last executing test programs:

25m37.592391431s ago: executing program 3 (id=976):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0)

25m37.439877302s ago: executing program 3 (id=977):
syz_open_dev$usbfs(&(0x7f0000000100), 0x78, 0x181280)
r0 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00')
r1 = openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
write$binfmt_script(r1, &(0x7f0000002380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100b)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412aa000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x24a483, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
connect(r6, &(0x7f0000000240)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x80)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r10, 0xae9a)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)

25m36.773268984s ago: executing program 4 (id=978):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x40040000, 0xe, 0x3ff, 0x14})
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001440)="d5", 0x1}], 0x1}}], 0x1, 0x890)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001)
socket$inet6(0x10, 0x2, 0x4)

25m36.761401963s ago: executing program 2 (id=979):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000500)={0x0, 0x3979, 0x200, 0x200000, 0x1b0}, &(0x7f0000000100), &(0x7f0000000580))
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r1, 0x101)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xce)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x4, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c44ee1e9efc656176653a392d4e07"])
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

25m35.586766684s ago: executing program 3 (id=983):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8000000)
semget$private(0x0, 0x3, 0x0)
semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'r\x00'}, 0x18, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4ea3, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff8}}, 0x9, 0x9}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x26e1, 0x0)
ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
mount_setattr(r3, &(0x7f0000000000)='./file0\x00', 0x8100, &(0x7f00000001c0)={0x82, 0x80, 0xa0000, {r4}}, 0x20)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0)

25m35.582602334s ago: executing program 0 (id=984):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'bond0\x00', @local})
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0)
close(r0)
syz_open_dev$dri(&(0x7f0000000000), 0xc43, 0x180)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000440), &(0x7f0000000300), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000180)={0x0, 0x80000001, 0x9, 0xfffffff8, 0x2, [], [0x4, 0x7, 0x5, 0xfffffffc], [0x3, 0x6, 0x200, 0x9], [0x1ff, 0x0, 0x10001, 0x10001]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280))
close_range(r1, r1, 0x2)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1})
close(0xffffffffffffffff)
pipe2(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(0xffffffffffffffff, 0x3513, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0})

25m35.538676388s ago: executing program 4 (id=985):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x2, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d", 0x0, 0xfffffff9})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000080), &(0x7f0000000800)=@tcp=r2}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000000080)=""/156, 0x9c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0xfc, 0x3ee7}, {0x20, 0x0, 0xfa, 0xff7ff038}, {0x6, 0x4}]}, 0x10)
sendmmsg$unix(r4, &(0x7f0000002a00)=[{{0x0, 0xa4, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@report={0x15c, 0x20, 0x2, 0x70bd2d, 0x25dfdbfb, {0x2b, {@in=@multicast1, @in=@broadcast, 0x4e22, 0x4, 0x4e24, 0x3, 0x2, 0x90, 0x0, 0x73, 0x0, 0xee00}}, [@sa={0xe4, 0x6, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x2, 0x4e23, 0x8, 0xa216508f36225d2a, 0x20, 0x80, 0x67, 0x0, r7}, {@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d2, 0x6c}, @in6=@mcast1, {0xa, 0x8, 0x8, 0x7, 0x9, 0x80000000, 0xc, 0x2}, {0xffffffffffffff99, 0x0, 0x7d2f, 0x80000001}, {0x71, 0x7, 0xfffffe82}, 0x70bd2b, 0x0, 0xa, 0x0, 0x81, 0x1a1}}, @mark={0xc, 0x15, {0x35075b, 0x8}}, @coaddr={0x14, 0xe, @in6=@mcast2}, @lastused={0xc, 0xf, 0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x24000002)

25m34.804751462s ago: executing program 0 (id=986):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073799b31000000000c000780050015007f000000050005000a000000050001000600000011000300686173683a6970"], 0x58}}, 0x0) (fail_nth: 7)

25m34.803456861s ago: executing program 4 (id=987):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x24, 0x65, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x6}}}, 0x24}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814)
mkdirat(r0, &(0x7f0000000040)='\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x24088854)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000400)=0x13)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e60, 0x9002, @local, 0xfffffff5}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000010040)={0xa, 0x4004, 0x0, @private1, 0x80000000}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xf4, 0x6, "ccbe589c3b1b7395e7c7c3478624179cdec351c85738395523e55390f67277644a51c9a33e3a8408ff17bb8e1aa1172a031f7ae65f4fdfca6ce141f992d4656196326ecff46bb7ee27a998b057908226a21f88329260deab402ff1a253edae6193fc282d27ae682cd7e11b1ee6defb5b29809982ea83f51f1827a13cc3359abd23650d7e2dff7ebf490f297166b6466cff09657648d292509bd19ff51fa2524ec6a378402c05c4765cae32e78e3b1bc59d5015b4334897b24ab064a4b9cde426291e0b439eb52c57f6209fec3dd2fb7d23a962719d693210f3477cd487aa3c384e64038ec2b701e6b24725652b0059a3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x170}, 0x1, 0x0, 0x0, 0x48000}, 0x4000010)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180080001006c6f67001400028006000140000000ffffff7f00000000000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

25m33.974096633s ago: executing program 0 (id=990):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x103000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[<r4=>0x0], &(0x7f0000000200), 0x1, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000006c0)={0x600, 0x1, &(0x7f0000000040)=[r1], &(0x7f0000000240), &(0x7f00000000c0)=[r4], 0x0, 0x0, 0x3})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0)
fsync(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'pimreg0\x00', 0xc00})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0)

25m33.973220326s ago: executing program 4 (id=991):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8000000)
semget$private(0x0, 0x3, 0x0)
semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'r\x00'}, 0x18, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4ea3, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff8}}, 0x9, 0x9}, 0x90)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000080))
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8100, &(0x7f00000001c0)={0x82, 0x80, 0xa0000, {r3}}, 0x20)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0)

25m33.778906875s ago: executing program 2 (id=992):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff)
splice(r3, 0x0, r7, 0x0, 0x2000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000600)=""/198, &(0x7f0000000080)=0xc6)

25m33.684415246s ago: executing program 0 (id=993):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/48, 0x30, 0x0, 0x0, 0x3}}, 0x120)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ptrace$setregset(0x4205, r2, 0x200, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000300)={r6, r5})
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
readv(r8, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1)

25m33.507840619s ago: executing program 3 (id=994):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
write$binfmt_script(r0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe)
execveat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setxattr$incfs_id(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), &(0x7f0000000380)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0)
rename(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

25m32.502447351s ago: executing program 3 (id=995):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x40040000, 0xe, 0x3ff, 0x14})
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001440)="d5", 0x1}], 0x1}}], 0x1, 0x890)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001)
socket$inet6(0x10, 0x2, 0x4)

25m31.961009722s ago: executing program 3 (id=997):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xe})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000ee54e109ac861eb2f9caca880d", @ANYRES16=r4, @ANYBLOB="110200000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = eventfd2(0x44, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r7, 0x3, 0x2, r7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104880000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000040800000140012800b00010067656e65766500000400028008001f0039080000"], 0x3c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020480)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x8000, 0xfffe, 0x1800b, 0x2, 0x4, 0x5, 0x2, 0x1}, 0x20)
r10 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x208, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x70, '\x00', 0xf2, 0x9, 0x325c, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x0, 0x8, 0x1, 0xfffff2bd, 0x6, 0x2}}, {0x8, 0x2, [0x4, 0x9]}}, {{0x1c, 0x1, {0x5, 0x7, 0x2, 0x2, 0x0, 0x4, 0x45c, 0x2}}, {0x8, 0x2, [0xd50, 0xfe]}}, {{0x1c, 0x1, {0xd, 0x90, 0x7, 0xc, 0x0, 0x3c7, 0x1, 0x8}}, {0x14, 0x2, [0x8, 0x7, 0x8, 0x7, 0x6, 0xfffb, 0x0, 0x14]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x7, 0x3, 0x80, 0x9, 0x1}}, {0x6, 0x2, [0x9db]}}, {{0x1c, 0x1, {0xa, 0x3, 0x9, 0xff, 0x0, 0x0, 0x2, 0x8}}, {0x14, 0x2, [0x2b, 0x6, 0x6, 0x7, 0x5, 0x1, 0x3, 0xd]}}, {{0x1c, 0x1, {0x5, 0x5, 0xe4, 0x3, 0x0, 0x8, 0x3}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x8000, 0x5, 0x2, 0x2, 0x9, 0x6}}, {0x10, 0x2, [0x3b, 0x4, 0x74, 0x6, 0x2, 0x8b6c]}}, {{0x1c, 0x1, {0x3, 0x6, 0x4, 0x3, 0x1, 0x2, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x9, 0x7f, 0x10, 0x2, 0x4, 0x7fff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0xf8, 0x9, 0x9, 0x2, 0x1, 0x9, 0x9}}, {0x16, 0x2, [0x4, 0x3, 0xb, 0x6, 0x8, 0x4, 0x8, 0xc, 0x7]}}]}]}, 0x208}}, 0x4011)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xf, 0xfff1}, {0xa, 0xe}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000636b657400001c000280080002400000000b020001400000000308000300000000890900010073797a30000000000900020073797a3200000000140000000100000000000000000000000000000a"], 0x84}}, 0x0)

25m31.516205372s ago: executing program 2 (id=999):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
syz_clone(0x180000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080))
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @rand_addr, <r3=>0x0}, &(0x7f0000000100)=0xc)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r5, 0x0)
connect(r5, &(0x7f0000000000)=@rc={0x1f, @any, 0x8}, 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0xfffffffffffffff8)
r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0300000003000000050000000a00000000702a00bea9c7c6a7468667a781225850abaa241373a74603fe667c2348e57b8c9e1e959f8c2a38a5d1cfc548728c95a07b21dab5ecb429109d45af1696d756fe3c9ffe7c8eab51782a2f08c9ae6ed19a94a803fb53df7283ad23fc7b1cf4d4213ed74ab0", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

25m31.473388991s ago: executing program 4 (id=1000):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x40040000, 0xe, 0x3ff, 0x14})
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001440)="d5", 0x1}], 0x1}}], 0x1, 0x890)

25m30.8126807s ago: executing program 4 (id=1002):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'bond0\x00', @local})
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0)
close(r0)
syz_open_dev$dri(&(0x7f0000000000), 0xc43, 0x180)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000440), &(0x7f0000000300), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000180)={0x0, 0x80000001, 0x9, 0xfffffff8, 0x2, [], [0x4, 0x7, 0x5, 0xfffffffc], [0x3, 0x6, 0x200, 0x9], [0x1ff, 0x0, 0x10001, 0x10001]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280))
close_range(r1, r1, 0x2)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1})
close(0xffffffffffffffff)
pipe2(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r5, 0x3513, 0x0, 0x0, 0x0, 0x0)

25m30.695822182s ago: executing program 2 (id=1003):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000004c0)={{0xf, 0x9}, 0x0, 0x9, 0xfffffffc, {0x4, 0xfd}, 0x20, 0xfffffffc})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r1, &(0x7f0000000300), 0x6)

25m30.470452079s ago: executing program 2 (id=1004):
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x48884)
socket$inet(0x2, 0x4000000805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r3 = socket(0x200000100000011, 0x3, 0x2)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[], 0x34}], 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d6}}, {{0x0, 0x0, 0x0, 0xf}}, {{0x0, 0x0, &(0x7f0000003180)}}], 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00')
fchdir(r5)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r8, 0xae80, 0x0)

25m29.583982757s ago: executing program 0 (id=1005):
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) (async)
write$binfmt_aout(r4, 0x0, 0xff2e) (async)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x4) (async)
sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) (async, rerun: 32)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000008c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
unlink(0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYRES32=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3ffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) (async, rerun: 32)
ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "d88fd87f1ad6eeb75a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) (async)
syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x7721}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

25m29.534646494s ago: executing program 2 (id=1006):
unshare(0x68060200)
r0 = semget$private(0x0, 0x207, 0x205)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)

25m29.348416532s ago: executing program 0 (id=1007):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x40040000, 0xe, 0x3ff, 0x14})
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001440)="d5", 0x1}], 0x1}}], 0x1, 0x890)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001)
socket$inet6(0x10, 0x2, 0x4)

24m50.049157828s ago: executing program 32 (id=1001):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20480, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
gettid()
r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, 0x0)
semctl$SEM_STAT(r3, 0x3, 0x12, &(0x7f0000000300)=""/146)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5)
sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1}, 0x14}}, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

23m46.606536164s ago: executing program 33 (id=997):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xe})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000ee54e109ac861eb2f9caca880d", @ANYRES16=r4, @ANYBLOB="110200000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = eventfd2(0x44, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r7, 0x3, 0x2, r7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104880000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000040800000140012800b00010067656e65766500000400028008001f0039080000"], 0x3c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020480)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x8000, 0xfffe, 0x1800b, 0x2, 0x4, 0x5, 0x2, 0x1}, 0x20)
r10 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x208, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x70, '\x00', 0xf2, 0x9, 0x325c, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3, 0x0, 0x8, 0x1, 0xfffff2bd, 0x6, 0x2}}, {0x8, 0x2, [0x4, 0x9]}}, {{0x1c, 0x1, {0x5, 0x7, 0x2, 0x2, 0x0, 0x4, 0x45c, 0x2}}, {0x8, 0x2, [0xd50, 0xfe]}}, {{0x1c, 0x1, {0xd, 0x90, 0x7, 0xc, 0x0, 0x3c7, 0x1, 0x8}}, {0x14, 0x2, [0x8, 0x7, 0x8, 0x7, 0x6, 0xfffb, 0x0, 0x14]}}, {{0x1c, 0x1, {0x6, 0x5, 0x8, 0x7, 0x3, 0x80, 0x9, 0x1}}, {0x6, 0x2, [0x9db]}}, {{0x1c, 0x1, {0xa, 0x3, 0x9, 0xff, 0x0, 0x0, 0x2, 0x8}}, {0x14, 0x2, [0x2b, 0x6, 0x6, 0x7, 0x5, 0x1, 0x3, 0xd]}}, {{0x1c, 0x1, {0x5, 0x5, 0xe4, 0x3, 0x0, 0x8, 0x3}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x8000, 0x5, 0x2, 0x2, 0x9, 0x6}}, {0x10, 0x2, [0x3b, 0x4, 0x74, 0x6, 0x2, 0x8b6c]}}, {{0x1c, 0x1, {0x3, 0x6, 0x4, 0x3, 0x1, 0x2, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x9, 0x7f, 0x10, 0x2, 0x4, 0x7fff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0xf8, 0x9, 0x9, 0x2, 0x1, 0x9, 0x9}}, {0x16, 0x2, [0x4, 0x3, 0xb, 0x6, 0x8, 0x4, 0x8, 0xc, 0x7]}}]}]}, 0x208}}, 0x4011)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xf, 0xfff1}, {0xa, 0xe}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000636b657400001c000280080002400000000b020001400000000308000300000000890900010073797a30000000000900020073797a3200000000140000000100000000000000000000000000000a"], 0x84}}, 0x0)

23m42.589270194s ago: executing program 34 (id=1002):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'bond0\x00', @local})
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40026}, 0x0)
close(r0)
syz_open_dev$dri(&(0x7f0000000000), 0xc43, 0x180)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000440), &(0x7f0000000300), &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000180)={0x0, 0x80000001, 0x9, 0xfffffff8, 0x2, [], [0x4, 0x7, 0x5, 0xfffffffc], [0x3, 0x6, 0x200, 0x9], [0x1ff, 0x0, 0x10001, 0x10001]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280))
close_range(r1, r1, 0x2)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1})
close(0xffffffffffffffff)
pipe2(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r5, 0x3513, 0x0, 0x0, 0x0, 0x0)

23m41.451303706s ago: executing program 35 (id=1007):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
io_setup(0x3, &(0x7f0000000180)=<r0=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0x40040000, 0xe, 0x3ff, 0x14})
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001440)="d5", 0x1}], 0x1}}], 0x1, 0x890)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='1', 0x1}], 0x1}}], 0x1, 0x60008001)
socket$inet6(0x10, 0x2, 0x4)

23m41.363161656s ago: executing program 36 (id=1006):
unshare(0x68060200)
r0 = semget$private(0x0, 0x207, 0x205)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x10000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000005400)={'broute\x00', 0x0, 0x0, 0x0, [0x5], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)

12m26.281919139s ago: executing program 6 (id=3091):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}], 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_cancel(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x0, 0xa000}, 0x90)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = dup(r3)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r6, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x98, 0x98, 0x0, 0x310, 0x168, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x229}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r9, 0xfffff000, &(0x7f0000000000))
ioperm(0x0, 0x40, 0x80)
execveat$binfmt(r4, r5, &(0x7f0000000040), 0x0, 0x1000)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x61f}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80014)

12m20.960886792s ago: executing program 6 (id=3109):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x3f, 0x2, 0x21, 0x1, 0x200, &(0x7f00000003c0)="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"})

12m19.608571597s ago: executing program 6 (id=3112):
mmap(&(0x7f0000101000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0x4e007000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8647e2b7f43be400"}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007"], 0x18}], 0x1}, 0x0)
write$binfmt_script(r1, &(0x7f0000001300), 0x8f)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40)
writev(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="12", 0x1}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300))
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@remote}, {@in6=@local, 0x0, 0x32}, @in6=@local, {}, {}, {0x8}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8}, @policy_type={0xa}]}, 0x14c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x10)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000002c0)={0x3d6914e0f6650438, 0x7fff}, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324241}})

12m16.100948963s ago: executing program 6 (id=3123):
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
userfaultfd(0x80801)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

12m15.880111277s ago: executing program 6 (id=3127):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0x8, 0x3, 0x0, 0x5, 0x0, 0x7fff, [{0x5, 0x3, 0xff}, {0x5, 0x5, 0x1}, {0xd, 0x3, 0xffff}]}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/78, 0x4b, 0x4e, 0x0, 0x5, 0x0, @void, @value}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000020000009500000000000000", @ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/zoneinfo\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000a06050000000000000000000a0000091800078006001d40000600000c001691080001400a010100080009400000806d050001"], 0x48}, 0x1, 0x0, 0x0, 0x48042}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a", 0x1f}], 0x2)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0)

12m11.995867887s ago: executing program 6 (id=3131):
r0 = io_uring_setup(0x22d6, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x320})
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000002"], 0x2c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
close(r8)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

