last executing test programs:

10m6.044242928s ago: executing program 32 (id=24):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast})
unshare(0x40020000)

9m33.465547964s ago: executing program 33 (id=110):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4, 0xb6cf, 0x7, 0x9, 0x1c}})
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
ioperm(0x0, 0x2, 0x7e)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
readv(r8, &(0x7f0000000280)=[{&(0x7f0000000200)=""/101, 0x65}], 0x1)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000080)={0x2, 0x80, 0x3, 0x80000003, 0xe, "0060730000e7a489020401030040000000f600"})
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_trace_dev_match', 0x0, 0x32)

9m25.267644649s ago: executing program 34 (id=140):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff0100000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000004e40c800000"], 0x98}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r4 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r6 = syz_open_procfs(r4, &(0x7f0000000100)='stack\x00')
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0xb, 0x1979c0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r7, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32})
r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, 0x0)

8m16.005068586s ago: executing program 35 (id=309):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, 0x0)
ftruncate(r3, 0x8800000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000060a0b040000000000000000f35975c65f8d739228020000001400048010000180090001006c617374000000000900010073797a3000000000090092c0d73d7a320000000014000000110001000000f1000000000077bc503d1d635d0000000a00000000002c6aae05e0a15f2297f88b7b049aeb6c4e026a57e66855988f817a3d83f5b3ec10c5b667414cf918bd967f2acf9714f11b99e52913445238c0f59ad0e9b3355aea7dc03a4f993792000000000000000000970944b43e2bf889405aae42b5c9bcd755"], 0x68}}, 0x0)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0xd3, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000a9279f40a455", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])
splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="090000000000000000b35c28", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)

7m46.883072793s ago: executing program 7 (id=399):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x13)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard')
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080), 0x4)
sendto$inet(r6, &(0x7f00000002c0)='!', 0x1fff8, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
socket$inet6(0xa, 0x3, 0xff)

7m45.012483368s ago: executing program 6 (id=404):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r0, r0, 0x0, 0xb)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000006d59906718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000000000bf91000000000000b70200000100000085000000851094d057259c25110000009500000000000000dd3cb5f59407311b81c0e8c013887e9f13225a953df93ddec2122cc87a74b9da9b42892a1607"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)=0x8000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0)=0x4dfa, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x4ce}], 0x1, 0x1, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000380))

7m44.762110109s ago: executing program 6 (id=405):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0xfffd, 0x0, @mcast2}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100002000) (fail_nth: 7)

7m44.381083061s ago: executing program 7 (id=406):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = timerfd_create(0x0, 0x80000)
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005340), 0x6, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xd7005548a919095d, &(0x7f0000000000)=0x100000001, 0x4)
ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000005380)={0x1, 0x0, [{0xb0a, 0x0, 0x1}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742d123e8680d85ff0082762f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r6}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)

7m43.529041407s ago: executing program 6 (id=407):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0xf, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9c, 0xfffffffc, 0x4, 0xffffdffb, 0x2004, 0x2, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x3, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0xd, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x24, 0x7, 0xfffffffc, 0x5, 0x7fff, 0x72c, 0x7, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x41, 0x29b, 0x5, 0x0, 0x985, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x81, 0x5, 0x800, 0xffff, 0x4006, 0x96, 0xfffffff9, 0x2, 0x0, 0x6, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x2, 0xffffffff, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc586, 0x200ffff, 0xcd5, 0x6, 0x1f, 0x404, 0x4, 0x8, 0x7fff, 0x7, 0x9, 0x800e8c, 0x5, 0x80000001, 0x48, 0x7ff, 0x1000, 0x2000, 0x10, 0x4, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x2, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0xffffffff, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x40002005, 0x9, 0x4, 0x9, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x40401, 0x5], [0x108e, 0xffff, 0x2008, 0x3, 0x88, 0x4, 0x4000000, 0x0, 0x50, 0x2, 0x763, 0xb, 0x402, 0x3, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0xfffffffd, 0x5, 0x6, 0x4, 0xe4a, 0x3, 0x2, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa809, 0x65f413f9, 0x80000000, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x0, 0x12, 0x4, 0xe, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xd, 0x5, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xd})
fcntl$getown(0xffffffffffffffff, 0x9)
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000bb00"/104], 0x68)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x804c0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000f00"/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180700000000000000fcffffff001812000000003cc5b3", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendto$inet6(r5, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c)

7m43.528471472s ago: executing program 7 (id=408):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}])

7m41.749148335s ago: executing program 6 (id=411):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x1, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884)

7m40.990970869s ago: executing program 8 (id=368):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x134, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ea4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2886}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7bd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48080}, 0x20040004)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

7m36.326020438s ago: executing program 8 (id=413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@uuid_off}]})

7m36.011550822s ago: executing program 7 (id=414):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESOCT], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x15, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xf5, 0x9, 0x7, 0xff, 0x7}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0xd, 0x8, 0x6, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = socket$pptp(0x18, 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r12, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1})
socket(0x10, 0x3, 0x400007)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0)
r13 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
ioctl$SCSI_IOCTL_PROBE_HOST(r13, 0x5385, &(0x7f0000000000)={0x8d, ""/141})
io_uring_enter(r7, 0x3f70, 0x0, 0x0, 0x0, 0x0)

7m36.002595386s ago: executing program 6 (id=415):
r0 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000004"], 0x48}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0))
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40880)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x7c}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x50, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x799c01d835b20402, 0x0, {0x1}})
io_uring_enter(r6, 0x47f2, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
lseek(r9, 0x1000000, 0x0)

7m34.09839321s ago: executing program 8 (id=418):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x404c0d4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
lseek(r1, 0x1000000, 0x0)

7m31.633524943s ago: executing program 7 (id=419):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x1c, 0x52, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x2b, 0x6, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040014)

7m30.212825766s ago: executing program 6 (id=422):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x61, 0x0, 0x48, 0x41, 0x1000, 0x9, 0xa, 0x1, 0x0, 'syz0\x00'})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prlimit64(0x0, 0x1c, 0x0, 0x0)
r5 = getpid()
poll(&(0x7f00000001c0)=[{r1, 0x81}, {r2, 0x4}, {r1, 0x1000}, {r2, 0x5300}], 0x4, 0xb47)
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002800070100000000ffdbdf25037c000001542d36900fb050e4479d535f3939b2b1155e2750af6868844fe7b0d44c330e62fcffbd51fcc4f0b427484472922c0047f6652692fbcffea79d94b0ca0b33a74bca14"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
preadv2(r2, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1, 0x8, 0x9, 0x11)
r10 = dup2(r9, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000040)=0x1)

7m26.847463586s ago: executing program 7 (id=423):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
close(r7)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
execveat$binfmt(r8, r6, 0x0, 0x0, 0x1000)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r5, 0x0, 0x0, 0x800)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r9, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0xb, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x10, 0xb, 0x5}, 0x2}, 0x20, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r11=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000002c0)={0xc, r11})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r11, 0x0, &(0x7f0000333000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r11, 0x0, &(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x2})
ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000240)={0x28, 0x2, 0x0, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)})
r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
write$P9_RSTATu(r12, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"/1799, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0], 0x6f0)

7m15.52319747s ago: executing program 36 (id=418):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x404c0d4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00')
lseek(r1, 0x1000000, 0x0)

7m12.808676241s ago: executing program 37 (id=422):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x61, 0x0, 0x48, 0x41, 0x1000, 0x9, 0xa, 0x1, 0x0, 'syz0\x00'})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prlimit64(0x0, 0x1c, 0x0, 0x0)
r5 = getpid()
poll(&(0x7f00000001c0)=[{r1, 0x81}, {r2, 0x4}, {r1, 0x1000}, {r2, 0x5300}], 0x4, 0xb47)
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002800070100000000ffdbdf25037c000001542d36900fb050e4479d535f3939b2b1155e2750af6868844fe7b0d44c330e62fcffbd51fcc4f0b427484472922c0047f6652692fbcffea79d94b0ca0b33a74bca14"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
preadv2(r2, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1, 0x8, 0x9, 0x11)
r10 = dup2(r9, r2)
ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000040)=0x1)

7m9.911671046s ago: executing program 38 (id=423):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
close(r7)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
execveat$binfmt(r8, r6, 0x0, 0x0, 0x1000)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r5, 0x0, 0x0, 0x800)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r9, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0xb, 0x0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x10, 0xb, 0x5}, 0x2}, 0x20, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r11=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000002c0)={0xc, r11})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r11, 0x0, &(0x7f0000333000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r11, 0x0, &(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x2})
ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000240)={0x28, 0x2, 0x0, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)})
r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
write$P9_RSTATu(r12, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"/1799, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0], 0x6f0)

5m28.279259455s ago: executing program 1 (id=562):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000ac0)={&(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x3, 0x15, "a56ea0eaff537cdbeea0a5134efc6cbf39494047365e60419d1996fe619c249afc99df8e47d679c0c256c0eaf321cddcfc9a640cadd5892955c4a9071fc800", 0x37}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}, 0x100400d0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfc, {0x1, 0x7c}, [@typed={0x8, 0x111, 0x0, 0x0, @ipv4=@loopback}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[])
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000069047d08bf0a70330e03000000010902120001000000000904000000b5bc6500b7bd4e0e8665749a0187935aae3dae8dbe05005ab206a63310f8f8ea3b7b37771105c90bebb858b8b31828354b"], 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc8, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020)

5m24.693182365s ago: executing program 1 (id=575):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7030000a1ac00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000006000000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000004202000001000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x4, 0x200}, 0x10, 0x0, r1, 0x5, 0x0, &(0x7f0000000400)=[{0x3, 0x4, 0x1, 0x5}, {0x3, 0x1, 0x8, 0xb}, {0x1, 0x3, 0x8, 0x6}, {0x0, 0x5, 0x5, 0x2}, {0x1, 0x1, 0x3}], 0x10, 0x4}, 0x94)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x840)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
sendfile(r8, r8, 0x0, 0x1000000201005)
ftruncate(r8, 0x6)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x10000, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xf5, 0x9, 0x0, 0x42})

5m23.639637743s ago: executing program 1 (id=582):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x10005c9, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3)
read$eventfd(r2, &(0x7f0000000040), 0x8)
close(r0)

5m23.317743241s ago: executing program 1 (id=585):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r6, 0x26, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4, r5}, 0x6)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4)
sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r8, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)

5m22.513706977s ago: executing program 1 (id=587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000)
io_submit(r0, 0x0, 0x0)

5m21.060670311s ago: executing program 1 (id=593):
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000100)="ea", 0x1)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCGPGRP(r4, 0x5437, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
ioperm(0x6, 0x1, 0x400)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
getpgid(0xffffffffffffffff)

5m20.434319671s ago: executing program 39 (id=593):
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000100)="ea", 0x1)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCGPGRP(r4, 0x5437, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
ioperm(0x6, 0x1, 0x400)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
getpgid(0xffffffffffffffff)

