last executing test programs:

12m7.972045285s ago: executing program 2 (id=287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0)
ioctl$int_out(r5, 0x5460, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0)
write$sndseq(r5, &(0x7f00000004c0)=[{0x6, 0x2, 0x80, 0xe, @time={0x3, 0x80000001}, {0x5, 0xf}, {0x7, 0x7}, @queue={0xd0, {0x35c, 0x7}}}], 0x1c)
connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e21}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f00000003c0)=@isdn={0x22, 0x4, 0x2, 0xf2, 0xaf}, 0x80, 0x0}}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}, {[], 0x8000000}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)

12m6.256822548s ago: executing program 2 (id=292):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
r3 = dup(r1)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x200081, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
truncate(&(0x7f0000000040)='./file0\x00', 0xfeffffff)

12m5.776852953s ago: executing program 2 (id=295):
r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$smackfs_ipv6host(r0, &(0x7f00000003c0)=@l2={{0x8, 0x3a, 0x7f, 0x3a, 0x8ffff, 0x3a, 0x1, 0x3a, 0x5, 0x3a, 0x1ff, 0x3a, 0x1, 0x3a, 0x80000001}, 0x2f, 0x40000000000000c7, 0x20, '\x00'}, 0xaf) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9}) (async)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001032150d01000000000001090224000100002000090400de0103000000092100000001220600090581030000000000"], 0x0) (async)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x7f) (async)
recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4106, 0x115f}], 0x10}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syncfs(r1) (async)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6, {0x6, 0x6, "392cdaab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

12m4.539046305s ago: executing program 2 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000240)={0x1, 0x0, {0x3, 0x0, 0x1017, 0x9}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r2)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000040300004802c0001800c000100636f756e746572001c0002800c00024000400000000000000c00014000000000000000080900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

12m4.026243113s ago: executing program 2 (id=302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
timer_create(0x3, 0x0, &(0x7f0000006bc0)=<r5=>0x0)
timer_getoverrun(r5)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0)
r7 = syz_clone(0x311f0700, 0x0, 0xffffffffffffff6f, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
r8 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102386, 0x18ff2)
fadvise64(r8, 0x314e2672, 0x3, 0x1)

12m2.359547773s ago: executing program 2 (id=307):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
socket$inet6(0x10, 0x4, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x4e, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)

12m2.135454574s ago: executing program 32 (id=307):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
socket$inet6(0x10, 0x4, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x4e, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)

10m5.243447797s ago: executing program 4 (id=657):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001"], 0x3c}}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000f2ab9257eaf0c8acad5f4ae55744e8e7c14d6f91532d134968c0d552e352d987cfe7e1ffe7fd908d6747fc982cbc397d380a1fe42d67e73b51b396b06064132a95f18ccba40df32eb8c5cdd7a01db3299f167f07684d27f687215b7571d317a7880f39651805863c665f8b87193fdf0b512d", @ANYRES16=0x0, @ANYBLOB="010000000004000000001500000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x9c, r3, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x5a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x915}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xffff, 0x6, 0x8]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x96}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x100, 0x40]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10de}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x2, 0x1, 0x7, 0x7, 0x7f, 0x1, 0x6, 0x6]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x4810)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

10m4.275943098s ago: executing program 4 (id=659):
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, 0x0, 0x0, &(0x7f00000003c0)="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", 0x100})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000000007d09e6d9ff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000200000008000100"], 0x58}}, 0x40)

10m3.550128107s ago: executing program 4 (id=661):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x4000400}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

10m3.247327812s ago: executing program 4 (id=664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0xfffffffffffffff5}, 0x0)

10m3.101725364s ago: executing program 4 (id=665):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="fd00000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x40086607, 0x20001412)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r8, &(0x7f0000001200)=""/4096, 0x1000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r9, 0x104, 0x5, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r10, 0x0, 0x25, 0x2, @void}, 0x10)

10m2.000845403s ago: executing program 4 (id=668):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xd68, 0x18}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20)
r8 = socket$kcm(0xa, 0x6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f00000005c0)=ANY=[], 0x8)

9m45.082665732s ago: executing program 33 (id=668):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xd68, 0x18}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100"], 0x50}, 0x1, 0xba01}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x24100, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20)
r8 = socket$kcm(0xa, 0x6, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f00000005c0)=ANY=[], 0x8)

5m14.391892684s ago: executing program 3 (id=1448):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x682800, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="190ec06f6019feac7a215778400008000300", @ANYRES32=r6], 0x24}}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
close_range(r4, r8, 0x2)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x3}}, 0x10)

5m13.224848553s ago: executing program 3 (id=1452):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x1, 0x0, &(0x7f0000000040)='a', 0x0, 0x929, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="8c"}, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x1)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x5, 0x80])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f000063d000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b)

5m10.631604471s ago: executing program 3 (id=1459):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500400000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000008d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5m10.460171984s ago: executing program 3 (id=1462):
pipe(&(0x7f0000000000))
r0 = open(0x0, 0x141b42, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x75)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000003880)={<r7=>0x0, <r8=>0x0})
recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f00000038c0)={r7, r8+60000000})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) (fail_nth: 9)

5m9.294631649s ago: executing program 3 (id=1464):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

5m9.119280579s ago: executing program 3 (id=1468):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
write$cgroup_int(r2, 0x0, 0xffffff77)

5m8.867998627s ago: executing program 34 (id=1468):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
write$cgroup_int(r2, 0x0, 0xffffff77)

4m1.255821313s ago: executing program 5 (id=1686):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0)
bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x682800, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="190ec06f6019feac7a215778400008000300"], 0x24}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
close_range(r4, r7, 0x2)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x3}}, 0x10)

3m57.927688113s ago: executing program 5 (id=1689):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xb}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x21000000)

3m57.299502109s ago: executing program 5 (id=1693):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)

3m56.855226783s ago: executing program 5 (id=1696):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)='./bus/file0\x00', 0x0, 0x18d883, 0x0) (async)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) (async)
pipe(&(0x7f0000001240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r9, 0x0) (async)
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
write(r5, &(0x7f0000001100)="94", 0x1)
tee(r4, r8, 0x81, 0x0) (async)
read$FUSE(r7, &(0x7f0000007400)={0x2020}, 0x2020) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r10)

3m52.287320373s ago: executing program 5 (id=1706):
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f000280000000000069078ac1414bbac1414aaf36c4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5410000090780000"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000e22c"], 0x14}}, 0x4000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1)

3m50.483982901s ago: executing program 5 (id=1710):
unshare(0x2040400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10)

3m49.332929788s ago: executing program 35 (id=1710):
unshare(0x2040400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10)

2m3.581198155s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

1m42.602770827s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

1m15.810796s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

56.556151025s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

26.690274481s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

10.743745707s ago: executing program 6 (id=2409):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x507b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x180d], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
fsmount(0xffffffffffffffff, 0x1, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0xa00000000000000, 0x12)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x20000600)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x40000058, r2, 0x0)
vmsplice(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000200000000000000000000007ddaecd575d6501d000000000000000000000000000000001237533900000000000000"], 0xb8}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r7, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x28}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000233706d67a93705f0da31701877149cb00f0d1fd7bb9f1827930314e6fa9585e5c69d2faa3b0594ef7ae7ef0cc86bdfe05f08f8b8ab80b8aada8eef4e4b3a7d9fccba731b57497683369f427d1842151c9d6697319733b0186d6c9e13368c711ae45a0a213d46a7dd1a79c62464f03e0", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25040000001400020076657468315f746f5f7465616d00000014000200776731000000000000000000000000000900030073797a32000000000900030073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000001)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

10.456227644s ago: executing program 6 (id=2412):
syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000"], 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_getlink={0x30, 0x12, 0x319, 0x70bd25, 0x25dfdc01, {0x7, 0x0, 0x0, 0x0, 0x200, 0x40}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10ab8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x96}]}, 0x30}}, 0x0)
socket(0x15, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
userfaultfd(0x801)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000036f67abf0232f99400000008000300", @ANYRES32=r10], 0x2c}}, 0x0)

7.724014701s ago: executing program 8 (id=2413):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x8, 0xf, 0x2, 0x3, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
chdir(&(0x7f0000000180)='./file1\x00')
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000d40)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"})

7.535976492s ago: executing program 1 (id=2415):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[], 0xe0c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/69, 0x45}], 0x8}, 0x0)

7.475183191s ago: executing program 0 (id=2039):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

7.353054082s ago: executing program 1 (id=2416):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
ioperm(0x4, 0x2, 0x100000000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

5.546638167s ago: executing program 1 (id=2417):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x84}, 0x0)

5.546186845s ago: executing program 8 (id=2418):
ioperm(0xffffffffffffff45, 0x5, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
prlimit64(0x0, 0xf, 0x0, 0x0)