11m56.878468518s ago: executing program 37 (id=3131):
r0 = io_uring_setup(0x22d6, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x320})
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000002"], 0x2c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
close(r8)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.676488461s ago: executing program 1 (id=5423):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
syz_emit_vhci(0x0, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e07000514"], 0xa)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40b340)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3)
write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x1000ffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x50, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x58, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9b1, 0x0, 0x1e], [0x88000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfc2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00', {0x5, 0x1, 0xd06, 0x2}, 0x34, [0x9, 0x2, 0x7, 0x20, 0x2000, 0x9, 0x3, 0x5, 0x5, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x0, 0xfffffffd, 0x2, 0x932, 0x84, 0xe, 0xb9e5, 0x6, 0x0, 0xfffffc8a, 0xc, 0x400, 0x8, 0x10, 0x2, 0x8001, 0xfffffffa, 0x7e, 0xe, 0xb, 0x3, 0x4, 0x400, 0x8, 0xe0, 0x1ff, 0x4, 0x1000, 0x10001, 0x5, 0x406, 0x4, 0x2bcc, 0x5, 0x6, 0x7, 0x0, 0x9, 0xd16, 0x8f802, 0xa85, 0x7f, 0x7, 0xfff, 0x5, 0xf09, 0x3, 0x4, 0x7, 0x7], [0x1, 0x6, 0x5, 0x6de8, 0x9, 0x9, 0x3, 0x1, 0x0, 0x1, 0xc, 0x81, 0x5, 0x0, 0x0, 0x2, 0x7, 0x1, 0x205, 0x2434b750, 0x1, 0x100, 0xeada, 0x4, 0xfffff0a6, 0x2ea0, 0x0, 0x8, 0x9, 0x80000001, 0x0, 0x7, 0x7, 0x7, 0x2088, 0x3, 0x6, 0x7fffffff, 0x8, 0x7, 0x9, 0x0, 0x9, 0x9, 0x756, 0x0, 0x6, 0x5, 0x100, 0xf796, 0x0, 0x8, 0x60, 0xffffffff, 0xbd, 0x0, 0x5, 0x5, 0xe0000000, 0x8a55, 0xffff8001, 0x3, 0x4000, 0x800], [0xd7f7, 0x9, 0x8, 0x4, 0xc3b5, 0x9, 0xffffff20, 0x6, 0x2, 0xc85, 0x7, 0x0, 0xe, 0x2, 0xfffffff0, 0x5, 0x37ffffd, 0x9, 0x2, 0x6, 0x5, 0x9c, 0x3d, 0xd7, 0x7, 0xfff, 0x9, 0x1000, 0x7, 0x7, 0x3b0, 0x3, 0x10, 0x0, 0x200, 0x6, 0x9, 0x40, 0x401, 0x4, 0x0, 0x81, 0xd, 0x7fffffff, 0xa, 0x1, 0xde1, 0x3, 0x4, 0xffff, 0x7d, 0xb, 0x7, 0x4810759c, 0x3, 0xb, 0xb, 0x2a, 0xf1, 0xfffffff8, 0x2, 0x9, 0x1, 0x4], [0x3, 0x6, 0x7, 0x4, 0x1, 0x7, 0xff, 0x6, 0x7, 0x2, 0x28, 0x5, 0x2, 0x10000000, 0x8001, 0x7, 0x5, 0xc, 0x17fa1a84, 0x7, 0x6, 0x7, 0x7fffffff, 0x7fff, 0x4, 0xffffffff, 0x5, 0x3, 0x9, 0x35, 0x200, 0x3, 0x80000000, 0x4, 0x80000001, 0x1, 0x8, 0x0, 0x0, 0x400, 0x7ff, 0x2, 0x2, 0x2, 0x3, 0x81, 0x4, 0x5, 0xffffffff, 0x1, 0x8, 0xb, 0x1, 0x0, 0x9, 0x4, 0x8001, 0x2, 0x8000, 0x1000, 0x6, 0x10, 0x9, 0x3]}, 0x45c)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

7.927648985s ago: executing program 5 (id=5425):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x800)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, 0x0, 0x40000022)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x6185, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x23, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
socket$rxrpc(0x21, 0x2, 0x2)

7.828566527s ago: executing program 7 (id=5427):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x6, 0x2, 0x0, 0x0, "000000ff00070000000900", '\x00', "05030400", "e859ad33", ['\x00', "00000008000906000000da00", "0c000004dd372a9000"]})
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000814)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x191800, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x41, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic="1da4"]}]}, 0x1c}}, 0x0)
socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r7, 0x5609, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000040)=ANY=[])
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)

6.345315579s ago: executing program 1 (id=5429):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}}, 0x24)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x827, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x60)
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x2000001)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {{0x6c}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xfd96a0ea487c2967}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08000500fe"], 0x84}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$inet(r7, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10)
iopl(0xfd)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x1c}}, 0x4000)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)

6.339138409s ago: executing program 7 (id=5430):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff})
socket$phonet(0x23, 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x800, 0x0, 0x0, 0x1})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006b40)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26)
sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f38812166b98c0200000f32baf80c66b8c489b68466efbafc0cb8ccf4ef0f060f20e06635002000000f22e00f01c4f30fbd660a0f001d67260f350f2043", 0x3f}], 0x1, 0x10, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$unlink(0x9, 0x0, r7)

6.164909386s ago: executing program 5 (id=5431):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0)
ioctl$SIOCRSGCAUSE(r2, 0x40806685, &(0x7f0000000180))

5.03528128s ago: executing program 9 (id=5432):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x40)
read$FUSE(r1, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
lgetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@random={'btrfs.', '^\x00'}, &(0x7f0000000300)=""/45, 0x2d)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x2000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000a80), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='nfs4\x00', 0x8, 0x0)

4.948934349s ago: executing program 1 (id=5433):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r6, @ANYBLOB="08002a00000000000500290003"], 0x58}}, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', <r8=>0x0, 0x8000, 0x20, 0x1, 0x15eece6, {{0x48, 0x4, 0x1, 0xe, 0x120, 0x65, 0x0, 0xb, 0x4, 0x0, @remote, @multicast2, {[@generic={0x7, 0x9, "5fd0c2bb14beec"}, @timestamp={0x44, 0x14, 0x3d, 0x0, 0x4, [0x40, 0x42a0972c, 0x7, 0x9]}, @cipso={0x86, 0x39, 0x3, [{0x5, 0x4, "91ba"}, {0x6, 0x9, "b94b56ed7c8bbb"}, {0x7, 0xd, "d0bf84797ee712aecdfa53"}, {0x6, 0x6, "d7eb6942"}, {0x0, 0x4, "6ed0"}, {0x0, 0x9, "c22b110f9e934a"}, {0x5, 0x6, "b0771416"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x12, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x2908}, {@multicast2, 0x4}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x10001}, {@empty, 0x4}, {@rand_addr=0x64010100, 0x6}, {@multicast2, 0x2}, {@remote, 0x4}, {@local, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x4, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xb3b}, {@broadcast, 0xb}, {@empty, 0xe}, {@local, 0x3}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0xc5, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @remote, @broadcast, @loopback, @multicast2, @local, @private=0xa010100, @empty, @multicast2]}]}}}}})
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00')
write$P9_RLERRORu(r9, 0x0, 0x0)
recvmsg$unix(r9, &(0x7f0000000700)={&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/44, 0x2c}], 0x5, &(0x7f00000005c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0xa3)
ioctl$EVIOCGVERSION(r9, 0x80044501, &(0x7f0000000200)=""/167)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x0, @vifc_lcl_ifindex=r8, @rand_addr=0x64010100}, 0x10)

4.947441918s ago: executing program 7 (id=5434):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xcc, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8005}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40011)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x14, 0x81, 0x0, @remote, "d048ffcf373b87b13d4ae7b785e7986748ccfd2d"}}}}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010040000000000000000000e11f00"/26], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

4.875418673s ago: executing program 5 (id=5435):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @empty}, 0x10)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
eventfd(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000080))
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x1, 0x6c40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = accept4(r5, 0x0, &(0x7f0000000100), 0x800)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xf5, 0x5a, 0x1, 0xb, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0xff58, 0x1, 0x805}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20)

3.984883927s ago: executing program 7 (id=5437):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0x60c01, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180))
r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/]{[,/$\x01\\[#@\\-^(}@!!\']{*:,##\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x51, 0xb7, 0xf0, 0x20, 0x451, 0x5152, 0xaa6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xec, 0x2, 0x2, 0xaf, 0x3a, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x400}}]}}]}}]}}, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xf, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0xfffffbff, 0x7, 0x8, 0x2b, 0x27, {0x6, 0x1}, 0xff, 0x2}})

3.642303182s ago: executing program 1 (id=5438):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x121280, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000200)=0x12e)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x8990, &(0x7f00000001c0)={'sit0\x00', 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14f0102030109021b000100000000090400000190f19c00090585", @ANYRESOCT], 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000280)={'gre0\x00', 0x2000081})
r4 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)={0x218, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9c, 0x37}}}}, [@NL80211_ATTR_VENDOR_DATA={0xfb, 0xc5, "6c4b86a64dd46e2a33809c2630812c6a2e3bdaf9bcbcbedb2e41b7314831c4e8fa01671efeedfbb2134ca1aa07a972b407605b23605b037dd45b285990a81c3f001c98a0b5ef4c66c84986b868ddf5d734706f9a6ff1594ddc07a7bb93162d95da6802e1bb875bf4727c1feb22c6bd09b4d0df6ffefd9b7c9319d3fafbdfd796f0529d7a6f5ddbc1c14b32e8397fc879227b718e8cdb95fd8e2bea514dce2a16792b5c0fe492f6465145fcfcf11557e0fec3e9f847423c55a4aa918e4866f393c59f7dc386c884ff1a4d5382449692bc014c673bccc6bb4d3c93dc51241dd50e4e8e38551349ff8340c439e037ecda489c9671ca3a8e59"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x42aa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "3a04569dc919239ff21db1f479293ca3560c7c6740bfd80abb6f440e37f181d3f6d7277e48edf1be35f3f7a12c1d6303f30d3b7786bacbafcd6af5212672f5377404b49d9793a8e6c319734bba1d8904472fe3a135c7869c4a1c53c2aa95ecef5ba84c2e87333260d6a7b8a47e07172830f9c7fac493ef4b8d81ce563352396cd759c8639052c550840e7d90fb80470e6c1e510e130d8f6686240ce7e77e48aca61f733df6f648817f9205f7e37bc376bb3d76e1147cd5daa363d431545ab3c946f5eb58524bc052031bb20265d6b5c3c278c87b90d0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x4040081}, 0x40000)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000340)=0x9, 0x3a)
recvfrom$llc(r6, &(0x7f0000000740)=""/231, 0xe7, 0x10002, &(0x7f0000000340)={0x1a, 0x304, 0x8, 0x52, 0x8, 0xb5, @remote}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000040)={0x2000000, [[0x859, 0x0, 0x8, 0x4, 0x0, 0x0, 0x1, 0x1], [0x0, 0x4, 0x0, 0x0, 0x974, 0x7f], [0x3, 0x8, 0x0, 0x0, 0x0, 0x80000000]], '\x00', [{}, {}, {0x0, 0x100000}, {}, {}, {}, {}, {0x3}, {0xffff667a, 0x1000}, {0x1}, {0x0, 0x3}, {0x400000}], '\x00', 0xfffffffc})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r8=>r6, {r1}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3f}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x400c4}, 0x0)
ioctl$IOMMU_DESTROY$hwpt(r8, 0x3b80, &(0x7f0000000580)={0x8, r9})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$AUDIT_GET(r4, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)

3.03610915s ago: executing program 9 (id=5439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x800, 0x0, 0x0, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000))

2.932895586s ago: executing program 5 (id=5440):
r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000700), 0x7, 0x141001)
write(r1, 0x0, 0x0)

2.923800421s ago: executing program 8 (id=5441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "040000"}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
epoll_create(0x1)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{}, {}, @device_b, @device_a, @broadcast, {}, @device_b}, @a_msdu}}]}, 0x54}}, 0x0)

2.756769584s ago: executing program 5 (id=5442):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x541, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000002408000000080000008010", @ANYRES32=0x1, @ANYBLOB="000000000000000000050000000000000000000085d20aaf79af6e8659da379a615ecb27b7c4cfed78dc51b7d3572c7c8330524f29b88b8b992219c4a47714bb91", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/22], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x100, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

2.040854304s ago: executing program 9 (id=5443):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x40)
read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, <r3=>0x0}, 0x2020)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
lgetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@random={'btrfs.', '^\x00'}, &(0x7f0000000300)=""/45, 0x2d)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r6, 0x2000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000a80), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='nfs4\x00', 0x8, 0x0)

1.982933468s ago: executing program 5 (id=5444):
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)={0x0, 0x14, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.513936841s ago: executing program 9 (id=5445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000013a54210178cde5a2d7cf596c791bff5f5efe99a54301b0ab61762dd1323cbd465618506e94f587bb9d7feaef335fee7f5b4743448df73bfecea"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x2c, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]}, 0x7a)
r4 = mq_open(0x0, 0x2, 0x1, 0x0)
r5 = dup2(r4, r4)
mq_notify(r5, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x0, 0x80800)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x10000000d000, 0xffff1000, 0x8, r8})
r9 = socket(0x40000000015, 0x3, 0x0)
bind$inet(r9, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000001340), 0x0, 0x60010020, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x14f)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='io_uring_register\x00', r0, 0x0, 0x40000000000000}, 0x18)
r13 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000f40)={0x180, 0x0, &(0x7f0000000d00)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x29}, @fda={0x66646185, 0x4, 0x2, 0x25}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/193, 0xc1, 0x1, 0x2c}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000940)={0x0, 0x28, 0x40}}}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0xa, 0x2, 0x16}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000c40)={@ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/149, 0x95, 0x1, 0x5}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r11}}, 0x0}}], 0x0, 0x0, &(0x7f0000000f00)})

1.491960851s ago: executing program 8 (id=5446):
socket$inet_tcp(0x2, 0x1, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000679000/0x3000)=nil, &(0x7f0000cbc000/0x4000)=nil, 0x3000, 0x2})
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x91642, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0)

1.402702427s ago: executing program 1 (id=5447):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xcc, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1000}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8005}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40011)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x14, 0x81, 0x0, @remote, "d048ffcf373b87b13d4ae7b785e7986748ccfd2d"}}}}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010040000000000000000000e11f00"/26], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

954.22842ms ago: executing program 9 (id=5448):
io_uring_setup(0x2f8f, 0x0)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000240)={0x3, "c7f61ee229895a1604e274a4875e169bb4a12a8cbaf3e24c0000000000001c00", 0x7, 0x400, 0x9, 0x3, 0x4, 0x2, 0x7, 0x7})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
fchdir(r1)

674.935372ms ago: executing program 8 (id=5449):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x121, 0x0)

635.708248ms ago: executing program 8 (id=5450):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = syz_io_uring_setup(0x66e, &(0x7f0000000040)={0x0, 0xc110, 0x10100}, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)
r5 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xffffff01, @private1, 0x10}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00'}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000900), 0x1, 0x0)

552.574334ms ago: executing program 8 (id=5451):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @empty}, 0x10)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
eventfd(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000080))
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sndctrl(0x0, 0x1, 0x6c40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xf5, 0x5a, 0x1, 0xb, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0xff58, 0x1, 0x805}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20)

520.576549ms ago: executing program 1 (id=5452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x2800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r4, 0xab00, r3)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_CLEAR_SOCK(r4, 0xab04)
syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x412081)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x1f, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
fsetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)='syzkaller1\x00', 0xb, 0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r6)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = geteuid()
mount$binder(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='max=00000000000000000002,max=00000000000000000000,stats=global,stats=global,stats=global,max=00000000000000000003,subj_user=,silent,dont_measure,euid<', @ANYRESDEC=r7, @ANYBLOB=',subj_role=ramfs\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d611d6b667364659684747465642e6f76de45742084f0098320c65765726c61792e6f726967696e002c6170707261259d881290c2148d144774abe25869ffffff7f00000000000000000000ff0369643eaa6956ce562d1a8be935e18a061562f324e1681a2a14781ca126b17332b66851561ad906b21582acca6c8fcf1d67b8cb95dbf5fbb6567406c241f5de0ecd5bae91026dc73368e6eb3b4f089d24825938a49950ef712b3ba801a8306aea513ab1818fc95de2b2f9c9f775998a0b02e7cf535d59a0c3f795718e581a5b686e1b4abc3fd31d2d20ce6f5c04eefd1be6337073e263fe0e13a3c0297e23897366324a1f3c4fad00"/262, @ANYRESDEC=r8, @ANYBLOB=',obj_user=*-(}-,\x00'])
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
setresuid(0x0, 0xee00, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00')
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

327.485004ms ago: executing program 7 (id=5453):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000000340))

168.999482ms ago: executing program 9 (id=5454):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x800, 0x0, 0x0, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, &(0x7f0000000000))

119.786984ms ago: executing program 8 (id=5455):
socket(0xa, 0x3, 0x3a)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00')
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESHEX=r4, @ANYRES32=r2], 0x1c}}, 0x8008)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x20003)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)

0s ago: executing program 7 (id=5456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="002088fb440f00d8006d000009029078e00000016401010094097f85864b0452c28317067f00000164010102ac1e000100000000000000004404f57144442313e000000100000006ac1414bbfffffffeac1414bb01000200e0000001000000000a010100000000087f00000100000005f8ffffff00008000e0000002000000088307b30a010101440c9b110a4b071016c6fec6df1201907864010100d721921581577a739b01e9bcd96c7d51a773e4a5c207c6d3cad771ce0a55e408e9fed2b44cc77d23c430936e4a208c23a515cc84476dea0b7695c900c3447649"], 0xdc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
ptrace$pokeuser(0x6, r3, 0x3, 0x9) (async)
read$msr(r0, &(0x7f0000019680)=""/102372, 0x18fe4) (async)
io_pgetevents(0x0, 0x5, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000040)={&(0x7f0000000240)={[0x8]}, 0x8}) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x4, 0x3, 0x8}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000021c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="0103000000000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00010000000000000000bd"], 0x30}}, 0x0) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf) (async)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe44) (async)
syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r5], 0x110)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

kernel console output (not intermixed with test programs):