2m31.389498586s ago: executing program 2 (id=1135):
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r0, 0x0) (async)
listen(r0, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="f00000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3809040003000000b0001980ab0002005e0f0a2c2f0094a49641513bfcd15d2be9ae7164e8048e432e99845bff4f0b8aa57fe34177a299184c4b52a1f45ecd775c9d91f8ad597e78484a9407a4f933df8fe6d6e23c60579e20f64207561a1dd88e04f2b6e0e9fb771762b571cdef21ddd2291eceb1009c1409275e632c039d50e2f09e00e3b234bccb055107140dc0e2b572367b198cf84aeac95afddcfb5409d385e0099bbf70add6b7e900599e672b63d8dfd362c88a000a000100aaaaaaaaaaaa0000140003007465616d3000"], 0xf0}, 0x1, 0x0, 0x0, 0x40801}, 0x8000)

2m31.224255518s ago: executing program 2 (id=1136):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x100)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m30.885850215s ago: executing program 2 (id=1138):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x9, "5d4927f1"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010f900a6139a030a768b5f118b38c7720e440000000000000000000a7a8ff69ca8672b7be62c67000000000000000200000038000480340001800a000100696e6e65720000002400028008000240000000840800034000000007080004400000000f080001400000010073797a300000000009000200"], 0x8c}}, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)

2m30.151671875s ago: executing program 2 (id=1141):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005d80)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000540)=""/51, 0x33}], 0x2}, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000080))
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60002)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r9, 0x80605414, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x54}}, 0x0)
mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0)

2m26.236882517s ago: executing program 2 (id=1149):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f000009f000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x9a76c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, <r5=>0x0})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000440)=@ccm_128={{0x304}, "a571a32f59a295cf", "7e4b7547fb1aa0f0ac49b617660222d0", "c91f4d8e", "ea0bcd2e8c19fe1b"}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8, @ANYRES8=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000005c0)={{0x7, 0x8}, 0x100, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r9}, 0xc)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940200d71831922b39ce758bf7", @ANYRES8, @ANYBLOB="130126bd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008700000000000c008f0004000000000000000c00900000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0014000000000000000c0090000500000000000000", @ANYRES16=r5], 0x94}, 0x1, 0x0, 0x0, 0x400c5}, 0x44885)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
r11 = syz_open_procfs(r10, &(0x7f0000000000)='fdinfo/3\x00')
read$hiddev(r11, &(0x7f0000000340)=""/237, 0xed)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000340)={0x0, 0x84, 0x8e3c, 0x1, 0x6c, 0x6, 0x10001, 0x9, 0xfffffffffffffffb, 0xfffffffffffffff7, 0x1, 0x5})
socket$kcm(0x2, 0xa, 0x2)

2m25.541308842s ago: executing program 2 (id=1151):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x9, "5d4927f1"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010f900a6139a030a768b5f118b38c7720e440000000000000000000a7a8ff69ca8672b7be62c67000000000000000200000038000480340001800a000100696e6e65720000002400028008000240000000840800034000000007080004400000000f080001400000010073797a300000000009000200"], 0x8c}}, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)

2m25.257967518s ago: executing program 40 (id=1151):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x9, "5d4927f1"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010f900a6139a030a768b5f118b38c7720e440000000000000000000a7a8ff69ca8672b7be62c67000000000000000200000038000480340001800a000100696e6e65720000002400028008000240000000840800034000000007080004400000000f080001400000010073797a300000000009000200"], 0x8c}}, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)

11.458176594s ago: executing program 3 (id=1499):
socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000074, 0x0, 0x2000006}]})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @local, 0x67c6}}, 0x401, 0xa, 0xb, 0x8, 0x7}, &(0x7f0000000040)=0x98)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7})
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8)
unshare(0x66000080)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18)
sendmmsg$inet(r9, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r12=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
gettid()
sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r12, @ANYRESOCT=r11, @ANYBLOB="63ab9108551552d62fc08c84b078c29d1ad9dfd04030f68b5674dcba70", @ANYBLOB="5000000000000000080001000000000008000100010000000800010002000000080001000200000008000100020000000800010000000000080001000200"/80, @ANYRES8=r6], 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x20000004)

10.573496481s ago: executing program 0 (id=1501):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x0, @sliced={0x3, [0x5, 0xfffa, 0xe, 0x200, 0xc967, 0x2d, 0xc2f, 0x905, 0x9, 0x2, 0x2, 0x8, 0x7, 0x0, 0x5, 0x200, 0x100, 0x7, 0x8, 0x3, 0xa0, 0x1, 0xe3, 0x3ff, 0x7fff, 0xfffb, 0x401, 0xfff, 0xd, 0xff00, 0x6, 0x0, 0x4, 0x10, 0x1, 0x6, 0x3, 0x100, 0x7, 0x7, 0x2, 0x7, 0x3, 0x7, 0x81, 0xcf, 0x6, 0x2], 0x5}}})
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
accept4$unix(r1, &(0x7f0000000300), &(0x7f00000003c0)=0x6e, 0x800)
write$fb(r5, &(0x7f0000000100)="732f64bd01d8958da2", 0x9)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x1)

7.088491815s ago: executing program 3 (id=1511):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0xf, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9c, 0xfffffffc, 0x4, 0xffffdffb, 0x2004, 0x2, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x3, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0xd, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x24, 0x7, 0xfffffffc, 0x5, 0x7fff, 0x72c, 0x7, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x41, 0x29b, 0x5, 0x0, 0x985, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x81, 0x5, 0x800, 0xffff, 0x4006, 0x96, 0xfffffff9, 0x2, 0x0, 0x6, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x2, 0xffffffff, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc586, 0x200ffff, 0xcd5, 0x6, 0x1f, 0x404, 0x4, 0x8, 0x7fff, 0x7, 0x9, 0x800e8c, 0x5, 0x80000001, 0x48, 0x7ff, 0x1000, 0x2000, 0x10, 0x4, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x2, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0xffffffff, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x40002005, 0x9, 0x4, 0x9, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x40401, 0x5], [0x108e, 0xffff, 0x2008, 0x3, 0x88, 0x4, 0x4000000, 0x0, 0x50, 0x2, 0x763, 0xb, 0x402, 0x3, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0xfffffffd, 0x5, 0x6, 0x4, 0xe4a, 0x3, 0x2, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa809, 0x65f413f9, 0x80000000, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x0, 0x12, 0x4, 0xe, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xd, 0x5, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xd})
fcntl$getown(r0, 0x9)
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000bb00"/104], 0x68)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x804c0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000f00"/28], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180700000000000000fcffffff001812000000003cc5b3", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000001000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c)

6.292277172s ago: executing program 0 (id=1513):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001040))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x3, &(0x7f0000109000/0x3000)=nil, &(0x7f0000c4b000/0x4000)=nil, 0x6, 0x0, 0x0, 0xffff, 0x5a, 0x36, 0x74, 0x40})
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_dev$MSR(0x0, 0x0, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200601, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES32=r9, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@deltaction={0x150, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x991}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcd}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r12 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001280)={r11, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000019c744000008010000008bd02800", [0xe0]}})
getsockopt$rose(r9, 0x104, 0x7, &(0x7f00000000c0), &(0x7f00000003c0)=0x4)
ioctl$LOOP_SET_DIRECT_IO(r12, 0x4c08, 0x4)

6.065408656s ago: executing program 3 (id=1514):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close(0xffffffffffffffff)
listen(r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000707ac1f7000000000000"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{}, {&(0x7f0000000080)}, {&(0x7f0000000540)="ccbb2b41a6a4b5716f9bdd702103f8ae20d3ce004c40f93948f59a2f478b2385dab183e9dee20b685aceafaabea2de14f99820daf61863165dbc2041a83268b0e149eb4bbb5ad28a443dde981f6c55408ffbe5ca8f1856615441f5d1d33d27026dbe69d5da0f7c762d3bfc3e526756cec7930a219937d8b537de6688214885726743733039a64849b6465819644bb3ecafaa9d1cfc3abea75d10fd3f83ae683e23066b81ee420eaad87b7f8eefd39c46023b3602d26915aec68506c4fd4ff1b6d4b92ec532ae29aaafa76a638b3c04863ac816581ecf77af1d3a17b0978adcde5259d41a4a5e6955", 0xe8}], 0x3}], 0x1, 0x40800)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendto$inet6(r0, &(0x7f0000000100)="b147614a", 0x4, 0x4000, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)

5.989404659s ago: executing program 3 (id=1515):
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
timer_delete(0x0)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/4076, &(0x7f0000001000)=0xfec)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x5, 0x2, {{0x35, 0x4, 0x2, 0x1, 0xd4, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x54, [@multicast2, @rand_addr=0x64010101, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0x1c, 0x77, 0x0, 0x7, [0x4, 0x80, 0x0, 0xffffffff, 0x80000001, 0x1]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x6, [{@private=0xa010101, 0x3}, {@local, 0x8}, {@local, 0x7}, {@multicast1, 0x2}, {@remote}, {@multicast2, 0x80000001}, {@multicast2, 0x83}, {@empty, 0x9}, {@private=0xa010100, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xb2, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x1844}, {@remote}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7}]}, @rr={0x7, 0x1b, 0xf8, [@multicast1, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00'})
fsmount(0xffffffffffffffff, 0x0, 0x2)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000400000005000700e00000020800020005000000080008008c1e0001"], 0x2c}}, 0x0)

5.800671006s ago: executing program 0 (id=1516):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75", 0x2c}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4", 0xe1}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c0a", 0x65}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8906de55d53d4ef6cb26fb90479fa63a37d98b31cc593ba936e8a0a2c656ac678557413d29673226cb4c9ff71ac0403c2f63e194f4ed03165abe1faa282b6f7ea", 0xb2}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e411ac18dade4a3e4dc9cb8fcd2ff9b016022924df9c2a5", 0x23}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7f53366375848d4c7e185155bcf", 0xe1}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072dbc62504e1558860ed2216bbd5493102ce90d7965a8dfcf8593c852876b4e7c5b8cf", 0x5b}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fec6c7785009f0b017e1ecf8ecf2d228ebc66170c6749d48f61455f18c6fb718f18c461bd01601f8251d1568e2cf69ba9ed31b6a98e262eb81dbf29ba3b66fd8f804281145fc639270bd91c33f04b082257b05381a542d6a82987ee6197bb3f24f1bdfa912f0cdc7f0f4ede7cbb0faa1580b28675cc8f7edd7", 0x79}, {&(0x7f0000000440)="4a829bd2452e972192eb46bc7f333a56", 0x10}, {&(0x7f0000000540)="7b807ac53b2f0304921ec0829ecf1a98ba1fc4abeb81b012b8b4", 0x1a}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2090)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.601283345s ago: executing program 4 (id=1518):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001b00)=""/240, 0xf0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40081)
io_uring_setup(0x10004, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2$9p(0x0, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)