5.544999987s ago: executing program 7 (id=2419):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = getgid()
fcntl$getownex(r0, 0x10, &(0x7f0000000900)={0x0, <r4=>0x0})
lstat(&(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = syz_clone(0x20220000, &(0x7f0000003e00)="b57509471292c59381dab8dcb7666a48e4460b8bf8b7f1a8be56e874b9350f981f64f0b1d768d87a4ca4c4eeca02c07c422c870158cca6c22b78f579efb2115cf5", 0x41, &(0x7f0000003e80), &(0x7f0000003ec0), &(0x7f0000003f00)="9cf58a1488dc60dd05f0084a32e5059047ab22ac2209c9cc847a89db0513fffcdc333bb1cb44bd1de922f64dbf825d00d73b6e4139445012beddffafc808ecdcf45b170e68f5dd0092f8ed07e0ea8625df5b6337f7435d54e15ff73023a9585fbec1a947e44839f1c8dad398f914f143615576ff629d488debf29d12277017c2bb08b6ec13d02139ef36faf41e7c47955167")
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003fc0)=<r8=>0x0)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000005400), 0x800, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r13 = fanotify_init(0x10, 0x40000)
read$FUSE(0xffffffffffffffff, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, <r14=>0x0}, 0x2020)
r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r15, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r15, &(0x7f000000e280)={0x2020, 0x0, 0x0, <r16=>0x0, <r17=>0x0}, 0x2020)
syz_fuse_handle_req(r15, &(0x7f0000008280)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x90, 0x0, 0x9, {0x1, 0x2, 0x200, 0x80000003, 0x3, 0x9, {0x4, 0x7, 0x6a, 0x6, 0x3, 0x1, 0xe9, 0x4, 0xfe0e, 0x6000, 0x8, r16, r17, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
statx(0xffffffffffffff9c, &(0x7f0000007c00)='./file0\x00', 0x1000, 0x80, &(0x7f0000007c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = geteuid()
r21 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000008040)={0xffffffffffffffff, 0x1, 0x1000000, 0xfffffffffffff000})
sendmmsg$unix(r1, &(0x7f000000a280)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="1fe6c0af72a9f8741bbcd34edb53fa25f0cedbddbb470f7266abf5f341067ed671fe1a4f4cf6731f40b8acfcf6d16f722fdd085359399d69222d0f7a08b66aaba1d90c7d8bdce1a651bc409c55ed867a981a49f2ca3a53b46e1b", 0x5a}], 0x1, &(0x7f0000008100)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r3}}}], 0x20, 0x4024041}}, {{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="20b212bb24c00830c84cb4b6691a86712bf50c6bff19c1d81efce510909ced1203ad76553c089b0807b35a35cdc834ee99c53afec0f7a789e57ab3ab75d1", 0x3e}, {&(0x7f00000009c0)="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", 0x1000}], 0x2}}, {{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)="171072abbb66ca97b115c6efc16f51909cdf4c9775a67d5ef93338144d546d32077e6da9c70c8c69b6b86a5af65c3d2460be5166710e70afeae6d4094062ea6db8eae6b27be28d26d63740ad69fa6f33a8f141db6fae4d046ce1b6389a65c55cc8a7b011f3c2a63cde6ed4f57d62a37de038ec6ef62ee3d136ac0e558462b35599cdfd6c4f991d7b6d4bb8f460b5058067d7d25afb1eace2b590dc5a4f7f44a3d465c79705b61378eed4030acbe4e8b8fb3fca99851e97fade18609a2ebab82189da676a363dbedd0edb6adffb35944bca48ab6909cfc212", 0xd8}, {&(0x7f0000000480)="689f6da78703722b605dbe37a932681a4c3b0a7e63e2714e0cf9ea38bf7577e1ff1b302cba90b9aab3c5c6bd641d0403681d74efb465881895fd0b3a6f75e5c35baee1c7dc5aeb127da9ace9da6bcef4603020231d75e11a33c4e0cbb29452dd29dfe9493aa46ce0dc036c4e5d151760c621fb7a59a59cf22efa5dbf48", 0x7d}], 0x2, 0x0, 0x0, 0x2000}}, {{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000005c0)="3a6f0cf61b2936650c86bec483eae6d86e6186f2a050c46c370d3cca70f909ee60898d4dd494aa2decc6d915188eb97e6d1f5cf2c3f3190b275a13a5fddf7ef2d9f9df7180c6f4b863d2d5903c598d30dd6e32bb47407addb52fc628be7e3727e934eb1a514f785a1ab16403b97fbbcf8280b7e5b1f5a453702074c7fdf364eeebb7a4a09665831c7ab5ba335e7ee918dbd5c97f036120c9f7ff5b185f4b5c5328ccb8b1b230207399ce8aeaaa5a8cfe4e08bdea6fa3d72a87d91909c35910dda983bbbde061c5657f31f813f7", 0xcd}], 0x2, &(0x7f0000000700)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x40, 0x54}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000029c0)="a948ab5c42f7364fde0a2176576437402cd87299099e342d0d180f5f6100494d9652f7227e678359c8e82ac6b76f47869638b51258079bd00e1eadd227851de5547e0773ee3ba83955b96882cbc55e4c9e81ceafd488bcd021e609cc3b20a378290320e3e44f53157f523c71e923954f6293b97c66be712a9a2d4aee3152e75bdff453e78c4acb29f0717e41046ec8227c58b1109a58a3860662dca52f1083af0ac9d2967c3fc161c3043c893e0400f916b6aeaaa08e24ad240409d28c0284f8eec4cd38f0ebbd4fb1e85c1058ab9a2c32b699ad2368976b81160f97e3418341fcefeb5f0de1713c0b5a45524b2aec440799ebe7ae599940f54c20fa019a16b8012e602ba9647d255d4a436001002fd843ec6a9f0189ebfb18a0c14c0aa71b5a0c595419e7d24b61c7e82e0fef47f1a066973d1ad671f95790cbf69ef69c10cd321f9e365f42ffd8577c73253c6a5258556174229d24a1b5bf147eec6cb29dccad25736fff98f4f4de5db179c5440e0302b750f5778f7d3fdc586755ffa3a1036fbe867c7080ca9884add347ceb044c155bf66d3ae81032efbc601bb9b919fa590af14f851143658b6cd8b9b2467386de4f5e323e6f599dc122807f609fad38379cd9b60a045e194ce99cc06c6f0f070af9365639e730737056c1cbb8f42c47602fb359c0e43318f6adc2e6fe34095ab0eb4a09d8f2e550a0b9645efacd8283a4dc5845a8a8583201a0f55e3531277c03bbceb418d6ecafd57565d3af98c7b695b47e9612269739bb9eea568447d3252f819236b9f870b5672ec93ad1a9016681eebae37ec3f8737d9c8c84034228d97f204255746d4fb2a35c2abe80fc1e4fca000beb61ad3737fc0e18ad650a4f2caa41fbe7d0e34c6020ceebd137a0f92a556fad9cf5dfae84528061f1fc44729373b24d1de840b50d8b63280facdec96993f5c33540f56ba58e86348cc80f9dd3e275f5ee8810de5573fc099c6bbc7df617105d8c8733a0a192e4f99f0199f4a35173349021e11707cc21888fe59ad4cd064027bf2ad699cf8a884ad212a576440cfb30cd0f5b2ca37f247825e7f67ef9f75e04b1ddc518f180e482084f4add13ef0fb6f25e8af33a82523e2e1e6d80a658409f5dc2c4bbe7be5b366b6e693b9ae1ff4f40cc9bad5f5b1c98589a9c7be2f42e378304c10c417b1b83edfd706d41e0109d25c91857f7d83f9c3c9da4bda8fc55230cebcc4fa59757923ace93f9928e90aa0c03f06cf8c20812d957d6bfeff24f939a54f59958dea3bfeac5a6baff83c9415b040565279111ea416bcd5145b57d95b302083e4a8552a57bd642044ebfbb37fd078b10c796d6750b57f1ec68b639bcf5e807501c3b4f1395f0bc9cbe218c1fa5057f079e67296a49993baa3b9f49db0b982e9aaf429956057ae9e6ea190cbd52973b19898beaa3f49b3c9fdf5f0e3ac5de52c0a80047ee2a6c5b7d5d49558033112762ea240163e2a7fc7314b0b8c5c106aca430142f22aa8d2d648b9f8ea6c934f3482c3e8026ff6f9aa0abcaa5591034ffa4a40d1e03869c93e73cde3e281085ea11bd0adf6a8ebb7004021e386645de215a69a8dd8dd16db520b164cb194bd3d86c151afd2b31d3964a9f46fd26bc229b3a1897ac5e97112b0bef6184764d82d5aaf087a7ee8183c71d4cde3ebcc01efc88d2b42d95fd9394a6d07607c31a2041cad196b0013677e491de5ecb96a9aa4ec30cc5bf73da05972e96baa2218dd9247780eb27204b36e9d6e21ddf190574b4036a2ed91b569e0bdf2dedec67c34c5d3c26127aa8f2e434538aefec31fe57f2d0981fc0776c042910724544fcb2e6bca8349409e449d6da51946d96e21766b1d8f5cf1da0757c9c9fc487f548e7b22da46051acbf084561ea7adbb73dc19fdec2c2b489623994d5eebd96fb62687b519323c87543eb7d0b9dee8ad2e005e59eeba2a18cd7b9c99893e311d53ab4c0c16beccbd6fbac3efe5b7901f418dc008fb02a70516899ab0f312c9e964de347dffa85353004f9339d1df00da9077b1e9f27161c0b95dc01f108fd6d7b6485d866f46112505a2392414d9325a904bed66fe7523928facfca7177206ef8d79aaa07378514d898dba0c58710d64e3c7673628d56249b01e5f1f1e96abb6f2a2d1ae9db947c192a8713ef51949b839f69cb8a97b178b7e68f44e883133617e9398968ca777e84cbcf6de091c6bc023ad4ca46c8e383b7afd506738873107d3be7966e50301f395739b126c82f1e52f0e1064cccf709b7a229f22c5c03778919d4fca9684ebd587dfd6634b53dbbc1c130bb3bf9a36ba69fa036fa58d7341b06013d48790fb4056f7fa63cad54abd7a641617501700bee8188c9a389eb07a8cd5ddf48bbfeaa9740d8244baafbc1e7a672e2fc73f7a338b6918d2ac9ec2e35b98d65304c21f5768a414c06032735c3b132b732d0ad3ea031c7e8b302b26e4ee4e8974274f25f546ace661500ce1d95b50a35e42fdf31737fba06bca4e8954c9bcf5c2e6304fe031c95ad1f3ec7a9682f3929a3cc8fb20206be1bbabfd79c6eadcfbb966c2e7179fe6e63d6c6d1deccc183784c759036e25ed1668c874c78dd80140941c7a40aa3f2e6bedd65a6423982b09b99d88f193a8ff5359054b60b76263d3e4262ef61a2aa965e45a73befb98771d7dd41780f24c4722676b70a82a874a7fd53709dbd4ff0768a888ec67e16227cc3064e482d548aec1c46012549e4cf586f05d5531cbae6c6eab42e55a2456a5d3c921b70781cd0e5ae130931f7345011c486103c6cf72433ad2b0944bf1e4baf2c50e2edaedd3043e9efe914fc608881f4131f9c842a4c60b6343c04b6772af578477ce553c7fe05dd97419f545b790cda2079650f366ca34714bcb2919cc7ba6e73447f0083ef1e86b60cac430dfe07a01e04dee01c35990f595de570912d842fa2e895576c49b8dfeaf725daa6577b9abfd18a78cfce0f96edad5d8aa55403768697ec4f1c99e4e8a83811057c56ad9a672e449833b1a3d49724e049aaefe1c7c5f3eba75831ff8ee158dd53d8e310da9244bffcdaf43262b84d630ccd8d4eeec646f4456d24f6ea130baf43ba0db8eb23465d71749e4c12e4651f883ad5d5a53bfcef1aced4d8e346b795eecc1a670694d0c8d8e60a471a6340b503b8750b5dbe398be30c976b3e05f24d6fc51f78e7a550a6f31e4ce680873484fc92a1ea0705931b7b05a31614302f43bd73d4fa3e2446278c94902251888303870ade6bf94e181cadc5d7f9ce1100eaf84b2a3ceaaaa539f59ad52b1489dd426ff440a53a70bb337f11d42e5c120bbc346579b4c6a4a537f9b23aafcdd0a914bb9fa09d5fca9f030de879c4cc4bd632aa2674a021e99b95ff5bb236f4276fe18934a5704166f6e0569ef1dd5e846eb15ee77a9b7823f4756595b695d645b337aa255c6b6d40227ba25bac6acee9f4b6309cd18680a67a51a84843d3d45fb95dd8c66a9952b3a25f980169c3dc67aa7095ae780418181b6e91c565332e9a82a74f663de234581cefedad6820cdc16dd36d8860626ece5bf6dbd37321f3bccc70638231e28f25ed7e0b8e0a692c81bc8e79cbfb10efec68bfd661cc9dca3295d18927d1119c49a4be346d7a3e355aca7a47d71c92e2198a8513c1f98514d765cff933fa468ddd98540725decf0b0daed9a2e88644c85a1d3f6dcb828a628826b2336f5ae20c3399f8ffe7c818370f600d70349c8abdc92fae497a9bc0e9790e67df71d0d3137658ac19ee7a38fd00c3a2ef873c459e5635e6fc9c37f136bc79df527c6b9a3e60b94be1af4e9680dd7b9dee0190f72b3eda9b4b606b43586c478f6b8490581d1892b96e323d3c8c0c60ceca2f74050071083a8359a54e6b0157e42b75903fda1bf3b2b6c3b4e4148777d67032871884891819bae1dfcad90b347a90eac75f28a5c2a153f0ca5d34ff5c002a614b2d05c5836ef299da1d5d81a144b94f91904ceccb737eab4abfd471d874ada38ed7a66d028da43ea494a1861fce32bcd26a512b956d81ab3d278b1714c58518acd1ebee749b62540c5f564f82ab7c44d29d4a5b75984510d1a6ca81dbd43618698916425b268d800a1990ca12e7084ea095c8d5e5dd64216469e1ea53f6b2f9aebb8dc8a05e36ff099eb2ca4333a7202c76c65999b4f8c0ba94134268ae44cc31323ee3a8a2fe1c5f1c6739f2372d9e9ee0b1ca41e883c535278f2eaef1a5d034c231a8ae921510793153ebedfa037fafc56c07615ed9752703d2c9c2a6db96111853ce8159487d598b39d7cf11fbccade468a6f4ba65674caeb4cdb165076261480592f76ae9a7d49eacfe5d34d6850a9dd0a8252b706c6db674f80236f33153b9a8685b5d38e3ee794a571927eadb95c33fc35cf02b1c5f62561f597d46a31f4138ad126140f4dd20e457877857c6fb3c07d96c70296ccd28e112ce0c676755c279a30b4bfa01ae9bd95063550c0729f5d2cb008f8407ce4f745b445abe24e192bf536af9af6da6893147aa4d2aad402c99261cb77415be149c61a3f62c3d64e4d0d398f7708b5b1d2c3a04ac0d9fbe3d75d8dca89ac624962bd737626bca195cb9d1689b531f861e908d968e6376b348389a44c8709f597632179edd813fb53e1ba1ee5deb11766dc04ca9152337305f791d0a63089703ea58a565ad239cb3d9233342302ac0aaa50b0c4d1cf9a7ba7e60a85c65ad16d450ab1dbd27645a9a0b1ed8e2a87525bac8b7dcdc2dbc83712dc5ac2b0210edc7f2f0c23d996a61e41a4c47dd17e20ad7386d8a89ea581df247e6fb4e66520b5202204057a1d992e3f0f19b386f09f38a1aba8257875bf907a2af351689f744c1831db1c501089aeec062e548b4ce289c7fc584297707909f32be44c0eca4dc952190560d3f55d78f2c0b0dc17f0b807514642f0d104afecabf30466bde08522215aef81e3ab47728d48fd0ff6a38a4dfc5504ece4fb11c6fe2329fbedcbcb77967f8f484498802324100e8e87bc78a2e1c30854b360dadb68b87a566e72e95a599a028faedd164796f3321c0088f57b37b144adc833bc28d7593652bc5f55fe839c3b9fdf2fd2e79fc271f3a61862648284c9917b097041006127037cc2dac298d827a73b7c3ddabd4ec56f5738f7a78f1dabfe4396608464cc14102327f3ea99bf62eff915cc965f7daee56381e36aa0f007d753e36d430c4a916b6b8db67a9ff02ccc94ab8afa2b01b0a924f6dd5be0bea36d9afec9e5e1e83bfe573c12d9ae28f2ef1702a26d1c7efc0a601e171fd797927ce6506510396f5777deaebd8b95627223b6477a0b134524b8265efb6fe0b66025d1a31de6cfb9f9060736206e45410a4a98c6492af1f359d995e4a5340babfa331aef6c83ecb671d905c9185aeca7de48b67637292875f209cd77279b2c1c3a4c5087d9fa1ef481fca5aceb3edef525bbd484d551f37470c007ee58b7e88c75a385169a076a2866be7baf0ef9c8a4fdb7698f05c422bb7f0de22dda409f9da2b8fa6eef42d24e1f6ca0e0a8364d1a7306d07c619e1698013713d0329d3b498433be9391747d6a02754035ee287552ccda4e988d0ef5fad8bcf3bde863061cbeeea85de39cd785c360cb33d35d8aede27c03411c0b89a6660d7d78ea856087d0909598e1c6ec8b33e37081d43841dc9d0c9a807ea4205223dd687de65e363e87eb9875d8f43607968c579aaa14a0bbd3b0355a510aecfe0e8452eabfe76b9d84a1bb11cf3c55d54068a3e2adf84d100cce2978675f449d9389cabed069a02f97af4c66", 0x1000}, {&(0x7f00000007c0)="2cdcafea539949f51b9d1ef797f966421c03779f2ffae794e2e109b7e5", 0x1d}, {&(0x7f0000000800)="1d6f5e8bd366ef3777d4ba3b053abf1878b6ee7bf452efbdd1f9b017446b6d7c9d11ee7fcc8733dba12c519611b68636046a1ff4955ce0e792c73c3a8ca438f74deabe9769cfb53a76e86463917a3036ee5ea98da39971ac3fe447e4beda8e6f1cfd547fcd80803b2dc4f96be537a0eb9cf51a98c3", 0x75}, {&(0x7f0000000880)="36eb251264c581d89eb7893470638345c277caa6612e41449a71966454ec742949b4f1f008c38beeb2be8e6a1ff8864f620b1c96237003f6e6b1bb8235f68bd244296eafff4033f328fd65c164c36e105d8d9ba45d7febbb52e0a087bb018490e08df21e8f89a0cf9b147138874966cc13524ef7c671762741e5", 0x7a}, {&(0x7f00000039c0)="c279ff55406fc1157dc91f3b220aadbf9d3f299e2d7acf000f3cc7cff604423007719a32abefa9a88827768a52bcb7944e3e969b19b0274e6d94e36ea7df65a767b44f15ee7dd86f0bd57ab7000fcbe0d43ad60c4d9bc00fde98ad680df2acf020b741af1a6d7bfe98e5589dadd9589c9c6215aaf64dd7e982fd49ef2adf81590e1f1edee6bf685a2809ee0a0895fb41f9277ded3cbba27403dc1ad9d5ca5a670d9ecdcaf6355e37d5abab460fb1cb537c61c7f523028a7e17b885c76fb14c5282fea20d51b3797ac04788b9477cee55928178b4c02dafcc0acada59357addabea24f6e0ee22", 0xe6}], 0x5, &(0x7f0000003c00)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r3}}}], 0x20, 0x4000040}}, {{&(0x7f0000003c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)="ad40e88c9f3d641107379ae7ef295582a600d5671107ccc409131d7a88feef6d2e4b65168a318bc1bf1e9132fff05cd0ed34e614d2d54ef17d2fa03fc6c7691db81504800be353b51dc698c512df572f16695673b5bdb05e0f8c28ceaa8b5a340f5b0e924357ff9a5adea9ab098de9c14b307cd01fe15f0e5929fd2b5822e0b94429774747adfa2904976d34291d4815b52e5ac6d8680b9a0aef9d5465c429a1ab3d07c1640c87d5821bee7eccd3be2c6707bd99b11aabe47dd4e03fc8b90cb763dad392754de26891e26aea402f2fe66dab948462c76806e8859aa40d", 0xdd}], 0x1, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {r7, r5, r3}}}, @cred={{0x1c, 0x1, 0x2, {r8, r5, r6}}}], 0x40, 0x8000}}, {{&(0x7f0000004040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004200)=[{&(0x7f00000040c0)="6bc83f702dc4dcd298548d7c6a6a7702e7ec42c91a4b2bd5e722370bbd989aa5c9", 0x21}, {&(0x7f0000004100)="6a8b45931e00ab4111e7307f169ae360e37258aec3b88726091afd64234a897c4a07e6e29e4933be8542f459b35a4709f8f32206218ab06c2406c9a13c4ece46ccbb0c565141b3d50d8e8b99fb8cd36b43406f8ecb3396dddbc22ae6d946afa7bba56ab0b0030b60f66a", 0x6a}, {&(0x7f0000004180)="2ad0bc563dac10756187975e16101dd03570b2f3c54cfce92ea68b584943fbaf55a90da7d576ac3dcd8ff78ff921c961e0e93e284419a97a246b66c3f4907b6c53ab8f66ef40f5b228376ae23465a87d9fb4eeb6b24b10424fb8d80d67cec43105bae29909dc13af4bf2fc9b297a60d83fb5eb2f5f11cc1e", 0x78}], 0x3, &(0x7f0000004240)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r9, r0, r1, r1, r1, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x50, 0x2000}}, {{&(0x7f00000042c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000053c0)=[{&(0x7f0000004340)="79ca103bac4b5b189df26dac5715b9aa145dd6dd317ab79b730bba850e17ce83df5d0fe65740bdb84b60bc3021", 0x2d}, {&(0x7f0000004380)="917077b7b4fa61230f84c19572fae3e911f03e169b419b339a89dbb836eb7a7586933b494bce9b792e", 0x29}, {&(0x7f00000043c0)="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", 0x1000}], 0x3, &(0x7f00000054c0)=[@rights={{0x2c, 0x1, 0x1, [r9, r1, r10, r11, r12, r1, r13]}}], 0x30, 0x814}}, {{&(0x7f0000005500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005580)="b94a0db2f81dcc835b0a4138101e6e2ec57cceeff58b1763fc2a88ce5020c4a8418f2a280bb1ce7ba8fbe5bfcc2e313953d6933d3ebe3f4efe604f57bc13eef3a6347c71b80da41512af303045dbde34781236c64be19db3d223c1668debee396bfda4cb6f13f7aedb28d09195321cddde3806c39b77e82cc53500979c806208deab63079c5334288176e1bcc069d98364916e81e7d056b6bde319837d30af976c19a73f1ee20584af051815e71ff70df14d28d81c9a4a9d66fb6e4c8facac5467f767c2", 0xc4}, {&(0x7f0000005680)="62828417109382c19267945cbf95a9346d8c4f10e99e1be757a34ab7ba0e80731e15301b256390b8f2432d0842e59f6e8108930109f7e498b02eaf797085077a57bdc53e9f143a3dcbfc7761ec2b7cad51ae0a62b1821815701bd7cd50da60363341abde4574c235977c98e7fed5efdf1f3671a651204e58ceb8124ba96866aca3ed22ca3807d76a283c2cd348754a27833235270efa5573a660c0d9ddf7e986ac5e1a73b2711bee856b60453522d6d697e3f998b1f9fe7d613750c13da6e9a49709cb3fcba25f8ecc1c18372ac3caa354b879cc2cdc0b32066a3acbe87bd4028cd5d7872ace4f0204d74d3f346f512d6e17099ceb76e105b6", 0xf9}, {&(0x7f0000005780)="a20a8151a1670414", 0x8}, {&(0x7f00000057c0)="71ca6a7fa3bc4e61a8098565586a05cab6091a77", 0x14}, {&(0x7f0000005800)="c403bd75885675d5d26bc81157c96544bf53e0bd54b293ef1a889c4051beebb869a62a4825a6d39b9a4d742dc744453cd8b45e3f25d32aea3da57506c342047348df9ea276ffb86cca1fe061532ab725023af56bc3119c0745987d1e4efc25dbdf66f7b38fbb938622cb34100800cdc5ba63b3c0547b524b209c247349dfcc6641cd838d746e382c688439222fb0ce690f4d82d7e6e9c3d336c43014968950e7f0517f92c9b964df2b38d137ca8efffbe538a3f75923fcdf905335009889f03767e0b504e8a91108ba3fab18a00017c91987d5b0963d1415bc896e017b18ae4766000896e79a321e93bee3ee3f", 0xed}, {&(0x7f0000005900)="f2ad17d6689cb1063a1d4f75ce873f1082892a7f662219d4df4d", 0x1a}, {&(0x7f0000005940)="f886d4437ac1a18e0cd3a5846ad8e2b996e748494403e5d66999b2e72779e96929db8603060d26b671368048efb46c94893162363b36e3563566adacd00c096283d7ada7b56beeb3609dd35421c22b180e393798214f2587e8742dc037dbaa2790e1c449606f8bb499b3781fd3f9e48a7885d440112178fef4908d88eb989cd4360a4813927c8df0", 0x88}, {&(0x7f0000005a00)="41d9a011f07f8a2f9f428f2db62b5d8608cd40c8fc955f40c70f88f1391adab237faf0e48273f765a88925c6c1912bd44ab98f62d4e1fe3a5fea13eb2bf6a3677b609f6bf17ef8014fc6e5ef2349af30", 0x50}], 0x8, &(0x7f0000007d40)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r14}}}, @rights={{0x24, 0x1, 0x1, [r10, r9, r1, r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r7, r16, r18}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r19}}}], 0xc8, 0x81}}, {{&(0x7f0000007e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008000)=[{&(0x7f0000007ec0)="8a7fabec71af022b60938a0ddc6a", 0xe}, {&(0x7f0000007f00)="3854c67ca137c3fa07f833e7d72375aa94be7a5b514913d47d83053ce63d911d76671de4ff134a1c88f9369434b10db7a7053a65116ad05afd55d651e9c8c635442d50f36e2ff2c01799bc6f027afb2b2645c0d1e12ff63267c466ae41e7c4ef4bf60aae665c632c1614248eb25e1a546bdc4633e8e9e87d3a68a66b80acc26d7df1fe27f84bd0e806de7173a46ae38432f2cec77514e06502764097770ce99204a7847f14c4c138ffd08f7fec49ea9255a020b642617e82b94e5f572fc0b1d0647f7c6dd3abe022a3c2bc044b0ed6761bb91630691f0959542825d4e3030b3f894f8e94c1d8cd3879f2167359827e38a5", 0xf1}], 0x2, &(0x7f0000008080)=[@cred={{0x1c, 0x1, 0x2, {r4, r20, r17}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x1c, 0x1, 0x1, [r21, r15, r0]}}], 0x78, 0x8000}}], 0xa, 0x0)

5.51161074s ago: executing program 6 (id=2420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x51}}, 0x120)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@remote})
writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0x57)
syz_usb_connect(0x0, 0x262, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x50, 0xe9, 0xee, 0x20, 0x1c9e, 0x7605, 0xd00c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x250, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0xc, 0x28, 0x93, 0x70, 0x0, [], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x9, 0xd8, 0x8}}, {{0x9, 0x5, 0xf, 0x2, 0x0, 0x0, 0x1, 0x8, [@generic={0xc1, 0x21, "fc81aef3b8d9c2b6c352756ab7133631dfa3cf3dd40f06663cf852ef358bacec498f94d427e505181cfafd719fae9e575dacc9100ed02351bf53ef8bd517d65598b84d9e9f3aa24426075ea69aa4f265c25788527349edb91238c1b23cecd849a95f577c8b72163bc25951d69f38a03fa4d7017483ff538bf54a625ff316e40c8df35ddfbf3167b7546e2e1c845925b80a0084a919a3d61ec669bb1f5c4063b54d07560fe3dec57428036163ea55bc150a92b6b89d272684ccccd085855e87"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x46, 0x4}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x3, 0x8, 0x4}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x15, 0x0, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7, 0xaac3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xee, 0x5, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfff8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x90, 0x5, 0xff}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x4, 0x6, 0x7, [@generic={0xbf, 0x7, "0ebce9aa7245ff3b54c9f681e21e72cc42fe08b4df388b93a72bd5e219704c8dfa40c75283e0b2ee5970a8dad9ecda9c6dc1e2ec420a18e834c8e41b58f60f03aa8d2614b5a3575f2f35876b5b3d3d2d6e76e20b91b1d0f5695375dbed4a05d0bc19373515b3a975165d76f9d5576f0b721f622396484f3632c2cd5d79c88a2918fd02c71bf6d88e69ff1c143190ac3bb9a3c2330a52f25e1dccac785231b740cb3ade47e02731b762a56a50a0bbd994207b961572e991bcfae926e0a5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x7, 0xa, [@generic={0x36, 0x2, "864c3313c2d4f5e029e26c0868dc911e2aae382fc07f442ad72cf2b114c9b17aa122b0bdd520c762be4eb6369284ae81d9936503"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x1, 0xb, 0x2f}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x7, 0x2}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x5, 0x2a, 0x2}}]}}]}}]}}, 0x0)

5.311799343s ago: executing program 1 (id=2421):
r0 = getpid()
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x12}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x40}}, 0x0)
r4 = syz_pidfd_open(r0, 0x0)
setns(r4, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