?
[ 1734.608270][T17373] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1735.098332][T27033] SELinux:  truncated policydb string identifier
[ 1735.104945][T27033] SELinux: failed to load policy
[ 1735.132557][T17373] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1735.208263][   T29] audit: type=1400 audit(1735.043:3605): avc:  denied  { bind } for  pid=27028 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1735.236760][T17373] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1735.300196][   T29] audit: type=1400 audit(1735.053:3606): avc:  denied  { connect } for  pid=27028 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1735.394448][   T29] audit: type=1400 audit(1735.063:3607): avc:  denied  { load_policy } for  pid=27028 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1735.547717][   T29] audit: type=1400 audit(1735.393:3608): avc:  denied  { connect } for  pid=27029 comm="syz.9.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1735.663829][   T29] audit: type=1400 audit(1735.393:3609): avc:  denied  { accept } for  pid=27029 comm="syz.9.4857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1735.693419][   T29] audit: type=1400 audit(1735.393:3610): avc:  denied  { write } for  pid=27029 comm="syz.9.4857" path="socket:[97075]" dev="sockfs" ino=97075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1735.725045][   T29] audit: type=1400 audit(1735.443:3611): avc:  denied  { read write } for  pid=27029 comm="syz.9.4857" dev="sockfs" ino=97073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1735.764258][T27039] netlink: 'syz.5.4860': attribute type 1 has an invalid length.
[ 1735.772143][T27039] netlink: 512 bytes leftover after parsing attributes in process `syz.5.4860'.
[ 1735.810527][T17373] usb 10-1: new low-speed USB device number 112 using dummy_hcd
[ 1735.854435][T27041] netlink: 'syz.5.4861': attribute type 4 has an invalid length.
[ 1735.910175][T27041] netlink: 'syz.5.4861': attribute type 4 has an invalid length.
[ 1735.939423][T27041] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001
[ 1735.940429][   T29] audit: type=1400 audit(1735.903:3612): avc:  denied  { write } for  pid=27040 comm="syz.5.4861" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1735.981160][T13321] usb 9-1: new high-speed USB device number 121 using dummy_hcd
[ 1736.002945][T17373] usb 10-1: config 213 has an invalid interface number: 252 but max is 0
[ 1736.064378][T17373] usb 10-1: config 213 has no interface number 0
[ 1736.160615][T13321] usb 9-1: Using ep0 maxpacket: 32
[ 1736.165646][T17373] usb 10-1: string descriptor 0 read error: -22
[ 1736.173702][T13321] usb 9-1: config 1 has an invalid interface number: 236 but max is 0
[ 1736.178988][T17373] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1736.211030][T17373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1736.220145][T13321] usb 9-1: config 1 has no interface number 0
[ 1736.240563][T13321] usb 9-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1736.286802][T13321] usb 9-1: config 1 interface 236 has no altsetting 0
[ 1736.325481][T13321] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1736.336690][   T29] audit: type=1400 audit(1736.313:3613): avc:  denied  { read } for  pid=27042 comm="syz.5.4862" path="socket:[97096]" dev="sockfs" ino=97096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1736.363591][T13321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.381006][T13321] usb 9-1: Product: syz
[ 1736.386015][T13321] usb 9-1: Manufacturer: syz
[ 1736.393614][T13321] usb 9-1: SerialNumber: syz
[ 1736.416368][T27037] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1736.433739][T13321] ti_usb_3410_5052 9-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1736.518696][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1736.518971][T13321] usb 2-1: USB disconnect, device number 71
[ 1736.561422][T13321] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1736.597702][T13321] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1736.620252][T13321] quatech2 2-1:0.51: device disconnected
[ 1736.626075][T23252] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1736.640705][   T29] audit: type=1400 audit(1736.603:3614): avc:  denied  { create } for  pid=27047 comm="syz.7.4864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1736.768758][T18690] usb 9-1: USB disconnect, device number 121
[ 1736.844521][   T29] audit: type=1800 audit(1736.723:3615): pid=27051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4864" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1736.990498][T23252] usb 6-1: Using ep0 maxpacket: 8
[ 1737.006563][T23252] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1737.025997][T23252] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[ 1737.045777][T23252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[ 1737.110225][T23252] usb 6-1: SerialNumber: syz
[ 1737.133304][T23252] usb 6-1: config 0 descriptor??
[ 1737.157794][T23252] usb 6-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[ 1737.182908][T23252] usb 6-1: No streaming interface found for terminal 36.
[ 1737.970740][T23252] usb 6-1: USB disconnect, device number 111
[ 1738.360565][T23252] usb 10-1: USB disconnect, device number 112
[ 1738.965871][T27070] netlink: 'syz.7.4871': attribute type 1 has an invalid length.
[ 1738.973699][T27070] netlink: 512 bytes leftover after parsing attributes in process `syz.7.4871'.
[ 1739.205111][T27081] FAULT_INJECTION: forcing a failure.
[ 1739.205111][T27081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1739.226184][   T29] audit: type=1400 audit(1739.193:3616): avc:  denied  { getopt } for  pid=27075 comm="syz.8.4873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1739.258465][T27081] CPU: 1 UID: 0 PID: 27081 Comm: syz.5.4875 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1739.268920][T27081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1739.278982][T27081] Call Trace:
[ 1739.282260][T27081]  <TASK>
[ 1739.285189][T27081]  dump_stack_lvl+0x16c/0x1f0
[ 1739.289879][T27081]  should_fail_ex+0x497/0x5b0
[ 1739.294569][T27081]  _copy_to_user+0x32/0xd0
[ 1739.298993][T27081]  simple_read_from_buffer+0xd0/0x160
[ 1739.304382][T27081]  proc_fail_nth_read+0x198/0x270
[ 1739.309415][T27081]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1739.315071][T27081]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1739.320628][T27081]  vfs_read+0x1df/0xbe0
[ 1739.324786][T27081]  ? __fget_files+0x1fc/0x3a0
[ 1739.329468][T27081]  ? __pfx___mutex_lock+0x10/0x10
[ 1739.334503][T27081]  ? __pfx_vfs_read+0x10/0x10
[ 1739.339190][T27081]  ? __fget_files+0x206/0x3a0
[ 1739.343880][T27081]  ksys_read+0x12b/0x250
[ 1739.348127][T27081]  ? __pfx_ksys_read+0x10/0x10
[ 1739.352905][T27081]  do_syscall_64+0xcd/0x250
[ 1739.357416][T27081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1739.363321][T27081] RIP: 0033:0x7fdf5dd7d25c
[ 1739.367739][T27081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1739.387377][T27081] RSP: 002b:00007fdf5eac3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1739.395770][T27081] RAX: ffffffffffffffda RBX: 00007fdf5df35fa0 RCX: 00007fdf5dd7d25c
[ 1739.403737][T27081] RDX: 000000000000000f RSI: 00007fdf5eac30a0 RDI: 0000000000000004
[ 1739.411723][T27081] RBP: 00007fdf5eac3090 R08: 0000000000000000 R09: 0000000000000000
[ 1739.419699][T27081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1739.427677][T27081] R13: 0000000000000000 R14: 00007fdf5df35fa0 R15: 00007fffbc8d6ae8
[ 1739.435667][T27081]  </TASK>
[ 1740.475330][T27087] xt_l2tp: v2 tid > 0xffff: 262144
[ 1741.273614][   T29] audit: type=1400 audit(1741.243:3617): avc:  denied  { read } for  pid=27086 comm="syz.8.4878" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1741.660671][   T29] audit: type=1400 audit(1741.273:3618): avc:  denied  { open } for  pid=27086 comm="syz.8.4878" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1741.705852][T27090] cgroup: Unknown subsys name 'cpuset'
[ 1743.383479][T27115] FAULT_INJECTION: forcing a failure.
[ 1743.383479][T27115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1743.424646][T27115] CPU: 1 UID: 0 PID: 27115 Comm: syz.1.4882 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1743.435103][T27115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1743.445251][T27115] Call Trace:
[ 1743.448533][T27115]  <TASK>
[ 1743.451464][T27115]  dump_stack_lvl+0x16c/0x1f0
[ 1743.456157][T27115]  should_fail_ex+0x497/0x5b0
[ 1743.460846][T27115]  _copy_from_user+0x2e/0xd0
[ 1743.465449][T27115]  snd_rawmidi_kernel_write1+0x4f9/0x880
[ 1743.471103][T27115]  snd_rawmidi_write+0x267/0xbe0
[ 1743.476059][T27115]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1743.481531][T27115]  ? avc_policy_seqno+0x9/0x20
[ 1743.486301][T27115]  ? selinux_file_permission+0x11f/0x580
[ 1743.491939][T27115]  ? bpf_lsm_file_permission+0x9/0x10
[ 1743.497318][T27115]  ? security_file_permission+0x71/0x210
[ 1743.502964][T27115]  ? __pfx_snd_rawmidi_write+0x10/0x10
[ 1743.508436][T27115]  vfs_writev+0x6da/0xdd0
[ 1743.512767][T27115]  ? find_held_lock+0x2d/0x110
[ 1743.517545][T27115]  ? __pfx_vfs_writev+0x10/0x10
[ 1743.522392][T27115]  ? find_held_lock+0x2d/0x110
[ 1743.527147][T27115]  ? __pfx_lock_release+0x10/0x10
[ 1743.532153][T27115]  ? trace_lock_acquire+0x14a/0x1d0
[ 1743.537342][T27115]  ? __fget_files+0x206/0x3a0
[ 1743.542015][T27115]  ? do_writev+0x297/0x340
[ 1743.546412][T27115]  do_writev+0x297/0x340
[ 1743.550637][T27115]  ? __pfx_do_writev+0x10/0x10
[ 1743.555386][T27115]  do_syscall_64+0xcd/0x250
[ 1743.559869][T27115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1743.565752][T27115] RIP: 0033:0x7f466bf7e819
[ 1743.570149][T27115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1743.589825][T27115] RSP: 002b:00007f466cd62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1743.598221][T27115] RAX: ffffffffffffffda RBX: 00007f466c135fa0 RCX: 00007f466bf7e819
[ 1743.606176][T27115] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000003
[ 1743.614127][T27115] RBP: 00007f466cd62090 R08: 0000000000000000 R09: 0000000000000000
[ 1743.622080][T27115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1743.630031][T27115] R13: 0000000000000000 R14: 00007f466c135fa0 R15: 00007ffe8b03eb68
[ 1743.637993][T27115]  </TASK>
[ 1743.754968][T27119] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4883'.
[ 1744.730552][T10150] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1744.816193][T27129] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4885'.
[ 1744.908268][T27129] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4885'.
[ 1744.934043][T10150] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[ 1744.980348][T10150] usb 2-1: config 0 has no interface number 0
[ 1745.030916][T10150] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[ 1745.061893][T10150] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1745.400458][T10150] usb 2-1: config 0 interface 48 has no altsetting 0
[ 1745.447442][T10150] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1745.503104][T10150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.614948][T10150] usb 2-1: config 0 descriptor??
[ 1746.142660][T10150] usb 2-1: string descriptor 0 read error: -32
[ 1746.158422][T10150] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1746.168418][T10150] usb 2-1: USB disconnect, device number 72
[ 1746.250025][   T29] audit: type=1400 audit(1746.213:3619): avc:  denied  { map } for  pid=27163 comm="syz.5.4893" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[ 1746.399307][   T29] audit: type=1400 audit(1746.213:3620): avc:  denied  { execute } for  pid=27163 comm="syz.5.4893" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[ 1747.139821][T27173] netlink: 'syz.9.4895': attribute type 1 has an invalid length.
[ 1747.147852][T27173] netlink: 512 bytes leftover after parsing attributes in process `syz.9.4895'.
[ 1747.283299][T27171] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1748.504094][   T29] audit: type=1400 audit(1748.473:3621): avc:  denied  { nosuid_transition } for  pid=27190 comm="syz.9.4899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[ 1748.545323][T27192] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4901'.
[ 1748.910592][   T29] audit: type=1400 audit(1748.473:3622): avc:  denied  { transition } for  pid=27190 comm="syz.9.4899" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[ 1748.998815][   T29] audit: type=1400 audit(1748.473:3623): avc:  denied  { entrypoint } for  pid=27190 comm="syz.9.4899" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2146 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1749.087698][   T29] audit: type=1400 audit(1748.473:3624): avc:  denied  { noatsecure } for  pid=27190 comm="syz.9.4899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1
[ 1749.170647][T23076] usb 2-1: new low-speed USB device number 73 using dummy_hcd
[ 1749.190542][T17373] usb 10-1: new full-speed USB device number 113 using dummy_hcd
[ 1749.472891][T17373] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1749.494222][T23076] usb 2-1: config 213 has an invalid interface number: 252 but max is 0
[ 1749.503152][T17373] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1749.514793][T23076] usb 2-1: config 213 has no interface number 0
[ 1749.552376][T23076] usb 2-1: string descriptor 0 read error: -22
[ 1749.558620][T23076] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1749.573041][T17373] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41680, setting to 64
[ 1749.609963][T17373] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1749.633597][T23076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1749.667402][T17373] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 1749.689913][T17373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1749.703428][T17373] usb 10-1: Product: syz
[ 1749.707676][T17373] usb 10-1: Manufacturer: syz
[ 1749.712799][T17373] usb 10-1: SerialNumber: syz
[ 1749.733330][T17373] usb 10-1: config 0 descriptor??
[ 1749.740014][T27198] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1749.757478][T17373] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input92
[ 1750.449890][T17373] imon:send_packet: packet tx failed (-71)
[ 1750.473650][T27212] delete_channel: no stack
[ 1750.480452][T17373] imon 10-1:0.0: panel buttons/knobs setup failed
[ 1750.758881][   T29] audit: type=1400 audit(1750.723:3625): avc:  denied  { write } for  pid=27219 comm="syz.9.4906" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1750.907176][T17373] rc_core: IR keymap rc-imon-pad not found
[ 1751.271041][T17373] Registered IR keymap rc-empty
[ 1751.297788][T17373] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1751.316208][   T29] audit: type=1400 audit(1751.283:3626): avc:  denied  { write } for  pid=27207 comm="syz.5.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1751.345549][T17373] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1751.357696][T17373] imon:send_packet: packet tx failed (-71)
[ 1751.390485][T17373] imon 10-1:0.0: remote input dev register failed
[ 1751.397219][T17373] imon 10-1:0.0: imon_init_intf0: rc device setup failed
[ 1751.913309][T17373] imon 10-1:0.0: unable to initialize intf0, err 0
[ 1751.930424][T17373] imon:imon_probe: failed to initialize context!
[ 1751.960351][T17373] imon 10-1:0.0: unable to register, err -19
[ 1751.990564][T17373] usb 10-1: USB disconnect, device number 113
[ 1752.009129][   T29] audit: type=1400 audit(1751.973:3627): avc:  denied  { map } for  pid=27233 comm="syz.8.4909" path="socket:[97917]" dev="sockfs" ino=97917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1752.301316][T18690] usb 2-1: USB disconnect, device number 73
[ 1752.317533][   T29] audit: type=1400 audit(1752.283:3628): avc:  denied  { ioctl } for  pid=27236 comm="syz.7.4910" path="socket:[98422]" dev="sockfs" ino=98422 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1753.235334][T13321] usb 10-1: new high-speed USB device number 114 using dummy_hcd
[ 1753.391921][T10150] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1753.890435][T13321] usb 10-1: Using ep0 maxpacket: 32
[ 1753.899825][T13321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1753.913822][T13321] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1753.926831][T13321] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1753.939122][T13321] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1753.956017][T13321] usb 10-1: config 0 descriptor??
[ 1753.963813][T13321] hub 10-1:0.0: USB hub found
[ 1754.039033][T10150] usb 6-1: New USB device found, idVendor=12d1, idProduct=ca74, bcdDevice= c.d7
[ 1754.067829][T10150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.081040][T10150] usb 6-1: Product: syz
[ 1754.087886][T10150] usb 6-1: Manufacturer: syz
[ 1754.093974][T10150] usb 6-1: SerialNumber: syz
[ 1754.109311][T10150] usb 6-1: config 0 descriptor??
[ 1754.179408][T13321] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1754.204340][T27262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4918'.
[ 1754.294970][T10150] huawei_cdc_ncm 6-1:0.0: CDC Union missing and no IAD found
[ 1754.303959][T10150] huawei_cdc_ncm 6-1:0.0: bind() failure
[ 1754.331644][T23754] usb 6-1: USB disconnect, device number 112
[ 1754.890068][T13321] usbhid 10-1:0.0: can't add hid device: -71
[ 1754.915703][T13321] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1754.999065][T13321] usb 10-1: USB disconnect, device number 114
[ 1755.703141][T27285] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[ 1755.748580][T27288] sd 0:0:1:0: device reset
[ 1756.820411][   T29] audit: type=1400 audit(1756.723:3629): avc:  denied  { execute } for  pid=27282 comm="syz.8.4926" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=98563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1756.846113][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.848511][T27297] vlan2: entered promiscuous mode
[ 1756.996896][T27297] vlan2: entered allmulticast mode
[ 1758.269383][   T29] audit: type=1326 audit(1758.233:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1758.861172][T27334] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1759.039794][   T29] audit: type=1326 audit(1758.233:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1759.154792][T27344] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4938'.
[ 1759.345876][   T29] audit: type=1326 audit(1758.233:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1759.369167][T13321] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1759.413438][   T29] audit: type=1326 audit(1758.233:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1759.514903][   T29] audit: type=1326 audit(1758.233:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1759.596829][T27353] FAULT_INJECTION: forcing a failure.
[ 1759.596829][T27353] name failslab, interval 1, probability 0, space 0, times 0
[ 1759.609718][T27353] CPU: 1 UID: 0 PID: 27353 Comm: syz.9.4943 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1759.620128][T27353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1759.630179][T27353] Call Trace:
[ 1759.633451][T27353]  <TASK>
[ 1759.636375][T27353]  dump_stack_lvl+0x16c/0x1f0
[ 1759.641062][T27353]  should_fail_ex+0x497/0x5b0
[ 1759.645738][T27353]  ? fs_reclaim_acquire+0xae/0x150
[ 1759.650856][T27353]  should_failslab+0xc2/0x120
[ 1759.655537][T27353]  __kmalloc_cache_noprof+0x6b/0x300
[ 1759.660823][T27353]  ? selinux_bpf_prog_load+0x47/0x1c0
[ 1759.666200][T27353]  selinux_bpf_prog_load+0x47/0x1c0
[ 1759.671403][T27353]  security_bpf_prog_load+0x211/0x240
[ 1759.676773][T27353]  bpf_prog_load+0xe81/0x2660
[ 1759.681455][T27353]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1759.686563][T27353]  ? avc_has_perm_noaudit+0x143/0x3a0
[ 1759.691953][T27353]  ? selinux_bpf+0xde/0x130
[ 1759.696462][T27353]  __sys_bpf+0x402b/0x49a0
[ 1759.700879][T27353]  ? finish_task_switch.isra.0+0x217/0xcc0
[ 1759.706680][T27353]  ? __switch_to+0x660/0x1180
[ 1759.711360][T27353]  ? __pfx___sys_bpf+0x10/0x10
[ 1759.716122][T27353]  ? __schedule+0xe62/0x5ae0
[ 1759.720734][T27353]  ? fput+0x67/0x440
