 74 b2 0f 00 90 <0f> 0b e8 bc de c7 ff 48 89 df 48 c7 c6 e0 d3 13 8c e8 5d b2 0f 00
[  207.163222][ T7649] RSP: 0000:ffffc900064a7070 EFLAGS: 00010046
[  207.169279][ T7649] RAX: 268e77ccc3205c00 RBX: ffffea0001a61880 RCX: ffffc900064a6c03
[  207.177230][ T7649] RDX: 0000000000000002 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c5fb780
[  207.185206][ T7649] RBP: 0000000000000000 R08: ffffffff901a2b77 R09: 1ffffffff203456e
[  207.193160][ T7649] R10: dffffc0000000000 R11: fffffbfff203456f R12: dffffc0000000000
[  207.201207][ T7649] R13: 1ffffd400034c311 R14: ffff88807e7d1dc0 R15: ffffea0001a61888
[  207.209166][ T7649] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  207.218073][ T7649] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.224638][ T7649] CR2: 000055f9d7fb0c08 CR3: 000000000e738000 CR4: 00000000003526f0
[  207.232592][ T7649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.240545][ T7649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  207.248511][ T7649] Kernel panic - not syncing: Fatal exception
[  207.254700][ T7649] Kernel Offset: disabled
[  207.259036][ T7649] Rebooting in 86400 seconds..