4.980904922s ago: executing program 7 (id=2422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x200})
socket$kcm(0x2, 0x8, 0x2)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x100088)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES32=r6], 0x38}}, 0x4000)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102375, 0x18fe7)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
dup(r7)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r8, &(0x7f0000000100), 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.88156681s ago: executing program 8 (id=2423):
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
pipe2(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000008080007400000000024000e80140001"], 0x88}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000005940)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
write$smackfs_cipso(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a3000203030304030303030303030303030303034303132203014303030303030303030303030301c303030312030303030303030303030303030302030303030302000f437aa061d44314a337ad34f3b01db405177c567b0008cd2d6c4d70ed8088084f76adef3232a0a6b901672bd5fe2b9c354e573409023cf57e578150b22e62fd46f3a26c08ece594d24f58d6e68591d4b6eaa6ff6ef8c2df3a25da2ee92e7d7dc08c1fdc301e437fa92277059adab27e5ebdb8cf17bf16ac196c31b8605b3b20695c5685781cda11cbaa06c"], 0x46)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
dup3(r4, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="05000000000000000000000000000000000061681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271b73e269eef4e7cc3151d"], 0x80}}, 0x0)
sigaltstack(&(0x7f0000000100)={0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)

4.511829381s ago: executing program 7 (id=2424):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, <r2=>0x0})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000640)={{r5, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000800)={r2, r5, "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", "6db637da12a75f12cd9f1358a43bac9043d07c3609926820c4a8a780fa2a757c70e9d153ec69ef8367a51f1249b837a8b9dccf1afa757eecde4a98e737b59994cf6659ae7637e86209ee3d795f7936edf065d1b2e2a50aa5382f347b0121ac465294437e36e437035e6fabcc191eb0b08eb5bb29b206d35707691fb216b1780a3cc1d98d42e1c4e77c51045cebe6f19a60707d508ba19cde49c95fa8cf792bc67ab8f873fb528d0c3442720fc35ba6d050e7319835740305714f1facb22cff1d4367ac14e945d46ac5299a9873a76f8262a997c0816161e4cc4485a2783dba8e67fb13cd3c23c7eca7e3d40643938fe5e7332b19bbde83bb18a9fe3aba4b7d45db809cfa565066175841849c23994daae40c1e666b45378ee37e2cce68b55967829a7471757b1b3feaf3e7ce8be735c3bfa2d22125ce5c024bc0c342c44d31695fb55c7994703fd850b2e01354710f21938d69fc2ae6f589605bc07dd20f2e286fa20b15a94a0ef6910c8a35724fce4f8b81261b240d8e3caf481006f5a7b14653959a3d715e60450ffc2c9d60ce93873021005357525f0ab6f111e549c56b6734a52067b37aaac2523b3d5a6220192011e347525e46975e69ce71ceb6239708a136618e26f848e3a7e3a0cd85f72f6de8fb7047c42ccdc885fd01f39478db59a2dad6aa38bbea50627c1a834e559e74f751cab75a0f95c012edcc24f3ded170b9ca3197663893576552c2e8de6199b36879de942233d76518628d3dc0c9821b984983044a650a8782c353ccf7653a1f6d8d2980e50bb106e09014a043b3580e5f8b677d32f451ff0cba95816b07db2377afaec1cad7dfe78a3725924028c47cd8ca687ba48af8c22873b364b87f9f72f9ebd814a7126ad29f388c8560e8cc3e385cd413851391f5e2ce5b59be2d506a2322b095b3f04a3f8fa8e46352fa6263ed8ad0768b40b469f9f46a705f80b25bcd0658030dbe20e2f287b63f7b0f676cb555627d36964af6cd149b8bed67d325be5d601395fa50504cc696b67ffd016c2fc189b32889144a1a895aecda85123cca1f2b614bd599331ac124e9fd791c182df0c4c50ae81bc90385fd8f7f9aaf2158ea63660b693e04a685ff7415de7fdc1a148ec8daf79e9d8fb2fa00e5304be4c430090466ab49d7cc0866cc0ab1f3a21b815b65a3acf759eab4975833d39840428ba5225bb5b069a90bf54fcce84cb7a313a9051230ef38290ed3492b8dd2a989f731d3c1dc19dc4055411c1a12e6220c6d5d4e90c35255c58606176d96ab8ce10b7efae2e216dcb5a6111fa7f096af1f809c4505f3c99bf170bc38d5611bf6f15787fb5d80c914c5ba713d808da922fdd91b024d1bb5b1ee7cbc298e4a5ff2eddc70868bc4d3f93edd1b90329eae26bb599ad272f53f5f4d7863f7851385328d2f15e0058893ca3b2b6fa3b245ed47e2eb87dfdcf698ec6e571c8709179a2efc7442230ca14685977554b3b317a25058b9798a5f544de5e84752846c454c67d78b5c53f4a8bf249a90a68f78c18aeebf9adb41c050fbab53e68bb522a926ebf3e539b574396d0a46b7d98a360443510a73230b5bee0d15bc6cf3d3b1659bb43182a8cb39e996079ab64c9312ada86bf20dfb7b39cb639b9f93223982553154af36ee435942c932e5d92749cbc5a40b184988b0ee34e122974b287c2683130d5fce41671de4db53d21603fc6099ddf4c159d32c855642f287791f2abc2000a20ed6edc214b8ed54ea7b021d115b89984ec1f0f69a1cb9b5c89a37d9be8209d1496cee4ec2bc34cf0731dbb5f1e87673bc5da5a020b9f28dbea59cce2464a0bb4d3aef959dfdd88a732596979671834f835ef279b95697139a3300411b863c60adb8cd0f84afa499ab7ffdd1826db17b29603e85dc08f2d9adf47d81158bfd540eeafc27175984156d77cf882e3ec153dbb8ab439e9002719043475924e5269c3c6eda2e7599f3b49abbe108b13142b6c9bf4a83c3d78625ba95b631c45e926d9cfb12622782a330a306602cea75f74dd50b9b92f0519bb4e77d315b1d6305e696bd6be4669e9d8b2d8c9af464733bb72108d353970c1c0462a65f2e8a334367ebf22d94089f328347c9963a3ca3420d106b257d85670db3dbf09370b3bde76aa3ccbbd2d8b0f96f5bd9b9dfc954322951e6b1f4418b58263fc369b1160dde67ca43590321eaceb7472fe21c5ccd869e94693d3db053afc706304e25e2f663702bf4e57d3d8c4fd6f1b5c333e0c9adf8ba488a3f04c30ef1120f7683e4079f3eaa3e41440e70d32e051d9830c602d3df4095c9d91daf46f36d8afed99fc86dbdc71edbb7e4e4159ae6e4f7fa70c7367f55b6f83982c27fdcfbed404d4dfe991a4126123f2b82fb21b660242ff24e4c5108773dd2b3232ef6162fbc82d51160eb320fc010cb5d5ce26bc008685f60b5105ab9c9c7d374b45af7215f4c5a00286c39cad40c3d2e13b7baae3a72dc329e3574e76e66606c3ad2176903188f6ef7f243feae7fc04f9af38c023a5e3557c8ffb32c7daa06bad391ba8355e062dd6291f7934dcfd81cde2a3c42c0ca4af4029fc19d6fde5964dc5630665a9e3d5d709475822b52f69ea79942094d60806b8eb2311beb7f9af7421870298e82b6ea9bf764a8974dfc39921623eec5676b5a7a5c9c50df61fe00fd91d3a1ebbc9467be211a302a67d6f539b9180321954a2218f11cb997950d7cf8afcde7261381ad28e43822c67ce9275c2b5bf9bec2bafe79c27b80abef471e5ca91634e239bbefa35a3c059e542c37399c6ee6b7eac197643ca3dd525ea0cecfec25b3192c4d86fdf27e35e83f61c6284f16d82a117d9db7f12c834d97e4c453ce4c71dffed06ea03b31864a95e9039cded97796ed8e87bbcdfddf909fd05b048271be5d57c13b3e5fbc1f11e349a446011d5578ba539d94849acbe7e5dbf52040d19c714afd8d5ced91ee31787e8be72420c6a196427f6a80009a00b1b90451838ad579011d68d5327fedeec33094679ef12a0858d7e813eddd159cd8d8545fd2da8c9fdc7549c2459ff553004bccb845c1b5be488a1b06538a576ddbbb86bc40ea6728038bae9244e60137d5215d52e964911a06dd2ea5e22dc362cb3ff8196e3ad17ca3ca5a3d2301bcc4ba5f1b4c61c6ae64a83c8fcfe3ef06debb04722ba6266dc057b32e552b5a7f943743b668b6d11dad89f4840652a9776f6b02e0a3243d5726780f16b7f8183ec27919e0e60a2f71a0d14c1cc0a9b26f58fdb817fab30d95fa6cfeef72eddcbeef5bfc2c3d70427926bdb8774c991986e7e458feff3d227da1d3bb7c09ce4e6ed82513efaddbef0b0f4d7d9cc3d0d5005491e4b85dff8d23df30043972ae7eaf19c00054f8de86c433af58e567895ffc98f57d03252222470a6a353a7a0b802ae575f5b77f9c149a56e9d077e883e20fd4ad642823e8ac1b54fba5fbb07bd5b6a96379621ffe4937c7a96f1a60c460d181d2cd6475c313f314d0f17825098bc4105e04d10e3c5cff39e8fd45b6da74e01ec3ba5dac1f02b26bf910fbb0e9131a6eb5b13d2b43a948030b7acc2071e5f114a2b33b65369df7302f361c683e756ff358935e0bfe1efb19e07789d83279c32e0a97768afc3e11aa5cc1ef76fcae51c38535f2b46899c57fbb03632b16cb2f1d9029cc1963235ca67444b569cbce01c548aa804e15164c8f1e70726e35529b06bcea67bdf94cce09dfbc1ed7f4571f953d958197377724116db7bf076f8e0f4eea1b05d6699ce41cf5eb974524a870e0e199c30443789b015e08cabe14d7680fc06b16f8503986e554772d647a71148752384c4c43af4db2977b107bb116d5676367cbe6a9d4c338e511444ddfb24e94b167340267ed1b4bebb90465031f279de9b364a3e9c8fbdbae31c08a55cfc7e06a8f72a36ed5c1fbf515164e3a4181f6293b6d7d15aad24c8fb90d1006731dc736ff0625cac8b8fe0d5edcff9601d73a3350accd46d09b9ee43ab4add9ee3e7d8e25e3d751aaa3b9e7eb90d366028c0dc8f76098dad65a1d33ea588e85955f6660469282ea81d1e69af94a0812423d6dc7294da58b6d3dc59f35286b867415151f9dd071ec6beda056fc7cc78a63af1d4e558f34a4cc7190105c2aade42e7e6a4b17597518e2c3a2d56c37305eaa905438e0990127c0196ebcdb11990d83af8d23af18f1e75b48d362f03afd3a7ac6a56c0b964cda668f7eb6d1edbffa60309568b75fa96c6e077291cb78ceacdc4b4312b48c5724aef88581253410e62d049d92a03201b8841fe5ac251a446c65a4744592b25b508a2abca0f1c59123f1eae5708b5b6cc74d727bbba91ad270d7f4ef949a75c938bddc89ef8684e58a5a12363f055fe82a4509839c29f18e21ba0c0138ecd203da03159cc9e29b7ae7817042be0523a44223d96597ff0bca7477a902199cacc91fe2b1001cb761897d8236950026354cc486861d3c280e5ae44aa21fac9627ccb0fd16496146737875dc273553400af7ce6a4c2d9373884078134b0e941731bc98758838e68bd602fe6070d8ffb92eaf18734f38df2f4947eba9896b788a6d123db565289081c82f545910043aeea2cdc3fe78fc3676d85d4d09af1bb16d8dc946508bfd5d28109d761dbc2cddd6b9d0cfbfb0578e4ce348e74f3dc409a898823a3f69735dd98a95b680edf6ad92def60b9d3cc138b16c77a8f9584d4c3b7205408a86588cfff6f984be6ba556c99cdcb75409c842f4ec8704b2f7fbe9a3a949b12521b7b55db3475ee89b7791ab8f41d99bfe0bb1df30d6bb6978997e2c83394f146f681fa40f113d913edf0220c27792d7e0bf5ef8b6f88b55bc69e6adf37b1c5f256a58f0d5e74823c83145906d787753b7fd34f119da7b02e9ef2cb3d9e5ce29877f18ec020dd5d879ac5527991b3d695b23313193e9443bcd37024d5fb91c5539ee6d079acfbc00bea90848fc597d2a55bb240c48529304775e5ac923479a358e88596024bc8ccb74fa320ae3a6ab09f3616994596e480771f40d76d7e090e92e6d329fe5f0cc96dd6074219a80de8213cc6497d7c4107c26590244deb85c9b1cf392267067d7d98fc105ace5de7448fc182305cea3d5cf027e5ae320c08bafda8bed7605d3b4094f8a9b1ba462cdd10bcdddd0a120ac035de1094407dfcb04589ffc777154c7a54ee825d9994a87c28f2a1239767fe83181d37a77e9fb356e60d046e2de40529d8bfb6e46951dc126e3c294497ff6a25525001d1894487b8cef81dfd06b015bec45a8f550571b08a78f1e7f24b677857fda934902f0b9feef6978da93bb116b7ad1ce5e379a2340a27375167b627f1a5f1f6a3f3014ac579373b7029785be2ebb39ca9f64c1f1b1e66322fce1a09ccfd7da081264c77b1b3441daec409757cf"})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x27, 0xffffff06, 0x0, 0x0, 0x0, 0xfffffffd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mq_open(&(0x7f0000000000), 0x1, 0x0, &(0x7f0000000140)={0x100000000, 0x1c000000000000, 0x0, 0x1})

3.917538635s ago: executing program 7 (id=2425):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x3f, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.554171932s ago: executing program 1 (id=2426):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x2000)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r0, 0xac55e000)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x424}], 0x1, 0x0, 0x0, 0x0)

3.341560282s ago: executing program 8 (id=2427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r1}, 0x38)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r6, 0x20, &(0x7f0000000140)={&(0x7f00000002c0)=""/189, 0xbd, 0x0, &(0x7f0000000380)=""/182, 0xb6}}, 0x10)

3.251789458s ago: executing program 1 (id=2428):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a861f9baf00b87cfd9a0850f269702c6d616300000005000400000000000900020073797a3100000061330000000000008008000140ac1414bb080008000000000005000500020000000500010006000000"], 0x64}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}}, 0x0)
r7 = socket(0x10, 0x80803, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r9, &(0x7f0000000040), 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a)
sendfile(r9, r10, 0x0, 0xffffffff000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
accept4(r9, 0x0, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES64=r0, @ANYRES32=r7], 0x1c}}, 0x0)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040))
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

3.213513813s ago: executing program 6 (id=2429):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x8, 0xf, 0x2, 0x3, 0x4}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(&(0x7f0000000180)='./file1\x00')
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000d40)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"})

3.17983037s ago: executing program 7 (id=2430):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000})
io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x2000)

3.075993937s ago: executing program 8 (id=2431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x7, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @empty, @random="95c08e5b0c40", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @random="cd127c1010cc"]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000000c0)={0x1})
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00'})

1.994672475s ago: executing program 6 (id=2432):
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1d, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88100)

1.781172162s ago: executing program 7 (id=2433):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0xfff2, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffd16c}]}}]}, 0x38}}, 0x24004085) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) (async)
pause() (async)
r5 = getpid()
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6706, 0x4001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x3c}, 0x1, 0xba01, 0x0, 0xc000}, 0x800) (async)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
pause() (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r7, &(0x7f0000000080), 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "060200", "a44a889722b66244"}, 0x28) (async)
recvfrom$inet6(r7, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0)
recvfrom$inet6(r7, 0x0, 0x1000000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.66788607s ago: executing program 6 (id=2434):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffffa}, 0x48)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000006d02420e60f0098dee2010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x5, 0x83, {0x83, 0xa, "148cc9e0d94e59f6cc1c2f8154ee2bb2228bcf8a5bd0571dfae2d011bd6d36f3bc0965a5503eea9302c7c7440e2a60a484fd39ed5a9f2b6ea80b573549685d9dff481069c95d033c7673638ddef8ae113a495a6e5d9fb306b292a4d714cc561cd57fa909ce3aa78ff67702712fe312b813c62c572df3c14ba74475e49059f35181"}}, 0x0}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x0) (async)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffffa}, 0x48) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000006d02420e60f0098dee2010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x20, 0x5, 0x83, {0x83, 0xa, "148cc9e0d94e59f6cc1c2f8154ee2bb2228bcf8a5bd0571dfae2d011bd6d36f3bc0965a5503eea9302c7c7440e2a60a484fd39ed5a9f2b6ea80b573549685d9dff481069c95d033c7673638ddef8ae113a495a6e5d9fb306b292a4d714cc561cd57fa909ce3aa78ff67702712fe312b813c62c572df3c14ba74475e49059f35181"}}, 0x0}, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async)

0s ago: executing program 8 (id=2435):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005f4ffff0bb906d5a9bed4000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x7f, 0x404000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x10000)
write$dsp(r1, &(0x7f0000002080)="a5", 0x1)
open(&(0x7f0000000240)='.\x00', 0x0, 0xc4)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket(0x1, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008"], 0xe0}], 0x1}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
syncfs(r4)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local}, 0x1c)

kernel console output (not intermixed with test programs):