[ 1759.724634][T27353]  ? ksys_write+0x1ba/0x250
[ 1759.729141][T27353]  __x64_sys_bpf+0x78/0xc0
[ 1759.733559][T27353]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1759.738761][T27353]  do_syscall_64+0xcd/0x250
[ 1759.743261][T27353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.749156][T27353] RIP: 0033:0x7f0d1d57e819
[ 1759.753566][T27353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1759.773172][T27353] RSP: 002b:00007f0d1e3c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1759.781585][T27353] RAX: ffffffffffffffda RBX: 00007f0d1d736160 RCX: 00007f0d1d57e819
[ 1759.789552][T27353] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000005
[ 1759.797538][T27353] RBP: 00007f0d1e3c3090 R08: 0000000000000000 R09: 0000000000000000
[ 1759.805485][T27353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1759.813521][T27353] R13: 0000000000000001 R14: 00007f0d1d736160 R15: 00007ffe78915c18
[ 1759.821471][T27353]  </TASK>
[ 1759.824484][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1759.836536][T13321] usb 2-1: Using ep0 maxpacket: 32
[ 1759.880452][T27351] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1759.886458][T27351] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1759.892417][T27351] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1759.898344][T27351] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1759.904342][T27351] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1759.956170][T13321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1759.968496][   T29] audit: type=1326 audit(1758.233:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1759.992068][   T29] audit: type=1326 audit(1758.233:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1760.014983][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1760.021857][   T29] audit: type=1326 audit(1758.233:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1760.034882][T13321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1760.044808][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1760.164476][   T29] audit: type=1326 audit(1758.233:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27315 comm="syz.9.4934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1d57e819 code=0x7fc00000
[ 1760.215382][T13321] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1760.239849][T13321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1760.270503][T13321] usb 2-1: config 0 descriptor??
[ 1760.291914][T13321] hub 2-1:0.0: USB hub found
[ 1760.755621][T13321] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1761.508736][T13321] usbhid 2-1:0.0: can't add hid device: -71
[ 1761.824171][T13321] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1761.856158][T13321] usb 2-1: USB disconnect, device number 74
[ 1761.960445][T16913] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1761.961284][ T5150] Bluetooth: hci4: command 0x0406 tx timeout
[ 1761.966543][T16913] Bluetooth: hci2: command 0x0406 tx timeout
[ 1761.972500][T23974] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1761.978666][T10013] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1762.170515][T23076] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1762.949574][T27394] audit_log_lost: 65 callbacks suppressed
[ 1762.949591][T27394] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64
[ 1762.969596][T27394] audit: out of memory in audit_log_start
[ 1763.108055][T23076] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1763.132307][T23076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1763.149064][T23076] usb 6-1: config 0 descriptor??
[ 1763.177859][T23076] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1764.118731][   T29] audit: type=1400 audit(1764.083:3704): avc:  denied  { setattr } for  pid=27407 comm="syz.8.4959" path="socket:[98822]" dev="sockfs" ino=98822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1764.529602][   T29] audit: type=1400 audit(1764.493:3705): avc:  denied  { read } for  pid=27407 comm="syz.8.4959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1764.607568][T27420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1764.630819][T27420] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1764.662797][T27422] netlink: 'syz.7.4963': attribute type 1 has an invalid length.
[ 1764.734373][T27422] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.4963'.
[ 1764.862166][   T29] audit: type=1400 audit(1764.833:3706): avc:  denied  { mount } for  pid=27423 comm="syz.8.4964" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1765.026939][   T29] audit: type=1400 audit(1764.953:3707): avc:  denied  { unmount } for  pid=23149 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1765.075873][T23076] gspca_cpia1: usb_control_msg 02, error -110
[ 1765.108565][T23076] gspca_cpia1: usb_control_msg 05, error -32
[ 1765.232193][T23076] gspca_cpia1: usb_control_msg 05, error -32
[ 1765.249172][T23076] gspca_cpia1: usb_control_msg 05, error -32
[ 1765.906601][T23076] gspca_cpia1: usb_control_msg 05, error -32
[ 1765.926467][T23076] gspca_cpia1: usb_control_msg 04, error -32
[ 1765.935137][T23076] gspca_cpia1: usb_control_msg 04, error -32
[ 1765.944427][T23076] gspca_cpia1: usb_control_msg 04, error -32
[ 1765.955974][T23076] gspca_cpia1: usb_control_msg 04, error -32
[ 1765.962054][T23076] cpia1 6-1:0.0: probe with driver cpia1 failed with error -32
[ 1766.381141][T18690] usb 6-1: USB disconnect, device number 113
[ 1766.816587][T27450] overlay: Unknown parameter 'smackfshat'
[ 1767.323901][T27459] netlink: 'syz.1.4974': attribute type 1 has an invalid length.
[ 1767.331799][T27459] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4974'.
[ 1768.066732][T27471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4978'.
[ 1768.118028][   T29] audit: type=1400 audit(1768.083:3708): avc:  denied  { listen } for  pid=27473 comm="syz.8.4979" lport=40224 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1768.271607][   T29] audit: type=1400 audit(1768.113:3709): avc:  denied  { accept } for  pid=27473 comm="syz.8.4979" lport=40224 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1768.294933][   T29] audit: type=1400 audit(1768.113:3710): avc:  denied  { setopt } for  pid=27473 comm="syz.8.4979" lport=40224 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1768.640992][  T964] usb 9-1: new high-speed USB device number 122 using dummy_hcd
[ 1768.864171][  T964] usb 9-1: Using ep0 maxpacket: 32
[ 1768.913453][  T964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1768.972243][  T964] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1769.061999][  T964] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1769.102622][  T964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.154930][  T964] usb 9-1: config 0 descriptor??
[ 1769.174215][  T964] hub 9-1:0.0: USB hub found
[ 1769.399042][  T964] hub 9-1:0.0: 1 port detected
[ 1769.400243][T27502] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1769.657508][T13321] kernel write not supported for file /562/attr/prev (pid: 13321 comm: kworker/0:12)
[ 1769.658010][T10150] kernel write not supported for file /562/attr/prev (pid: 10150 comm: kworker/1:7)
[ 1770.242237][T13321] usb 9-1: USB disconnect, device number 122
[ 1770.244974][  T964] hub 9-1:0.0: hub_ext_port_status failed (err = -71)
[ 1770.307285][T27526] FAULT_INJECTION: forcing a failure.
[ 1770.307285][T27526] name failslab, interval 1, probability 0, space 0, times 0
[ 1770.332130][T27526] CPU: 1 UID: 0 PID: 27526 Comm: syz.5.4995 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1770.342596][T27526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1770.352654][T27526] Call Trace:
[ 1770.355935][T27526]  <TASK>
[ 1770.358871][T27526]  dump_stack_lvl+0x16c/0x1f0
[ 1770.363572][T27526]  should_fail_ex+0x497/0x5b0
[ 1770.368266][T27526]  ? fs_reclaim_acquire+0xae/0x150
[ 1770.373386][T27526]  should_failslab+0xc2/0x120
[ 1770.378152][T27526]  __kmalloc_cache_noprof+0x6b/0x300
[ 1770.383455][T27526]  ? ip_set_create+0x33f/0x14d0
[ 1770.388314][T27526]  ip_set_create+0x33f/0x14d0
[ 1770.393007][T27526]  ? __pfx_ip_set_create+0x10/0x10
[ 1770.398149][T27526]  nfnetlink_rcv_msg+0x9c3/0x11e0
[ 1770.403199][T27526]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1770.408665][T27526]  ? __pfx___lock_acquire+0x10/0x10
[ 1770.413872][T27526]  ? lock_acquire+0x2f/0xb0
[ 1770.418383][T27526]  ? avc_has_perm_noaudit+0x61/0x3a0
[ 1770.423700][T27526]  netlink_rcv_skb+0x16b/0x440
[ 1770.428478][T27526]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1770.433964][T27526]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1770.439280][T27526]  ? bpf_lsm_capable+0x9/0x10
[ 1770.443967][T27526]  ? security_capable+0x7e/0x260
[ 1770.448925][T27526]  ? ns_capable+0xd7/0x110
[ 1770.453349][T27526]  nfnetlink_rcv+0x1b4/0x430
[ 1770.457951][T27526]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1770.463078][T27526]  ? netlink_deliver_tap+0x1ae/0xd90
[ 1770.468384][T27526]  netlink_unicast+0x53c/0x7f0
[ 1770.473161][T27526]  ? __pfx_netlink_unicast+0x10/0x10
[ 1770.478470][T27526]  netlink_sendmsg+0x8b8/0xd70
[ 1770.483266][T27526]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1770.488567][T27526]  ____sys_sendmsg+0xaaf/0xc90
[ 1770.493336][T27526]  ? copy_msghdr_from_user+0x10b/0x160
[ 1770.498797][T27526]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1770.504102][T27526]  ___sys_sendmsg+0x135/0x1e0
[ 1770.508784][T27526]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1770.514000][T27526]  ? __pfx_lock_release+0x10/0x10
[ 1770.519031][T27526]  ? trace_lock_acquire+0x14a/0x1d0
[ 1770.524252][T27526]  ? __fget_files+0x206/0x3a0
[ 1770.528936][T27526]  __sys_sendmsg+0x16e/0x220
[ 1770.533538][T27526]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1770.538669][T27526]  do_syscall_64+0xcd/0x250
[ 1770.543177][T27526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1770.549084][T27526] RIP: 0033:0x7fdf5dd7e819
[ 1770.553504][T27526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1770.573124][T27526] RSP: 002b:00007fdf5eac3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1770.581550][T27526] RAX: ffffffffffffffda RBX: 00007fdf5df35fa0 RCX: 00007fdf5dd7e819
[ 1770.589527][T27526] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[ 1770.597521][T27526] RBP: 00007fdf5eac3090 R08: 0000000000000000 R09: 0000000000000000
[ 1770.605498][T27526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1770.613476][T27526] R13: 0000000000000000 R14: 00007fdf5df35fa0 R15: 00007fffbc8d6ae8
[ 1770.621465][T27526]  </TASK>
[ 1771.636905][T27539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1771.648754][   T29] audit: type=1400 audit(1771.603:3711): avc:  denied  { ioctl } for  pid=27540 comm="syz.8.5001" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1771.685235][T27539] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1771.704992][   T29] audit: type=1400 audit(1771.603:3712): avc:  denied  { set_context_mgr } for  pid=27540 comm="syz.8.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1771.718578][T27543] netlink: 'syz.9.5000': attribute type 1 has an invalid length.
[ 1771.735207][T27543] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.5000'.
[ 1771.843314][   T29] audit: type=1400 audit(1771.773:3713): avc:  denied  { ioctl } for  pid=27545 comm="syz.5.5002" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1773.640390][T23252] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1773.710652][T13321] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1773.790656][T23252] usb 2-1: Using ep0 maxpacket: 32
[ 1773.799299][T23252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1773.813573][T23252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1773.823397][T23252] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1773.832557][T23252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1773.842481][T23252] usb 2-1: config 0 descriptor??
[ 1773.848953][T23252] hub 2-1:0.0: USB hub found
[ 1773.860361][T13321] usb 6-1: Using ep0 maxpacket: 32
[ 1773.866753][T13321] usb 6-1: config 1 has an invalid interface number: 236 but max is 0
[ 1773.875172][T13321] usb 6-1: config 1 has no interface number 0
[ 1773.881532][T13321] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1773.891732][T13321] usb 6-1: config 1 interface 236 has no altsetting 0
[ 1773.900089][T13321] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1773.909238][T13321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1773.917262][T13321] usb 6-1: Product: syz
[ 1773.921755][T13321] usb 6-1: Manufacturer: syz
[ 1773.926399][T13321] usb 6-1: SerialNumber: syz
[ 1773.935051][T27572] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1773.943398][T13321] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1774.052019][T23252] hub 2-1:0.0: 1 port detected
[ 1774.149864][T13321] usb 6-1: USB disconnect, device number 114
[ 1775.355017][T13321] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 1775.355126][T23076] usb 2-1: USB disconnect, device number 75
[ 1775.403746][T27596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5016'.
[ 1776.036031][T27614] fuse: Bad value for 'fd'
[ 1777.040404][   T29] audit: type=1400 audit(1777.003:3714): avc:  denied  { ioctl } for  pid=27619 comm="syz.1.5023" path="socket:[99323]" dev="sockfs" ino=99323 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1777.159419][   T29] audit: type=1400 audit(1777.003:3715): avc:  denied  { write } for  pid=27619 comm="syz.1.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1779.499148][   T29] audit: type=1400 audit(1779.463:3716): avc:  denied  { ioctl } for  pid=27630 comm="syz.8.5028" path="socket:[100383]" dev="sockfs" ino=100383 ioctlcmd=0x3b89 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1781.945619][T27674] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1782.060611][T23076] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1782.446047][T23076] usb 2-1: Using ep0 maxpacket: 32
[ 1782.549960][T23076] usb 2-1: config 7 has an invalid interface number: 182 but max is 0
[ 1782.568784][T23076] usb 2-1: config 7 has no interface number 0
[ 1782.592727][T23076] usb 2-1: config 7 interface 182 has no altsetting 0
[ 1783.214405][T23076] usb 2-1: string descriptor 0 read error: -71
[ 1783.236701][T23076] usb 2-1: New USB device found, idVendor=1199, idProduct=9056, bcdDevice=de.dc
[ 1783.316053][T23076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.346871][T27689] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5039'.
[ 1783.380081][T23076] usb 2-1: can't set config #7, error -71
[ 1783.407008][   T29] audit: type=1400 audit(1783.363:3717): avc:  denied  { accept } for  pid=27688 comm="syz.1.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1783.422068][T23076] usb 2-1: USB disconnect, device number 76
[ 1783.649680][T27695] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5041'.
[ 1784.025664][   T29] audit: type=1400 audit(1783.943:3718): avc:  denied  { read write } for  pid=27698 comm="syz.1.5042" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1784.439533][   T29] audit: type=1400 audit(1783.943:3719): avc:  denied  { open } for  pid=27698 comm="syz.1.5042" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1784.511423][   T29] audit: type=1400 audit(1783.963:3720): avc:  denied  { ioctl } for  pid=27698 comm="syz.1.5042" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1784.542882][   T29] audit: type=1400 audit(1784.273:3721): avc:  denied  { setopt } for  pid=27702 comm="syz.5.5043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1784.962959][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5044'.
[ 1786.313468][T27728] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1787.397136][T27741] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5051'.
[ 1787.494954][T27741] FAULT_INJECTION: forcing a failure.
[ 1787.494954][T27741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1787.629300][T27741] CPU: 1 UID: 0 PID: 27741 Comm: syz.8.5051 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1787.639750][T27741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1787.649815][T27741] Call Trace:
[ 1787.653102][T27741]  <TASK>
[ 1787.656036][T27741]  dump_stack_lvl+0x16c/0x1f0
[ 1787.660733][T27741]  should_fail_ex+0x497/0x5b0
[ 1787.665432][T27741]  _copy_to_user+0x32/0xd0
[ 1787.669861][T27741]  simple_read_from_buffer+0xd0/0x160
[ 1787.675250][T27741]  proc_fail_nth_read+0x198/0x270
[ 1787.680285][T27741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1787.685841][T27741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1787.691397][T27741]  vfs_read+0x1df/0xbe0
[ 1787.695558][T27741]  ? __fget_files+0x1fc/0x3a0
[ 1787.700240][T27741]  ? __pfx___mutex_lock+0x10/0x10
[ 1787.705272][T27741]  ? __pfx_vfs_read+0x10/0x10
[ 1787.709959][T27741]  ? __fget_files+0x206/0x3a0
[ 1787.714651][T27741]  ksys_read+0x12b/0x250
[ 1787.718898][T27741]  ? __pfx_ksys_read+0x10/0x10
[ 1787.723677][T27741]  do_syscall_64+0xcd/0x250
[ 1787.728186][T27741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1787.734083][T27741] RIP: 0033:0x7f68cb17d25c
[ 1787.738499][T27741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1787.758089][T27741] RSP: 002b:00007f68cbf94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1787.766488][T27741] RAX: ffffffffffffffda RBX: 00007f68cb335fa0 RCX: 00007f68cb17d25c
[ 1787.774441][T27741] RDX: 000000000000000f RSI: 00007f68cbf940a0 RDI: 0000000000000004
[ 1787.782392][T27741] RBP: 00007f68cbf94090 R08: 0000000000000000 R09: 0000000000000000
[ 1787.790344][T27741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1787.798295][T27741] R13: 0000000000000000 R14: 00007f68cb335fa0 R15: 00007ffe381dea68
[ 1787.806260][T27741]  </TASK>
[ 1789.144146][   T29] audit: type=1400 audit(1789.093:3722): avc:  denied  { block_suspend } for  pid=27743 comm="syz.1.5052" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1789.257524][T27743] ALSA: mixer_oss: invalid OSS volume '/dev/infiniband/rdma_cm'
[ 1789.529347][   T29] audit: type=1400 audit(1789.243:3723): avc:  denied  { write } for  pid=27751 comm="syz.7.5055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1789.756608][T27769] delete_channel: no stack
[ 1790.126008][T27775] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5059'.
[ 1790.259715][T27774] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1790.285751][T27774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1790.381819][   T29] audit: type=1400 audit(1790.353:3724): avc:  denied  { bind } for  pid=27772 comm="syz.9.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1791.173225][T27786] FAULT_INJECTION: forcing a failure.
[ 1791.173225][T27786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1791.238293][T27786] CPU: 1 UID: 0 PID: 27786 Comm: syz.5.5063 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1791.248754][T27786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1791.258821][T27786] Call Trace:
[ 1791.262100][T27786]  <TASK>
[ 1791.265027][T27786]  dump_stack_lvl+0x16c/0x1f0
[ 1791.269715][T27786]  should_fail_ex+0x497/0x5b0
[ 1791.274411][T27786]  _copy_to_user+0x32/0xd0
[ 1791.278846][T27786]  simple_read_from_buffer+0xd0/0x160
[ 1791.284237][T27786]  proc_fail_nth_read+0x198/0x270
[ 1791.289257][T27786]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1791.294793][T27786]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1791.300336][T27786]  vfs_read+0x1df/0xbe0
[ 1791.304494][T27786]  ? __fget_files+0x1fc/0x3a0
[ 1791.309158][T27786]  ? __pfx___mutex_lock+0x10/0x10
[ 1791.314182][T27786]  ? __pfx_vfs_read+0x10/0x10
[ 1791.318853][T27786]  ? __fget_files+0x206/0x3a0
[ 1791.323524][T27786]  ksys_read+0x12b/0x250
[ 1791.327752][T27786]  ? __pfx_ksys_read+0x10/0x10
[ 1791.332505][T27786]  do_syscall_64+0xcd/0x250
[ 1791.336991][T27786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.342896][T27786] RIP: 0033:0x7fdf5dd7d25c
[ 1791.347307][T27786] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1791.366916][T27786] RSP: 002b:00007fdf5eac3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1791.375345][T27786] RAX: ffffffffffffffda RBX: 00007fdf5df35fa0 RCX: 00007fdf5dd7d25c