5.591339753s ago: executing program 0 (id=1519):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x28008000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, 0x8)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0x400, 0xffffff7e}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect$uac1(0x0, 0x8a, 0x0, 0x0)

5.300661077s ago: executing program 4 (id=1521):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38)
listen(r1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)

5.021850005s ago: executing program 9 (id=1522):
r0 = msgget$private(0x0, 0x10)
msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/211}, 0xdb, 0x3, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000000c0)={r2})

5.003428404s ago: executing program 9 (id=1523):
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
gettid() (async)
epoll_create(0x400) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
r4 = getpid() (rerun: 64)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, r0, 0x34e41000) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) (async, rerun: 32)
timer_create(0x1, 0x0, 0x0)
eventfd(0x0) (async)
socket$inet6(0xa, 0x3, 0x3a) (async, rerun: 32)
r7 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) (rerun: 32)
r8 = eventfd2(0x80002, 0x801)
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000340)=r8, 0x1) (async, rerun: 32)
io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) (rerun: 32)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000280)={0x0, 0x25, 0x2016, 0x1})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.84142166s ago: executing program 9 (id=1524):
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5fffffff7ff220000efff00"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004e000000000000002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250042cf5f54a2317100000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000049500000000000000e84c078f686569364793de63c92e69d83f4421bc9ac08bc097008a0fe91e610aee852e5edac7ebbf8a6c801720341fb778190345680ee093df80"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x1, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0)

4.645855938s ago: executing program 5 (id=1526):
r0 = io_uring_setup(0x4714, &(0x7f00000000c0)={0x0, 0x34f9, 0x1, 0x800, 0xc0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0xfffff, 0xfffffffffffffffc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x24)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1b, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=']\x00'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044}, 0xc050)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0xdb, 0x7fff, [0xa, 0xfffffffb, 0xaab, 0xffff9135, 0x80]}})
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000080), 0xc)
read(r6, &(0x7f0000000180)=""/52, 0xfffffdef)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010000305000000000000000000000000258fbfe11dbd8b4e9008b2b376711ec6f748a29988923181410193990b05d1a3961419be13c85773d6ed2791bbfc0955f223b0cd5702b5915290c4fcb9bcc32b65b3197564f4d87ab8930b1f09b7aed5a1b88875058d6da41ee46966cce1951072c447213069c6cc8976b51eda843e8201ba", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

4.138289793s ago: executing program 4 (id=1527):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r0, 0x8d, 0x0, &(0x7f0000000000))

4.114801165s ago: executing program 5 (id=1528):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x7, 0x35c, 0x1f4000000, 0x2, <r1=>r0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@rand_addr, <r3=>0x0}, &(0x7f00000002c0)=0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r4=>0x0}, &(0x7f0000000340)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xd}, {0xb, 0x2}, {0x8, 0xf}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="e4020000190000082bbd7000fedbdf25ac1e0001000000000000000000000000ac14142e0000000000000000000000004e2300004e2302000200002004000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="b73a0000"], 0x2e4}, 0x1, 0x0, 0x0, 0x4c802}, 0x800)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
epoll_create1(0x0)
r8 = socket(0x15, 0x4, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x6)
r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r10 = dup(r9)
write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c)
r11 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x8642, 0x40, 0x2, 0x3e5, 0x0, r10}, &(0x7f0000000180)=<r12=>0x0, &(0x7f00000001c0)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r11, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r14=>0xffffffffffffffff})
vmsplice(r14, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8)
recvmmsg(r8, &(0x7f0000004080)=[{{&(0x7f0000000800)=@nl, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000880)=""/25, 0x19}, {&(0x7f00000008c0)=""/139, 0x8b}, {&(0x7f0000000980)=""/246, 0xf6}, {&(0x7f0000000a80)=""/70, 0x46}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/1, 0x1}, {0xfffffffffffffffc}, {&(0x7f0000000c40)=""/4, 0x4}], 0x8, &(0x7f0000000d00)=""/177, 0xb1}, 0x6}, {{&(0x7f0000000dc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000e40)=""/172, 0xac}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/121, 0x79}, {&(0x7f0000001f80)=""/127, 0x7f}, {&(0x7f0000002000)=""/149, 0x95}, {&(0x7f00000020c0)=""/178, 0xb2}, {&(0x7f0000002180)=""/118, 0x76}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/218, 0xda}], 0xa, &(0x7f0000002540)=""/78, 0x4e}, 0x8f57}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000025c0)=""/250, 0xfa}, {&(0x7f00000026c0)=""/72, 0x48}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/2, 0x2}, {&(0x7f00000027c0)=""/98, 0x62}, {&(0x7f0000002840)=""/133, 0x85}, {&(0x7f0000002900)=""/228, 0xe4}, {&(0x7f0000002a00)=""/151, 0x97}], 0x8, &(0x7f0000002b40)=""/160, 0xa0}, 0x8}, {{&(0x7f0000002c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/191, 0xbf}, {&(0x7f0000002d40)=""/21, 0x15}, {&(0x7f0000002d80)=""/107, 0x6b}], 0x3, &(0x7f0000002e40)=""/140, 0x8c}, 0x7f}, {{&(0x7f0000002f00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002f80)=""/42, 0x2a}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004000)=""/93, 0x5d}, 0xf8}], 0x5, 0x2, &(0x7f00000041c0))
write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r8, &(0x7f00000021c0), 0x5b, 0x40, 0x0)

3.485828729s ago: executing program 4 (id=1529):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
bind$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x2, <r3=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x1000, 0x1000, &(0x7f0000fef000/0x1000)=nil})
close(r2)

3.314436983s ago: executing program 3 (id=1530):
syz_open_dev$sndctrl(0x0, 0x0, 0xc8080)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001840)=[{0x0}, {&(0x7f00000017c0)=""/114, 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x3, 0x40000000, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x300}}], 0x400000000000181, 0x9200000000000000)

3.252039667s ago: executing program 4 (id=1531):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="38000000082000009633084374340f5964c9419c0b83066cbffe7517977dc0822a3cd766a1b64c43f9daed4992d2419bfa27a9fade10d9aafbbebdb291a732870ee877b6bf4ab8562d2946603c9e5a7ccbaee0c5c6031fbce65a857d3637784df1760505404598aec83c052bac0dcfb7cbfbe5d53eccfa5ae118a603c0", @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x200, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x10, 0x20, 0x0, 0x2}})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000880))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800007000000000000000000000001811", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000eb4c980000000000005608000000ebe4ed779c824617939f58453cefaa00000085"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000007b0000000500000000000000030000002000000000000000840000000200000026000000040000002e000000", @ANYRES32=0x0], 0x38, 0x800}], 0x1, 0x4008080)

2.433617642s ago: executing program 5 (id=1532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000001c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xad18, @private2, 0x9}, 0x80, 0x0}, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000640))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'rlimit'}, {0x2b, 'rlimit'}]}, 0x10)

2.381686895s ago: executing program 9 (id=1533):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e23}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0)
accept$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10)
r6 = socket$inet(0x2, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x280001, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)=0x8)

2.364909655s ago: executing program 0 (id=1534):
r0 = msgget$private(0x0, 0x10)
msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x800)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/211}, 0xdb, 0x3, 0x800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000000c0)={r3})

2.120201212s ago: executing program 0 (id=1535):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000700)={0x0, 0xa, 0xf, "b787df284435536b621439c29f13a8"}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.069882261s ago: executing program 9 (id=1536):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x2, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0x1f, 0x0, 0x1})
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
sched_setscheduler(0x0, 0x1, &(0x7f00000024c0)=0x401)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003880)=[{{&(0x7f00000019c0)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000001d00)="3315b879470a883da2f24fd2b029dea40b13d490fc73fdd4c471a9bf2eb6b198e8dc77e6ec33ee9ba58c81fbd6df0f4b5f47fb4944fac9f20d70ef1961bc55d5ff65cf69e508067ec33dfa77faaa23d8e7b89c5a613d9a6cd3b16a5794a655e152f9e8ee085f47", 0x67}, {&(0x7f00000020c0)="30f912c9c6d6f56bf483a168c4afc5ea0687138915a11ee64ed8b56400adbe1f681fa520f32eeeee5bc66c1f8f51926deb56be6b0e75c3e8b1902cb568f80b5c911c9f6ae301d9a70d06cb535e0b0cf2af60915032a8a6f0dc8855acc04bb06cc35b6451bfa2614ea8fa627dd972f26bc53fd76473caf8fc777287aacc855c1d94f934efe97d5eed34d430c116568b28eb77a1d7958c806cd13b50d4cb0ef3a593003933661afda3dc838a77f64b81247a115947c4216ebe2a25d2642ff39e92de2f2f12776cc876cc8def6bad7de596634a460368a29921147f37b0b09addc74da58dab2ce2b51db321367c73cf7bdd", 0xf0}, {&(0x7f00000021c0)="7e6ab05b1f05591a03b745c966b66b683b1db92f67e9d76d4bb9ceb0fc347e1997345f0766160dd7f5022be1c0e61a39ba53171f425294a2bb5394f363776b6b31380a579e4a3167f05660293302dc55388a46f9e23956d7ec1104e400f3514990026906dd2e03e09a6232e55403cc3dcacb2f8e2ef04932166567661ccac5854506fcfe8fee71882178329487ae1a2b6fc598b5", 0x94}, {&(0x7f0000001780)="fe1f713718c3f88e35a07fa83f1606cec7e6d0dca22f06253c5bd24eafe579e4346eeb739fa85998e3f0f7c9d6e7a1c661", 0x31}, {&(0x7f0000002280)="ce9158b7507647ae64809a4c00fd8adae93247966b6f031feba62adea5b188e10f9330b0cb0ee1a7dd7bd1b1af3340dcb3f6a36d1222125ff76e97fa2bbfba15c2cbaf9b8b722376c330af01cc17d87cb67325e42119d30595a74dd5e75ce75f5b32f80a5e18f994a302af5a07a0e70f9cd1d947d78f90537cefac379ca83a17d2eddb72168f0a20c3f3f9ac6f025d", 0x8f}, {&(0x7f0000002340)="8b9683ab19dc40e1d142b61f82cdf415fa061a0f67f7d5fa61d06ba549271decdb1756536cea16dc06a6ad33c32487cf3b6fe67874f5eb59553a9117720a9f7fde6c863ae4898167d949e766187c94aadf97f818a2594f4d1cd22126f2dccf518f98756e04783e8c6ecf91f4ba9cdf6303bde9a29358177fe103443ba9bbfa94d0301cc3413faadbf322f6cc83e7f77d2c7b8654", 0x94}, {&(0x7f0000001d80)="1f7a5b9fbc07130afa0ad187", 0xc}, {&(0x7f0000002400)="14afb621867b42348247f6dda1793c0f02d4f12272220a3c3a3ddc09e250939235ee568166fc0b760f95a255f799859b7c62353d4195d9cdf5bf7c3e0dc6bb92b5b782e70bb83ac5d7e97666f3037145702f10e2b40f78b5f4bd4f6ff0813f653fc9", 0x62}, {&(0x7f0000002600)="2747278fc8fff3d1a064494329b83f8d6fed32ca299313b44f6b6e5eeb0738c56ed12be7030714d1a96a8c2c6871a96101c7b688fe3ba7a01e83cb93358bbd2be7779b3ea15c33a51081de6cbbbeb136f96afd7d87fb2928fb82a9367e50fd6c8458d831d21ecc62419e92a72fd5a1e5f65c20b8a9298803f09e91e7e6f06a25bc6d3e43a9affc9fe25cf788c80df14168049babef0b611c05fc2c7813ee42416f98a943101f472d5aaf4a478e93ea", 0xaf}], 0x9, &(0x7f0000002480)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="c515653da52a9c56acab6079"], 0x20, 0x1}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/120, 0x78}, {&(0x7f00000017c0)=""/206, 0xce}, {&(0x7f00000018c0)=""/217, 0xd9}], 0x8, &(0x7f0000001a40)=""/221, 0xdd}, 0x6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001c00)=""/66, 0x42}, {&(0x7f0000002000)=""/151, 0x97}, {&(0x7f0000001dc0)=""/234, 0xea}, {&(0x7f0000001ec0)=""/186, 0xba}], 0x4, &(0x7f0000001b40)=""/166, 0xa6}, 0x3ff}], 0x2, 0x2022, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)