2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.976048][   T25] gspca_spca508: reg_read err -110
[  726.998639][   T25] gspca_spca508: reg_read err -32
[  727.007616][   T25] gspca_spca508: reg_read err -32
[  727.024403][   T25] gspca_spca508: reg_read err -32
[  727.057290][   T25] gspca_spca508: reg_read err -32
[  727.063206][   T25] gspca_spca508: reg write: error -32
[  727.086162][   T25] spca508 1-1:0.0: probe with driver spca508 failed with error -32
[  727.918842][T12585] fuse: Bad value for 'fd'
[  727.928169][T12585] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1887'.
[  728.570357][ T1205] usb 1-1: USB disconnect, device number 48
[  728.602688][T12589] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  729.095178][T12604] netlink: 'syz.8.1894': attribute type 11 has an invalid length.
[  729.595555][T12611] input: syz1 as /devices/virtual/input/input14
[  730.561386][T12617] netlink: 'syz.6.1898': attribute type 10 has an invalid length.
[  730.569472][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1898'.
[  730.579238][T12617] bridge0: port 3(ipvlan1) entered blocking state
[  730.585773][T12617] bridge0: port 3(ipvlan1) entered disabled state
[  730.594381][T12617] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  730.644825][T12624] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1900'.
[  730.707590][T12623] hsr0: entered promiscuous mode
[  732.399871][T12652] netlink: 666 bytes leftover after parsing attributes in process `syz.8.1908'.
[  732.616012][T12654] netdevsim netdevsim0: Direct firmware load for � failed with error -2
[  732.625822][T12654] netdevsim netdevsim0: Falling back to sysfs fallback for: �
[  733.847424][T12669] netlink: 'syz.7.1913': attribute type 10 has an invalid length.
[  733.899575][T12669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.987769][T12669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.014042][T12674] overlay: Unknown parameter 'euid>00000000000000000000'
[  734.060386][T12669] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  734.265954][T12677] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  734.278643][    T8] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  734.416566][    T8] usb 7-1: device descriptor read/64, error -71
[  734.679753][    T8] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  734.866614][    T8] usb 7-1: device descriptor read/64, error -71
[  734.976416][    T8] usb usb7-port1: attempt power cycle
[  735.316247][    T8] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  735.336761][    T8] usb 7-1: device descriptor read/8, error -71
[  735.576159][    T8] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  735.606822][    T8] usb 7-1: device descriptor read/8, error -71
[  735.726836][    T8] usb usb7-port1: unable to enumerate USB device
[  736.366443][T12682] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  736.539494][T12720] ipvlan1: left promiscuous mode
[  736.544505][T12720] ipvlan1: left allmulticast mode
[  736.555324][T12720] veth0_vlan: left allmulticast mode
[  736.605833][T12720] tipc: Resetting bearer <eth:geneve1>
[  736.614245][T12720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.625454][T12720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.662434][T12720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.691932][T12720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.963495][T12743] fuse: Bad value for 'fd'
[  737.104108][T12684] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  737.118651][T12684] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  737.124964][T12684] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  737.150420][T12684] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  737.335695][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'.
[  737.346171][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1935'.
[  737.361325][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'.
[  737.803026][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'.
[  739.342991][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  740.198744][T12788] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  740.256166][T12737] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  740.426215][T12737] usb 2-1: device descriptor read/64, error -71
[  740.666160][T12737] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  740.806115][T12737] usb 2-1: device descriptor read/64, error -71
[  740.866436][T12812] netlink: 'syz.6.1952': attribute type 10 has an invalid length.
[  740.917061][T12737] usb usb2-port1: attempt power cycle
[  741.261534][T12737] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  741.286852][T12737] usb 2-1: device descriptor read/8, error -71
[  741.400384][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  741.526160][T12737] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  741.557730][T12737] usb 2-1: device descriptor read/8, error -71
[  741.666423][T12737] usb usb2-port1: unable to enumerate USB device
[  743.066638][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'.
[  743.214869][T12815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  743.586216][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  745.182532][T12836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  745.840046][T12849] netlink: 'syz.1.1963': attribute type 21 has an invalid length.
[  745.848815][T12849] netlink: 'syz.1.1963': attribute type 6 has an invalid length.
[  745.857095][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1963'.
[  746.537122][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'.
[  746.569031][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'.
[  747.818223][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  747.841265][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  748.456310][ T5876] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  748.836059][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  748.921221][T12886] netlink: 'syz.8.1976': attribute type 21 has an invalid length.
[  748.933461][T12886] netlink: 'syz.8.1976': attribute type 6 has an invalid length.
[  748.941704][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1976'.
[  749.024111][ T5876] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  749.100879][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  749.112077][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.161950][T12877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  749.179173][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  749.472636][T12898] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  749.490962][ T9437] udevd[9437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  749.575022][T12737] usb 2-1: USB disconnect, device number 55
[  749.623352][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1979'.
[  749.656503][T12892] xt_CT: No such helper "pptp"
[  749.726353][T12902] netlink: 'syz.7.1980': attribute type 30 has an invalid length.
[  752.128706][T12932] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  752.137841][T12932] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  752.147093][T12932] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  752.154873][T12932] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  752.164925][T12932] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  752.172850][T12932] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  752.181726][T12932] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  752.189655][T12932] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  752.256386][T12734] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  753.643477][T12734] usb 7-1: Using ep0 maxpacket: 32
[  753.652990][T12734] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  753.661320][T12734] usb 7-1: config 0 has no interface number 0
[  753.736658][T12734] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  753.746020][T12734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.746313][T12945] netlink: 'syz.0.1994': attribute type 4 has an invalid length.
[  753.754028][T12734] usb 7-1: Product: syz
[  753.754054][T12734] usb 7-1: Manufacturer: syz
[  753.754071][T12734] usb 7-1: SerialNumber: syz
[  753.788733][T12734] usb 7-1: config 0 descriptor??
[  753.857883][T12734] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  754.132945][T12734] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  754.182194][T12734] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  754.350269][T12958] netlink: 'syz.8.1999': attribute type 10 has an invalid length.
[  755.021765][T12958] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  755.159998][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  755.169299][ T5875] usb 7-1: USB disconnect, device number 43
[  755.192161][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  755.219067][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  755.231336][ T5875] quatech2 7-1:0.51: device disconnected
[  755.325477][T12969] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0
[  755.525425][T12978] netlink: 'syz.1.2006': attribute type 3 has an invalid length.
[  755.533380][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  756.977039][T13001] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2013'.
[  757.715051][T13033] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128)
[  757.882410][T13037] bpf: Bad value for 'uid'
[  757.890393][T13037] netlink: 'syz.0.2025': attribute type 11 has an invalid length.
[  761.452035][T13067] xt_ipcomp: unknown flags 12
[  762.144809][T13078] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  762.153967][T13078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  762.308791][ T5875] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  762.479396][ T5875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.500400][ T5875] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99
[  762.555178][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.566280][T12734] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  762.643804][ T5875] usb 7-1: config 0 descriptor??
[  762.718317][ T5875] usb 7-1: interface 1 not found
[  762.727903][T12734] usb 9-1: Using ep0 maxpacket: 8
[  762.751850][T12734] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  762.771776][T12734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.836128][T12734] usb 9-1: Product: syz
[  762.846667][T12734] usb 9-1: Manufacturer: syz
[  762.871866][T12734] usb 9-1: SerialNumber: syz
[  762.900384][T12734] usb 9-1: config 0 descriptor??
[  764.273597][ T5876] usb 7-1: USB disconnect, device number 44
[  764.412941][T11087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  764.439829][T11087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  764.450034][T11087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  764.460978][T11087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  764.471035][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2043'.
[  764.489301][T11087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  764.502261][T11087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  764.515000][T12734] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  764.524824][T12734] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  764.554778][T12734] usb 9-1: USB disconnect, device number 4
[  764.634070][T13102] lo speed is unknown, defaulting to 1000
[  764.638048][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.649830][T13116] batadv_slave_1: entered promiscuous mode
[  764.659989][T13102] lo speed is unknown, defaulting to 1000
[  765.323298][T13102] chnl_net:caif_netlink_parms(): no params data found
[  765.396592][T13129] : entered promiscuous mode
[  766.603291][   T55] Bluetooth: hci3: command tx timeout
[  766.936938][T13102] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.966059][T13102] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.973414][T13102] bridge_slave_0: entered allmulticast mode
[  767.017756][T13102] bridge_slave_0: entered promiscuous mode
[  767.037307][T13102] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.066496][T13102] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.073847][T13102] bridge_slave_1: entered allmulticast mode
[  767.076165][T12737] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  767.107270][T13102] bridge_slave_1: entered promiscuous mode
[  767.119374][T13157] netlink: 'syz.1.2055': attribute type 10 has an invalid length.
[  767.127379][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2055'.
[  767.178612][T13157] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  767.246482][T12737] usb 9-1: Using ep0 maxpacket: 8
[  767.622767][T12737] usb 9-1: unable to read config index 0 descriptor/start: -61
[  767.698621][T12737] usb 9-1: can't read configurations, error -61
[  767.874318][T13102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  767.942754][T13102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  768.019086][T12737] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  768.161103][T13102] team0: Port device team_slave_0 added
[  768.174902][T13102] team0: Port device team_slave_1 added
[  768.216059][T12737] usb 9-1: Using ep0 maxpacket: 8
[  768.225351][T13102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  768.225351][T12737] usb 9-1: unable to read config index 0 descriptor/start: -61
[  768.235927][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.243473][T12737] usb 9-1: can't read configurations, error -61
[  768.275542][T13102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  768.285030][T13165] tmpfs: Unknown parameter 'usrquota'
[  768.295179][T12737] usb usb9-port1: attempt power cycle
[  768.296285][T13102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.308766][T13102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.349773][T13102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.432898][T13102] hsr_slave_0: entered promiscuous mode
[  768.448403][T13102] hsr_slave_1: entered promiscuous mode
[  768.465255][T13102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  768.482136][T13102] Cannot create hsr debugfs directory
[  768.532291][T13178] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  768.540395][T13178] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2062'.
[  768.550277][T13178] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  768.653025][T12737] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  768.676096][   T55] Bluetooth: hci3: command tx timeout
[  768.683710][T12737] usb 9-1: Using ep0 maxpacket: 8
[  768.705026][T12737] usb 9-1: unable to read config index 0 descriptor/start: -61
[  768.733528][T12737] usb 9-1: can't read configurations, error -61
[  768.766736][T13102] 8021q: adding VLAN 0 to HW filter on device bond0
[  768.786354][T13102] 8021q: adding VLAN 0 to HW filter on device team0
[  768.852618][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.859883][ T6965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.914110][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.921345][ T6965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.102707][T12737] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  769.257310][T12737] usb 9-1: Using ep0 maxpacket: 8
[  769.839121][T12737] usb 9-1: unable to read config index 0 descriptor/start: -71
[  769.876824][T12737] usb 9-1: can't read configurations, error -71
[  769.906547][T12737] usb usb9-port1: unable to enumerate USB device
[  771.379947][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  771.391559][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.416220][T13192] netlink: 'syz.8.2066': attribute type 24 has an invalid length.
[  772.430030][T13102] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.021622][   T55] Bluetooth: hci3: command tx timeout
[  774.397894][T13205] xt_connbytes: Forcing CT accounting to be enabled
[  774.405016][T13205] Cannot find add_set index 0 as target
[  774.426382][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2068'.
[  775.076168][T11087] Bluetooth: hci3: command tx timeout
[  775.237282][T13102] veth0_vlan: entered promiscuous mode
[  775.384644][T13226] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2072'.
[  775.406760][T13102] veth1_vlan: entered promiscuous mode
[  775.649110][T13102] veth0_macvtap: entered promiscuous mode
[  775.681533][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2071'.
[  775.806308][T13102] veth1_macvtap: entered promiscuous mode
[  776.005800][T13227] netlink: 'syz.8.2071': attribute type 1 has an invalid length.
[  776.019340][T13227] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2071'.
[  776.037074][T13102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  776.050777][T13102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  776.117298][T13102] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.162933][T13102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  776.215125][T13102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  776.247789][T13102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  776.417648][T13102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  776.429349][T13102] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.506125][ T1205] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  777.788918][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2078'.
[  777.795963][ T1205] usb 7-1: Using ep0 maxpacket: 8
[  777.805838][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.816309][ T1205] usb 7-1: config 0 has an invalid interface number: 211 but max is 0
[  777.824537][ T1205] usb 7-1: config 0 has no interface number 0
[  777.835165][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.850124][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2078'.
[  777.866224][T13248] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2078'.
[  777.876286][ T1205] usb 7-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=15.ab
[  777.877514][T13245] FAULT_INJECTION: forcing a failure.
[  777.877514][T13245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  777.886616][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.901663][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2078'.
[  777.913438][ T1205] usb 7-1: Product: syz
[  777.921398][ T1205] usb 7-1: Manufacturer: syz
[  777.936503][ T1205] usb 7-1: SerialNumber: syz
[  777.944946][ T1205] usb 7-1: config 0 descriptor??
[  777.961699][ T1205] iowarrior 7-1:0.211: no interrupt-in endpoint found
[  777.969012][T13248] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2078'.
[  777.998260][T13248] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2078'.
[  778.007987][T13245] CPU: 0 UID: 0 PID: 13245 Comm: syz.8.2077 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  778.018820][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  778.028918][T13245] Call Trace:
[  778.032227][T13245]  <TASK>
[  778.035188][T13245]  dump_stack_lvl+0x241/0x360
[  778.039920][T13245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  778.045167][T13245]  ? __pfx__printk+0x10/0x10
[  778.049820][T13245]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  778.055936][T13245]  should_fail_ex+0x3b0/0x4e0
[  778.060648][T13245]  _copy_to_user+0x31/0xb0
[  778.065090][T13245]  __snd_timer_user_ioctl+0x30b5/0x5390
[  778.070665][T13245]  ? __pfx___snd_timer_user_ioctl+0x10/0x10
[  778.076581][T13245]  ? __mutex_trylock_common+0x183/0x2e0
[  778.082143][T13245]  ? __pfx___might_resched+0x10/0x10
[  778.087463][T13245]  ? __pfx___mutex_trylock_common+0x10/0x10
[  778.093377][T13245]  ? rcu_is_watching+0x15/0xb0
[  778.098162][T13245]  ? trace_contention_end+0x3c/0x120
[  778.103505][T13245]  ? __mutex_lock+0x37f/0xee0
[  778.108201][T13245]  ? smk_tskacc+0x300/0x370
[  778.112730][T13245]  ? snd_timer_user_ioctl+0x4f/0x90
[  778.117953][T13245]  ? __pfx___mutex_lock+0x10/0x10
[  778.123004][T13245]  ? __fget_files+0x2a/0x410
[  778.127613][T13245]  ? __fget_files+0x2a/0x410
[  778.132223][T13245]  snd_timer_user_ioctl+0x5f/0x90
[  778.137260][T13245]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  778.142994][T13245]  __se_sys_ioctl+0xf5/0x170
[  778.147612][T13245]  do_syscall_64+0xf3/0x230
[  778.152139][T13245]  ? clear_bhb_loop+0x35/0x90
[  778.156839][T13245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.162753][T13245] RIP: 0033:0x7fa1cdf7ff19
[  778.167187][T13245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  778.186813][T13245] RSP: 002b:00007fa1ced47058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  778.195251][T13245] RAX: ffffffffffffffda RBX: 00007fa1ce145fa0 RCX: 00007fa1cdf7ff19
[  778.203237][T13245] RDX: 0000000020000040 RSI: 00000000c0f85403 RDI: 0000000000000003
[  778.211222][T13245] RBP: 00007fa1ced470a0 R08: 0000000000000000 R09: 0000000000000000
[  778.219206][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.227190][T13245] R13: 0000000000000000 R14: 00007fa1ce145fa0 R15: 00007ffe35be0e48
[  778.235189][T13245]  </TASK>
[  778.274235][   T55] Bluetooth: hci3: command 0x0405 tx timeout
[  778.283217][ T1205] usb 7-1: USB disconnect, device number 45
[  778.301543][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.446202][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.836877][T13252] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  778.844479][T13252] UDF-fs: Scanning with blocksize 512 failed
[  778.852783][T13252] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  778.860395][T13252] UDF-fs: Scanning with blocksize 1024 failed
[  778.868360][T13252] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  778.876009][T13252] UDF-fs: Scanning with blocksize 2048 failed
[  778.883676][T13252] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  778.929104][T13252] UDF-fs: Scanning with blocksize 4096 failed
[  779.616206][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2080'.
[  780.027715][T13089] bridge_slave_1: left allmulticast mode
[  780.048957][T13089] bridge_slave_1: left promiscuous mode
[  780.099387][T13089] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.252464][T13089] bridge_slave_0: left allmulticast mode
[  780.261379][T13089] bridge_slave_0: left promiscuous mode
[  780.280154][T13089] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.284445][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  781.295439][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  781.312470][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  781.320935][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  781.328671][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  781.337482][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  782.179132][T13310] evm: overlay not supported
[  782.828823][ T5876] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  783.181729][T13089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.190603][ T5876] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  783.200922][ T5876] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  783.213723][ T5876] usb 7-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  783.233592][ T5876] usb 7-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  783.248402][ T5876] usb 7-1: config 1 interface 1 has no altsetting 0
[  783.259661][T13089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.398125][T11087] Bluetooth: hci3: command tx timeout
[  783.507218][T13089] bond0 (unregistering): Released all slaves