[ 1791.383311][T27786] RDX: 000000000000000f RSI: 00007fdf5eac30a0 RDI: 0000000000000004
[ 1791.391270][T27786] RBP: 00007fdf5eac3090 R08: 0000000000000000 R09: 0000000000000000
[ 1791.399224][T27786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1791.407179][T27786] R13: 0000000000000000 R14: 00007fdf5df35fa0 R15: 00007fffbc8d6ae8
[ 1791.415148][T27786]  </TASK>
[ 1791.440669][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.408689][T27805] delete_channel: no stack
[ 1793.260372][T23754] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1793.430463][T23754] usb 2-1: Using ep0 maxpacket: 32
[ 1793.447697][T27833] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.5078'.
[ 1793.465596][T23754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1793.490384][T23754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1793.518514][T27835] delete_channel: no stack
[ 1793.534255][T23754] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1793.564547][T23754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1793.609572][T23754] usb 2-1: config 0 descriptor??
[ 1793.636277][T23754] hub 2-1:0.0: USB hub found
[ 1793.820400][T13321] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 1793.838785][T23754] hub 2-1:0.0: 1 port detected
[ 1793.890378][T10150] usb 9-1: new high-speed USB device number 123 using dummy_hcd
[ 1793.973364][T13321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 23250, setting to 1024
[ 1793.984780][T13321] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1793.994774][T13321] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1794.008756][T13321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1794.017875][T13321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1794.026178][T13321] usb 6-1: SerialNumber: syz
[ 1794.033792][T27839] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1794.051827][T10150] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1794.060559][T10150] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1794.072823][T10150] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1794.083292][T10150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1794.094504][T10150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1794.112694][T10150] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1794.124841][T10150] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1794.134107][T10150] usb 9-1: Product: syz
[ 1794.138259][T10150] usb 9-1: Manufacturer: syz
[ 1794.149251][T10150] cdc_wdm 9-1:1.0: skipping garbage
[ 1794.155764][T10150] cdc_wdm 9-1:1.0: skipping garbage
[ 1794.164257][T10150] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1794.170166][T10150] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1794.247886][T13321] usbtest 6-1:1.0: Linux user mode ISO test driver
[ 1794.269026][T13321] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[ 1794.301855][T13321] usb 6-1: USB disconnect, device number 115
[ 1794.446520][T23754] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[ 1794.454707][T23754] usb 2-1: USB disconnect, device number 77
[ 1795.070397][T10150] usb 10-1: new low-speed USB device number 115 using dummy_hcd
[ 1795.510458][T10150] usb 10-1: config 213 has an invalid interface number: 252 but max is 0
[ 1795.518974][T10150] usb 10-1: config 213 has no interface number 0
[ 1795.599999][T10150] usb 10-1: string descriptor 0 read error: -22
[ 1795.766334][T10150] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1795.898486][T10150] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1796.585919][T27867] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1796.771118][T18690] usb 9-1: USB disconnect, device number 123
[ 1797.091190][   T29] audit: type=1400 audit(1797.063:3725): avc:  denied  { accept } for  pid=27874 comm="syz.5.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[ 1797.131785][T27875] "syz.5.5090" (27875) uses obsolete ecb(arc4) skcipher
[ 1797.226430][   T29] audit: type=1400 audit(1797.083:3726): avc:  denied  { name_bind } for  pid=27874 comm="syz.5.5090" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 1798.066718][   T29] audit: type=1400 audit(1797.623:3727): avc:  denied  { accept } for  pid=27879 comm="syz.1.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1798.098756][T27888] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5094'.
[ 1798.614353][T10150] usb 10-1: USB disconnect, device number 115
[ 1798.620925][T27898] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5097'.
[ 1799.550520][ T5922] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1800.342509][ T5922] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1800.363184][ T5922] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1800.392694][T27921] input: syz0 as /devices/virtual/input/input94
[ 1800.400096][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1800.441423][   T29] audit: type=1400 audit(1800.363:3728): avc:  denied  { ioctl } for  pid=27919 comm="syz.8.5102" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1800.514018][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1800.525615][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1800.538217][ T5922] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1800.567018][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1800.585075][ T5922] usb 2-1: Product: syz
[ 1800.589725][ T5922] usb 2-1: Manufacturer: syz
[ 1801.524813][ T5922] cdc_wdm 2-1:1.0: skipping garbage
[ 1801.530061][ T5922] cdc_wdm 2-1:1.0: skipping garbage
[ 1801.640582][ T5922] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1801.659915][ T5922] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1802.634542][ T5922] usb 10-1: new low-speed USB device number 116 using dummy_hcd
[ 1802.854647][ T5922] usb 10-1: config 213 has an invalid interface number: 252 but max is 0
[ 1802.873413][ T5922] usb 10-1: config 213 has no interface number 0
[ 1802.883975][T27955] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5109'.
[ 1802.890179][ T5922] usb 10-1: string descriptor 0 read error: -22
[ 1802.902764][ T5922] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1802.928608][ T5922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1803.226391][T27967] FAULT_INJECTION: forcing a failure.
[ 1803.226391][T27967] name failslab, interval 1, probability 0, space 0, times 0
[ 1803.239370][T27967] CPU: 1 UID: 0 PID: 27967 Comm: syz.8.5116 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1803.249795][T27967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1803.259841][T27967] Call Trace:
[ 1803.263112][T27967]  <TASK>
[ 1803.266032][T27967]  dump_stack_lvl+0x16c/0x1f0
[ 1803.270706][T27967]  should_fail_ex+0x497/0x5b0
[ 1803.275380][T27967]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1803.280999][T27967]  should_failslab+0xc2/0x120
[ 1803.285683][T27967]  __kmalloc_node_track_caller_noprof+0xcf/0x430
[ 1803.292013][T27967]  ? sidtab_sid2str_get+0x17a/0x680
[ 1803.297204][T27967]  kmemdup_noprof+0x29/0x60
[ 1803.301697][T27967]  sidtab_sid2str_get+0x17a/0x680
[ 1803.306798][T27967]  sidtab_entry_to_string+0x33/0x110
[ 1803.312073][T27967]  security_sid_to_context_core+0x35c/0x640
[ 1803.317954][T27967]  avc_audit_post_callback+0x10b/0x8c0
[ 1803.323403][T27967]  ? __pfx_avc_audit_post_callback+0x10/0x10
[ 1803.329388][T27967]  ? audit_log_format+0xe9/0x130
[ 1803.334330][T27967]  ? __pfx_avc_audit_post_callback+0x10/0x10
[ 1803.340310][T27967]  ? skb_put+0x138/0x1b0
[ 1803.344567][T27967]  ? audit_log_n_string+0x251/0x540
[ 1803.349765][T27967]  ? audit_log_n_untrustedstring+0xf2/0x100
[ 1803.355655][T27967]  ? __pfx_avc_audit_post_callback+0x10/0x10
[ 1803.361623][T27967]  common_lsm_audit+0x260/0x2210
[ 1803.366545][T27967]  ? irqentry_exit+0x3b/0x90
[ 1803.371130][T27967]  ? __pfx_common_lsm_audit+0x10/0x10
[ 1803.376489][T27967]  ? preempt_schedule_thunk+0x1a/0x30
[ 1803.381860][T27967]  ? preempt_schedule_common+0x44/0xc0
[ 1803.387345][T27967]  ? slow_avc_audit+0x17d/0x210
[ 1803.392200][T27967]  slow_avc_audit+0x17d/0x210
[ 1803.396870][T27967]  ? __pfx_slow_avc_audit+0x10/0x10
[ 1803.402353][T27967]  ? avc_denied+0x138/0x180
[ 1803.406871][T27967]  ? avc_has_perm_noaudit+0x2f8/0x3a0
[ 1803.412251][T27967]  avc_has_perm+0x18d/0x1c0
[ 1803.416768][T27967]  ? __pfx_avc_has_perm+0x10/0x10
[ 1803.421785][T27967]  ? hlock_class+0x4e/0x130
[ 1803.426293][T27967]  sock_has_perm+0x253/0x2f0
[ 1803.430875][T27967]  ? __pfx_sock_has_perm+0x10/0x10
[ 1803.435990][T27967]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1803.441285][T27967]  ? security_socket_getsockopt+0x18/0x240
[ 1803.447075][T27967]  security_socket_getsockopt+0x211/0x240
[ 1803.452781][T27967]  do_sock_getsockopt+0xf5/0x800
[ 1803.457711][T27967]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1803.463245][T27967]  ? lock_acquire+0x2f/0xb0
[ 1803.467731][T27967]  ? __fget_files+0x40/0x3a0
[ 1803.472322][T27967]  ? __fget_files+0x206/0x3a0
[ 1803.476990][T27967]  __sys_getsockopt+0x12f/0x260
[ 1803.481832][T27967]  __x64_sys_getsockopt+0xbd/0x160
[ 1803.486939][T27967]  ? do_syscall_64+0x91/0x250
[ 1803.491600][T27967]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1803.496789][T27967]  do_syscall_64+0xcd/0x250
[ 1803.501277][T27967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1803.507165][T27967] RIP: 0033:0x7f68cb17e819
[ 1803.511578][T27967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1803.531214][T27967] RSP: 002b:00007f68cbf94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1803.539623][T27967] RAX: ffffffffffffffda RBX: 00007f68cb335fa0 RCX: 00007f68cb17e819
[ 1803.547587][T27967] RDX: 0000000000000009 RSI: 0000000000000101 RDI: 0000000000000004
[ 1803.555546][T27967] RBP: 00007f68cbf94090 R08: 0000000000000000 R09: 0000000000000000
[ 1803.563517][T27967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1803.571486][T27967] R13: 0000000000000000 R14: 00007f68cb335fa0 R15: 00007ffe381dea68
[ 1803.579452][T27967]  </TASK>
[ 1803.695724][   T29] audit: type=1400 audit(1803.193:3729): avc:  denied  { getopt } for  pid=27966 comm="syz.8.5116" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1803.696257][ T5922] usb 2-1: USB disconnect, device number 78
[ 1803.798466][T27971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16412 sclass=netlink_route_socket pid=27971 comm=syz.7.5118
[ 1804.219687][   T29] audit: type=1400 audit(1804.183:3730): avc:  denied  { getopt } for  pid=27970 comm="syz.7.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1804.980202][T23252] usb 10-1: USB disconnect, device number 116
[ 1804.990695][ T5922] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1805.159457][ T5922] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93
[ 1805.190503][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.208869][ T5922] usb 2-1: Product: syz
[ 1805.243664][ T5922] usb 2-1: Manufacturer: syz
[ 1805.285653][ T5922] usb 2-1: SerialNumber: syz
[ 1805.417275][ T5922] usb 2-1: config 0 descriptor??
[ 1805.660591][T23076] usb 10-1: new high-speed USB device number 117 using dummy_hcd
[ 1805.693270][ T5922] usb 2-1: USB disconnect, device number 79
[ 1805.862107][T23076] usb 10-1: Using ep0 maxpacket: 32
[ 1805.862152][T10150] usb 9-1: new high-speed USB device number 124 using dummy_hcd
[ 1805.924260][T23076] usb 10-1: config 1 has an invalid interface number: 236 but max is 0
[ 1805.933612][T23076] usb 10-1: config 1 has no interface number 0
[ 1805.940734][T23076] usb 10-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1805.952864][T23076] usb 10-1: config 1 interface 236 has no altsetting 0
[ 1805.969830][T23076] usb 10-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1805.982970][T23076] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.996467][T23076] usb 10-1: Product: syz
[ 1806.003417][T23076] usb 10-1: Manufacturer: syz
[ 1806.008286][T23076] usb 10-1: SerialNumber: syz
[ 1806.053288][T27997] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1806.078011][T23076] ti_usb_3410_5052 10-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1806.126443][T10150] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1806.170920][T10150] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1806.190552][T10150] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1806.204109][T10150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1806.215555][T10150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1806.234898][T10150] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1806.265965][T10150] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1806.277169][T10150] usb 9-1: Product: syz
[ 1806.310421][T10150] usb 9-1: Manufacturer: syz
[ 1806.338605][T10150] cdc_wdm 9-1:1.0: skipping garbage
[ 1806.342744][T28005] syz.1.5129[28005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1806.343885][T28005] syz.1.5129[28005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1806.349778][T10150] cdc_wdm 9-1:1.0: skipping garbage
[ 1806.366773][T28005] syz.1.5129[28005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1806.426233][T10150] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1806.449623][T10150] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1806.495974][T23252] usb 10-1: USB disconnect, device number 117
[ 1806.635827][T18690] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1806.843476][T18690] usb 6-1: Using ep0 maxpacket: 32
[ 1806.889956][T18690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1806.948690][T18690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1807.016586][T18690] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1807.038657][T18690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1807.049937][T18690] usb 6-1: config 0 descriptor??
[ 1807.057988][T18690] hub 6-1:0.0: USB hub found
[ 1807.473012][T18690] hub 6-1:0.0: 1 port detected
[ 1808.646538][T18690] usb 9-1: USB disconnect, device number 124
[ 1808.681973][T23252] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 1808.688915][T13321] usb 6-1: USB disconnect, device number 116
[ 1813.000850][T23076] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1813.386686][T23076] usb 2-1: device descriptor read/64, error -71
[ 1813.996152][T18690] usb 10-1: new high-speed USB device number 118 using dummy_hcd
[ 1814.154666][T18690] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1814.173690][T18690] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1814.212193][T18690] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1814.230494][T23076] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1814.430970][T18690] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1814.503798][T18690] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1814.549293][T28077] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5149'.
[ 1814.570037][T18690] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1814.579613][T18690] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1814.587843][T18690] usb 10-1: Product: syz
[ 1814.592229][T18690] usb 10-1: Manufacturer: syz
[ 1814.605684][T18690] cdc_wdm 10-1:1.0: skipping garbage
[ 1814.614735][T18690] cdc_wdm 10-1:1.0: skipping garbage
[ 1814.623614][T18690] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1814.629622][T18690] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1814.646804][T23076] usb 2-1: device descriptor read/64, error -71
[ 1814.787891][T23076] usb usb2-port1: attempt power cycle
[ 1816.062818][T23076] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1816.233112][T23076] usb 2-1: device descriptor read/8, error -71
[ 1816.540590][T23076] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1816.551054][T23252] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1816.894632][T18690] usb 10-1: USB disconnect, device number 118
[ 1817.019475][T23076] usb 2-1: device descriptor read/8, error -71
[ 1817.170456][T23252] usb 6-1: Using ep0 maxpacket: 32
[ 1817.179317][T23252] usb 6-1: config 1 has an invalid interface number: 236 but max is 0
[ 1817.272878][T23076] usb usb2-port1: unable to enumerate USB device
[ 1817.338608][T23252] usb 6-1: config 1 has no interface number 0
[ 1817.345371][T23252] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1817.355685][T23252] usb 6-1: config 1 interface 236 has no altsetting 0
[ 1817.365128][T23252] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1817.425893][T23252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1818.028580][T23252] usb 6-1: Product: syz
[ 1818.033653][T23252] usb 6-1: Manufacturer: syz
[ 1818.038424][T23252] usb 6-1: SerialNumber: syz
[ 1818.061758][T28095] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1818.070967][T23252] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1818.568555][T28129] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5161'.
[ 1818.680960][T18690] usb 6-1: USB disconnect, device number 117
[ 1819.951021][T23076] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1820.380338][T23076] usb 6-1: Using ep0 maxpacket: 16
[ 1820.437473][T23076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1820.471811][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5166'.
[ 1820.480901][T28148] FAULT_INJECTION: forcing a failure.
[ 1820.480901][T28148] name failslab, interval 1, probability 0, space 0, times 0
[ 1820.493942][T28148] CPU: 1 UID: 0 PID: 28148 Comm: syz.9.5166 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1820.504363][T28148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1820.514438][T28148] Call Trace:
[ 1820.517714][T28148]  <TASK>
[ 1820.520645][T28148]  dump_stack_lvl+0x16c/0x1f0
[ 1820.525334][T28148]  should_fail_ex+0x497/0x5b0
[ 1820.530014][T28148]  ? fs_reclaim_acquire+0xae/0x150
[ 1820.535129][T28148]  should_failslab+0xc2/0x120
[ 1820.539814][T28148]  __kmalloc_node_noprof+0xd1/0x430
[ 1820.545016][T28148]  ? preempt_schedule_thunk+0x1a/0x30
[ 1820.550385][T28148]  ? __kvmalloc_node_noprof+0xad/0x1a0
[ 1820.555849][T28148]  ? __pfx___mutex_lock+0x10/0x10
[ 1820.560885][T28148]  __kvmalloc_node_noprof+0xad/0x1a0
[ 1820.566172][T28148]  nf_hook_entries_grow+0x282/0x810
[ 1820.571383][T28148]  ? nf_defrag_ipv4_enable+0x25/0x120
[ 1820.576788][T28148]  __nf_register_net_hook+0x1cd/0x730
[ 1820.582167][T28148]  nf_register_net_hook+0x109/0x160
[ 1820.587369][T28148]  nf_register_net_hooks+0x5d/0xd0
[ 1820.592485][T28148]  nf_defrag_ipv4_enable+0xb8/0x120
[ 1820.597684][T28148]  nf_ct_netns_do_get+0x31f/0x620
[ 1820.602711][T28148]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1820.608269][T28148]  nf_ct_netns_get+0x39/0x150
[ 1820.612963][T28148]  nft_synproxy_do_init+0x2a5/0x5c0
[ 1820.618171][T28148]  nft_obj_init+0x205/0x370
[ 1820.622676][T28148]  nf_tables_newobj+0x1048/0x1a70
[ 1820.627712][T28148]  ? __pfx_nf_tables_newobj+0x10/0x10
[ 1820.633087][T28148]  ? trace_lock_acquire+0x14a/0x1d0
[ 1820.638299][T28148]  ? __nla_parse+0x40/0x60
[ 1820.642721][T28148]  nfnetlink_rcv_batch+0x1a28/0x24e0
[ 1820.648028][T28148]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[ 1820.653663][T28148]  ? __schedule+0xe62/0x5ae0
[ 1820.658281][T28148]  ? avc_has_perm_noaudit+0x143/0x3a0
[ 1820.663687][T28148]  ? __nla_parse+0x40/0x60
[ 1820.668103][T28148]  nfnetlink_rcv+0x3c3/0x430
[ 1820.672685][T28148]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1820.677793][T28148]  netlink_unicast+0x53c/0x7f0
[ 1820.682552][T28148]  ? __pfx_netlink_unicast+0x10/0x10
[ 1820.687831][T28148]  netlink_sendmsg+0x8b8/0xd70
[ 1820.692593][T28148]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1820.697875][T28148]  ____sys_sendmsg+0xaaf/0xc90
[ 1820.702628][T28148]  ? copy_msghdr_from_user+0x10b/0x160
[ 1820.708071][T28148]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1820.713355][T28148]  ___sys_sendmsg+0x135/0x1e0
[ 1820.718018][T28148]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1820.723209][T28148]  ? __pfx_lock_release+0x10/0x10
[ 1820.728216][T28148]  ? trace_lock_acquire+0x14a/0x1d0
[ 1820.733413][T28148]  ? __fget_files+0x206/0x3a0
[ 1820.738084][T28148]  __sys_sendmsg+0x16e/0x220
[ 1820.742659][T28148]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1820.747769][T28148]  do_syscall_64+0xcd/0x250
[ 1820.752257][T28148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1820.758142][T28148] RIP: 0033:0x7f0d1d57e819