2.069167933s ago: executing program 5 (id=1537):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x278, 0x31, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffff5e, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x108}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca14}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x278}}, 0x0)

2.005792892s ago: executing program 5 (id=1538):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0xfffff, 0xfffffffffffffffc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x24)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1b, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=']\x00'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044}, 0xc050)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0xdb, 0x7fff, [0xa, 0xfffffffb, 0xaab, 0xffff9135, 0x80]}})
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000080), 0xc)
read(r6, &(0x7f0000000180)=""/52, 0xfffffdef)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000010000305000000000000000000000000258fbfe11dbd8b4e9008b2b376711ec6f748a29988923181410193990b05d1a3961419be13c85773d6ed2791bbfc0955f223b0cd5702b5915290c4fcb9bcc32b65b3197564f4d87ab8930b1f09b7aed5a1b88875058d6da41ee46966cce1951072c447213069c6cc8976b51eda843e8201ba", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.313170432s ago: executing program 3 (id=1539):
r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0)={0x20, 0xb, 0x4, "0444436f"}, 0x0, 0x0})

1.060093348s ago: executing program 5 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
clock_gettime(0x1, &(0x7f0000000240))
syz_open_dev$video4linux(&(0x7f0000000300), 0x7, 0x80000)
r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000540)={0x0, 0x24c1, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}, 0x1})
io_uring_enter(r4, 0xdb4, 0x17a3, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x10000, 0x3}, &(0x7f0000000080)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
r10 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r10, r10, r10], 0x3, 0x0, 0x0, {0x0, r11}})
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0xcc4d, 0x2, 0x1, {0x0, 0x0, r0}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r7, 0x2, 0x10a5, 0x3, 0x0, 0x0)

845.44952ms ago: executing program 9 (id=1541):
r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x2c8040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
gettid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(0x0, r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff}, 0x106, 0x1}}, 0x4c)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r4, 0x101}}, 0x48)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

0s ago: executing program 4 (id=1542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000006000000000085000000010000e294"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd6e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0xa, 0x922000000003, 0x11)
r4 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10)
read$dsp(r5, &(0x7f0000001800)=""/190, 0xbe)
r6 = getpid()
ptrace$cont(0x18, r4, 0x80000001, 0x200001)
sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7)
sched_setscheduler(r6, 0x3, &(0x7f0000000040)=0x9)
r7 = socket$kcm(0x10, 0x2, 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_flowlabel\x00')
sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