[  783.667939][T13322] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  783.673925][T13322] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  783.813161][ T5876] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  783.822715][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.840555][T13322] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  783.847305][ T5876] usb 7-1: Product: syz
[  783.851580][ T5876] usb 7-1: Manufacturer: syz
[  783.860952][T13322] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  783.871078][ T5876] usb 7-1: SerialNumber: syz
[  783.925066][ T5876] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  783.933911][T13322] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  783.944623][T13322] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  784.008242][T13294] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2089'.
[  784.326765][T13319] netlink: 'syz.8.2098': attribute type 1 has an invalid length.
[  784.337590][    T8] usb 7-1: USB disconnect, device number 46
[  784.353840][T13299] lo speed is unknown, defaulting to 1000
[  784.388242][T13299] lo speed is unknown, defaulting to 1000
[  785.499590][T13089] hsr_slave_0: left promiscuous mode
[  785.555817][T13089] hsr_slave_1: left promiscuous mode
[  785.573196][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  785.584780][T13089] batman_adv: batadv0: Removing interface: batadv_slave_0
[  785.604526][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  785.627805][T13089] batman_adv: batadv0: Removing interface: batadv_slave_1
[  785.733095][T13089] veth1_macvtap: left promiscuous mode
[  785.745040][T13089] veth0_macvtap: left promiscuous mode
[  785.756134][T13089] veth1_vlan: left promiscuous mode
[  785.762229][T13089] veth0_vlan: left promiscuous mode
[  787.509765][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2113'.
[  787.520010][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2113'.
[  787.974195][T13089] team0 (unregistering): Port device team_slave_1 removed
[  787.979317][T13372] binder: 13371:13372 ioctl c0306201 20000580 returned -14
[  788.000216][T13372] FAULT_INJECTION: forcing a failure.
[  788.000216][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  788.028954][T13372] CPU: 0 UID: 0 PID: 13372 Comm: syz.8.2114 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  788.039794][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  788.049892][T13372] Call Trace:
[  788.053203][T13372]  <TASK>
[  788.056159][T13372]  dump_stack_lvl+0x241/0x360
[  788.060893][T13372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  788.066140][T13372]  ? __pfx__printk+0x10/0x10
[  788.070781][T13372]  ? __pfx_lock_release+0x10/0x10
[  788.075853][T13372]  should_fail_ex+0x3b0/0x4e0
[  788.080575][T13372]  _copy_from_user+0x2f/0xc0
[  788.085226][T13372]  binder_ioctl_write_read+0x149/0xb620
[  788.090831][T13372]  ? preempt_count_add+0x93/0x190
[  788.095908][T13372]  ? 0xffffffffa00007d8
[  788.100091][T13372]  ? 0xffffffffa00007d8
[  788.104257][T13372]  ? __pfx_validate_chain+0x10/0x10
[  788.109477][T13372]  ? is_bpf_text_address+0x285/0x2a0
[  788.114800][T13372]  ? is_bpf_text_address+0x26/0x2a0
[  788.120016][T13372]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  788.126209][T13372]  ? kernel_text_address+0xa7/0xe0
[  788.131341][T13372]  ? __kernel_text_address+0xd/0x40
[  788.136562][T13372]  ? unwind_get_return_address+0x4d/0x90
[  788.142211][T13372]  ? arch_stack_walk+0xfd/0x150
[  788.147083][T13372]  ? stack_trace_save+0x118/0x1d0
[  788.152128][T13372]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  788.158133][T13372]  ? __pfx_stack_trace_save+0x10/0x10
[  788.163531][T13372]  ? mark_lock+0x9a/0x360
[  788.167875][T13372]  ? __lock_acquire+0x1397/0x2100
[  788.172915][T13372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.179017][T13372]  ? binder_get_thread+0x16e/0x6c0
[  788.184152][T13372]  ? __pfx_lock_release+0x10/0x10
[  788.189205][T13372]  ? do_raw_spin_unlock+0x13c/0x8b0
[  788.194436][T13372]  ? _raw_spin_unlock+0x28/0x50
[  788.199300][T13372]  ? binder_get_thread+0x178/0x6c0
[  788.204433][T13372]  binder_ioctl+0x436/0x1cb0
[  788.209044][T13372]  ? tomoyo_path_number_perm+0x6f9/0x860
[  788.214686][T13372]  ? __lock_acquire+0x1397/0x2100
[  788.219724][T13372]  ? tomoyo_path_number_perm+0x206/0x860
[  788.225374][T13372]  ? smack_log+0x123/0x540
[  788.229819][T13372]  ? __pfx_binder_ioctl+0x10/0x10
[  788.234866][T13372]  ? __pfx_smack_log+0x10/0x10
[  788.239657][T13372]  ? smk_access+0x4ab/0x4e0
[  788.244190][T13372]  ? smk_tskacc+0x300/0x370
[  788.248722][T13372]  ? smack_file_ioctl+0x2f7/0x3a0
[  788.253766][T13372]  ? __pfx_smack_file_ioctl+0x10/0x10
[  788.259155][T13372]  ? __fget_files+0x2a/0x410
[  788.263768][T13372]  ? __fget_files+0x2a/0x410
[  788.268376][T13372]  ? __pfx_binder_ioctl+0x10/0x10
[  788.273423][T13372]  __se_sys_ioctl+0xf5/0x170
[  788.278034][T13372]  do_syscall_64+0xf3/0x230
[  788.282559][T13372]  ? clear_bhb_loop+0x35/0x90
[  788.287256][T13372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.293173][T13372] RIP: 0033:0x7fa1cdf7ff19
[  788.297600][T13372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  788.317219][T13372] RSP: 002b:00007fa1ced47058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  788.325648][T13372] RAX: ffffffffffffffda RBX: 00007fa1ce145fa0 RCX: 00007fa1cdf7ff19
[  788.333633][T13372] RDX: 00000000200002c0 RSI: 00000000c0306201 RDI: 0000000000000005
[  788.341617][T13372] RBP: 00007fa1ced470a0 R08: 0000000000000000 R09: 0000000000000000
[  788.349599][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  788.357586][T13372] R13: 0000000000000000 R14: 00007fa1ce145fa0 R15: 00007ffe35be0e48
[  788.365580][T13372]  </TASK>
[  788.426674][T13372] binder: 13371:13372 ioctl c0306201 200002c0 returned -14
[  788.427990][T13089] team0 (unregistering): Port device team_slave_0 removed
[  788.458405][ T5876] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  788.622933][ T5876] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  788.632817][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.676478][ T5876] usb 7-1: Product: syz
[  788.680705][ T5876] usb 7-1: Manufacturer: syz
[  788.685303][ T5876] usb 7-1: SerialNumber: syz
[  788.703986][ T5876] usb 7-1: config 0 descriptor??
[  788.945338][ T5876] usb 7-1: Firmware version (0.0) predates our first public release.
[  788.956861][ T5876] usb 7-1: Please update to version 0.2 or newer
[  791.273407][ T5876] usb 7-1: USB disconnect, device number 47
[  791.423368][T13299] chnl_net:caif_netlink_parms(): no params data found
[  791.570660][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2127'.
[  791.763907][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'.
[  791.929650][T13299] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.994860][T13422] FAULT_INJECTION: forcing a failure.
[  791.994860][T13422] name failslab, interval 1, probability 0, space 0, times 0
[  792.008344][T13422] CPU: 1 UID: 0 PID: 13422 Comm: syz.1.2128 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  792.019162][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  792.029261][T13422] Call Trace:
[  792.032581][T13422]  <TASK>
[  792.035532][T13422]  dump_stack_lvl+0x241/0x360
[  792.040248][T13422]  ? __pfx_dump_stack_lvl+0x10/0x10
[  792.045477][T13422]  ? __pfx__printk+0x10/0x10
[  792.050096][T13422]  ? __kmalloc_cache_noprof+0x48/0x390
[  792.055573][T13422]  ? __pfx___might_resched+0x10/0x10
[  792.060891][T13422]  should_fail_ex+0x3b0/0x4e0
[  792.065588][T13422]  should_failslab+0xac/0x100
[  792.070294][T13422]  __kmalloc_cache_noprof+0x70/0x390
[  792.075594][T13422]  ? snd_pcm_oss_change_params_locked+0x13f/0x3d60
[  792.082106][T13422]  ? __mutex_trylock_common+0x183/0x2e0
[  792.087673][T13422]  snd_pcm_oss_change_params_locked+0x13f/0x3d60
[  792.094015][T13422]  ? __pfx___mutex_trylock_common+0x10/0x10
[  792.099933][T13422]  ? rcu_is_watching+0x15/0xb0
[  792.104715][T13422]  ? trace_contention_end+0x3c/0x120
[  792.110016][T13422]  ? __mutex_lock+0x37f/0xee0
[  792.114719][T13422]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  792.121515][T13422]  snd_pcm_oss_get_active_substream+0x1cc/0x280
[  792.127838][T13422]  snd_pcm_oss_get_formats+0xa2/0x530
[  792.133241][T13422]  ? __pfx_snd_pcm_oss_get_formats+0x10/0x10
[  792.139239][T13422]  ? __pfx___might_resched+0x10/0x10
[  792.144560][T13422]  snd_pcm_oss_set_format+0x8c/0x5d0
[  792.149862][T13422]  ? __pfx_snd_pcm_oss_set_format+0x10/0x10
[  792.155771][T13422]  ? __might_fault+0xaa/0x120
[  792.160465][T13422]  ? __might_fault+0xc6/0x120
[  792.165157][T13422]  snd_pcm_oss_ioctl+0xdd2/0xff0
[  792.170112][T13422]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  792.175618][T13422]  ? __fget_files+0x2a/0x410
[  792.180225][T13422]  ? __fget_files+0x2a/0x410
[  792.184835][T13422]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  792.190303][T13422]  __se_sys_ioctl+0xf5/0x170
[  792.194917][T13422]  do_syscall_64+0xf3/0x230
[  792.199442][T13422]  ? clear_bhb_loop+0x35/0x90
[  792.204139][T13422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.210050][T13422] RIP: 0033:0x7f9d7f77ff19
[  792.214474][T13422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  792.234131][T13422] RSP: 002b:00007f9d80558058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  792.242563][T13422] RAX: ffffffffffffffda RBX: 00007f9d7f946160 RCX: 00007f9d7f77ff19
[  792.250549][T13422] RDX: 0000000020000640 RSI: 00000000c0045005 RDI: 0000000000000003
[  792.258621][T13422] RBP: 00007f9d805580a0 R08: 0000000000000000 R09: 0000000000000000
[  792.266602][T13422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  792.274605][T13422] R13: 0000000000000000 R14: 00007f9d7f946160 R15: 00007ffdf3458f98
[  792.282628][T13422]  </TASK>
[  792.358955][T13299] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.373432][T13299] bridge_slave_0: entered allmulticast mode
[  792.396929][T13299] bridge_slave_0: entered promiscuous mode
[  792.448595][T13299] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.455768][T13299] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.578565][T13299] bridge_slave_1: entered allmulticast mode
[  792.644093][T13299] bridge_slave_1: entered promiscuous mode
[  793.059614][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2131'.
[  793.070399][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'.
[  793.088117][T13434] netlink: 'syz.8.2132': attribute type 3 has an invalid length.
[  793.550777][T13299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.562901][T13299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.700204][T13299] team0: Port device team_slave_0 added
[  793.722784][T13299] team0: Port device team_slave_1 added
[  793.784260][T13299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  793.802775][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.867197][T13299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.886050][ T5875] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  793.909883][T13299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.927469][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.986043][T13299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.055678][ T5875] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  794.069858][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.079141][ T5875] usb 2-1: Product: syz
[  794.180451][T13448] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  794.248098][T13299] hsr_slave_0: entered promiscuous mode
[  794.255171][T13299] hsr_slave_1: entered promiscuous mode
[  794.270706][T13299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  794.282942][T13299] Cannot create hsr debugfs directory
[  794.298575][ T5875] usb 2-1: Manufacturer: syz
[  794.303257][ T5875] usb 2-1: SerialNumber: syz
[  794.310816][ T5875] usb 2-1: config 0 descriptor??
[  795.050443][ T5875] usb 2-1: Firmware version (0.0) predates our first public release.
[  795.154742][ T5875] usb 2-1: Please update to version 0.2 or newer
[  795.268120][ T5875] usb 2-1: USB disconnect, device number 56
[  795.602029][T13299] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.615180][T13470] FAULT_INJECTION: forcing a failure.
[  795.615180][T13470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.638664][T13470] CPU: 0 UID: 0 PID: 13470 Comm: syz.8.2142 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  795.649518][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  795.659619][T13470] Call Trace:
[  795.662921][T13470]  <TASK>
[  795.665876][T13470]  dump_stack_lvl+0x241/0x360
[  795.670591][T13470]  ? __pfx_dump_stack_lvl+0x10/0x10
[  795.675810][T13470]  ? __pfx__printk+0x10/0x10
[  795.680424][T13470]  ? snprintf+0xda/0x120
[  795.684683][T13470]  should_fail_ex+0x3b0/0x4e0
[  795.689376][T13470]  _copy_to_user+0x31/0xb0
[  795.693843][T13470]  simple_read_from_buffer+0xca/0x150
[  795.699232][T13470]  proc_fail_nth_read+0x1e9/0x250
[  795.704275][T13470]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  795.709845][T13470]  ? rw_verify_area+0x55e/0x6f0
[  795.714719][T13470]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  795.720378][T13470]  vfs_read+0x1fc/0xb70
[  795.724564][T13470]  ? __pfx___mutex_lock+0x10/0x10
[  795.729614][T13470]  ? __pfx_vfs_read+0x10/0x10
[  795.734316][T13470]  ? __fget_files+0x2a/0x410
[  795.738939][T13470]  ? __fget_files+0x395/0x410
[  795.743632][T13470]  ? __fget_files+0x2a/0x410
[  795.748244][T13470]  ksys_read+0x18f/0x2b0
[  795.752535][T13470]  ? __pfx_ksys_read+0x10/0x10
[  795.757340][T13470]  ? do_syscall_64+0x100/0x230
[  795.762124][T13470]  ? do_syscall_64+0xb6/0x230
[  795.766825][T13470]  do_syscall_64+0xf3/0x230
[  795.771350][T13470]  ? clear_bhb_loop+0x35/0x90
[  795.776053][T13470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.781965][T13470] RIP: 0033:0x7fa1cdf7e92c
[  795.786400][T13470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  795.806409][T13470] RSP: 002b:00007fa1ced47050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  795.814840][T13470] RAX: ffffffffffffffda RBX: 00007fa1ce145fa0 RCX: 00007fa1cdf7e92c
[  795.822823][T13470] RDX: 000000000000000f RSI: 00007fa1ced470b0 RDI: 0000000000000004
[  795.830838][T13470] RBP: 00007fa1ced470a0 R08: 0000000000000000 R09: 0000000000000000
[  795.838852][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.846833][T13470] R13: 0000000000000000 R14: 00007fa1ce145fa0 R15: 00007ffe35be0e48
[  795.854832][T13470]  </TASK>
[  795.869566][T13299] 8021q: adding VLAN 0 to HW filter on device team0
[  795.891984][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.899214][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.935172][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2143'.
[  795.944346][ T4631] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.951516][ T4631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.074419][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2144'.
[  797.337499][T13493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  797.348843][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  797.364692][T13493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  798.421984][   T29] audit: type=1326 audit(1733341130.162:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13504 comm="syz.7.2151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb05bb7ff19 code=0x0
[  798.967595][T13518] sg_write: data in/out 246879826/56 bytes for SCSI command 0xeb-- guessing data in;
[  798.967595][T13518]    program syz.1.2153 not setting count and/or reply_len properly
[  799.381445][T13522] ./file0: Can't open blockdev
[  799.508176][T13299] veth0_vlan: entered promiscuous mode
[  799.611017][T12737] IPVS: starting estimator thread 0...
[  799.711435][T13530] IPVS: using max 23 ests per chain, 55200 per kthread
[  799.726382][T13299] veth1_vlan: entered promiscuous mode
[  800.169552][T13299] veth0_macvtap: entered promiscuous mode
[  800.179206][T13299] veth1_macvtap: entered promiscuous mode
[  800.197236][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.208080][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.219488][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  800.229289][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.240175][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.250418][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.261451][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.272762][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  800.554380][ T6966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.585410][ T6966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.650642][ T7038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.660058][ T7038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.939917][ T6966] bridge_slave_1: left allmulticast mode
[  800.947162][ T1205] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  800.986050][ T6966] bridge_slave_1: left promiscuous mode
[  800.992119][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.004892][ T6966] bridge_slave_0: left allmulticast mode
[  801.020059][ T6966] bridge_slave_0: left promiscuous mode
[  801.038502][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.145362][ T1205] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  801.162057][ T1205] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  801.233100][ T1205] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  801.276151][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.299335][T13545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  801.334594][ T1205] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  801.783027][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  801.814663][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  801.829255][ T9437] udevd[9437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  801.885413][ T5875] usb 2-1: USB disconnect, device number 57
[  802.029969][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  802.133345][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  802.155117][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  802.173115][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  803.856147][T13568] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  804.436207][T11087] Bluetooth: hci3: command tx timeout
[  805.721951][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  805.777115][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  805.845719][ T6966] bond0 (unregistering): Released all slaves
[  806.761430][T13550] lo speed is unknown, defaulting to 1000
[  806.775396][T13550] lo speed is unknown, defaulting to 1000
[  807.025978][T11087] Bluetooth: hci3: command tx timeout
[  807.116275][    T8] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[  807.346917][    T8] usb 7-1: device descriptor read/64, error -71
[  807.876378][    T8] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[  807.956127][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  808.046212][    T8] usb 7-1: device descriptor read/64, error -71
[  808.085707][T13607] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2178'.
[  808.098016][T13607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  808.135398][T13550] chnl_net:caif_netlink_parms(): no params data found
[  808.157565][    T8] usb usb7-port1: attempt power cycle
[  808.180594][T12734] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  808.574411][T12734] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  808.596855][T12734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.617467][    T8] usb 7-1: new full-speed USB device number 50 using dummy_hcd
[  808.625233][T12734] usb 9-1: Product: syz
[  808.638185][    T8] usb 7-1: device descriptor read/8, error -71
[  808.782206][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  808.802126][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  808.886300][    T8] usb 7-1: new full-speed USB device number 51 using dummy_hcd
[  809.087268][   T55] Bluetooth: hci3: command tx timeout
[  809.405599][T12734] usb 9-1: Manufacturer: syz
[  809.410532][T12734] usb 9-1: SerialNumber: syz
[  809.428571][T12734] usb 9-1: config 0 descriptor??
[  809.505222][    T8] usb 7-1: device descriptor read/8, error -71
[  809.553207][T12734] usb 9-1: can't set config #0, error -71
[  809.575131][T12734] usb 9-1: USB disconnect, device number 9
[  809.636190][    T8] usb usb7-port1: unable to enumerate USB device
[  809.684559][ T6966] hsr_slave_0: left promiscuous mode
[  809.826248][ T6966] hsr_slave_1: left promiscuous mode
[  809.835834][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  809.843528][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  809.966885][T13640] usb usb9: usbfs: interface 0 claimed by hub while 'syz.8.2187' resets device
[  810.744212][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  810.780935][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.137433][ T6966] veth1_macvtap: left promiscuous mode
[  811.145538][ T6966] veth0_macvtap: left promiscuous mode
[  811.181948][ T6966] veth1_vlan: left promiscuous mode
[  811.200931][   T55] Bluetooth: hci3: command tx timeout
[  811.306978][ T6966] veth0_vlan: left promiscuous mode
[  812.065951][T13657] binder: 13654:13657 ioctl c00c620f 20000340 returned -22
[  812.486082][    T8] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  812.585709][T13655] Falling back ldisc for ptm0.
[  812.683725][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2195'.
[  813.860650][T13678] usb usb8: usbfs: process 13678 (syz.6.2197) did not claim interface 0 before use
[  814.484202][T13666] syz.1.2194 (13666) used greatest stack depth: 16928 bytes left
[  814.643311][T13680] loop2: detected capacity change from 0 to 7
[  814.662669][T13680] Dev loop2: unable to read RDB block 7
[  814.682710][T13680]  loop2: unable to read partition table
[  814.689110][T13680] loop2: partition table beyond EOD, truncated
[  814.695425][T13680] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  814.699589][ T6966] team0 (unregistering): Port device team_slave_1 removed
[  814.850721][ T6966] team0 (unregistering): Port device team_slave_0 removed
[  815.283197][    T8] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  815.292751][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.313477][    T8] usb 9-1: config 0 descriptor??
[  815.331225][    T8] usb 9-1: can't set config #0, error -71
[  815.422410][    T8] usb 9-1: USB disconnect, device number 10
[  816.129088][T13691] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  816.137493][T13691] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  816.596965][T13695] Invalid ELF header type: 0 != 1
[  816.606284][T13695] 9pnet_fd: Insufficient options for proto=fd
[  817.281005][T13550] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.293738][T13550] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.326783][T13550] bridge_slave_0: entered allmulticast mode
[  817.335843][T13550] bridge_slave_0: entered promiscuous mode
[  817.555581][T13550] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.563680][T13550] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.571321][T13550] bridge_slave_1: entered allmulticast mode
[  817.578719][T13550] bridge_slave_1: entered promiscuous mode
[  817.918488][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  817.976753][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.183727][T13550] team0: Port device team_slave_0 added
[  818.282719][T13550] team0: Port device team_slave_1 added