[ 1820.762542][T28148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1820.782149][T28148] RSP: 002b:00007f0d1e3c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1820.790547][T28148] RAX: ffffffffffffffda RBX: 00007f0d1d736160 RCX: 00007f0d1d57e819
[ 1820.798504][T28148] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005
[ 1820.806458][T28148] RBP: 00007f0d1e3c3090 R08: 0000000000000000 R09: 0000000000000000
[ 1820.814415][T28148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1820.822385][T28148] R13: 0000000000000000 R14: 00007f0d1d736160 R15: 00007ffe78915c18
[ 1820.830357][T28148]  </TASK>
[ 1820.844922][T23076] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1820.858379][T23076] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1820.871316][T23076] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1820.880979][T23076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1820.891101][T23076] usb 6-1: config 0 descriptor??
[ 1820.901311][T23076] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input95
[ 1820.936983][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1820.965888][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1820.982911][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1820.996588][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1821.104310][T10622] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1821.156722][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1821.226513][ T5189] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1821.275736][T28135] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1821.409400][T28158] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5169'.
[ 1821.441580][T23076] usb 6-1: USB disconnect, device number 118
[ 1823.202417][T28180] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5175'.
[ 1823.637689][T28180] : entered promiscuous mode
[ 1823.688673][   T29] audit: type=1400 audit(1823.653:3731): avc:  denied  { execute } for  pid=28179 comm="syz.5.5175" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[ 1823.895763][T28191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5178'.
[ 1823.895818][T28191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1823.895852][T28191] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1823.896813][T28191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1823.896837][T28191] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1824.282740][T18690] usb 10-1: new high-speed USB device number 119 using dummy_hcd
[ 1824.690430][T18690] usb 10-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93
[ 1824.709000][T18690] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1824.734352][T18690] usb 10-1: Product: syz
[ 1824.744007][T18690] usb 10-1: Manufacturer: syz
[ 1824.749586][T10150] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1824.753968][T18690] usb 10-1: SerialNumber: syz
[ 1824.778623][   T29] audit: type=1400 audit(1824.733:3732): avc:  denied  { unmount } for  pid=23788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 1824.813937][T18690] usb 10-1: config 0 descriptor??
[ 1825.020418][T10150] usb 2-1: Using ep0 maxpacket: 8
[ 1825.034698][T10150] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32
[ 1825.074236][T10150] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202
[ 1825.814090][T10150] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29
[ 1825.823270][T10150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.831391][T10150] usb 2-1: Product: syz
[ 1825.835620][T10150] usb 2-1: Manufacturer: syz
[ 1825.840320][T10150] usb 2-1: SerialNumber: syz
[ 1825.854508][T10150] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state.
[ 1825.865950][T10150] dvb-usb: bulk message failed: -22 (3/0)
[ 1826.039316][T10150] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1826.067199][T10150] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author)
[ 1826.090390][T10150] usb 2-1: media controller created
[ 1826.127456][T10150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1826.305900][   T29] audit: type=1400 audit(1826.273:3733): avc:  denied  { write } for  pid=28196 comm="syz.1.5179" path="socket:[102686]" dev="sockfs" ino=102686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1826.341080][T10150] dvb-usb: bulk message failed: -22 (6/0)
[ 1826.346945][T10150] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author'
[ 1826.389002][T10150] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96
[ 1826.509746][T10150] dvb-usb: schedule remote query interval to 150 msecs.
[ 1827.091969][T10150] dvb-usb: bulk message failed: -22 (3/0)
[ 1827.130490][T10150] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected.
[ 1827.169957][T10150] usb 2-1: USB disconnect, device number 84
[ 1827.594495][T10150] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected.
[ 1828.092511][  T964] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1828.135779][T18690] usb 10-1: USB disconnect, device number 119
[ 1828.234490][T10150] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[ 1828.318850][T28253] can0: slcan on ttynull.
[ 1828.330909][   T29] audit: type=1400 audit(1828.303:3734): avc:  denied  { read } for  pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1828.354877][   T29] audit: type=1400 audit(1828.323:3735): avc:  denied  { listen } for  pid=28252 comm="syz.8.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1828.400596][  T964] usb 6-1: Using ep0 maxpacket: 32
[ 1828.407174][T10150] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1828.418232][T10150] usb 2-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0x19, changing to 0x9
[ 1828.430002][T10150] usb 2-1: config 0 interface 0 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[ 1828.439820][   T29] audit: type=1400 audit(1828.333:3736): avc:  denied  { search } for  pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1828.441319][T10150] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1828.468678][T10150] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=fe.c3
[ 1828.478190][  T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1828.510347][T10150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.518471][T28252] can0 (unregistered): slcan off ttynull.
[ 1828.531096][T10150] usb 2-1: config 0 descriptor??
[ 1828.540475][  T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1828.550233][  T964] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1828.567838][   T29] audit: type=1400 audit(1828.333:3737): avc:  denied  { read } for  pid=5498 comm="dhcpcd" name="n222" dev="tmpfs" ino=19466 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1828.613251][  T964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.681558][  T964] usb 6-1: config 0 descriptor??
[ 1828.717487][  T964] hub 6-1:0.0: USB hub found
[ 1828.731711][   T29] audit: type=1400 audit(1828.333:3738): avc:  denied  { open } for  pid=5498 comm="dhcpcd" path="/run/udev/data/n222" dev="tmpfs" ino=19466 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1828.835225][   T29] audit: type=1400 audit(1828.333:3739): avc:  denied  { getattr } for  pid=5498 comm="dhcpcd" path="/run/udev/data/n222" dev="tmpfs" ino=19466 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1828.858967][   T29] audit: type=1400 audit(1828.733:3740): avc:  denied  { read } for  pid=28262 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1828.926519][T28237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1828.930500][   T29] audit: type=1400 audit(1828.733:3741): avc:  denied  { open } for  pid=28262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1828.936342][T28237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1828.992149][   T29] audit: type=1400 audit(1828.733:3742): avc:  denied  { getattr } for  pid=28262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1828.992192][   T29] audit: type=1400 audit(1828.863:3743): avc:  denied  { write } for  pid=28236 comm="syz.1.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1829.001403][  T964] hub 6-1:0.0: 1 port detected
[ 1829.074594][   T29] audit: type=1400 audit(1829.043:3744): avc:  denied  { append } for  pid=28266 comm="syz.7.5197" name="sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1829.259173][T28261] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5196'.
[ 1829.265145][T28261] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5196'.
[ 1829.376276][T28277] netlink: 'syz.8.5198': attribute type 21 has an invalid length.
[ 1829.376318][T28277] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5198'.
[ 1829.484462][   T29] audit: type=1400 audit(1829.453:3745): avc:  denied  { write } for  pid=28259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1829.484510][   T29] audit: type=1400 audit(1829.453:3746): avc:  denied  { add_name } for  pid=28259 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1829.484543][   T29] audit: type=1400 audit(1829.453:3747): avc:  denied  { create } for  pid=28259 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1830.288918][ T5922] usb 6-1: USB disconnect, device number 119
[ 1830.290567][  T964] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 1830.558507][T10150] usb 2-1: string descriptor 0 read error: -71
[ 1830.578083][T10150] usb 2-1: ucan: probing device on interface #0
[ 1830.585953][T10150] usb 2-1: ucan: invalid EP count (1)
[ 1830.591803][T10150] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1830.615441][T10150] usb 2-1: USB disconnect, device number 85
[ 1831.087807][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5203'.
[ 1831.498390][T28305] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5204'.
[ 1833.767228][   T29] kauditd_printk_skb: 7 callbacks suppressed
[ 1833.767245][   T29] audit: type=1400 audit(1833.733:3755): avc:  denied  { ioctl } for  pid=28354 comm="syz.5.5213" path="socket:[102844]" dev="sockfs" ino=102844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1835.640575][   T29] audit: type=1400 audit(1835.613:3756): avc:  denied  { watch watch_reads } for  pid=28369 comm="syz.5.5218" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1835.667104][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1837.191498][   T29] audit: type=1400 audit(1837.163:3757): avc:  denied  { unmount } for  pid=23966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1842.107461][   T29] audit: type=1400 audit(1841.613:3758): avc:  denied  { map } for  pid=28430 comm="syz.5.5232" path="socket:[101969]" dev="sockfs" ino=101969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1842.136962][   T29] audit: type=1400 audit(1841.613:3759): avc:  denied  { accept } for  pid=28430 comm="syz.5.5232" path="socket:[101969]" dev="sockfs" ino=101969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1842.260984][T10150] usb 9-1: new high-speed USB device number 125 using dummy_hcd
[ 1843.471922][T10150] usb 9-1: Using ep0 maxpacket: 16
[ 1844.047686][T10150] usb 9-1: device descriptor read/all, error -71
[ 1844.187447][   T29] audit: type=1400 audit(1844.153:3760): avc:  denied  { map } for  pid=28444 comm="syz.9.5237" path="socket:[102961]" dev="sockfs" ino=102961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1844.210464][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1844.249165][   T29] audit: type=1400 audit(1844.153:3761): avc:  denied  { read } for  pid=28444 comm="syz.9.5237" path="socket:[102961]" dev="sockfs" ino=102961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1844.252701][T28456] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5236'.
[ 1844.272388][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1844.998394][T28464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5240'.
[ 1845.086437][T28468] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5241'.
[ 1845.408137][   T29] audit: type=1400 audit(1845.373:3762): avc:  denied  { mount } for  pid=28466 comm="syz.8.5239" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1845.499645][   T29] audit: type=1400 audit(1845.413:3763): avc:  denied  { setattr } for  pid=28466 comm="syz.8.5239" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1845.560987][   T29] audit: type=1400 audit(1845.433:3764): avc:  denied  { read write } for  pid=28466 comm="syz.8.5239" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1845.561045][T28471] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1845.591368][   T29] audit: type=1400 audit(1845.433:3765): avc:  denied  { open } for  pid=28466 comm="syz.8.5239" path="/280/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1845.636990][   T29] audit: type=1400 audit(1845.523:3766): avc:  denied  { unmount } for  pid=23149 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1845.656849][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1845.720075][T28477] netlink: 'syz.1.5245': attribute type 4 has an invalid length.
[ 1845.805683][T28477] FAULT_INJECTION: forcing a failure.
[ 1845.805683][T28477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1845.834168][T28477] CPU: 0 UID: 0 PID: 28477 Comm: syz.1.5245 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1845.844580][T28477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1845.854621][T28477] Call Trace:
[ 1845.857872][T28477]  <TASK>
[ 1845.860781][T28477]  dump_stack_lvl+0x16c/0x1f0
[ 1845.865449][T28477]  should_fail_ex+0x497/0x5b0
[ 1845.870101][T28477]  _copy_to_user+0x32/0xd0
[ 1845.874493][T28477]  simple_read_from_buffer+0xd0/0x160
[ 1845.879845][T28477]  proc_fail_nth_read+0x198/0x270
[ 1845.884853][T28477]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1845.890378][T28477]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1845.895913][T28477]  vfs_read+0x1df/0xbe0
[ 1845.900041][T28477]  ? __fget_files+0x1fc/0x3a0
[ 1845.904700][T28477]  ? __pfx___mutex_lock+0x10/0x10
[ 1845.909700][T28477]  ? __pfx_vfs_read+0x10/0x10
[ 1845.914364][T28477]  ? __fget_files+0x206/0x3a0
[ 1845.919015][T28477]  ksys_read+0x12b/0x250
[ 1845.923230][T28477]  ? __pfx_ksys_read+0x10/0x10
[ 1845.927969][T28477]  do_syscall_64+0xcd/0x250
[ 1845.932470][T28477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1845.938376][T28477] RIP: 0033:0x7f466bf7d25c
[ 1845.942768][T28477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1845.962350][T28477] RSP: 002b:00007f466cd62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1845.970736][T28477] RAX: ffffffffffffffda RBX: 00007f466c135fa0 RCX: 00007f466bf7d25c
[ 1845.978682][T28477] RDX: 000000000000000f RSI: 00007f466cd620a0 RDI: 0000000000000004
[ 1845.986629][T28477] RBP: 00007f466cd62090 R08: 0000000000000000 R09: 0000000000000000
[ 1845.994573][T28477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1846.002517][T28477] R13: 0000000000000000 R14: 00007f466c135fa0 R15: 00007ffe8b03eb68
[ 1846.010469][T28477]  </TASK>
[ 1846.013541][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1846.649438][T28481] netlink: 'syz.9.5243': attribute type 1 has an invalid length.
[ 1846.660876][T28481] netlink: 512 bytes leftover after parsing attributes in process `syz.9.5243'.
[ 1848.714783][T28502] delete_channel: no stack
[ 1849.258349][T23252] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1849.910348][T23252] usb 2-1: Using ep0 maxpacket: 32
[ 1849.917129][T23252] usb 2-1: config 1 has an invalid interface number: 236 but max is 0
[ 1849.991467][   T29] audit: type=1400 audit(1849.953:3767): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=34298 daddr=10.128.0.31 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1850.045914][T23252] usb 2-1: config 1 has no interface number 0
[ 1850.143341][T23252] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1850.462794][T23252] usb 2-1: config 1 interface 236 has no altsetting 0
[ 1850.531342][T23252] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1850.580479][T23252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1850.617460][T23252] usb 2-1: Product: syz
[ 1850.637699][T23252] usb 2-1: Manufacturer: syz
[ 1850.655249][T23252] usb 2-1: SerialNumber: syz
[ 1850.677361][T28509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1850.701264][T23252] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1850.919060][T13321] usb 2-1: USB disconnect, device number 86
[ 1852.207043][T28531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28531 comm=syz.9.5258
[ 1852.236131][   T29] audit: type=1800 audit(1852.203:3768): pid=28531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.5258" name="bus" dev="overlay" ino=1130 res=0 errno=0
[ 1853.139173][   T29] audit: type=1804 audit(1853.103:3769): pid=28531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.5258" name="/newroot/212/bus/bus" dev="overlay" ino=1130 res=1 errno=0
[ 1853.195134][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.274691][T28543] tipc: Resetting bearer <eth:vlan0>
[ 1853.644432][T28543] vlan0: entered promiscuous mode
[ 1853.694154][T28543] team0: Port device vlan0 added
[ 1854.771314][T28552] netlink: 'syz.5.5261': attribute type 1 has an invalid length.
[ 1854.771337][T28552] netlink: 636 bytes leftover after parsing attributes in process `syz.5.5261'.
[ 1855.715036][T28565] ALSA: seq fatal error: cannot create timer (-22)
[ 1856.401526][T28566] process '/newroot/235/file0' started with executable stack
[ 1857.662335][T28589] netlink: 'syz.7.5270': attribute type 1 has an invalid length.
[ 1857.670748][T28589] netlink: 512 bytes leftover after parsing attributes in process `syz.7.5270'.
[ 1857.761243][   T29] audit: type=1400 audit(1857.653:3770): avc:  denied  { ioctl } for  pid=28573 comm="syz.8.5267" path="socket:[103151]" dev="sockfs" ino=103151 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1858.280377][T23252] usb 10-1: new full-speed USB device number 120 using dummy_hcd
[ 1858.874638][T23252] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1859.470855][T23252] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1859.840292][T23252] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1859.854751][T23252] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1859.897314][T23252] usb 10-1: config 0 descriptor??
[ 1859.979243][T23252] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1859.998513][T23252] dvb-usb: bulk message failed: -22 (3/0)
[ 1860.025288][T23252] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1860.043596][T28606] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5275'.
[ 1860.165304][T23252] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1860.178564][T23252] usb 10-1: media controller created
[ 1860.188301][T23252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1860.211118][T23252] dvb-usb: bulk message failed: -22 (6/0)
[ 1860.216908][T23252] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1860.232164][T28593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1860.246745][T28593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1860.313489][T28611] ucma_write: process 813 (syz.7.5277) changed security contexts after opening file descriptor, this is not allowed.
[ 1860.427208][T23252] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input97
[ 1860.443524][T23252] dvb-usb: schedule remote query interval to 150 msecs.
[ 1860.453322][T23252] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1860.463672][T23252] usb 10-1: USB disconnect, device number 120
[ 1861.072929][T23252] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1861.644205][   T29] audit: type=1800 audit(1861.613:3771): pid=28619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5279" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[ 1862.980342][T23252] usb 9-1: new high-speed USB device number 127 using dummy_hcd
[ 1863.061554][T28633] FAULT_INJECTION: forcing a failure.
[ 1863.061554][T28633] name failslab, interval 1, probability 0, space 0, times 0
[ 1863.100309][T28633] CPU: 1 UID: 0 PID: 28633 Comm: syz.1.5286 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1863.110756][T28633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1863.120818][T28633] Call Trace:
[ 1863.124098][T28633]  <TASK>
[ 1863.127028][T28633]  dump_stack_lvl+0x16c/0x1f0
[ 1863.131723][T28633]  should_fail_ex+0x497/0x5b0