stering): j1939_xtp_rx_dat: no rx connection found
[  525.884648][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.884662][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.884742][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.884756][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.884838][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.884852][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.884933][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.884946][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885027][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885040][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885120][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885135][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885212][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885226][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885306][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885321][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885403][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885417][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885498][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885512][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885593][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885606][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885692][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885705][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885784][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885798][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885878][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885890][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.885970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.885984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.886064][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.886078][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.886156][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.886168][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.886245][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.886259][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.886355][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.886369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.886449][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.886463][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.894849][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.894868][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.894952][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.894966][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895047][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895159][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895174][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895255][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895269][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895349][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895363][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895443][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895457][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895537][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895551][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895639][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895653][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895747][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895826][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895841][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.895918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.895931][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896012][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896027][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896107][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896121][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896203][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896216][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896303][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896317][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896401][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896415][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896508][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896589][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896603][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896688][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896703][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896785][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896799][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896877][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896890][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.896973][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.896985][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897064][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897079][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897159][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897172][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897249][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897263][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897344][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897358][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897454][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897468][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897551][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897564][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897651][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897664][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897742][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897755][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897836][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897848][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.897928][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.897941][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898022][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898036][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898113][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898127][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898209][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898223][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898303][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898317][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898412][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898508][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898602][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898617][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898699][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898713][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898796][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898810][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898889][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898903][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.898984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.898998][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899079][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899093][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899171][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899186][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899267][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899281][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899362][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899376][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899456][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899470][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899551][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899564][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899649][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899663][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899758][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899771][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899852][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899865][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.899940][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.899954][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900035][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900048][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900127][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900140][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900234][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900311][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900406][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900419][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900499][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900512][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900606][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900692][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900705][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900785][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900799][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  525.900892][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  525.900905][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  528.030900][T11794] virtio-fs: tag </dev/md0> not found
[  528.041162][ T5869] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19
[  528.941532][ T5869] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19
[  528.982547][ T5890] usb 6-1: string descriptor 0 read error: -71
[  528.989697][ T8097] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  529.071215][ T5890] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  529.292875][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.410614][ T5890] usb 6-1: config 0 descriptor??
[  529.417625][   T30] audit: type=1400 audit(1768412855.142:1031): avc:  denied  { write } for  pid=11800 comm="syz.0.1147" path="socket:[38962]" dev="sockfs" ino=38962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  529.450429][ T5890] usb 6-1: can't set config #0, error -71
[  529.695529][   T30] audit: type=1400 audit(1768412855.192:1032): avc:  denied  { create } for  pid=11800 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  529.758946][ T5890] usb 6-1: USB disconnect, device number 35
[  529.867538][   T30] audit: type=1400 audit(1768412855.592:1033): avc:  denied  { create } for  pid=11803 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  529.868648][T11808] siw: device registration error -23
[  529.954570][   T30] audit: type=1400 audit(1768412855.592:1034): avc:  denied  { write } for  pid=11803 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  530.232241][ T7927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.460551][   T30] audit: type=1400 audit(1768412856.062:1035): avc:  denied  { shutdown } for  pid=11809 comm="syz.9.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  532.862579][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  532.870550][ T7927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.875825][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  532.896379][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  532.904209][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  532.911684][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  532.933191][   T30] audit: type=1400 audit(1768412858.662:1036): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  533.094253][ T7927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.242830][ T5890] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  533.304413][ T7927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.410376][T11823] chnl_net:caif_netlink_parms(): no params data found
[  533.423064][ T8097] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  533.431498][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  533.451278][ T5890] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  533.460487][ T5890] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  533.468096][ T5890] usb 4-1: config 0 has no interface number 0
[  533.481467][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  533.490987][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.499367][ T5890] usb 4-1: Product: syz
[  533.515525][ T5890] usb 4-1: Manufacturer: syz
[  533.530086][ T5890] usb 4-1: SerialNumber: syz
[  533.540912][ T5890] usb 4-1: config 0 descriptor??
[  533.563775][ T5890] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  533.574468][ T8097] usb 6-1: device descriptor read/64, error -71
[  533.589621][ T5890] uvcvideo 4-1:0.105: No valid video chain found.
[  533.679667][T11823] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.694131][T11823] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.701563][T11823] bridge_slave_0: entered allmulticast mode
[  533.710117][T11823] bridge_slave_0: entered promiscuous mode
[  533.720480][ T7927] bridge_slave_1: left allmulticast mode
[  533.727693][ T7927] bridge_slave_1: left promiscuous mode
[  533.736095][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.747755][ T7927] bridge_slave_0: left allmulticast mode
[  533.759056][ T7927] bridge_slave_0: left promiscuous mode
[  533.768077][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.782735][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.792024][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.807137][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.822608][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.832231][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.841738][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.843897][ T8097] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  533.856262][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.867062][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.931198][T11848] virtio-fs: tag </dev/md0> not found
[  533.961881][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.971987][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.999048][T11826] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1156'.
[  534.010790][ T5869] usb 4-1: USB disconnect, device number 41
[  534.017131][ T8097] usb 6-1: device descriptor read/64, error -71
[  534.167939][ T8097] usb usb6-port1: attempt power cycle
[  536.115060][ T5809] Bluetooth: hci3: command tx timeout
[  536.310723][   T30] audit: type=1400 audit(1768412862.032:1037): avc:  denied  { shutdown } for  pid=11853 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  536.730074][T11864] sctp: [Deprecated]: syz.9.1162 (pid 11864) Use of int in max_burst socket option deprecated.
[  536.730074][T11864] Use struct sctp_assoc_value instead
[  536.993483][   T30] audit: type=1326 audit(1768412862.722:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.134073][   T30] audit: type=1326 audit(1768412862.722:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.181870][   T30] audit: type=1326 audit(1768412862.722:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.261742][   T30] audit: type=1326 audit(1768412862.902:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.543923][ T7927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.553682][   T30] audit: type=1326 audit(1768412862.902:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.585670][ T7927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  537.595663][ T7927] bond0 (unregistering): Released all slaves
[  537.605239][   T30] audit: type=1400 audit(1768412863.042:1043): avc:  denied  { kexec_image_load } for  pid=11859 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  537.680035][   T30] audit: type=1400 audit(1768412863.092:1044): avc:  denied  { wake_alarm } for  pid=11859 comm="syz.3.1163" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  537.724455][   T30] audit: type=1326 audit(1768412863.112:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.748199][   T30] audit: type=1326 audit(1768412863.112:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11859 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  537.822122][ T7927] bond1 (unregistering): Released all slaves
[  537.990956][ T7927] bond2 (unregistering): Released all slaves
[  538.021480][T11823] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.029081][T11823] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.512382][ T5815] Bluetooth: hci3: command tx timeout
[  538.527389][ T6136] IPVS: starting estimator thread 0...
[  538.561186][T11823] bridge_slave_1: entered allmulticast mode
[  538.586945][T11823] bridge_slave_1: entered promiscuous mode
[  538.679795][T11874] IPVS: using max 50 ests per chain, 120000 per kthread
[  538.993724][ T5890] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  539.016680][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.050976][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.092866][ T6136] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  539.101260][ T7927] hsr_slave_0: left promiscuous mode
[  539.110428][ T7927] hsr_slave_1: left promiscuous mode
[  539.116845][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.127659][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.145296][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.158146][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.170011][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.202482][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.214295][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  539.239685][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.276792][ T5890] usb 1-1: config 0 descriptor??
[  539.286946][ T7927] veth1_macvtap: left promiscuous mode
[  539.298050][ T6136] usb 10-1: Using ep0 maxpacket: 8
[  539.302775][ T7927] veth0_macvtap: left promiscuous mode
[  539.309265][ T7927] veth1_vlan: left promiscuous mode
[  539.314836][ T7927] veth0_vlan: left promiscuous mode
[  539.315874][ T6136] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.338011][ T6136] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  539.356168][ T6136] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.395081][ T6136] usb 10-1: config 0 descriptor??
[  539.419983][ T6136] uvcvideo 10-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  539.441654][ T6136] uvcvideo 10-1:0.0: No valid video chain found.