[  819.196949][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  819.498545][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.505665][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  819.533209][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.582763][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  819.632621][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  819.658694][    C0] vkms_vblank_simulate: vblank timer overrun
[  819.868987][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.639145][T13550] hsr_slave_0: entered promiscuous mode
[  820.673207][T13550] hsr_slave_1: entered promiscuous mode
[  820.704079][T13550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  820.726381][T13550] Cannot create hsr debugfs directory
[  821.264613][T13738] nbd: illegal input index -1
[  822.375178][T13550] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.394951][T13550] 8021q: adding VLAN 0 to HW filter on device team0
[  822.407266][T13753] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2220'.
[  822.423094][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.430454][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.472872][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.480113][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.502218][T13755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.519030][T13755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.549959][T13550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  822.717071][ T5875] usb 7-1: new full-speed USB device number 52 using dummy_hcd
[  822.814395][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.889580][ T5875] usb 7-1: not running at top speed; connect to a high speed hub
[  822.914420][ T5875] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  822.925694][ T5875] usb 7-1: config 1 interface 0 has no altsetting 0
[  822.935647][ T5875] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  822.946391][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.955684][ T5875] usb 7-1: Product: 䀊
[  822.970075][ T5875] usb 7-1: Manufacturer: Є
[  822.982417][ T5875] usb 7-1: SerialNumber: ⑱㟍ಢ詼泋㠁燥౓頪㪿⾾秳⼬饟
[  823.046052][T13756] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  823.070486][T13775] netlink: 'syz.7.2224': attribute type 21 has an invalid length.
[  823.123754][T13775] netlink: 'syz.7.2224': attribute type 6 has an invalid length.
[  823.132159][T13775] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2224'.
[  823.172027][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2224'.
[  823.473810][T13776] block nbd1: shutting down sockets
[  824.166426][ T5875] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8
[  824.219274][ T5875] usb 7-1: USB disconnect, device number 52
[  824.301877][T13782] netlink: 'syz.8.2225': attribute type 21 has an invalid length.
[  824.315634][T13782] netlink: 'syz.8.2225': attribute type 6 has an invalid length.
[  824.324466][T13782] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2225'.
[  824.403595][ T5875] usblp0: removed
[  824.479614][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2225'.
[  825.377421][T13787] delete_channel: no stack
[  825.537381][   T29] audit: type=1326 audit(1733341157.282:236): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=13793 comm="syz.8.2230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1cdf7ff19 code=0x0
[  825.568352][T13796] FAULT_INJECTION: forcing a failure.
[  825.568352][T13796] name failslab, interval 1, probability 0, space 0, times 0
[  825.582471][T13796] CPU: 1 UID: 0 PID: 13796 Comm: syz.1.2231 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  825.593439][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  825.603896][T13796] Call Trace:
[  825.607218][T13796]  <TASK>
[  825.610256][T13796]  dump_stack_lvl+0x241/0x360
[  825.614995][T13796]  ? __pfx_dump_stack_lvl+0x10/0x10
[  825.620952][T13796]  ? __pfx__printk+0x10/0x10
[  825.625825][T13796]  ? __kmalloc_cache_noprof+0x48/0x390
[  825.631712][T13796]  ? __pfx___might_resched+0x10/0x10
[  825.637979][T13796]  should_fail_ex+0x3b0/0x4e0
[  825.643350][T13796]  should_failslab+0xac/0x100
[  825.648178][T13796]  __kmalloc_cache_noprof+0x70/0x390
[  825.653706][T13796]  ? tcf_proto_create+0x65/0x2b0
[  825.658998][T13796]  tcf_proto_create+0x65/0x2b0
[  825.665060][T13796]  tc_new_tfilter+0x1652/0x1af0
[  825.670160][T13796]  ? __pfx_tc_new_tfilter+0x10/0x10
[  825.675678][T13796]  ? rcu_read_unlock+0x87/0xa0
[  825.680762][T13796]  ? __dev_queue_xmit+0x1775/0x3f50
[  825.687065][T13796]  ? cap_capable+0x1b4/0x250
[  825.692695][T13796]  ? __pfx_tc_new_tfilter+0x10/0x10
[  825.698017][T13796]  rtnetlink_rcv_msg+0x791/0xcf0
[  825.703074][T13796]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  825.708235][T13796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  825.714094][T13796]  ? ref_tracker_free+0x643/0x7e0
[  825.719180][T13796]  netlink_rcv_skb+0x1e3/0x430
[  825.724013][T13796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  825.729527][T13796]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  825.735059][T13796]  ? netlink_deliver_tap+0x2e/0x1b0
[  825.740430][T13796]  netlink_unicast+0x7f6/0x990
[  825.745416][T13796]  ? __pfx_netlink_unicast+0x10/0x10
[  825.750819][T13796]  ? __virt_addr_valid+0x183/0x530
[  825.755982][T13796]  ? __check_object_size+0x48e/0x900
[  825.761749][T13796]  netlink_sendmsg+0x8e4/0xcb0
[  825.766845][T13796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.772791][T13796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.778193][T13796]  __sock_sendmsg+0x221/0x270
[  825.783038][T13796]  ____sys_sendmsg+0x52a/0x7e0
[  825.787946][T13796]  ? __pfx_____sys_sendmsg+0x10/0x10
[  825.793294][T13796]  ? __fget_files+0x2a/0x410
[  825.797950][T13796]  ? __sys_sendmmsg+0x392/0x720
[  825.802862][T13796]  ? __might_fault+0xaa/0x120
[  825.811247][T13796]  __sys_sendmmsg+0x36a/0x720
[  825.816155][T13796]  ? __pfx___sys_sendmmsg+0x10/0x10
[  825.821395][T13796]  ? __pfx_lock_release+0x10/0x10
[  825.826892][T13796]  ? kstrtouint_from_user+0x128/0x190
[  825.832686][T13796]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  825.838751][T13796]  ? ksys_write+0x22a/0x2b0
[  825.843406][T13796]  ? __pfx_lock_release+0x10/0x10
[  825.849090][T13796]  ? vfs_write+0x730/0xd30
[  825.853642][T13796]  ? __mutex_unlock_slowpath+0x21e/0x790
[  825.859628][T13796]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  825.865842][T13796]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  825.872428][T13796]  ? do_syscall_64+0x100/0x230
[  825.877227][T13796]  __x64_sys_sendmmsg+0xa0/0xb0
[  825.882103][T13796]  do_syscall_64+0xf3/0x230
[  825.886639][T13796]  ? clear_bhb_loop+0x35/0x90
[  825.891384][T13796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.897506][T13796] RIP: 0033:0x7f9d7f77ff19
[  825.901952][T13796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  825.921900][T13796] RSP: 002b:00007f9d8059a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  825.930365][T13796] RAX: ffffffffffffffda RBX: 00007f9d7f945fa0 RCX: 00007f9d7f77ff19
[  825.938375][T13796] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004
[  825.946827][T13796] RBP: 00007f9d8059a0a0 R08: 0000000000000000 R09: 0000000000000000
[  825.955020][T13796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  825.963134][T13796] R13: 0000000000000000 R14: 00007f9d7f945fa0 R15: 00007ffdf3458f98
[  825.971948][T13796]  </TASK>
[  825.988435][T13550] veth0_vlan: entered promiscuous mode
[  826.002898][T13550] veth1_vlan: entered promiscuous mode
[  826.219523][T13550] veth0_macvtap: entered promiscuous mode
[  826.266501][T13550] veth1_macvtap: entered promiscuous mode
[  826.310218][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  826.321268][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.333000][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  826.346799][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.358949][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.369416][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.380863][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.395723][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  826.914661][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2233'.
[  826.928222][T13805] FAULT_INJECTION: forcing a failure.
[  826.928222][T13805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  826.983766][T13805] CPU: 1 UID: 0 PID: 13805 Comm: syz.1.2232 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  826.995140][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  827.005626][T13805] Call Trace:
[  827.010046][T13805]  <TASK>
[  827.013039][T13805]  dump_stack_lvl+0x241/0x360
[  827.018234][T13805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  827.024466][T13805]  ? __pfx__printk+0x10/0x10
[  827.029656][T13805]  ? __pfx_lock_release+0x10/0x10
[  827.035608][T13805]  should_fail_ex+0x3b0/0x4e0
[  827.041753][T13805]  _copy_from_iter+0x21f/0x1e70
[  827.046903][T13805]  ? __virt_addr_valid+0x183/0x530
[  827.052386][T13805]  ? __pfx_lock_release+0x10/0x10
[  827.058865][T13805]  ? __alloc_skb+0x28f/0x440
[  827.063777][T13805]  ? __pfx__copy_from_iter+0x10/0x10
[  827.069753][T13805]  ? __virt_addr_valid+0x183/0x530
[  827.074923][T13805]  ? __virt_addr_valid+0x183/0x530
[  827.080272][T13805]  ? __virt_addr_valid+0x45f/0x530
[  827.085478][T13805]  ? __check_object_size+0x48e/0x900
[  827.090910][T13805]  netlink_sendmsg+0x73d/0xcb0
[  827.097685][T13805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.104371][T13805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.110969][T13805]  __sock_sendmsg+0x221/0x270
[  827.115801][T13805]  ____sys_sendmsg+0x52a/0x7e0
[  827.121237][T13805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  827.128789][T13805]  ? __fget_files+0x2a/0x410
[  827.133903][T13805]  ? __sys_sendmmsg+0x392/0x720
[  827.139355][T13805]  ? __might_fault+0xaa/0x120
[  827.144175][T13805]  __sys_sendmmsg+0x36a/0x720
[  827.149783][T13805]  ? __pfx___sys_sendmmsg+0x10/0x10
[  827.155560][T13805]  ? __pfx_lock_release+0x10/0x10
[  827.162574][T13805]  ? kstrtouint_from_user+0x128/0x190
[  827.168597][T13805]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  827.175261][T13805]  ? ksys_write+0x22a/0x2b0
[  827.179822][T13805]  ? __pfx_lock_release+0x10/0x10
[  827.184972][T13805]  ? vfs_write+0x730/0xd30
[  827.189549][T13805]  ? __mutex_unlock_slowpath+0x21e/0x790
[  827.195311][T13805]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  827.201658][T13805]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  827.208342][T13805]  ? do_syscall_64+0x100/0x230
[  827.213286][T13805]  __x64_sys_sendmmsg+0xa0/0xb0
[  827.218427][T13805]  do_syscall_64+0xf3/0x230
[  827.223732][T13805]  ? clear_bhb_loop+0x35/0x90
[  827.229394][T13805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.235588][T13805] RIP: 0033:0x7f9d7f77ff19
[  827.240146][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  827.262600][T13805] RSP: 002b:00007f9d80579058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  827.271354][T13805] RAX: ffffffffffffffda RBX: 00007f9d7f946080 RCX: 00007f9d7f77ff19
[  827.280384][T13805] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005
[  827.288875][T13805] RBP: 00007f9d805790a0 R08: 0000000000000000 R09: 0000000000000000
[  827.299249][T13805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  827.308005][T13805] R13: 0000000000000000 R14: 00007f9d7f946080 R15: 00007ffdf3458f98
[  827.316820][T13805]  </TASK>
[  827.408941][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.419965][T13088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.467080][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.475009][T13088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.719348][ T1105] bridge_slave_1: left allmulticast mode
[  827.737453][ T1105] bridge_slave_1: left promiscuous mode
[  827.743944][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.786399][T12734] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  827.936095][T12734] usb 9-1: device descriptor read/64, error -71
[  827.981433][ T1105] bridge_slave_0: left allmulticast mode
[  827.991089][ T1105] bridge_slave_0: left promiscuous mode
[  827.997871][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.176366][T12734] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  828.276360][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2239'.
[  828.326510][T12734] usb 9-1: device descriptor read/64, error -71
[  828.479146][T12734] usb usb9-port1: attempt power cycle
[  829.162333][T12734] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  830.041011][T11087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  830.053322][T11087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  830.064141][T11087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  830.076918][T11087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  830.138229][T11087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  830.146384][T11087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  831.200978][T12734] usb 9-1: device descriptor read/8, error -71
[  832.071221][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  832.109807][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  832.150995][ T1105] bond0 (unregistering): Released all slaves
[  832.196171][T13827] netlink: 'syz.6.2239': attribute type 21 has an invalid length.
[  832.219864][T13827] netlink: 'syz.6.2239': attribute type 6 has an invalid length.
[  832.235980][T13827] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2239'.
[  832.371959][T11087] Bluetooth: hci3: command tx timeout
[  832.629457][T13858] netlink: 'syz.8.2246': attribute type 10 has an invalid length.
[  832.758480][T13866] netlink: 'syz.6.2245': attribute type 10 has an invalid length.
[  832.767963][T13866] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2245'.
[  833.522482][T13866] bridge0: port 3(ipvlan1) entered blocking state
[  833.530301][T13866] bridge0: port 3(ipvlan1) entered disabled state
[  833.538777][T13866] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  833.779348][T13873] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2251'.
[  833.806209][T13873] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2251'.
[  833.842064][T13876] xt_TCPMSS: Only works on TCP SYN packets
[  833.891807][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'.
[  833.998619][T13878] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2252'.
[  834.024784][T13835] lo speed is unknown, defaulting to 1000
[  834.057809][T13881] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  834.137635][T13884] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2252'.
[  834.408769][T13835] lo speed is unknown, defaulting to 1000
[  834.505675][T11087] Bluetooth: hci3: command tx timeout
[  834.511316][T13890] netlink: 'syz.8.2255': attribute type 21 has an invalid length.
[  834.525979][T13890] netlink: 'syz.8.2255': attribute type 6 has an invalid length.
[  834.538940][T13890] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2255'.
[  834.686361][T13889] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2254'.
[  834.828800][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2255'.
[  835.283818][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2257'.
[  835.476018][ T1105] hsr_slave_0: left promiscuous mode
[  835.553907][ T1105] hsr_slave_1: left promiscuous mode
[  836.069200][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  836.246702][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  836.312085][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  836.360627][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.498360][ T1105] veth1_macvtap: left promiscuous mode
[  836.505815][ T1105] veth0_macvtap: left promiscuous mode
[  836.526134][ T1105] veth1_vlan: left promiscuous mode
[  836.533336][ T1105] veth0_vlan: left promiscuous mode
[  836.596310][T11087] Bluetooth: hci3: command tx timeout
[  838.309940][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  838.466347][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  838.684188][T11087] Bluetooth: hci3: command tx timeout
[  839.612813][T12721] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  839.893038][T12721] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  839.916043][T12721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  839.956450][T12721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  839.968297][T12721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  839.983815][T12721] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  839.996319][T12721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.101948][T13835] chnl_net:caif_netlink_parms(): no params data found
[  840.276379][T12721] usb 2-1: config 0 descriptor??
[  841.392849][T13835] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.433596][T13835] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.446005][T12737] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  841.480966][T12721] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  841.504066][T12721] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  841.516380][T13835] bridge_slave_0: entered allmulticast mode
[  841.531947][T13835] bridge_slave_0: entered promiscuous mode
[  841.574138][T13835] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.624401][T13835] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.634589][T12737] usb 7-1: Using ep0 maxpacket: 16
[  841.641388][T12737] usb 7-1: too many configurations: 83, using maximum allowed: 8
[  841.653363][T13835] bridge_slave_1: entered allmulticast mode
[  841.665255][T13835] bridge_slave_1: entered promiscuous mode
[  841.675016][T12737] usb 7-1: unable to read config index 0 descriptor/start: -61
[  841.685439][T12737] usb 7-1: can't read configurations, error -61
[  841.847273][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  841.887787][T12737] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  841.905254][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  842.020353][T13835] team0: Port device team_slave_0 added
[  842.037691][T13835] team0: Port device team_slave_1 added
[  842.066876][T12737] usb 7-1: Using ep0 maxpacket: 16
[  842.075583][T12737] usb 7-1: too many configurations: 83, using maximum allowed: 8
[  842.096767][T12737] usb 7-1: unable to read config index 0 descriptor/start: -61
[  842.105253][T12737] usb 7-1: can't read configurations, error -61
[  842.115087][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  842.122989][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.153610][T12737] usb usb7-port1: attempt power cycle
[  842.164526][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.184501][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.193503][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.223287][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.262775][T12734] usb 2-1: USB disconnect, device number 58
[  842.302422][T13835] hsr_slave_0: entered promiscuous mode
[  842.314499][T13835] hsr_slave_1: entered promiscuous mode
[  842.329163][T13835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  842.343917][T13835] Cannot create hsr debugfs directory
[  842.496421][T12737] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  842.532688][T13835] 8021q: adding VLAN 0 to HW filter on device bond0
[  842.542240][T12737] usb 7-1: Using ep0 maxpacket: 16
[  842.552826][T12737] usb 7-1: too many configurations: 83, using maximum allowed: 8
[  842.568928][T12737] usb 7-1: unable to read config index 0 descriptor/start: -61
[  842.585284][T12737] usb 7-1: can't read configurations, error -61
[  842.601377][T13835] 8021q: adding VLAN 0 to HW filter on device team0
[  842.623951][T13086] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.631943][T13086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  842.670983][T13086] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.681504][T13086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  842.716310][T12737] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  842.749716][T12737] usb 7-1: Using ep0 maxpacket: 16
[  842.761722][T12737] usb 7-1: too many configurations: 83, using maximum allowed: 8
[  842.793469][T12737] usb 7-1: unable to read config index 0 descriptor/start: -61
[  842.810805][T12737] usb 7-1: can't read configurations, error -61
[  842.833192][T12737] usb usb7-port1: unable to enumerate USB device
[  843.224222][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.455010][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'.
[  843.542107][T13985] netlink: 'syz.7.2278': attribute type 10 has an invalid length.
[  843.553443][T13985] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2278'.
[  844.449376][T13985] bridge0: port 3(ipvlan1) entered blocking state
[  844.460469][T13985] bridge0: port 3(ipvlan1) entered disabled state
[  844.473771][T13985] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  844.794357][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2281'.
[  845.854673][T13835] veth0_vlan: entered promiscuous mode
[  845.897410][T13835] veth1_vlan: entered promiscuous mode
[  845.968738][T13835] veth0_macvtap: entered promiscuous mode
[  845.996044][T12734] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  846.026986][T13835] veth1_macvtap: entered promiscuous mode
[  846.090406][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  846.112819][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.141244][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  846.196280][T12734] usb 9-1: Using ep0 maxpacket: 32
[  846.206438][T12734] usb 9-1: config 0 interface 0 has no altsetting 0
[  846.218319][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.244936][T12734] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  846.276346][T12734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.289921][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.302407][T13835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.316130][T13835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.319985][T12734] usb 9-1: config 0 descriptor??
[  846.334886][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.598953][T13088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.618237][T13088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.655116][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.666706][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.773160][T12734] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:0935.000B/input/input18
[  846.816102][T12736] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  846.895476][T12734] uclogic 0003:28BD:0935.000B: input,hidraw0: USB HID vb.51 Mouse [HID 28bd:0935] on usb-dummy_hcd.8-1/input0
[  846.984905][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  847.004444][T12736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.020886][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.031732][T12736] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  847.097725][T13086] bridge_slave_1: left allmulticast mode
[  847.120741][T12736] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  847.126307][T13086] bridge_slave_1: left promiscuous mode
[  847.158194][T13086] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.163355][T12736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.193395][T13086] bridge_slave_0: left allmulticast mode
[  847.214295][T13086] bridge_slave_0: left promiscuous mode
[  847.219083][T12736] usb 2-1: config 0 descriptor??
[  847.228817][T13086] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.141344][T14029] netlink: 'syz.6.2291': attribute type 10 has an invalid length.
[  848.150983][T14029] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2291'.