[ 1863.136406][T28633]  ? fs_reclaim_acquire+0xae/0x150
[ 1863.141529][T28633]  should_failslab+0xc2/0x120
[ 1863.146218][T28633]  __kmalloc_node_noprof+0xd1/0x430
[ 1863.151427][T28633]  ? __kvmalloc_node_noprof+0xad/0x1a0
[ 1863.156906][T28633]  ? find_held_lock+0x2d/0x110
[ 1863.161683][T28633]  __kvmalloc_node_noprof+0xad/0x1a0
[ 1863.166976][T28633]  traverse.part.0.constprop.0+0x392/0x640
[ 1863.172795][T28633]  seq_lseek+0x2b4/0x440
[ 1863.177067][T28633]  proc_reg_llseek+0x205/0x2f0
[ 1863.181856][T28633]  ksys_lseek+0xf0/0x1b0
[ 1863.186107][T28633]  do_syscall_64+0xcd/0x250
[ 1863.190618][T28633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1863.196697][T28633] RIP: 0033:0x7f466bf7e819
[ 1863.201116][T28633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1863.220732][T28633] RSP: 002b:00007f466cd41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[ 1863.229130][T28633] RAX: ffffffffffffffda RBX: 00007f466c136080 RCX: 00007f466bf7e819
[ 1863.237085][T28633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000b
[ 1863.245041][T28633] RBP: 00007f466cd41090 R08: 0000000000000000 R09: 0000000000000000
[ 1863.252997][T28633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1863.260950][T28633] R13: 0000000000000000 R14: 00007f466c136080 R15: 00007ffe8b03eb68
[ 1863.268926][T28633]  </TASK>
[ 1863.354965][T23252] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1863.366368][T23252] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1863.407825][T23252] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1863.420579][T23252] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1863.429678][T23252] usb 9-1: Manufacturer: syz
[ 1863.544327][T23252] usb 9-1: config 0 descriptor??
[ 1864.012936][T23252] rc_core: IR keymap rc-hauppauge not found
[ 1864.020511][T23252] Registered IR keymap rc-empty
[ 1864.067346][T23252] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1864.355945][T23252] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input98
[ 1864.381215][T23252] usb 9-1: USB disconnect, device number 127
[ 1865.150566][T28656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'.
[ 1866.186719][   T29] audit: type=1400 audit(1866.153:3772): avc:  denied  { append } for  pid=28666 comm="syz.8.5294" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1866.746114][   T29] audit: type=1400 audit(1866.713:3773): avc:  denied  { ioctl } for  pid=28662 comm="syz.1.5295" path="mnt:[4026533856]" dev="nsfs" ino=4026533856 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1866.977474][T28681] FAULT_INJECTION: forcing a failure.
[ 1866.977474][T28681] name failslab, interval 1, probability 0, space 0, times 0
[ 1866.992235][T28681] CPU: 0 UID: 0 PID: 28681 Comm: syz.9.5297 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1867.002645][T28681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1867.012674][T28681] Call Trace:
[ 1867.015940][T28681]  <TASK>
[ 1867.018846][T28681]  dump_stack_lvl+0x16c/0x1f0
[ 1867.023506][T28681]  should_fail_ex+0x497/0x5b0
[ 1867.028156][T28681]  ? fs_reclaim_acquire+0xae/0x150
[ 1867.033242][T28681]  should_failslab+0xc2/0x120
[ 1867.037896][T28681]  __kmalloc_noprof+0xcb/0x400
[ 1867.042644][T28681]  __list_lru_init+0xee/0x650
[ 1867.047297][T28681]  alloc_super+0x90d/0xbd0
[ 1867.051706][T28681]  sget_fc+0x116/0xc20
[ 1867.055779][T28681]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 1867.061233][T28681]  ? __pfx_mqueue_fill_super+0x10/0x10
[ 1867.066681][T28681]  get_tree_nodev+0x28/0x190
[ 1867.071254][T28681]  mqueue_get_tree+0xf1/0x130
[ 1867.075921][T28681]  vfs_get_tree+0x8f/0x380
[ 1867.080840][T28681]  ? refcount_dec_and_lock+0x32/0xc0
[ 1867.086130][T28681]  fc_mount+0x16/0xc0
[ 1867.090132][T28681]  mq_init_ns+0x426/0x620
[ 1867.094631][T28681]  copy_ipcs+0x383/0x600
[ 1867.098865][T28681]  ? copy_utsname+0xab/0x470
[ 1867.103452][T28681]  create_new_namespaces+0x20a/0xad0
[ 1867.108733][T28681]  ? security_capable+0x7e/0x260
[ 1867.113663][T28681]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1867.119284][T28681]  ksys_unshare+0x45d/0xa40
[ 1867.123868][T28681]  ? __pfx_ksys_unshare+0x10/0x10
[ 1867.128882][T28681]  ? ksys_write+0x1ba/0x250
[ 1867.133382][T28681]  __x64_sys_unshare+0x31/0x40
[ 1867.138131][T28681]  do_syscall_64+0xcd/0x250
[ 1867.142617][T28681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1867.148501][T28681] RIP: 0033:0x7f0d1d57e819
[ 1867.152898][T28681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1867.172487][T28681] RSP: 002b:00007f0d1e3e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1867.180894][T28681] RAX: ffffffffffffffda RBX: 00007f0d1d736080 RCX: 00007f0d1d57e819
[ 1867.188847][T28681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200
[ 1867.196802][T28681] RBP: 00007f0d1e3e4090 R08: 0000000000000000 R09: 0000000000000000
[ 1867.204758][T28681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1867.212710][T28681] R13: 0000000000000000 R14: 00007f0d1d736080 R15: 00007ffe78915c18
[ 1867.220675][T28681]  </TASK>
[ 1869.047677][T28693] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5301'.
[ 1869.622048][T28698] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5303'.
[ 1869.930370][T17373] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1870.052565][T13321] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1870.370595][   T29] audit: type=1400 audit(1870.063:3774): avc:  denied  { bind } for  pid=28717 comm="syz.7.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1870.410332][T17373] usb 9-1: Using ep0 maxpacket: 16
[ 1870.947459][T17373] usb 9-1: no configurations
[ 1870.952767][T17373] usb 9-1: can't read configurations, error -22
[ 1871.001050][T13321] usb 2-1: Using ep0 maxpacket: 16
[ 1871.033280][T13321] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1871.084227][T13321] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1871.100354][T13321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.101063][T17373] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1871.108336][T13321] usb 2-1: Product: syz
[ 1871.108353][T13321] usb 2-1: Manufacturer: syz
[ 1871.108367][T13321] usb 2-1: SerialNumber: syz
[ 1871.117299][T13321] usb 2-1: config 0 descriptor??
[ 1871.880425][T23754] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1871.952002][T17373] usb 9-1: Using ep0 maxpacket: 16
[ 1872.015047][T17373] usb 9-1: no configurations
[ 1872.019980][T17373] usb 9-1: can't read configurations, error -22
[ 1872.027195][T17373] usb usb9-port1: attempt power cycle
[ 1872.075301][T23754] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1872.105306][T23754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.111585][  T964] usb 2-1: USB disconnect, device number 87
[ 1872.114758][T23754] usb 6-1: config 0 descriptor??
[ 1872.410697][T17373] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1872.439349][   T29] audit: type=1400 audit(1872.393:3775): avc:  denied  { write } for  pid=28735 comm="syz.7.5314" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1872.471013][T17373] usb 9-1: Using ep0 maxpacket: 16
[ 1872.479295][T17373] usb 9-1: no configurations
[ 1872.484646][T17373] usb 9-1: can't read configurations, error -22
[ 1872.518831][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5314'.
[ 1872.549260][   T29] audit: type=1400 audit(1872.513:3776): avc:  denied  { setopt } for  pid=28735 comm="syz.7.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1872.620362][T17373] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1872.640957][T17373] usb 9-1: Using ep0 maxpacket: 16
[ 1872.646529][T17373] usb 9-1: no configurations
[ 1872.651624][T17373] usb 9-1: can't read configurations, error -22
[ 1872.659509][T17373] usb usb9-port1: unable to enumerate USB device
[ 1872.831174][T23754] usb 6-1: Cannot set autoneg
[ 1872.837013][T23754] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1872.857414][T23754] usb 6-1: USB disconnect, device number 120
[ 1873.023028][T17373] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1873.070558][T18690] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1873.180536][T17373] usb 2-1: Using ep0 maxpacket: 32
[ 1873.186992][T17373] usb 2-1: config 1 has an invalid interface number: 236 but max is 0
[ 1873.195216][T17373] usb 2-1: config 1 has no interface number 0
[ 1873.204541][T17373] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1873.215170][T17373] usb 2-1: config 1 interface 236 has no altsetting 0
[ 1873.220916][T18690] usb 9-1: Using ep0 maxpacket: 32
[ 1873.224247][T17373] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1873.232041][T18690] usb 9-1: config 1 has an invalid interface number: 236 but max is 0
[ 1873.236884][T17373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1873.248822][T23252] usb 10-1: new high-speed USB device number 121 using dummy_hcd
[ 1873.260981][T18690] usb 9-1: config 1 has no interface number 0
[ 1873.267078][T18690] usb 9-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1873.270288][T17373] usb 2-1: Product: syz
[ 1873.277632][T18690] usb 9-1: config 1 interface 236 has no altsetting 0
[ 1873.291018][T18690] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1873.293371][T17373] usb 2-1: Manufacturer: syz
[ 1873.304839][T18690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1873.309434][T17373] usb 2-1: SerialNumber: syz
[ 1873.325079][T18690] usb 9-1: Product: syz
[ 1873.332583][T28741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1873.333545][T18690] usb 9-1: Manufacturer: syz
[ 1873.341061][T17373] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1873.346828][T18690] usb 9-1: SerialNumber: syz
[ 1873.370677][T28739] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1873.417318][T18690] ti_usb_3410_5052 9-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1873.440322][T23252] usb 10-1: Using ep0 maxpacket: 16
[ 1873.446820][T23252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1873.462398][T23252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1873.620800][T23252] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1873.623009][T17373] usb 9-1: USB disconnect, device number 6
[ 1873.637418][T23252] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1873.649688][T23252] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1873.659886][T23252] usb 10-1: config 0 descriptor??
[ 1874.082837][T13321] usb 2-1: USB disconnect, device number 88
[ 1874.202869][T23252] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[ 1874.239631][T23252] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0013/input/input99
[ 1874.277983][T28756] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5320'.
[ 1874.342929][T23252] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1874.545321][   T29] audit: type=1400 audit(1874.513:3777): avc:  denied  { connect } for  pid=28759 comm="syz.5.5321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1875.296604][T28758] nfs4: Bad value for 'source'
[ 1875.685228][T28776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5325'.
[ 1877.595768][  T964] usb 10-1: USB disconnect, device number 121
[ 1877.685357][T28807] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5332'.
[ 1878.277359][T23252] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1878.750490][T23252] usb 9-1: Using ep0 maxpacket: 32
[ 1879.343730][T23252] usb 9-1: config 1 has an invalid interface number: 236 but max is 0
[ 1879.372407][T23252] usb 9-1: config 1 has no interface number 0
[ 1879.385461][T23252] usb 9-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1879.495455][T23252] usb 9-1: config 1 interface 236 has no altsetting 0
[ 1879.504230][T23252] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1879.529373][T23252] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1879.537510][T23252] usb 9-1: Product: syz
[ 1879.546858][T23252] usb 9-1: Manufacturer: syz
[ 1879.551933][T23252] usb 9-1: SerialNumber: syz
[ 1879.564071][T28803] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1879.583492][T23252] ti_usb_3410_5052 9-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1880.482748][T23853] usb 9-1: USB disconnect, device number 7
[ 1881.197265][   T29] audit: type=1400 audit(1881.163:3778): avc:  denied  { setopt } for  pid=28820 comm="syz.7.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1881.280406][   T29] audit: type=1400 audit(1881.193:3779): avc:  denied  { write } for  pid=28820 comm="syz.7.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1881.300159][   T29] audit: type=1400 audit(1881.253:3780): avc:  denied  { getopt } for  pid=28843 comm="syz.1.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1881.330468][T28844] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1881.368237][T28820] delete_channel: no stack
[ 1882.358105][T28859] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5344'.
[ 1882.370406][T23853] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1882.378111][T13321] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1882.631063][T23853] usb 6-1: Using ep0 maxpacket: 32
[ 1882.636218][T13321] usb 2-1: Using ep0 maxpacket: 16
[ 1882.654211][T23853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1882.684656][T23853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1882.699973][T13321] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[ 1882.710477][T13321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1882.718536][T13321] usb 2-1: Product: syz
[ 1882.730440][T23853] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1882.739518][T23853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.748629][T13321] usb 2-1: Manufacturer: syz
[ 1882.756881][T13321] usb 2-1: SerialNumber: syz
[ 1882.898542][T10150] usb 10-1: new low-speed USB device number 122 using dummy_hcd
[ 1882.923948][T23853] usb 6-1: config 0 descriptor??
[ 1883.081996][T10150] usb 10-1: config 213 has an invalid interface number: 252 but max is 0
[ 1883.094330][T10150] usb 10-1: config 213 has no interface number 0
[ 1883.103914][T13321] usb 2-1: config 0 descriptor??
[ 1883.104995][T10150] usb 10-1: string descriptor 0 read error: -22
[ 1883.115609][T10150] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1883.116453][T23853] hub 6-1:0.0: USB hub found
[ 1883.125701][T10150] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1883.190723][T13321] usb 2-1: Found UVC 0.00 device syz (046d:0721)
[ 1883.197873][T13321] usb 2-1: No valid video chain found.
[ 1883.334871][T23853] hub 6-1:0.0: 1 port detected
[ 1884.057090][T23853] usb 2-1: USB disconnect, device number 89
[ 1885.076509][T23853] usb 6-1: USB disconnect, device number 121
[ 1885.380595][T17373] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[ 1885.386953][T13321] usb 10-1: USB disconnect, device number 122
[ 1885.782538][T17373] usb 9-1: config 213 has an invalid interface number: 252 but max is 0
[ 1885.802549][T17373] usb 9-1: config 213 has no interface number 0
[ 1885.819393][T17373] usb 9-1: string descriptor 0 read error: -22
[ 1885.886685][T28902] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5352'.
[ 1885.896082][T28902] unsupported nlmsg_type 40
[ 1886.018144][T17373] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1886.027672][T17373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[ 1886.409292][T23252] usb 9-1: USB disconnect, device number 8
[ 1886.806405][T28920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5356'.
[ 1886.864248][   T29] audit: type=1400 audit(1886.833:3781): avc:  denied  { setopt } for  pid=28924 comm="syz.9.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1886.991795][   T29] audit: type=1400 audit(1886.913:3782): avc:  denied  { shutdown } for  pid=28924 comm="syz.9.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1887.330646][   T29] audit: type=1400 audit(1886.983:3783): avc:  denied  { read } for  pid=28924 comm="syz.9.5359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1888.930204][T28961] smc: net device ip6tnl0 applied user defined pnetid SYZ0
[ 1889.521362][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5371'.
[ 1892.240596][T13321] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1892.481356][T13321] usb 2-1: Using ep0 maxpacket: 32
[ 1892.532390][T13321] usb 2-1: config 1 has an invalid interface number: 236 but max is 0
[ 1892.594898][T13321] usb 2-1: config 1 has no interface number 0
[ 1892.602484][T13321] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1892.622527][T13321] usb 2-1: config 1 interface 236 has no altsetting 0
[ 1892.635722][T13321] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 1892.657732][T13321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.677172][T13321] usb 2-1: Product: syz
[ 1892.685454][T13321] usb 2-1: Manufacturer: syz
[ 1892.695259][T13321] usb 2-1: SerialNumber: syz
[ 1892.708752][T28989] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1892.737025][T13321] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected
[ 1892.977843][T13321] usb 2-1: USB disconnect, device number 90
[ 1893.188625][T29005] netlink: 'syz.7.5378': attribute type 1 has an invalid length.
[ 1893.220675][T29005] netlink: 512 bytes leftover after parsing attributes in process `syz.7.5378'.
[ 1894.793400][T29021] syzkaller0: entered promiscuous mode
[ 1894.798901][T29021] syzkaller0: entered allmulticast mode
[ 1894.830344][T13321] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1895.009367][   T29] audit: type=1400 audit(1894.943:3784): avc:  denied  { relabelfrom } for  pid=29020 comm="syz.8.5385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1895.029457][   T29] audit: type=1400 audit(1894.963:3785): avc:  denied  { relabelto } for  pid=29020 comm="syz.8.5385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1895.041629][T13321] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1896.190026][T13321] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1896.310292][T13321] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1896.318581][T13321] usb 2-1: Manufacturer: syz
[ 1896.424831][T13321] usb 2-1: SerialNumber: syz
[ 1896.662667][T13321] yealink 2-1:36.0: invalid payload size 255, expected 16
[ 1896.712175][T13321] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input100
[ 1896.784487][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.791498][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.798699][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.805661][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.812600][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.819535][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.827041][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.834015][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.840976][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.847746][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.853673][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.860622][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.867392][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.873279][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.880206][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.886979][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.892866][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.899800][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.906655][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.912642][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.919577][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.926351][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.932221][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.939354][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.946103][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.951984][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.958875][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.965621][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.971478][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.978368][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1896.985121][    C0] yealink 2-1:36.0: unexpected response 0