[  539.643831][ T6136] usb 10-1: USB disconnect, device number 28
[  539.766045][ T5890] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x2
[  539.786486][ T5890] pyra 0003:1E7D:2CF6.000B: item fetching failed at offset 4/7
[  539.803335][ T5890] pyra 0003:1E7D:2CF6.000B: parse failed
[  539.819398][ T5890] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -22
[  540.075473][T11903] SELinux: failed to load policy
[  540.136227][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1168'.
[  540.147104][ T7927] team0 (unregistering): Port device team_slave_1 removed
[  540.190347][ T7927] team0 (unregistering): Port device team_slave_0 removed
[  540.272451][T11908] [U] 
[  540.275513][T11908] [U] 
[  540.278207][T11908] [U] 
[  540.280910][T11908] [U] 
[  540.283599][T11908] [U] 
[  540.286297][T11908] [U] 
[  540.288981][T11908] [U] 
[  540.291675][T11908] [U] 
[  540.298530][T11908] [U] 
[  540.301256][T11908] [U] 
[  540.303950][T11908] [U] 
[  540.312920][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1169'.
[  540.319759][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'.
[  540.580386][ T5815] Bluetooth: hci3: command tx timeout
[  541.393028][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  541.393061][   T30] audit: type=1326 audit(1768412866.752:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.487554][T11904] [U] 
[  541.591743][   T30] audit: type=1326 audit(1768412866.752:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.626490][   T30] audit: type=1326 audit(1768412866.752:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.654493][   T30] audit: type=1326 audit(1768412866.972:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.708630][   T30] audit: type=1326 audit(1768412866.972:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.735164][   T30] audit: type=1326 audit(1768412867.002:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.762829][   T30] audit: type=1326 audit(1768412867.002:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.786680][   T30] audit: type=1326 audit(1768412867.002:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.837564][   T30] audit: type=1326 audit(1768412867.012:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  541.867147][   T30] audit: type=1326 audit(1768412867.012:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaee98f749 code=0x7ffc0000
[  542.234746][T11907] netlink: 'syz.5.1168': attribute type 1 has an invalid length.
[  542.242605][T11907] netlink: 'syz.5.1168': attribute type 1 has an invalid length.
[  542.244167][ T6136] usb 1-1: USB disconnect, device number 27
[  542.260986][T11907] netlink: 'syz.5.1168': attribute type 1 has an invalid length.
[  544.294921][ T5815] Bluetooth: hci3: command tx timeout
[  544.436737][T11823] team0: Port device team_slave_0 added
[  544.485360][T11823] team0: Port device team_slave_1 added
[  544.991167][T11938] No source specified
[  545.138775][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.180324][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.266611][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.309080][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.328665][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.423537][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.506509][T11823] hsr_slave_0: entered promiscuous mode
[  545.528766][T11823] hsr_slave_1: entered promiscuous mode
[  545.544297][T11823] debugfs: 'hsr0' already exists in 'hsr'
[  545.556296][T11823] Cannot create hsr debugfs directory
[  545.622809][ T5890] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  546.443106][ T6136] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  546.622796][ T6136] usb 4-1: Using ep0 maxpacket: 8
[  546.650849][ T6136] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  546.694779][ T6136] usb 4-1: config 0 has no interface number 0
[  546.721806][ T6136] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  546.777875][ T6136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.822552][ T6136] usb 4-1: Product: syz
[  546.912877][ T6136] usb 4-1: Manufacturer: syz
[  546.917506][ T6136] usb 4-1: SerialNumber: syz
[  546.975116][ T6136] usb 4-1: config 0 descriptor??
[  546.985471][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  546.985487][   T30] audit: type=1400 audit(1768412872.702:1076): avc:  denied  { write } for  pid=11965 comm="syz.9.1182" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  547.166481][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  547.177478][ T5890] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  547.186508][ T5890] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  547.195728][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.208703][ T5890] usb 1-1: config 0 descriptor??
[  547.576338][T11974] sctp: [Deprecated]: syz.9.1183 (pid 11974) Use of int in max_burst socket option deprecated.
[  547.576338][T11974] Use struct sctp_assoc_value instead
[  549.150838][ T6136] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  549.256976][ T7857] usb 1-1: USB disconnect, device number 28
[  549.290818][ T6136] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized!
[  549.625045][ T6136] usb 4-1: USB disconnect, device number 42
[  551.546321][T11823] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  551.616782][T11823] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  551.671200][T11823] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  552.029782][T11823] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  552.132896][T12009] No source specified
[  552.170241][T12010] sctp: [Deprecated]: syz.0.1189 (pid 12010) Use of int in max_burst socket option deprecated.
[  552.170241][T12010] Use struct sctp_assoc_value instead
[  552.261126][ T6136] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  552.424518][ T6136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.447685][T11823] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.464035][ T6136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  552.507593][T11823] 8021q: adding VLAN 0 to HW filter on device team0
[  552.537210][ T6136] usb 4-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00
[  552.576661][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.577133][ T6136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.583845][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.632625][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.639793][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.698061][ T6136] usb 4-1: config 0 descriptor??
[  552.783942][ T6136] usb 4-1: can't set config #0, error -71
[  552.791791][ T6136] usb 4-1: USB disconnect, device number 43
[  552.815961][   T30] audit: type=1400 audit(1768412878.542:1077): avc:  denied  { set_context_mgr } for  pid=12026 comm="syz.9.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  552.830960][T12027] binder: 12026:12027 ioctl c0306201 200000000080 returned -14
[  552.868087][T12030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  553.026375][   T30] audit: type=1400 audit(1768412878.752:1078): avc:  denied  { call } for  pid=12026 comm="syz.9.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  553.122869][ T8184] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  553.154265][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.262831][ T5890] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  553.384538][ T8184] usb 6-1: config 127 has an invalid interface number: 124 but max is 0
[  553.393482][ T8184] usb 6-1: config 127 has no interface number 0
[  553.399761][ T8184] usb 6-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  555.319947][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  555.343449][ T5890] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  555.352515][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.381776][ T5890] usb 4-1: config 0 descriptor??
[  555.395013][ T8184] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f
[  555.403905][ T5890] pwc: Askey VC010 type 2 USB webcam detected.
[  555.450648][ T8184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.671350][T11823] veth0_vlan: entered promiscuous mode
[  555.685365][T11823] veth1_vlan: entered promiscuous mode
[  555.704875][ T8184] peak_usb 6-1:127.124 can0: unable to request usb[type=0 value=1] err=-71
[  555.723531][ T8184] peak_usb 6-1:127.124: unable to read PCAN-Chip USB firmware info (err -71)
[  555.736900][T11823] veth0_macvtap: entered promiscuous mode
[  555.829155][ T5890] pwc: recv_control_msg error -32 req 02 val 2b00
[  555.843323][ T5890] pwc: recv_control_msg error -32 req 02 val 2700
[  555.843704][T11823] veth1_macvtap: entered promiscuous mode
[  555.852863][ T5890] pwc: recv_control_msg error -32 req 02 val 2c00
[  555.872203][ T5890] pwc: recv_control_msg error -32 req 04 val 1000
[  555.964734][ T5890] pwc: recv_control_msg error -32 req 04 val 1300
[  556.114114][ T5890] pwc: recv_control_msg error -32 req 04 val 1400
[  556.222551][ T5890] pwc: recv_control_msg error -32 req 02 val 2000
[  556.262115][ T8184] peak_usb 6-1:127.124: probe with driver peak_usb failed with error -71
[  556.294707][ T8184] usb 6-1: USB disconnect, device number 39
[  556.302876][ T8097] usb 10-1: new full-speed USB device number 29 using dummy_hcd
[  556.342634][ T5890] pwc: recv_control_msg error -32 req 02 val 2100
[  556.378635][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.383606][ T5890] pwc: recv_control_msg error -32 req 04 val 1500
[  556.441344][ T5890] pwc: recv_control_msg error -32 req 02 val 2500
[  556.449621][T12077] netlink: 'syz.5.1202': attribute type 1 has an invalid length.
[  556.597106][ T8097] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  556.697937][ T8097] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.724508][   T30] audit: type=1400 audit(1768412882.442:1079): avc:  denied  { watch } for  pid=12036 comm="syz.3.1196" path="/279" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  556.991133][ T8097] usb 10-1: config 0 descriptor??
[  557.223629][ T8097] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  557.372631][ T5890] pwc: recv_control_msg error -71 req 02 val 2600
[  557.385603][ T5890] pwc: recv_control_msg error -71 req 02 val 2900
[  557.388278][T12077] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  557.392474][ T5890] pwc: recv_control_msg error -71 req 02 val 2800
[  557.427542][ T5890] pwc: recv_control_msg error -71 req 04 val 1100
[  557.437238][ T5890] pwc: recv_control_msg error -71 req 04 val 1200
[  557.465534][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.481443][ T5890] pwc: Registered as video103.
[  557.520063][ T5890] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40
[  557.523214][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'.
[  557.545413][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.585397][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.602188][   T30] audit: type=1400 audit(1768412883.322:1080): avc:  denied  { read } for  pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3303 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  557.603809][ T5890] usb 4-1: USB disconnect, device number 44
[  557.631576][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'.
[  557.651816][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.683302][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.809166][   T30] audit: type=1400 audit(1768412883.322:1081): avc:  denied  { open } for  pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3303 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  557.809211][   T30] audit: type=1400 audit(1768412883.322:1082): avc:  denied  { ioctl } for  pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3303 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  558.302675][ T7883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.326107][ T7883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.391148][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.421915][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.445620][   T30] audit: type=1400 audit(1768412884.172:1083): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/root/syzkaller.NCEpTT/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  558.572993][ T5890] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  558.607519][ T8097] gp8psk: usb in 128 operation failed.
[  558.643752][ T8097] gp8psk: usb in 137 operation failed.
[  558.678473][   T30] audit: type=1400 audit(1768412884.172:1084): avc:  denied  { mount } for  pid=11823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  558.694231][ T8097] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  558.701632][   T30] audit: type=1400 audit(1768412884.172:1085): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/root/syzkaller.NCEpTT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  558.758863][ T8097] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  558.768717][   T30] audit: type=1400 audit(1768412884.172:1086): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/root/syzkaller.NCEpTT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  558.801675][ T8097] usb 10-1: USB disconnect, device number 29
[  558.823237][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  558.865957][ T5890] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  558.885253][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.885319][ T5890] usb 4-1: Product: syz
[  558.885439][ T5890] usb 4-1: Manufacturer: syz
[  558.885653][ T5890] usb 4-1: SerialNumber: syz
[  558.914743][ T5890] usb 4-1: config 0 descriptor??
[  558.948164][   T30] audit: type=1400 audit(1768412884.232:1087): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  559.059369][ T5888] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  559.060203][   T30] audit: type=1400 audit(1768412884.232:1088): avc:  denied  { mount } for  pid=11823 comm="syz-executor" name="/" dev="gadgetfs" ino=7094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  559.103421][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  561.363985][ T5888] usb 6-1: Using ep0 maxpacket: 8
[  561.459367][   T30] audit: type=1400 audit(1768412884.232:1089): avc:  denied  { mount } for  pid=11823 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  561.485758][ T5890] gspca_ov534_9: reg_w failed -71
[  561.530831][ T5888] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[  561.563770][ T5888] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  561.670500][   T30] audit: type=1400 audit(1768412884.232:1090): avc:  denied  { mounton } for  pid=11823 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  561.698712][ T5888] usb 6-1: config 0 has no interface number 0
[  563.567194][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  563.571684][ T5888] usb 6-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  563.574226][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  563.585479][ T5888] usb 6-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  563.644557][ T5888] usb 6-1: config 0 interface 48 has no altsetting 0
[  563.651290][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  563.664686][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.676909][ T5888] usb 6-1: config 0 descriptor??
[  563.699295][ T5888] usb 6-1: string descriptor 0 read error: -71
[  563.784183][ T5888] usb 6-1: USB disconnect, device number 40
[  563.857389][   T30] audit: type=1400 audit(1768412889.582:1091): avc:  denied  { append } for  pid=12121 comm="syz.4.1210" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  563.900954][   T30] audit: type=1400 audit(1768412889.582:1092): avc:  denied  { append } for  pid=12121 comm="syz.4.1210" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  564.002959][ T5890] gspca_ov534_9: Unknown sensor 0000
[  564.003477][ T5890] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  564.005077][   T30] audit: type=1400 audit(1768412889.582:1093): avc:  denied  { ioctl } for  pid=12121 comm="syz.4.1210" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  564.071861][T12127] netlink: 'syz.5.1211': attribute type 21 has an invalid length.
[  564.080150][T12127] IPv6: NLM_F_CREATE should be specified when creating new route
[  564.083901][ T5890] usb 4-1: USB disconnect, device number 45
[  564.095168][T12127] netlink: 'syz.5.1211': attribute type 1 has an invalid length.
[  564.404596][T12134] netlink: 'syz.0.1212': attribute type 1 has an invalid length.
[  564.809704][   T30] audit: type=1400 audit(1768412889.682:1094): avc:  denied  { write } for  pid=12124 comm="syz.5.1211" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  567.653948][ T8103] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  569.712539][ T6104] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  569.793929][ T8103] usb 10-1: Using ep0 maxpacket: 8
[  569.873419][ T8103] usb 10-1: device descriptor read/all, error -71
[  569.917707][   T30] audit: type=1400 audit(1768412895.642:1095): avc:  denied  { create } for  pid=12168 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  570.048097][ T6104] usb 6-1: Using ep0 maxpacket: 8
[  570.399207][T12171] netlink: set zone limit has 4 unknown bytes
[  570.421750][ T6104] usb 6-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[  570.446312][   T30] audit: type=1400 audit(1768412895.852:1096): avc:  denied  { bind } for  pid=12168 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  570.482260][   T30] audit: type=1400 audit(1768412895.852:1097): avc:  denied  { getopt } for  pid=12168 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  570.633692][ T6104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  570.673910][   T30] audit: type=1400 audit(1768412895.852:1098): avc:  denied  { ioctl } for  pid=12168 comm="syz.4.1222" path="socket:[40505]" dev="sockfs" ino=40505 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  570.713217][ T6104] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  570.841413][ T6104] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  570.884929][ T6104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.907624][ T6104] usb 6-1: config 0 descriptor??
[  570.984885][ T6104] usb 6-1: can't set config #0, error -71
[  571.014092][T12186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  571.016096][ T6104] usb 6-1: USB disconnect, device number 41
[  571.064005][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.134350][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.163859][T12193] netlink: 'syz.3.1227': attribute type 1 has an invalid length.