[  849.002100][T13086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  849.042470][T13086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  849.088638][T13086] bond0 (unregistering): Released all slaves
[  849.134667][T14029] bridge0: port 3(ipvlan1) entered blocking state
[  849.143756][T14029] bridge0: port 3(ipvlan1) entered disabled state
[  849.157301][T14029] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  849.360379][T12737] usb 9-1: USB disconnect, device number 15
[  849.368924][   T29] audit: type=1326 audit(1733341181.102:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  849.495281][   T29] audit: type=1326 audit(1733341181.112:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  849.596113][   T29] audit: type=1326 audit(1733341181.112:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  849.900935][T12736] usb 2-1: string descriptor 0 read error: -71
[  849.911648][T12736] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  849.922052][T12736] usb 2-1: USB disconnect, device number 59
[  849.962710][   T29] audit: type=1326 audit(1733341181.112:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.242611][   T29] audit: type=1326 audit(1733341181.112:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.343700][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  850.362552][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  850.392120][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  850.407288][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  850.456928][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  850.467667][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  850.510965][   T29] audit: type=1326 audit(1733341181.112:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.535024][    C1] vkms_vblank_simulate: vblank timer overrun
[  850.547998][T14040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19
[  850.793216][   T29] audit: type=1326 audit(1733341181.112:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.815769][    C1] vkms_vblank_simulate: vblank timer overrun
[  850.897961][   T29] audit: type=1326 audit(1733341181.112:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.930872][   T29] audit: type=1326 audit(1733341181.112:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  850.955717][   T29] audit: type=1326 audit(1733341181.112:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14030 comm="syz.6.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c3ff7ff19 code=0x50000
[  851.124090][T14048] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2296'.
[  851.133929][T14038] lo speed is unknown, defaulting to 1000
[  851.146670][T14052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2298'.
[  851.155572][T14038] lo speed is unknown, defaulting to 1000
[  851.191474][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2298'.
[  851.414981][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2297'.
[  851.417994][T14052] FAULT_INJECTION: forcing a failure.
[  851.417994][T14052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  851.476669][T14052] CPU: 0 UID: 0 PID: 14052 Comm: syz.1.2298 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  851.490148][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  851.501563][T14052] Call Trace:
[  851.505633][T14052]  <TASK>
[  851.508615][T14052]  dump_stack_lvl+0x241/0x360
[  851.514519][T14052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  851.521137][T14052]  ? __pfx__printk+0x10/0x10
[  851.527212][T14052]  ? snprintf+0xda/0x120
[  851.532251][T14052]  should_fail_ex+0x3b0/0x4e0
[  851.537358][T14052]  _copy_to_user+0x31/0xb0
[  851.543498][T14052]  simple_read_from_buffer+0xca/0x150
[  851.551123][T14052]  proc_fail_nth_read+0x1e9/0x250
[  851.557421][T14052]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  851.564895][T14052]  ? rw_verify_area+0x55e/0x6f0
[  851.570085][T14052]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  851.576052][T14052]  vfs_read+0x1fc/0xb70
[  851.580473][T14052]  ? __pfx___mutex_lock+0x10/0x10
[  851.586573][T14052]  ? __pfx_vfs_read+0x10/0x10
[  851.592579][T14052]  ? __fget_files+0x2a/0x410
[  851.599231][T14052]  ? __fget_files+0x395/0x410
[  851.604756][T14052]  ? __fget_files+0x2a/0x410
[  851.609952][T14052]  ksys_read+0x18f/0x2b0
[  851.614806][T14052]  ? __pfx_ksys_read+0x10/0x10
[  851.619997][T14052]  ? do_syscall_64+0x100/0x230
[  851.625430][T14052]  ? do_syscall_64+0xb6/0x230
[  851.631401][T14052]  do_syscall_64+0xf3/0x230
[  851.637452][T14052]  ? clear_bhb_loop+0x35/0x90
[  851.642818][T14052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.648944][T14052] RIP: 0033:0x7f9d7f77e92c
[  851.654077][T14052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  851.677506][T14052] RSP: 002b:00007f9d8059a050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  851.687501][T14052] RAX: ffffffffffffffda RBX: 00007f9d7f945fa0 RCX: 00007f9d7f77e92c
[  851.696314][T14052] RDX: 000000000000000f RSI: 00007f9d8059a0b0 RDI: 0000000000000004
[  851.705453][T14052] RBP: 00007f9d8059a0a0 R08: 0000000000000000 R09: 0000000000000000
[  851.714189][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  851.723398][T14052] R13: 0000000000000000 R14: 00007f9d7f945fa0 R15: 00007ffdf3458f98
[  851.733336][T14052]  </TASK>
[  852.559733][   T55] Bluetooth: hci3: command tx timeout
[  852.773089][T13086] hsr_slave_0: left promiscuous mode
[  852.780879][T13086] hsr_slave_1: left promiscuous mode
[  852.804669][T13086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  852.821460][T13086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  853.065352][T12737] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  853.081855][T14076] netlink: 'syz.1.2302': attribute type 10 has an invalid length.
[  853.090657][T14076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2302'.
[  853.362030][T13086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  853.376599][T12737] usb 9-1: Using ep0 maxpacket: 8
[  853.427020][T12737] usb 9-1: config 1 interface 0 altsetting 202 endpoint 0x1 has invalid maxpacket 1120, setting to 1024
[  853.520939][T13086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  853.541879][T12737] usb 9-1: config 1 interface 0 altsetting 202 bulk endpoint 0x1 has invalid maxpacket 1024
[  853.568560][T12737] usb 9-1: config 1 interface 0 altsetting 202 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  853.584478][T12737] usb 9-1: config 1 interface 0 has no altsetting 0
[  853.598646][T12737] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  853.611882][T13086] veth1_macvtap: left promiscuous mode
[  853.617978][T12737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.628072][T13086] veth0_macvtap: left promiscuous mode
[  853.634608][T13086] veth1_vlan: left promiscuous mode
[  853.641353][T12737] usb 9-1: Product: ࡃ
[  853.647268][T12737] usb 9-1: Manufacturer: 㰊
[  853.653168][T12737] usb 9-1: SerialNumber: ခ
[  853.655400][T13086] veth0_vlan: left promiscuous mode
[  853.676879][T14066] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  853.907487][T12737] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 202 proto 1 vid 0x0525 pid 0xA4A8
[  853.990325][T12737] usb 9-1: USB disconnect, device number 16
[  854.025084][T12737] usblp0: removed
[  854.386687][ T1205] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  854.708290][ T1205] usb 7-1: Using ep0 maxpacket: 8
[  854.714954][ T1205] usb 7-1: too many configurations: 65, using maximum allowed: 8
[  854.726541][   T55] Bluetooth: hci3: command tx timeout
[  855.508798][ T1205] usb 7-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c
[  855.521728][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.534814][ T1205] usb 7-1: Product: syz
[  855.544039][ T1205] usb 7-1: Manufacturer: syz
[  855.554468][ T1205] usb 7-1: SerialNumber: syz
[  855.569638][ T1205] usb 7-1: config 0 descriptor??
[  855.587484][ T1205] usb 7-1: bad CDC descriptors
[  855.834132][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2305'.
[  855.953906][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.970847][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.998879][T14090] Process accounting resumed
[  856.290163][T13086] team0 (unregistering): Port device team_slave_1 removed
[  856.561238][T13086] team0 (unregistering): Port device team_slave_0 removed
[  856.790857][   T55] Bluetooth: hci3: command tx timeout
[  857.111919][T14090] Process accounting resumed
[  858.091346][T14076] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  858.167161][T14083] bridge_slave_1: left allmulticast mode
[  858.173173][T14083] bridge_slave_1: left promiscuous mode
[  858.194019][T14083] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.214967][T14083] bridge_slave_0: left allmulticast mode
[  858.224207][T14083] bridge_slave_0: left promiscuous mode
[  858.235651][T14083] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.438000][T14105] FAULT_INJECTION: forcing a failure.
[  858.438000][T14105] name failslab, interval 1, probability 0, space 0, times 0
[  858.456741][T14105] CPU: 1 UID: 0 PID: 14105 Comm: syz.8.2310 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  858.469187][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  858.483038][T14105] Call Trace:
[  858.487084][T14105]  <TASK>
[  858.490234][T14105]  dump_stack_lvl+0x241/0x360
[  858.497361][T14105]  ? __pfx_dump_stack_lvl+0x10/0x10
[  858.504381][T14105]  ? __pfx__printk+0x10/0x10
[  858.510245][T14105]  ? kmem_cache_alloc_noprof+0x48/0x380
[  858.516728][T14105]  ? __pfx___might_resched+0x10/0x10
[  858.524880][T14105]  should_fail_ex+0x3b0/0x4e0
[  858.530252][T14105]  should_failslab+0xac/0x100
[  858.536412][T14105]  ? __kernfs_new_node+0xd8/0x870
[  858.541902][T14105]  kmem_cache_alloc_noprof+0x70/0x380
[  858.547521][T14105]  __kernfs_new_node+0xd8/0x870
[  858.553503][T14105]  ? up_write+0x1a9/0x590
[  858.559333][T14105]  ? __pfx___kernfs_new_node+0x10/0x10
[  858.568346][T14105]  ? __pfx_up_write+0x10/0x10
[  858.574149][T14105]  kernfs_new_node+0x137/0x240
[  858.579680][T14105]  __kernfs_create_file+0x49/0x2e0
[  858.586310][T14105]  sysfs_add_file_mode_ns+0x24a/0x310
[  858.592984][T14105]  internal_create_group+0x782/0x12d0
[  858.599055][T14105]  ? __pfx_internal_create_group+0x10/0x10
[  858.606934][T14105]  sysfs_create_groups+0x56/0x120
[  858.612356][T14105]  device_add_attrs+0x199/0x600
[  858.618136][T14105]  ? __pfx_device_add_attrs+0x10/0x10
[  858.624087][T14105]  ? kobject_put+0x446/0x480
[  858.629960][T14105]  device_add+0x576/0xbf0
[  858.634920][T14105]  ? device_initialize+0x266/0x460
[  858.641777][T14105]  wakeup_source_sysfs_add+0x1aa/0x270
[  858.648858][T14105]  wakeup_source_register+0x171/0x250
[  858.655602][T14105]  ep_insert+0xd99/0x1ab0
[  858.661090][T14105]  ? __pfx_ep_insert+0x10/0x10
[  858.667830][T14105]  ? __fget_files+0x2a/0x410
[  858.673863][T14105]  ? bpf_lsm_capable+0x9/0x10
[  858.679552][T14105]  do_epoll_ctl+0x8bc/0xf80
[  858.685253][T14105]  __x64_sys_epoll_ctl+0x161/0x1a0
[  858.691806][T14105]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  858.699062][T14105]  ? do_syscall_64+0x100/0x230
[  858.706784][T14105]  ? do_syscall_64+0xb6/0x230
[  858.713043][T14105]  do_syscall_64+0xf3/0x230
[  858.718763][T14105]  ? clear_bhb_loop+0x35/0x90
[  858.724189][T14105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.731713][T14105] RIP: 0033:0x7fa1cdf7ff19
[  858.737573][T14105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  858.761144][T14105] RSP: 002b:00007fa1ced47058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  858.771621][T14105] RAX: ffffffffffffffda RBX: 00007fa1ce145fa0 RCX: 00007fa1cdf7ff19
[  858.780929][T14105] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003
[  858.789744][T14105] RBP: 00007fa1ced470a0 R08: 0000000000000000 R09: 0000000000000000
[  858.797958][T14105] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002
[  858.807109][T14105] R13: 0000000000000000 R14: 00007fa1ce145fa0 R15: 00007ffe35be0e48
[  858.816502][T14105]  </TASK>
[  858.891632][   T55] Bluetooth: hci3: command tx timeout
[  858.932217][ T5875] usb 7-1: USB disconnect, device number 57
[  858.948723][T14038] chnl_net:caif_netlink_parms(): no params data found
[  859.320502][T14102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2309'.
[  859.428113][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2309'.
[  860.019953][T14131] overlayfs: conflicting options: metacopy=off,verity=require
[  860.080002][T14038] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.118214][T14038] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.177187][T14038] bridge_slave_0: entered allmulticast mode
[  860.213188][T14038] bridge_slave_0: entered promiscuous mode
[  860.343942][T14038] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.353718][T14038] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.380786][T14038] bridge_slave_1: entered allmulticast mode
[  860.426125][T14038] bridge_slave_1: entered promiscuous mode
[  860.467446][T14144] netlink: 'syz.8.2320': attribute type 10 has an invalid length.
[  860.476881][T14144] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2320'.
[  860.740967][T14144] ipvlan1: entered promiscuous mode
[  860.747058][T14144] ipvlan1: entered allmulticast mode
[  860.753503][T14144] veth0_vlan: entered allmulticast mode
[  860.769120][T14144] bridge0: port 3(ipvlan1) entered blocking state
[  860.777640][T14144] bridge0: port 3(ipvlan1) entered disabled state
[  860.794096][T14144] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  860.838178][T14145] tap0: tun_chr_ioctl cmd 1074025672
[  861.084057][T14145] tap0: ignored: set checksum enabled
[  862.137569][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.245723][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.864525][T14038] team0: Port device team_slave_0 added
[  863.499477][T14038] team0: Port device team_slave_1 added
[  864.382374][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.429044][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  864.877528][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.085313][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.121753][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.292619][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.516827][T14191] netlink: 'syz.6.2331': attribute type 10 has an invalid length.
[  866.524821][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2331'.
[  866.751766][T14191] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  866.861694][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'.
[  866.872476][T14198] nbd: must specify a device to reconfigure
[  867.468076][T14038] hsr_slave_0: entered promiscuous mode
[  867.525676][T14038] hsr_slave_1: entered promiscuous mode
[  867.555359][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  867.582453][T14200] netlink: 'syz.7.2334': attribute type 2 has an invalid length.
[  867.601707][T14038] Cannot create hsr debugfs directory
[  867.614815][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2335'.
[  868.155006][T14202] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  868.416866][T14222] netlink: 'syz.8.2339': attribute type 21 has an invalid length.
[  868.429874][T14222] netlink: 'syz.8.2339': attribute type 6 has an invalid length.
[  868.439458][T14222] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2339'.
[  868.593282][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2339'.
[  870.260861][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  870.275545][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  870.321845][T14038] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.361167][T14038] 8021q: adding VLAN 0 to HW filter on device team0
[  870.437601][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.448673][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.497911][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.505441][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.819947][T14254] netlink: 'syz.1.2345': attribute type 10 has an invalid length.
[  870.830190][T14254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2345'.
[  870.844300][T14254] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  872.047586][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2350'.
[  872.080611][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2350'.
[  872.155200][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.226178][T12721] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  872.350822][T14272] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2352'.
[  872.367038][T12721] usb 2-1: device descriptor read/64, error -71
[  872.646187][T12721] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  872.829672][T12721] usb 2-1: device descriptor read/64, error -71
[  873.795122][   T29] kauditd_printk_skb: 1088 callbacks suppressed
[  873.795158][   T29] audit: type=1800 audit(1733341205.512:1335): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2353" name="bus" dev="overlay" ino=991 res=0 errno=0
[  874.125593][T12721] usb usb2-port1: attempt power cycle
[  874.430662][T14283] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2355'.
[  874.466121][T12721] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  874.505044][T14038] veth0_vlan: entered promiscuous mode
[  874.513591][T12721] usb 2-1: device descriptor read/8, error -71
[  874.558622][T14283] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2355'.
[  874.644971][T14038] veth1_vlan: entered promiscuous mode
[  874.685423][T14038] veth0_macvtap: entered promiscuous mode
[  874.699899][T14038] veth1_macvtap: entered promiscuous mode
[  874.847343][T12721] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  874.878476][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  874.901660][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  874.931959][T12721] usb 2-1: device descriptor read/8, error -71
[  874.982083][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.048097][T12721] usb usb2-port1: unable to enumerate USB device
[  875.068961][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.106110][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.135059][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  875.186042][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  875.268662][T14306] netlink: 'syz.1.2360': attribute type 10 has an invalid length.
[  875.279637][T14306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2360'.
[  875.374586][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.823954][T14306] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  876.191822][T14315] IPv4: Oversized IP packet from 172.20.20.24
[  876.201821][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  876.210599][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  876.325305][ T6966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.374148][ T6966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.421238][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.432271][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.567033][T12721] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  876.889976][T12721] usb 2-1: device descriptor read/64, error -71
[  876.918212][ T4631] bridge_slave_1: left allmulticast mode
[  876.933290][ T4631] bridge_slave_1: left promiscuous mode
[  876.955334][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.989065][ T4631] bridge_slave_0: left allmulticast mode
[  877.007486][ T4631] bridge_slave_0: left promiscuous mode
[  877.032387][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.136595][T12721] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  877.288912][T12721] usb 2-1: device descriptor read/64, error -71
[  877.407342][T12721] usb usb2-port1: attempt power cycle
[  877.876507][T12721] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  877.924723][T12721] usb 2-1: device descriptor read/8, error -71
[  878.090672][T11087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  878.129488][T11087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  878.165334][T11087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  878.176831][T12721] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  878.191695][T11087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  878.215094][T11087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  878.223753][T12721] usb 2-1: device descriptor read/8, error -71
[  878.241218][T11087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  878.296654][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2371'.
[  878.308125][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2371'.
[  878.358038][T12721] usb usb2-port1: unable to enumerate USB device
[  878.431259][ T4631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  878.466221][ T4631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  878.484977][ T4631] bond0 (unregistering): Released all slaves
[  878.527153][T14343] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2373'.
[  878.596147][T12734] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  878.762052][T12734] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  878.786089][T12734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.801693][T12734] usb 7-1: Product: syz
[  878.817103][T12734] usb 7-1: Manufacturer: syz
[  878.822759][T12734] usb 7-1: SerialNumber: syz
[  878.850793][T12734] usb 7-1: config 0 descriptor??
[  878.878374][T14337] lo speed is unknown, defaulting to 1000
[  878.937164][T14337] lo speed is unknown, defaulting to 1000
[  879.616050][T12736] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  879.776042][T12736] usb 9-1: Using ep0 maxpacket: 16
[  879.787421][T12736] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.803359][T12736] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.819204][T12736] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  879.905764][T12736] usb 9-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  879.930575][T12736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.962430][T12734] usb 7-1: Firmware version (0.0) predates our first public release.
[  879.989223][T12734] usb 7-1: Please update to version 0.2 or newer
[  880.002457][T12736] usb 9-1: config 0 descriptor??
[  880.104808][ T4631] hsr_slave_0: left promiscuous mode
[  880.176743][ T4631] hsr_slave_1: left promiscuous mode
[  880.209811][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  880.259851][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  880.297463][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.345336][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.357283][T11087] Bluetooth: hci3: command tx timeout
[  880.478146][T12736] elecom 0003:056E:00FC.000C: unknown main item tag 0x0
[  880.492894][ T4631] veth1_macvtap: left promiscuous mode
[  880.506618][T12736] elecom 0003:056E:00FC.000C: unknown main item tag 0x0
[  880.516647][T12736] elecom 0003:056E:00FC.000C: unknown main item tag 0x0
[  880.527372][T12736] elecom 0003:056E:00FC.000C: unknown main item tag 0x0
[  880.536654][T12736] elecom 0003:056E:00FC.000C: unknown main item tag 0x0
[  880.565543][ T4631] veth0_macvtap: left promiscuous mode
[  880.577430][ T4631] veth1_vlan: left promiscuous mode
[  880.609559][T12736] elecom 0003:056E:00FC.000C: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.8-1/input0
[  880.625258][ T4631] veth0_vlan: left promiscuous mode
[  880.702664][T12736] usb 9-1: USB disconnect, device number 17
[  881.858787][ T4631] team0 (unregistering): Port device team_slave_1 removed