[ 1896.991333][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1896.998248][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.005014][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.010903][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.017805][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.024546][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.030418][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.037402][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.044144][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.049998][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.056891][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.063639][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.069482][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.076383][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.083131][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.090330][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.097242][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.103990][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.109843][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.116741][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.123483][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.129353][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.136245][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.142997][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.148864][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.155773][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.162535][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.168416][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.175318][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.182058][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.188605][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.195578][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.202351][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.208230][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.220341][    C0] yealink 2-1:36.0: urb_irq_callback - urb status -71
[ 1897.227132][    C0] yealink 2-1:36.0: unexpected response 0
[ 1897.233172][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.240119][    C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71
[ 1897.246887][    C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19
[ 1898.046921][T13321] usb 2-1: USB disconnect, device number 91
[ 1898.434508][   T29] audit: type=1400 audit(1898.403:3786): avc:  denied  { bind } for  pid=29061 comm="syz.5.5393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1898.839269][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5399'.
[ 1898.930394][T10150] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1899.110428][T10150] usb 6-1: Using ep0 maxpacket: 32
[ 1899.123329][T10150] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1899.140810][T10150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1899.158182][T10150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1899.169797][T10150] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1899.179278][T10150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1899.204825][T10150] usb 6-1: config 0 descriptor??
[ 1899.214322][T29073] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1899.226925][T10150] hub 6-1:0.0: USB hub found
[ 1899.427031][T10150] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1899.848600][T10150] hid-generic 0003:046D:C314.0014: unknown main item tag 0x0
[ 1899.966502][T10150] hid-generic 0003:046D:C314.0014: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.5-1/input0
[ 1900.060093][T29073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1900.073443][T29073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1900.204939][T10150] usb 6-1: USB disconnect, device number 122
[ 1900.909826][T29083] FAULT_INJECTION: forcing a failure.
[ 1900.909826][T29083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1900.923090][T29083] CPU: 1 UID: 0 PID: 29083 Comm: syz.5.5400 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1900.933504][T29083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1900.943561][T29083] Call Trace:
[ 1900.946835][T29083]  <TASK>
[ 1900.949764][T29083]  dump_stack_lvl+0x16c/0x1f0
[ 1900.954452][T29083]  should_fail_ex+0x497/0x5b0
[ 1900.959141][T29083]  _copy_from_user+0x2e/0xd0
[ 1900.963740][T29083]  copy_msghdr_from_user+0x99/0x160
[ 1900.968934][T29083]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1900.974751][T29083]  ___sys_sendmsg+0xff/0x1e0
[ 1900.979339][T29083]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1900.984543][T29083]  ? __pfx_lock_release+0x10/0x10
[ 1900.989562][T29083]  ? trace_lock_acquire+0x14a/0x1d0
[ 1900.994771][T29083]  ? __fget_files+0x206/0x3a0
[ 1900.999456][T29083]  __sys_sendmsg+0x16e/0x220
[ 1901.004045][T29083]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1901.009173][T29083]  do_syscall_64+0xcd/0x250
[ 1901.013676][T29083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1901.019573][T29083] RIP: 0033:0x7fdf5dd7e819
[ 1901.023985][T29083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1901.043675][T29083] RSP: 002b:00007fdf5bbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1901.052085][T29083] RAX: ffffffffffffffda RBX: 00007fdf5df36160 RCX: 00007fdf5dd7e819
[ 1901.060049][T29083] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009
[ 1901.068111][T29083] RBP: 00007fdf5bbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1901.076088][T29083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1901.084061][T29083] R13: 0000000000000000 R14: 00007fdf5df36160 R15: 00007fffbc8d6ae8
[ 1901.092049][T29083]  </TASK>
[ 1901.259684][T29085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5401'.
[ 1901.300850][T29085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5401'.
[ 1901.805687][T29097] sg_write: process 763 (syz.1.5405) changed security contexts after opening file descriptor, this is not allowed.
[ 1901.953788][T29103] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1901.980727][T29103] CIFS: Unable to determine destination address
[ 1902.082789][T29104] delete_channel: no stack
[ 1902.110520][T23853] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1902.243173][   T29] audit: type=1400 audit(1902.213:3787): avc:  denied  { connect } for  pid=29105 comm="syz.8.5408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1902.250326][T23853] usb 2-1: device descriptor read/64, error -71
[ 1903.526991][T23853] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1903.828656][T23853] usb 2-1: device descriptor read/64, error -71
[ 1904.353551][T23853] usb usb2-port1: attempt power cycle
[ 1906.017254][T29152] nfs4: Bad value for 'source'
[ 1906.329753][T29163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41083 sclass=netlink_route_socket pid=29163 comm=syz.1.5422
[ 1907.382179][T23974] Bluetooth: hci5: unexpected event for opcode 0x1405
[ 1908.455845][   T29] audit: type=1400 audit(1908.423:3788): avc:  denied  { accept } for  pid=29175 comm="syz.9.5424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1910.004053][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'.
[ 1911.059850][   T29] audit: type=1400 audit(1911.003:3789): avc:  denied  { read } for  pid=29197 comm="syz.1.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1911.304112][T29218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5433'.
[ 1911.404789][T23974] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1911.414064][T23974] Bluetooth: hci5: Injecting HCI hardware error event
[ 1911.425274][T23974] Bluetooth: hci5: hardware error 0x00
[ 1912.886981][T29236] nfs4: Bad value for 'source'
[ 1913.430385][T10150] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1913.470480][T23974] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1913.600573][T10150] usb 2-1: Using ep0 maxpacket: 16
[ 1913.616102][T10150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14129, setting to 64
[ 1913.640989][T10150] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4f.d1
[ 1913.657359][T10150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.665812][T10150] usb 2-1: Product: syz
[ 1913.678144][T10150] usb 2-1: Manufacturer: syz
[ 1913.683664][T10150] usb 2-1: SerialNumber: syz
[ 1913.697362][T10150] usb 2-1: config 0 descriptor??
[ 1913.964888][   T29] audit: type=1400 audit(1913.933:3790): avc:  denied  { nlmsg_read } for  pid=29237 comm="syz.1.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 1914.008552][T13321] usb 2-1: USB disconnect, device number 95
[ 1914.192290][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.420442][T17373] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1914.489356][T29255] nfs4: Bad value for 'source'
[ 1914.720582][T17373] usb 6-1: device descriptor read/64, error -71
[ 1914.979322][T29271] netlink: 'syz.8.5446': attribute type 1 has an invalid length.
[ 1914.988928][T17373] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1915.000704][T29271] netlink: 512 bytes leftover after parsing attributes in process `syz.8.5446'.
[ 1915.140299][T17373] usb 6-1: device descriptor read/64, error -71
[ 1915.261342][T17373] usb usb6-port1: attempt power cycle
[ 1915.470799][   T29] audit: type=1400 audit(1915.443:3791): avc:  denied  { read } for  pid=29274 comm="syz.8.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1915.680585][T17373] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1915.772466][T17373] usb 6-1: device descriptor read/8, error -71
[ 1916.200796][T17373] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1916.202394][T29290] 
[ 1916.210797][T29290] ======================================================
[ 1916.217784][T29290] WARNING: possible circular locking dependency detected
[ 1916.224771][T29290] 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Not tainted
[ 1916.231573][T29290] ------------------------------------------------------
[ 1916.238589][T29290] syz.1.5452/29290 is trying to acquire lock:
[ 1916.244630][T29290] ffff8881427c05d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.254955][T29290] 
[ 1916.254955][T29290] but task is already holding lock:
[ 1916.262295][T29290] ffff8881427c00a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[ 1916.273676][T29290] 
[ 1916.273676][T29290] which lock already depends on the new lock.
[ 1916.273676][T29290] 
[ 1916.284058][T29290] 
[ 1916.284058][T29290] the existing dependency chain (in reverse order) is:
[ 1916.293066][T29290] 
[ 1916.293066][T29290] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[ 1916.301650][T29290]        blk_mq_submit_bio+0x1fc4/0x24c0
[ 1916.307288][T29290]        __submit_bio+0x384/0x540
[ 1916.312295][T29290]        submit_bio_noacct_nocheck+0x6fb/0xd70
[ 1916.318432][T29290]        submit_bio_noacct+0x93a/0x1e10
[ 1916.323973][T29290]        block_read_full_folio+0x812/0xa50
[ 1916.329754][T29290]        filemap_read_folio+0xc6/0x2a0
[ 1916.335191][T29290]        filemap_get_pages+0x1560/0x1be0
[ 1916.340803][T29290]        filemap_read+0x3ca/0xd70
[ 1916.345803][T29290]        blkdev_read_iter+0x187/0x480
[ 1916.351165][T29290]        vfs_read+0x87f/0xbe0
[ 1916.355815][T29290]        ksys_read+0x12b/0x250
[ 1916.360590][T29290]        do_syscall_64+0xcd/0x250
[ 1916.365776][T29290]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1916.372182][T29290] 
[ 1916.372182][T29290] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[ 1916.380669][T29290]        down_read+0x9a/0x330
[ 1916.385319][T29290]        filemap_fault+0x2e2/0x2820
[ 1916.390501][T29290]        __do_fault+0x10a/0x490
[ 1916.395327][T29290]        do_pte_missing+0xec5/0x3e70
[ 1916.400602][T29290]        __handle_mm_fault+0x100a/0x2a10
[ 1916.406209][T29290]        handle_mm_fault+0x3fa/0xaa0
[ 1916.411469][T29290]        __get_user_pages+0x8d9/0x3b50
[ 1916.416906][T29290]        populate_vma_page_range+0x27f/0x3a0
[ 1916.422859][T29290]        __mm_populate+0x1d6/0x380
[ 1916.427944][T29290]        do_mlock+0x40a/0x7d0
[ 1916.432597][T29290]        __x64_sys_mlock+0x59/0x80
[ 1916.437682][T29290]        do_syscall_64+0xcd/0x250
[ 1916.442681][T29290]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1916.449076][T29290] 
[ 1916.449076][T29290] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[ 1916.456690][T29290]        __might_fault+0x11b/0x190
[ 1916.461778][T29290]        _copy_from_user+0x29/0xd0
[ 1916.466866][T29290]        __blk_trace_setup+0xa8/0x180
[ 1916.472227][T29290]        blk_trace_ioctl+0x163/0x290
[ 1916.477500][T29290]        blkdev_ioctl+0x109/0x6d0
[ 1916.482502][T29290]        __x64_sys_ioctl+0x190/0x200
[ 1916.487764][T29290]        do_syscall_64+0xcd/0x250
[ 1916.492761][T29290]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1916.499152][T29290] 
[ 1916.499152][T29290] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[ 1916.506938][T29290]        __mutex_lock+0x19b/0xa60
[ 1916.511955][T29290]        blk_register_queue+0x13c/0x550
[ 1916.517475][T29290]        add_disk_fwnode+0x785/0x1300
[ 1916.522893][T29290]        brd_alloc.isra.0+0x5a2/0x840
[ 1916.528239][T29290]        brd_init+0x12b/0x1d0
[ 1916.532910][T29290]        do_one_initcall+0x128/0x700
[ 1916.538172][T29290]        kernel_init_freeable+0x5c7/0x900
[ 1916.543868][T29290]        kernel_init+0x1c/0x2b0
[ 1916.548692][T29290]        ret_from_fork+0x45/0x80
[ 1916.553607][T29290]        ret_from_fork_asm+0x1a/0x30
[ 1916.558880][T29290] 
[ 1916.558880][T29290] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[ 1916.566492][T29290]        __lock_acquire+0x249e/0x3c40
[ 1916.571837][T29290]        lock_acquire.part.0+0x11b/0x380
[ 1916.577440][T29290]        __mutex_lock+0x19b/0xa60
[ 1916.582442][T29290]        __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.588914][T29290]        blk_mq_update_nr_hw_queues+0x2a/0x40
[ 1916.594951][T29290]        nbd_start_device+0x15b/0xd70
[ 1916.600295][T29290]        nbd_ioctl+0x21a/0xfd0
[ 1916.605029][T29290]        blkdev_ioctl+0x276/0x6d0
[ 1916.610026][T29290]        __x64_sys_ioctl+0x190/0x200
[ 1916.615286][T29290]        do_syscall_64+0xcd/0x250
[ 1916.620281][T29290]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1916.626672][T29290] 
[ 1916.626672][T29290] other info that might help us debug this:
[ 1916.626672][T29290] 
[ 1916.636870][T29290] Chain exists of:
[ 1916.636870][T29290]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#50
[ 1916.636870][T29290] 
[ 1916.651616][T29290]  Possible unsafe locking scenario:
[ 1916.651616][T29290] 
[ 1916.659037][T29290]        CPU0                    CPU1
[ 1916.664374][T29290]        ----                    ----
[ 1916.669713][T29290]   lock(&q->q_usage_counter(io)#50);
[ 1916.675061][T29290]                                lock(mapping.invalidate_lock#2);
[ 1916.682840][T29290]                                lock(&q->q_usage_counter(io)#50);
[ 1916.690728][T29290]   lock(&q->sysfs_lock);
[ 1916.695031][T29290] 
[ 1916.695031][T29290]  *** DEADLOCK ***
[ 1916.695031][T29290] 
[ 1916.703146][T29290] 4 locks held by syz.1.5452/29290:
[ 1916.708313][T29290]  #0: ffff888026852198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0
[ 1916.717589][T29290]  #1: ffff8880268520d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40
[ 1916.728339][T29290]  #2: ffff8881427c00a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[ 1916.740132][T29290]  #3: ffff8881427c00e0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0
[ 1916.752220][T29290] 
[ 1916.752220][T29290] stack backtrace:
[ 1916.758171][T29290] CPU: 0 UID: 0 PID: 29290 Comm: syz.1.5452 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[ 1916.768553][T29290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 1916.778582][T29290] Call Trace:
[ 1916.781839][T29290]  <TASK>
[ 1916.784746][T29290]  dump_stack_lvl+0x116/0x1f0
[ 1916.789404][T29290]  print_circular_bug+0x419/0x5d0
[ 1916.794417][T29290]  check_noncircular+0x31a/0x400
[ 1916.799326][T29290]  ? __pfx_check_noncircular+0x10/0x10
[ 1916.804758][T29290]  ? add_lock_to_list+0x17d/0x390
[ 1916.809761][T29290]  __lock_acquire+0x249e/0x3c40
[ 1916.814601][T29290]  ? __pfx___lock_acquire+0x10/0x10
[ 1916.819787][T29290]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1916.825624][T29290]  ? stack_depot_save_flags+0x31b/0x8f0
[ 1916.831147][T29290]  lock_acquire.part.0+0x11b/0x380
[ 1916.836253][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.842380][T29290]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1916.847985][T29290]  ? rcu_is_watching+0x12/0xc0
[ 1916.852726][T29290]  ? trace_lock_acquire+0x14a/0x1d0
[ 1916.857902][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.864055][T29290]  ? lock_acquire+0x2f/0xb0
[ 1916.868552][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.874680][T29290]  __mutex_lock+0x19b/0xa60
[ 1916.879166][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.885293][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.891432][T29290]  ? __pfx___mutex_lock+0x10/0x10
[ 1916.896455][T29290]  ? __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.902583][T29290]  __blk_mq_update_nr_hw_queues+0x446/0x14e0
[ 1916.908538][T29290]  ? __mutex_trylock_common+0xea/0x250
[ 1916.913974][T29290]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1916.919857][T29290]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[ 1916.925567][T29290]  ? rcu_is_watching+0x12/0xc0
[ 1916.930308][T29290]  ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10
[ 1916.936696][T29290]  ? blk_mq_update_nr_hw_queues+0x20/0x40
[ 1916.942391][T29290]  ? __pfx___mutex_lock+0x10/0x10
[ 1916.947394][T29290]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1916.952576][T29290]  ? __mutex_lock+0x1cc/0xa60
[ 1916.957252][T29290]  ? nbd_ioctl+0x151/0xfd0
[ 1916.961651][T29290]  ? __pfx___mutex_lock+0x10/0x10
[ 1916.966665][T29290]  blk_mq_update_nr_hw_queues+0x2a/0x40
[ 1916.972187][T29290]  nbd_start_device+0x15b/0xd70
[ 1916.977012][T29290]  ? bpf_lsm_capable+0x9/0x10
[ 1916.981665][T29290]  nbd_ioctl+0x21a/0xfd0
[ 1916.985881][T29290]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[ 1916.992359][T29290]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[ 1916.998836][T29290]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1917.003574][T29290]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1917.010406][T29290]  ? __pfx_lock_release+0x10/0x10
[ 1917.015407][T29290]  ? trace_lock_acquire+0x14a/0x1d0
[ 1917.020670][T29290]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1917.025406][T29290]  blkdev_ioctl+0x276/0x6d0
[ 1917.029894][T29290]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1917.034898][T29290]  ? selinux_file_ioctl+0x180/0x270
[ 1917.040073][T29290]  ? selinux_file_ioctl+0xb4/0x270
[ 1917.045161][T29290]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1917.050163][T29290]  __x64_sys_ioctl+0x190/0x200
[ 1917.054908][T29290]  do_syscall_64+0xcd/0x250
[ 1917.059388][T29290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1917.065262][T29290] RIP: 0033:0x7f466bf7e819
[ 1917.069656][T29290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1917.089329][T29290] RSP: 002b:00007f466cd41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1917.097720][T29290] RAX: ffffffffffffffda RBX: 00007f466c136080 RCX: 00007f466bf7e819
[ 1917.105680][T29290] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005
[ 1917.113653][T29290] RBP: 00007f466bff175e R08: 0000000000000000 R09: 0000000000000000
[ 1917.121599][T29290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1917.129553][T29290] R13: 0000000000000000 R14: 00007f466c136080 R15: 00007ffe8b03eb68
[ 1917.137511][T29290]  </TASK>
[ 1917.140621][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1917.365934][   T29] audit: type=1400 audit(1917.333:3792): avc:  denied  { setattr } for  pid=29284 comm="syz.1.5452" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1917.431439][T29285] block nbd1: shutting down sockets
[ 1917.610329][T17373] usb 6-1: device not accepting address 126, error -71
[ 1917.618147][T17373] usb usb6-port1: unable to enumerate USB device