[  571.367396][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.491545][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.930523][   T30] audit: type=1400 audit(1768412897.652:1099): avc:  denied  { lock } for  pid=12183 comm="syz.4.1225" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  572.042892][   T30] audit: type=1400 audit(1768412897.762:1100): avc:  denied  { map } for  pid=12196 comm="syz.9.1228" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  572.091891][   T30] audit: type=1400 audit(1768412897.762:1101): avc:  denied  { execute } for  pid=12196 comm="syz.9.1228" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  572.117073][   T30] audit: type=1400 audit(1768412897.772:1102): avc:  denied  { create } for  pid=12196 comm="syz.9.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  573.032681][   T30] audit: type=1400 audit(1768412898.742:1103): avc:  denied  { accept } for  pid=12196 comm="syz.9.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  573.152958][   T30] audit: type=1400 audit(1768412898.872:1104): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  575.289137][   T30] audit: type=1400 audit(1768412901.012:1105): avc:  denied  { bind } for  pid=12225 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  575.389858][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.406648][   T30] audit: type=1400 audit(1768412901.132:1106): avc:  denied  { create } for  pid=12196 comm="syz.9.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  575.436005][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.145070][T12257] veth1_macvtap: left promiscuous mode
[  576.150931][T12257] macsec0: entered promiscuous mode
[  576.157423][T12258] netlink: 'syz.0.1240': attribute type 1 has an invalid length.
[  581.855026][ T6136] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  582.018007][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.027742][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.445529][ T6136] usb 10-1: Using ep0 maxpacket: 8
[  582.625283][T12311] No buffer was provided with the request
[  582.932822][ T5868] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  583.667798][ T5868] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  584.529616][ T5868] usb 1-1: config 0 has no interface number 0
[  584.592809][ T5868] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  584.652179][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.699122][T12331] xt_NFQUEUE: number of queues (63489) out of range (got 96768)
[  584.710620][ T6136] usb 10-1: unable to read config index 0 descriptor/all
[  584.826307][ T6136] usb 10-1: can't read configurations, error -71
[  585.285214][ T5868] usb 1-1: config 0 descriptor??
[  585.317482][ T5868] usb 1-1: selecting invalid altsetting 1
[  585.338348][ T5868] dvb_ttusb_budget: ttusb_init_controller: error
[  585.353963][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  585.407987][T12342] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=12342 comm=syz.9.1255
[  585.422423][T12342] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=774 sclass=netlink_xfrm_socket pid=12342 comm=syz.9.1255
[  585.653933][ T5868] DVB: Unable to find symbol ves1820_attach()
[  586.018721][ T5868] DVB: Unable to find symbol stv0297_attach()
[  586.196025][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[  586.225534][ T5868] usb 1-1: USB disconnect, device number 29
[  588.509162][ T5890] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  591.085559][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.102891][ T5868] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  591.122830][ T5890] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.143788][ T5890] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  591.223089][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.232393][ T5890] usb 10-1: config 0 descriptor??
[  591.271278][ T5890] usb 10-1: can't set config #0, error -71
[  591.369362][ T5868] usb 1-1: config 127 has an invalid interface number: 124 but max is 0
[  591.378372][ T5868] usb 1-1: config 127 has no interface number 0
[  591.385446][ T5868] usb 1-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  591.411707][ T5890] usb 10-1: USB disconnect, device number 34
[  591.893737][ T5868] usb 1-1: string descriptor 0 read error: -71
[  591.899970][ T5868] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f
[  591.935930][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=15, SerialNumber=0
[  591.987012][ T5868] usb 1-1: can't set config #127, error -71
[  592.013034][ T5868] usb 1-1: USB disconnect, device number 30
[  592.132877][ T6136] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  592.137831][   T30] audit: type=1400 audit(1768412917.862:1107): avc:  denied  { map } for  pid=12404 comm="syz.5.1269" path="socket:[41796]" dev="sockfs" ino=41796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  592.563267][   T30] audit: type=1400 audit(1768412917.902:1108): avc:  denied  { read accept } for  pid=12404 comm="syz.5.1269" path="socket:[41796]" dev="sockfs" ino=41796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  592.604964][ T6136] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  592.625981][ T6136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.650765][ T6136] usb 4-1: config 0 descriptor??
[  592.653613][ T6136] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  592.742820][ T5890] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  592.953357][ T5890] usb 10-1: Using ep0 maxpacket: 16
[  592.967974][ T5890] usb 10-1: config 0 has an invalid interface number: 142 but max is 0
[  592.983436][ T5890] usb 10-1: config 0 has no interface number 0
[  592.983948][T12409] No buffer was provided with the request
[  592.992488][ T5890] usb 10-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=91.0d
[  593.015054][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.027243][ T5890] usb 10-1: Product: syz
[  593.031573][ T5890] usb 10-1: Manufacturer: syz
[  593.036497][ T5890] usb 10-1: SerialNumber: syz
[  593.052637][ T5890] usb 10-1: config 0 descriptor??
[  593.064196][T12412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.065123][ T5890] s2255 10-1:0.142: Could not find bulk-in endpoint
[  593.072986][T12412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.079555][ T5890] Sensoray 2255 driver load failed: 0xfffffff4
[  593.112871][ T5890] s2255 10-1:0.142: probe with driver s2255 failed with error -12
[  593.179072][   T30] audit: type=1400 audit(1768412918.902:1109): avc:  denied  { append } for  pid=12410 comm="syz.5.1271" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  593.213147][   T30] audit: type=1400 audit(1768412918.942:1110): avc:  denied  { map } for  pid=12410 comm="syz.5.1271" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  593.239924][   T30] audit: type=1400 audit(1768412918.942:1111): avc:  denied  { execute } for  pid=12410 comm="syz.5.1271" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  593.268929][   T30] audit: type=1400 audit(1768412918.992:1112): avc:  denied  { sqpoll } for  pid=12410 comm="syz.5.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  593.303774][   T30] audit: type=1400 audit(1768412919.032:1113): avc:  denied  { setopt } for  pid=12410 comm="syz.5.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  594.132864][ T6136] gp8psk: usb in 128 operation failed.
[  594.138604][ T6136] gp8psk: usb in 137 operation failed.
[  594.168478][ T6136] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  594.192886][ T6136] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  594.203521][ T6136] usb 4-1: USB disconnect, device number 46
[  594.784004][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.809238][T12400] /dev/nullb0: Can't open blockdev
[  594.811909][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.413469][ T6136] usb 10-1: USB disconnect, device number 35
[  597.470529][   T30] audit: type=1400 audit(1768412923.192:1114): avc:  denied  { write } for  pid=12442 comm="syz.3.1279" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  597.483156][T12444] fuse: Unknown parameter 'rootm'
[  597.607970][T12446] xt_NFQUEUE: number of queues (63489) out of range (got 96768)
[  601.900560][   T30] audit: type=1400 audit(1768412927.542:1115): avc:  denied  { watch_reads } for  pid=12479 comm="syz.9.1292" path="/177" dev="tmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  602.392892][ T7398] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  603.237449][ T7398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  603.252943][ T7398] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  603.262161][ T7398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.451550][ T7398] usb 1-1: config 0 descriptor??
[  603.679468][ T7398] pwc: Askey VC010 type 2 USB webcam detected.
[  604.043962][ T7398] pwc: recv_control_msg error -32 req 02 val 2b00
[  604.183484][ T7398] pwc: recv_control_msg error -32 req 02 val 2700
[  604.316815][ T7398] pwc: recv_control_msg error -32 req 02 val 2c00
[  604.333439][ T7398] pwc: recv_control_msg error -32 req 04 val 1000
[  604.353010][ T7398] pwc: recv_control_msg error -32 req 04 val 1300
[  604.369160][ T7398] pwc: recv_control_msg error -32 req 04 val 1400
[  604.416741][ T7398] pwc: recv_control_msg error -32 req 02 val 2000
[  604.443396][ T7398] pwc: recv_control_msg error -32 req 02 val 2100
[  604.565957][ T7398] pwc: recv_control_msg error -32 req 04 val 1500
[  604.572839][ T7398] pwc: recv_control_msg error -32 req 02 val 2500
[  604.579695][ T7398] pwc: recv_control_msg error -32 req 02 val 2400
[  604.586632][ T7398] pwc: recv_control_msg error -32 req 02 val 2600
[  604.595530][ T7398] pwc: recv_control_msg error -32 req 02 val 2900
[  604.602340][ T7398] pwc: recv_control_msg error -32 req 02 val 2800
[  604.609356][ T7398] pwc: recv_control_msg error -32 req 04 val 1100
[  604.684320][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1302'.
[  604.704998][ T7398] pwc: Registered as video103.
[  604.867024][ T7398] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45
[  605.132313][ T7398] usb 1-1: USB disconnect, device number 31
[  605.256088][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'.
[  605.292120][   T30] audit: type=1400 audit(1768412930.952:1116): avc:  denied  { mounton } for  pid=12514 comm="syz.3.1304" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  606.422841][ T5913] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  606.841106][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.858694][T12540] wg1: entered promiscuous mode
[  606.863712][T12540] wg1: entered allmulticast mode
[  607.011440][ T5913] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  607.743606][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.776487][ T5913] usb 4-1: config 0 descriptor??
[  607.813216][ T5913] pwc: Askey VC010 type 2 USB webcam detected.
[  608.210026][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00
[  608.242198][ T5913] pwc: recv_control_msg error -71 req 02 val 2700
[  608.282228][ T5913] pwc: recv_control_msg error -71 req 02 val 2c00
[  608.339531][ T5913] pwc: recv_control_msg error -71 req 04 val 1000
[  608.354554][ T5913] pwc: recv_control_msg error -71 req 04 val 1300
[  608.422120][ T5913] pwc: recv_control_msg error -71 req 04 val 1400
[  608.430129][ T5913] pwc: recv_control_msg error -71 req 02 val 2000
[  608.446494][ T5913] pwc: recv_control_msg error -71 req 02 val 2100
[  608.489882][ T5913] pwc: recv_control_msg error -71 req 04 val 1500
[  608.592874][ T5913] pwc: recv_control_msg error -71 req 02 val 2500
[  608.734500][ T5913] pwc: recv_control_msg error -71 req 02 val 2400
[  608.815461][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1318'.
[  609.155763][ T5913] pwc: recv_control_msg error -71 req 02 val 2600
[  609.165772][ T5913] pwc: recv_control_msg error -71 req 02 val 2900
[  609.175321][ T5913] pwc: recv_control_msg error -71 req 02 val 2800
[  609.182204][ T5913] pwc: recv_control_msg error -71 req 04 val 1100
[  609.189754][ T5913] pwc: recv_control_msg error -71 req 04 val 1200
[  609.232346][ T5913] pwc: Registered as video103.
[  609.266903][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46
[  609.343683][ T5913] usb 4-1: USB disconnect, device number 47
[  612.247150][T12578] wg1: entered promiscuous mode
[  612.252011][T12578] wg1: entered allmulticast mode
[  612.299762][T12604] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1332'.
[  613.302754][   T30] audit: type=1400 audit(1768412938.482:1117): avc:  denied  { bind } for  pid=12603 comm="syz.9.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  613.726828][T12600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'.
[  615.178249][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1334'.
[  615.550826][T12635] fuse: Bad value for 'rootmode'
[  616.582779][ T5913] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  616.620230][T12650] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  616.629905][T12650] SELinux: failed to load policy
[  617.332881][ T5913] usb 10-1: Using ep0 maxpacket: 32
[  617.358393][ T5913] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  617.399792][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.537860][ T5913] usb 10-1: Product: syz
[  617.563804][ T5913] usb 10-1: Manufacturer: syz
[  617.590172][ T5913] usb 10-1: SerialNumber: syz
[  617.611206][ T5913] usb 10-1: config 0 descriptor??
[  617.626001][   T30] audit: type=1400 audit(1768412943.352:1118): avc:  denied  { ioctl } for  pid=12661 comm="syz.3.1349" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  617.772946][ T5888] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  617.879976][ T5913] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 036
[  617.933853][ T5888] usb 1-1: Using ep0 maxpacket: 8
[  617.954076][ T5888] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  617.976115][ T5888] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  617.985715][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.005541][ T5888] usb 1-1: Product: syz
[  618.009915][ T5888] usb 1-1: Manufacturer: syz
[  618.016259][ T5888] usb 1-1: SerialNumber: syz
[  618.025781][ T5888] usb 1-1: config 0 descriptor??
[  618.044786][ T5888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  618.056973][ T5888] usb 1-1: setting power ON
[  618.061492][ T5888] dvb-usb: bulk message failed: -22 (2/0)
[  618.071975][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  618.089043][ T5888] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  618.099488][ T5888] usb 1-1: media controller created
[  618.109194][   T30] audit: type=1400 audit(1768412943.842:1119): avc:  denied  { setopt } for  pid=12675 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  618.117116][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.169743][T12643] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read)
[  618.210941][ T5888] usb 1-1: selecting invalid altsetting 6
[  618.222770][ T5888] usb 1-1: digital interface selection failed (-22)
[  618.233188][ T5888] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  618.256875][T12643] gfs2: not a GFS2 filesystem
[  618.258529][ T5888] usb 1-1: setting power OFF
[  618.288178][T12656] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  618.315540][ T5888] dvb-usb: bulk message failed: -22 (2/0)
[  618.330593][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  618.357699][ T5888] (NULL device *): no alternate interface
[  618.392920][ T7857] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[  618.432988][ T5913] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  618.450658][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  618.474339][T12643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.500887][T12643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.574491][ T7857] usb 6-1: unable to get BOS descriptor or descriptor too short
[  618.584602][ T7857] usb 6-1: not running at top speed; connect to a high speed hub
[  618.601552][T12684] openvswitch: netlink: Flow actions attr not present in new flow.
[  618.614076][ T7857] usb 6-1: config 8 has an invalid interface number: 52 but max is 0
[  618.654293][ T7857] usb 6-1: config 8 has no interface number 0
[  618.663851][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  618.672942][ T7857] usb 6-1: config 8 interface 52 has no altsetting 0
[  618.718611][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  618.731343][ T7857] usb 6-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=79.78
[  618.745881][ T5890] usb 10-1: USB disconnect, device number 36
[  618.760128][ T5913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  618.781109][ T7857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.791542][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  618.791701][ T7857] usb 6-1: Product: syz
[  618.809810][ T5913] usb 4-1: SerialNumber: syz
[  618.827222][ T7857] usb 6-1: Manufacturer: syz
[  618.831840][ T7857] usb 6-1: SerialNumber: syz
[  619.070027][ T7857] HFC-S_USB 6-1:8.52: probe with driver HFC-S_USB failed with error -5
[  619.093571][ T7857] usb 6-1: USB disconnect, device number 42
[  619.127855][ T5913] usb 4-1: 0:2 : does not exist
[  619.154245][ T5913] usb 4-1: USB disconnect, device number 48
[  619.214896][T12488] udevd[12488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  619.460452][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1356'.
[  619.537444][   T30] audit: type=1400 audit(1768412945.262:1120): avc:  denied  { append } for  pid=12694 comm="syz.9.1358" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  619.541064][T12695] loop4: detected capacity change from 0 to 2560
[  619.585215][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  619.607913][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  619.663770][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  619.693668][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  619.702684][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  619.836305][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  620.094798][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  620.133099][   T30] audit: type=1400 audit(1768412945.862:1121): avc:  denied  { ioctl } for  pid=12700 comm="syz.5.1360" path="socket:[44122]" dev="sockfs" ino=44122 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  620.136748][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  620.388178][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  620.396598][T12488] Buffer I/O error on dev loop4, logical block 0, async page read