[  881.965324][ T4631] team0 (unregistering): Port device team_slave_0 removed
[  882.363692][T12736] usb 7-1: USB disconnect, device number 58
[  882.395899][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  882.438332][T11087] Bluetooth: hci3: command tx timeout
[  882.666015][T14377] netlink: 'syz.7.2382': attribute type 10 has an invalid length.
[  883.081830][    C0] vkms_vblank_simulate: vblank timer overrun
[  883.471479][T14367] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2379'.
[  883.483953][T14367] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  883.909852][T14337] chnl_net:caif_netlink_parms(): no params data found
[  883.989966][T14388] syz.8.2386 (14388): drop_caches: 2
[  884.703353][T11087] Bluetooth: hci3: command tx timeout
[  884.900994][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'.
[  884.911400][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2391'.
[  886.756023][T11087] Bluetooth: hci3: command tx timeout
[  887.387878][T14431] trusted_key: encrypted_key: insufficient parameters specified
[  887.409826][T14431] openvswitch: netlink: Message has 1 unknown bytes.
[  888.392643][T14429] sch_tbf: burst 65535 is lower than device lo mtu (65550) !
[  888.491239][T14337] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.506311][T14337] bridge0: port 1(bridge_slave_0) entered disabled state
[  888.525686][T14337] bridge_slave_0: entered allmulticast mode
[  888.807523][T14337] bridge_slave_0: entered promiscuous mode
[  888.816495][T14337] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.824124][T14337] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.851305][T14337] bridge_slave_1: entered allmulticast mode
[  888.859516][T14337] bridge_slave_1: entered promiscuous mode
[  888.988979][T14337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  889.031735][T14337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  889.134465][T14337] team0: Port device team_slave_0 added
[  889.156418][T12736] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  889.169462][T14337] team0: Port device team_slave_1 added
[  889.212642][T14337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  889.220608][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  889.263846][T14337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  889.284837][T14337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  889.300178][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  889.326007][T12736] usb 7-1: Using ep0 maxpacket: 16
[  889.327463][    C0] vkms_vblank_simulate: vblank timer overrun
[  889.340281][T12736] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.352385][T14337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  889.365729][T12736] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  889.398909][T12736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.450103][T12736] usb 7-1: config 0 descriptor??
[  891.507119][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2406'.
[  891.517583][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2406'.
[  891.562269][T14337] hsr_slave_0: entered promiscuous mode
[  891.710025][T14337] hsr_slave_1: entered promiscuous mode
[  891.824204][T14337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  891.985408][T12736] corsair-psu 0003:1B1C:1C0D.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.6-1/input0
[  891.995968][T14337] Cannot create hsr debugfs directory
[  892.106797][T12736] corsair-psu 0003:1B1C:1C0D.000D: unable to initialize device (-38)
[  892.210389][T14460] input: syz1 as /devices/virtual/input/input20
[  892.564814][T12736] corsair-psu 0003:1B1C:1C0D.000D: probe with driver corsair-psu failed with error -38
[  892.586378][T12736] usb 7-1: USB disconnect, device number 59
[  892.817142][T12738] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  892.864599][T14466] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2409'.
[  892.906875][T14337] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.934757][T14337] 8021q: adding VLAN 0 to HW filter on device team0
[  892.955947][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.963183][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.977146][T13086] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.984438][T13086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.999887][T12738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.012824][T12738] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  893.024752][T12738] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  893.034407][T12738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.045400][T12738] usb 2-1: Product: syz
[  893.051740][T12738] usb 2-1: Manufacturer: syz
[  893.068409][T12738] usb 2-1: SerialNumber: syz
[  893.085997][T12738] r8152-cfgselector 2-1: Unknown version 0x0000
[  893.092872][T12738] r8152-cfgselector 2-1: config 0 descriptor??
[  893.136172][T12736] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  893.296029][T12736] usb 9-1: Using ep0 maxpacket: 16
[  893.314163][T14337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  893.530000][T12736] usb 9-1: config index 0 descriptor too short (expected 16456, got 72)
[  893.538593][T12736] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.548932][T12736] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  893.560493][T12736] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  893.570042][T12736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.578608][T12736] usb 9-1: Product: syz
[  893.583156][T12736] usb 9-1: Manufacturer: syz
[  893.588223][T12738] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  893.645279][T14485] FAULT_INJECTION: forcing a failure.
[  893.645279][T14485] name failslab, interval 1, probability 0, space 0, times 0
[  893.658253][T14485] CPU: 1 UID: 0 PID: 14485 Comm: syz.1.2407 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  893.669230][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  893.679510][T14485] Call Trace:
[  893.683353][T14485]  <TASK>
[  893.686323][T14485]  dump_stack_lvl+0x241/0x360
[  893.691152][T14485]  ? __pfx_dump_stack_lvl+0x10/0x10
[  893.696617][T14485]  ? __pfx__printk+0x10/0x10
[  893.701458][T14485]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  893.707495][T14485]  ? __pfx___might_resched+0x10/0x10
[  893.712922][T14485]  should_fail_ex+0x3b0/0x4e0
[  893.717662][T14485]  should_failslab+0xac/0x100
[  893.722407][T14485]  kmem_cache_alloc_node_noprof+0x77/0x380
[  893.728303][T14485]  ? __alloc_skb+0x1c3/0x440
[  893.732953][T14485]  __alloc_skb+0x1c3/0x440
[  893.737416][T14485]  ? __pfx___alloc_skb+0x10/0x10
[  893.743094][T14485]  ? netlink_autobind+0xd6/0x2f0
[  893.748073][T14485]  ? netlink_autobind+0x2b0/0x2f0
[  893.753139][T14485]  netlink_sendmsg+0x638/0xcb0
[  893.757951][T14485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  893.763554][T14485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  893.769223][T14485]  __sock_sendmsg+0x221/0x270
[  893.773964][T14485]  ____sys_sendmsg+0x52a/0x7e0
[  893.778867][T14485]  ? __pfx_____sys_sendmsg+0x10/0x10
[  893.784216][T14485]  __sys_sendmsg+0x269/0x350
[  893.788857][T14485]  ? __pfx___sys_sendmsg+0x10/0x10
[  893.794048][T14485]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  893.800424][T14485]  ? do_syscall_64+0x100/0x230
[  893.805273][T14485]  ? do_syscall_64+0xb6/0x230
[  893.810019][T14485]  do_syscall_64+0xf3/0x230
[  893.814751][T14485]  ? clear_bhb_loop+0x35/0x90
[  893.819485][T14485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.825447][T14485] RIP: 0033:0x7f9d7f77ff19
[  893.829900][T14485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  893.849636][T14485] RSP: 002b:00007f9d80558058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  893.858092][T14485] RAX: ffffffffffffffda RBX: 00007f9d7f946160 RCX: 00007f9d7f77ff19
[  893.866102][T14485] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000008
[  893.874107][T14485] RBP: 00007f9d805580a0 R08: 0000000000000000 R09: 0000000000000000
[  893.882120][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  893.890137][T14485] R13: 0000000000000000 R14: 00007f9d7f946160 R15: 00007ffdf3458f98
[  893.898188][T14485]  </TASK>
[  893.916696][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2407'.
[  894.131249][T12736] usb 9-1: SerialNumber: syz
[  894.139434][T12736] usb 9-1: config 0 descriptor??
[  894.195649][T12738] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  894.206979][T12738] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  894.224593][T12738] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  894.238657][T12738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.256917][T14337] veth0_vlan: entered promiscuous mode
[  894.266921][T12738] usb 7-1: Product: syz
[  894.274206][T14337] veth1_vlan: entered promiscuous mode
[  894.280286][T12738] usb 7-1: Manufacturer: syz
[  894.286027][T12738] usb 7-1: SerialNumber: syz
[  894.301833][T12738] r8152-cfgselector 7-1: Unknown version 0x0000
[  894.309081][T12738] r8152-cfgselector 7-1: config 0 descriptor??
[  894.343311][T14337] veth0_macvtap: entered promiscuous mode
[  894.357523][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  894.370528][T14337] veth1_macvtap: entered promiscuous mode
[  894.371666][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  894.387256][T14337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  894.398050][T14337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.409510][T14337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  894.426674][T14337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  894.437977][T14337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.448519][T14337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  894.459430][T14337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  894.471165][T14337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  894.501952][ T1205] usb 9-1: USB disconnect, device number 18
[  894.702935][T13088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.740727][T13088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.826011][T13088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.850680][T13088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.019429][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2412'.
[  895.737562][ T5875] r8152-cfgselector 2-1: USB disconnect, device number 69
[  896.073948][ T5896] bridge_slave_1: left allmulticast mode
[  896.089759][ T5896] bridge_slave_1: left promiscuous mode
[  896.239898][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.812982][    T8] r8152-cfgselector 7-1: USB disconnect, device number 60
[  896.927070][ T5896] bridge_slave_0: left allmulticast mode
[  896.932892][ T5896] bridge_slave_0: left promiscuous mode
[  896.938903][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.825026][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  897.843293][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  897.863803][ T5896] bond0 (unregistering): Released all slaves
[  898.025760][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2417'.
[  898.074058][T14508] netlink: 'syz.8.2418': attribute type 10 has an invalid length.
[  898.104643][    T8] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0
[  898.131525][    T8] hid-generic 0000:0003:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  898.377880][T14508] syz_tun: entered promiscuous mode
[  898.406377][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  898.412543][T14508] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  898.425600][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  898.429954][T14512] ALSA: mixer_oss: invalid OSS volume 'u'
[  898.440566][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  898.451868][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  898.463458][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  898.471640][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  898.505307][T14511] bond0: entered allmulticast mode
[  898.512400][T14511] rose0: entered allmulticast mode
[  898.688043][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2423'.
[  898.698971][T14525] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2423'.
[  898.726052][ T5875] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  898.842503][T14521] lo speed is unknown, defaulting to 1000
[  898.891750][ T5875] usb 7-1: Using ep0 maxpacket: 32
[  898.907793][ T5875] usb 7-1: config 0 has an invalid interface number: 56 but max is 0
[  898.918859][ T5875] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  898.951019][ T5875] usb 7-1: config 0 has no interface number 0
[  898.951370][T14517] lo speed is unknown, defaulting to 1000
[  898.959554][ T5875] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  898.967020][T14521] lo speed is unknown, defaulting to 1000
[  898.979976][T12736] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  898.992495][ T5875] usb 7-1: config 0 interface 56 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  899.003571][ T5875] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  899.036196][T14517] lo speed is unknown, defaulting to 1000
[  899.074675][ T5875] usb 7-1: config 0 interface 56 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[  899.111483][ T5875] usb 7-1: config 0 interface 56 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  899.137628][T12736] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  899.167824][T12736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.182363][ T5875] usb 7-1: config 0 interface 56 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  899.208388][T12736] usb 9-1: Product: syz
[  899.214090][T12736] usb 9-1: Manufacturer: syz
[  899.230027][ T5875] usb 7-1: config 0 interface 56 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  899.253018][T12736] usb 9-1: SerialNumber: syz
[  899.258390][ T5875] usb 7-1: config 0 interface 56 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  899.273837][T12736] usb 9-1: config 0 descriptor??
[  899.280506][ T5875] usb 7-1: New USB device found, idVendor=1c9e, idProduct=7605, bcdDevice=d0.0c
[  899.294412][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.309634][ T5875] usb 7-1: config 0 descriptor??
[  899.316426][T14512] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  899.329628][ T5875] option 7-1:0.56: GSM modem (1-port) converter detected
[  899.497462][T12736] usb 9-1: Firmware version (0.0) predates our first public release.
[  899.512074][T12736] usb 9-1: Please update to version 0.2 or newer
[  899.737104][ T5875] usb 7-1: USB disconnect, device number 61
[  899.801466][ T5875] option 7-1:0.56: device disconnected
[  899.818733][T12736] usb 9-1: USB disconnect, device number 19
[  899.972703][ T5896] hsr_slave_0: left promiscuous mode
[  900.016807][ T5896] hsr_slave_1: left promiscuous mode
[  900.086386][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  900.094167][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  900.166928][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  900.195271][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  900.346140][T14547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2428'.
[  900.355003][ T5896] veth1_macvtap: left promiscuous mode
[  900.365962][ T5896] veth0_macvtap: left promiscuous mode
[  900.389874][ T5896] veth1_vlan: left promiscuous mode
[  900.395257][ T5896] veth0_vlan: left promiscuous mode
[  900.526166][T11087] Bluetooth: hci3: command tx timeout
[  902.276109][    T8] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  902.446244][    T8] usb 7-1: Using ep0 maxpacket: 32
[  902.490911][    T8] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=e2.de
[  902.515965][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.544702][    T8] usb 7-1: Product: syz
[  902.565573][    T8] usb 7-1: Manufacturer: syz
[  902.575292][    T8] usb 7-1: SerialNumber: syz
[  902.616694][    T8] usb 7-1: config 0 descriptor??
[  902.616759][T11087] Bluetooth: hci3: command tx timeout
[  902.631057][    T8] CoreChips 7-1:0.0: probe with driver CoreChips failed with error -22
[  902.651104][ T5896] team0 (unregistering): Port device team_slave_1 removed
[  902.807115][ T5896] team0 (unregistering): Port device team_slave_0 removed
[  902.892580][T14573] loop9: detected capacity change from 0 to 7
[  903.955253][T14569] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN PTI
[  903.967999][T14569] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]
[  903.976532][T14569] CPU: 1 UID: 0 PID: 14569 Comm: syz.7.2433 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  903.987779][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  903.997942][T14569] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40
[  904.003899][T14569] Code: 20 08 00 00 e8 ce fa 2b fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 9e a5 74 f8 48 8b 03 48 89 5c 24
[  904.025178][T14569] RSP: 0018:ffffc900047c6920 EFLAGS: 00010203
[  904.031636][T14569] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000
[  904.039857][T14569] RDX: 0000000000001000 RSI: ffffffff8c5e9080 RDI: ffffffff8c5e9040
[  904.048281][T14569] RBP: ffffc900047c6a30 R08: 0000000000000920 R09: 00000000ffffffff
[  904.057500][T14569] R10: dffffc0000000000 R11: fffffbfff203036f R12: dffffc0000000000
[  904.065978][T14569] R13: 1ffff920008f8d34 R14: ffff88807054c126 R15: 1ffff920008f8d30
[  904.074063][T14569] FS:  00007fb05ca256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  904.083014][T14569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  904.089618][T14569] CR2: 00007f6b98c00020 CR3: 000000006e614000 CR4: 00000000003526f0
[  904.097890][T14569] Call Trace:
[  904.101369][T14569]  <TASK>
[  904.104335][T14569]  ? __die_body+0x5f/0xb0
[  904.108821][T14569]  ? die_addr+0xb0/0xe0
[  904.113001][T14569]  ? exc_general_protection+0x3dd/0x5d0
[  904.118698][T14569]  ? asm_exc_general_protection+0x26/0x30
[  904.124661][T14569]  ? dev_prep_valid_name+0x3e3/0xa40
[  904.130352][T14569]  ? __pfx_dev_prep_valid_name+0x10/0x10
[  904.136024][T14569]  register_netdevice+0x542/0x1b00
[  904.141343][T14569]  ? trace_kmalloc+0x1f/0xd0
[  904.145988][T14569]  ? validate_linkmsg+0x828/0xa40
[  904.151093][T14569]  ? __pfx__get_random_bytes+0x10/0x10
[  904.156611][T14569]  ? __pfx_register_netdevice+0x10/0x10
[  904.162376][T14569]  ? dev_addr_mod+0xbd/0x330
[  904.167095][T14569]  ? __asan_memset+0x23/0x50
[  904.171712][T14569]  ? netif_inherit_tso_max+0x1f3/0x340
[  904.177392][T14569]  veth_newlink+0x455/0xc10
[  904.181963][T14569]  ? __pfx_veth_newlink+0x10/0x10
[  904.187037][T14569]  ? netlink_rcv_skb+0x1e3/0x430
[  904.192016][T14569]  ? netlink_unicast+0x7f6/0x990
[  904.197151][T14569]  ? netlink_sendmsg+0x8e4/0xcb0
[  904.202114][T14569]  ? __sock_sendmsg+0x221/0x270
[  904.207019][T14569]  ? ____sys_sendmsg+0x52a/0x7e0
[  904.212154][T14569]  ? do_syscall_64+0xf3/0x230
[  904.216945][T14569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.223411][T14569]  ? alloc_netdev_mqs+0xcd0/0x1080
[  904.228569][T14569]  ? rtnl_create_link+0x91c/0xc20
[  904.233621][T14569]  ? __pfx_veth_newlink+0x10/0x10
[  904.238889][T14569]  rtnl_newlink_create+0x2df/0xa30
[  904.244047][T14569]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  904.249785][T14569]  ? ns_capable+0x8a/0xf0
[  904.254469][T14569]  rtnl_newlink+0x17dd/0x24f0
[  904.259913][T14569]  ? __pfx_rtnl_newlink+0x10/0x10
[  904.265316][T14569]  ? __netlink_deliver_tap+0x56b/0x7f0
[  904.271449][T14569]  ? __pfx_validate_chain+0x10/0x10
[  904.277138][T14569]  ? __sock_sendmsg+0x221/0x270
[  904.282307][T14569]  ? ____sys_sendmsg+0x52a/0x7e0
[  904.287376][T14569]  ? __sys_sendmsg+0x269/0x350
[  904.292167][T14569]  ? do_syscall_64+0xf3/0x230
[  904.297039][T14569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.303341][T14569]  ? __pfx_lock_release+0x10/0x10
[  904.308405][T14569]  ? cap_capable+0x1b4/0x250
[  904.313056][T14569]  ? __pfx_rtnl_newlink+0x10/0x10
[  904.318843][T14569]  rtnetlink_rcv_msg+0x791/0xcf0
[  904.325296][T14569]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  904.331574][T14569]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  904.339119][T14569]  ? ref_tracker_free+0x643/0x7e0
[  904.344531][T14569]  netlink_rcv_skb+0x1e3/0x430
[  904.349375][T14569]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  904.355857][T14569]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  904.361644][T14569]  ? netlink_deliver_tap+0x2e/0x1b0
[  904.368141][T14569]  netlink_unicast+0x7f6/0x990
[  904.373905][T14569]  ? __pfx_netlink_unicast+0x10/0x10
[  904.380348][T14569]  ? __virt_addr_valid+0x183/0x530
[  904.386880][T14569]  ? __check_object_size+0x48e/0x900
[  904.392593][T14569]  netlink_sendmsg+0x8e4/0xcb0
[  904.398184][T14569]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.404136][T14569]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.410011][T14569]  __sock_sendmsg+0x221/0x270
[  904.414911][T14569]  ____sys_sendmsg+0x52a/0x7e0
[  904.419841][T14569]  ? __pfx_____sys_sendmsg+0x10/0x10
[  904.425556][T14569]  ? __fget_files+0x2a/0x410
[  904.430309][T14569]  ? __fget_files+0x2a/0x410
[  904.436473][T14569]  __sys_sendmsg+0x269/0x350
[  904.441460][T14569]  ? __pfx___sys_sendmsg+0x10/0x10
[  904.446627][T14569]  ? bpf_raw_tracepoint_open+0xbc/0x1f0
[  904.452397][T14569]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  904.458769][T14569]  ? do_syscall_64+0x100/0x230
[  904.463656][T14569]  ? do_syscall_64+0xb6/0x230
[  904.468492][T14569]  do_syscall_64+0xf3/0x230
[  904.473114][T14569]  ? clear_bhb_loop+0x35/0x90
[  904.477831][T14569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.484390][T14569] RIP: 0033:0x7fb05bb7ff19
[  904.489727][T14569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.510425][T14569] RSP: 002b:00007fb05ca25058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.519419][T14569] RAX: ffffffffffffffda RBX: 00007fb05bd45fa0 RCX: 00007fb05bb7ff19
[  904.527741][T14569] RDX: 0000000000000800 RSI: 0000000020000280 RDI: 0000000000000003
[  904.536938][T14569] RBP: 00007fb05bbf3986 R08: 0000000000000000 R09: 0000000000000000
[  904.545801][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.555478][T14569] R13: 0000000000000000 R14: 00007fb05bd45fa0 R15: 00007fff09409dc8
[  904.565898][T14569]  </TASK>
[  904.569023][T14569] Modules linked in:
[  904.574272][T14569] ---[ end trace 0000000000000000 ]---
[  904.586992][T14569] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40
[  904.592982][T14569] Code: 20 08 00 00 e8 ce fa 2b fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 9e a5 74 f8 48 8b 03 48 89 5c 24
[  904.619917][T14569] RSP: 0018:ffffc900047c6920 EFLAGS: 00010203
[  904.628711][T14569] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000
[  904.642682][T14569] RDX: 0000000000001000 RSI: ffffffff8c5e9080 RDI: ffffffff8c5e9040
[  904.655679][T14569] RBP: ffffc900047c6a30 R08: 0000000000000920 R09: 00000000ffffffff
[  904.664668][T14569] R10: dffffc0000000000 R11: fffffbfff203036f R12: dffffc0000000000
[  904.673526][T14569] R13: 1ffff920008f8d34 R14: ffff88807054c126 R15: 1ffff920008f8d30
[  904.682058][T11087] Bluetooth: hci3: command tx timeout
[  904.688389][T14569] FS:  00007fb05ca256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  904.697705][T14569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  904.704375][T14569] CR2: 00007f9d7f90d178 CR3: 000000006e614000 CR4: 00000000003526f0
[  904.712540][T14569] Kernel panic - not syncing: Fatal exception
[  904.719044][T14569] Kernel Offset: disabled
[  904.723408][T14569] Rebooting in 86400 seconds..