[  620.397313][   T30] audit: type=1400 audit(1768412946.132:1122): avc:  denied  { read write } for  pid=12706 comm="syz.5.1363" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  620.438838][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.469583][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.481652][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.490521][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.499937][   T30] audit: type=1400 audit(1768412946.152:1123): avc:  denied  { open } for  pid=12706 comm="syz.5.1363" path="/dev/input/mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  620.524265][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.531984][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.539722][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.547382][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.555882][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.563671][ T5888] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0
[  620.596322][ T5888] hid-generic 0006:0004:0009.000C: hidraw0: VIRTUAL HID v0.02 Device [syz1] on syz0
[  620.680258][T12711] fido_id[12711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  620.730935][ T5888] usb 1-1: USB disconnect, device number 32
[  621.132249][T12719] SELinux: failed to load policy
[  621.212959][T12720] kvm: kvm [12718]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x2000006
[  621.396590][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.411547][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.606791][T12738] FAULT_INJECTION: forcing a failure.
[  621.606791][T12738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.620529][T12738] CPU: 1 UID: 0 PID: 12738 Comm: syz.3.1370 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  621.620554][T12738] Tainted: [L]=SOFTLOCKUP
[  621.620560][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  621.620570][T12738] Call Trace:
[  621.620576][T12738]  <TASK>
[  621.620583][T12738]  dump_stack_lvl+0x16c/0x1f0
[  621.620611][T12738]  should_fail_ex+0x512/0x640
[  621.620641][T12738]  _copy_from_iter+0x2a4/0x16c0
[  621.620670][T12738]  ? __alloc_skb+0x220/0x410
[  621.620685][T12738]  ? __alloc_skb+0x35d/0x410
[  621.620700][T12738]  ? __pfx__copy_from_iter+0x10/0x10
[  621.620736][T12738]  netlink_sendmsg+0x820/0xdd0
[  621.620762][T12738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  621.620793][T12738]  ____sys_sendmsg+0xa5d/0xc30
[  621.620817][T12738]  ? copy_msghdr_from_user+0x10a/0x160
[  621.620835][T12738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  621.620864][T12738]  ? __lock_acquire+0x436/0x2890
[  621.620888][T12738]  ___sys_sendmsg+0x134/0x1d0
[  621.620907][T12738]  ? __pfx____sys_sendmsg+0x10/0x10
[  621.620956][T12738]  __sys_sendmsg+0x16d/0x220
[  621.620975][T12738]  ? __pfx___sys_sendmsg+0x10/0x10
[  621.620992][T12738]  ? __pfx___schedule+0x10/0x10
[  621.621019][T12738]  ? rcu_is_watching+0x12/0xc0
[  621.621043][T12738]  do_syscall_64+0xcd/0xf80
[  621.621066][T12738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.621083][T12738] RIP: 0033:0x7ffaee98f749
[  621.621097][T12738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.621113][T12738] RSP: 002b:00007ffaef7a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.621128][T12738] RAX: ffffffffffffffda RBX: 00007ffaeebe6180 RCX: 00007ffaee98f749
[  621.621139][T12738] RDX: 0000000000044000 RSI: 0000200000000280 RDI: 000000000000000a
[  621.621150][T12738] RBP: 00007ffaef7a1090 R08: 0000000000000000 R09: 0000000000000000
[  621.621160][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.621169][T12738] R13: 00007ffaeebe6218 R14: 00007ffaeebe6180 R15: 00007fffa88c3098
[  621.621193][T12738]  </TASK>
[  622.394191][ T5888] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  623.096581][ T5888] usb 4-1: Using ep0 maxpacket: 32
[  624.147934][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  624.175541][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.415327][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short
[  624.440168][ T5888] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  625.043613][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -71
[  625.051331][ T5888] usb 4-1: can't read configurations, error -71
[  625.603052][T12784] virtio-fs: tag </dev/md0> not found
[  625.862932][T12788] gfs2: error -5 reading superblock
[  627.564930][   T30] audit: type=1400 audit(1768412953.292:1124): avc:  denied  { append } for  pid=12808 comm="syz.4.1390" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  627.650110][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.662442][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.670249][ T5888] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  627.678052][ T6136] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  627.742978][ T5850] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  627.835456][ T6136] usb 10-1: Using ep0 maxpacket: 8
[  627.841186][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  627.849936][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  627.864056][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  627.873158][ T6136] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  627.881692][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.892803][ T5850] usb 6-1: Using ep0 maxpacket: 32
[  627.898010][ T6136] usb 10-1: config 0 has no interface number 0
[  627.905259][ T6136] usb 10-1: config 0 interface 1 has no altsetting 0
[  627.913552][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.924974][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.935919][ T5850] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  627.947885][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  627.957189][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  627.966171][ T6136] usb 10-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  627.975422][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.983489][ T6136] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.991632][ T5888] usb 4-1: Product: syz
[  627.996966][ T5888] usb 4-1: Manufacturer: syz
[  628.010225][ T6136] usb 10-1: Product: syz
[  628.015615][ T5850] usb 6-1: config 0 descriptor??
[  628.022209][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  628.027484][ T6136] usb 10-1: Manufacturer: syz
[  628.032163][ T6136] usb 10-1: SerialNumber: syz
[  628.038198][ T5850] hub 6-1:0.0: USB hub found
[  628.042854][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  628.051926][ T5888] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  628.059205][ T6136] usb 10-1: config 0 descriptor??
[  628.064273][ T5888] cdc_wdm 4-1:1.0: Unknown control protocol
[  628.230958][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.242242][ T5890] usb 4-1: USB disconnect, device number 51
[  628.248917][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  628.252811][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.271722][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.281758][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.296540][ T6136] i2c-cp2615 10-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  628.306438][ T5850] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  628.412784][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  628.419221][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  628.430773][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  628.443845][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  628.452945][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.460922][ T5913] usb 1-1: Product: syz
[  628.465207][ T5913] usb 1-1: Manufacturer: syz
[  628.469790][ T5913] usb 1-1: SerialNumber: syz
[  628.478005][ T5913] usb 1-1: config 0 descriptor??
[  628.486479][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  628.500059][ T5913] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  628.501833][ T6136] usb 10-1: USB disconnect, device number 37
[  628.512064][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.522844][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.722786][ T5888] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  628.723944][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.740297][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.742444][ T5850] hid_parser_main: 24 callbacks suppressed
[  628.742459][ T5850] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0
[  628.772389][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.781194][ T5850] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[  628.781247][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.884032][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  628.893741][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  628.904016][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  628.913580][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.925916][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  628.935097][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  628.943280][ T5888] usb 4-1: Product: syz
[  628.947489][ T5888] usb 4-1: Manufacturer: syz
[  628.956428][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  628.961675][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  628.974084][ T5888] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  628.982988][ T5888] cdc_wdm 4-1:1.0: Unknown control protocol
[  629.092193][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  629.108201][ T5913] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  629.937201][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.953815][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.964500][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  629.971324][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  629.977672][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  629.978964][   T30] audit: type=1400 audit(1768412955.652:1125): avc:  denied  { read write } for  pid=12804 comm="syz.3.1388" name="cdc-wdm0" dev="devtmpfs" ino=3367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  629.984255][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  629.984445][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.015436][   T30] audit: type=1400 audit(1768412955.652:1126): avc:  denied  { open } for  pid=12804 comm="syz.3.1388" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  630.020850][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.052043][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.058641][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.061508][   T30] audit: type=1400 audit(1768412955.782:1127): avc:  denied  { ioctl } for  pid=12804 comm="syz.3.1388" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3367 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  630.065288][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.093813][ T5850] usb 10-1: new full-speed USB device number 38 using dummy_hcd
[  630.096683][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.111356][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.111897][T12807] usb 6-1: reset high-speed USB device number 43 using dummy_hcd
[  630.117953][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.122553][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.139012][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.145702][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.152288][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.159523][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.166113][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.172591][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  630.179175][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  630.185578][T12827] No buffer was provided with the request
[  630.186079][ T5868] usb 4-1: USB disconnect, device number 52
[  630.191325][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  630.209845][ T5913] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  630.219421][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  630.229709][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  630.236907][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  630.245275][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  630.252089][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  630.260760][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.269498][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.304720][ T5850] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  630.313981][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.325076][ T5850] usb 10-1: config 0 descriptor??
[  630.332560][ T5850] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  630.462075][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  630.470383][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  630.477359][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  630.484537][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  630.490980][ T5913] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  630.500896][ T5913] usb 1-1: USB disconnect, device number 33
[  630.532806][ T5868] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  630.723056][ T5868] usb 4-1: unable to read config index 0 descriptor/start: -71
[  630.734626][ T5868] usb 4-1: can't read configurations, error -71
[  631.242986][ T5913] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  631.384107][T12835] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=12835 comm=syz.3.1398
[  631.401537][T12835] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=774 sclass=netlink_xfrm_socket pid=12835 comm=syz.3.1398
[  631.422784][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  631.430929][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  631.442226][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  631.452812][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  631.462978][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64
[  631.474957][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  631.485878][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.524838][ T5913] usb 1-1: config 0 descriptor??
[  631.952481][ T5913] usb 1-1: USB disconnect, device number 34
[  632.201152][ T5850] gp8psk: usb in 128 operation failed.
[  632.207720][ T5850] gp8psk: usb in 137 operation failed.
[  632.213250][ T5850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  632.226206][ T5850] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  632.240333][ T5850] usb 10-1: USB disconnect, device number 38
[  633.875139][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.883894][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.984468][T12807] usbhid 6-1:0.0: reset_resume error -32
[  636.434346][T11456] usb 6-1: USB disconnect, device number 43
[  636.601536][T12863] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1406'.
[  637.147858][   T24] IPVS: starting estimator thread 0...
[  637.323547][T12868] IPVS: using max 46 ests per chain, 110400 per kthread
[  637.451674][   T30] audit: type=1400 audit(1768412963.172:1128): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  637.474416][   T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  637.519863][T12876] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=12876 comm=syz.9.1409
[  637.538612][T12878] loop7: detected capacity change from 0 to 16384
[  637.552894][T11456] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  637.603637][T12876] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=774 sclass=netlink_xfrm_socket pid=12876 comm=syz.9.1409
[  637.644505][   T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  637.705796][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.723977][T11456] usb 6-1: Using ep0 maxpacket: 32
[  637.730400][T11456] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.747738][T11456] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  637.760104][T11456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.836197][T11456] usb 6-1: Product: syz
[  637.841038][T11456] usb 6-1: Manufacturer: syz
[  637.842559][   T24] usb 1-1: config 0 descriptor??
[  637.854773][T11456] usb 6-1: SerialNumber: syz
[  637.883491][T11456] usb 6-1: config 0 descriptor??
[  637.886559][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  637.906681][T12879] loop7: detected capacity change from 16384 to 16383
[  637.988848][T11456] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  638.215500][T11456] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  638.233967][T11456] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8
[  638.661092][T11456] usb 6-1: USB disconnect, device number 44
[  639.404791][T12888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12888 comm=syz.4.1412
[  639.494803][T12887] wg1: left promiscuous mode
[  639.500484][T12887] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.508903][   T24] gp8psk: usb in 128 operation failed.
[  639.524015][   T24] gp8psk: usb in 137 operation failed.
[  639.531851][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  639.561495][T12887] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.570021][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  639.604100][   T24] usb 1-1: USB disconnect, device number 35
[  639.966772][   T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  642.025318][T12905] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1418'.
[  642.031830][   T24] usb 1-1: Using ep0 maxpacket: 32
[  642.056415][   T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  642.066037][   T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  642.074701][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  642.084122][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  642.094200][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  642.094256][ T5850] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  642.153160][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  642.309784][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.320979][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.359937][   T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  642.376617][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.400645][   T30] audit: type=1400 audit(1768412968.122:1129): avc:  denied  { bind } for  pid=12898 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  642.421667][   T24] usb 1-1: config 0 descriptor??
[  642.604060][ T5850] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  642.621828][ T5850] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  642.631499][   T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  642.644817][ T5850] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  642.656914][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  642.690803][ T5850] usb 10-1: SerialNumber: syz
[  643.097247][ T5868] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  643.136209][   T24] usb 1-1: USB disconnect, device number 36
[  643.154645][   T24] usblp0: removed
[  643.198418][ T5850] usb 10-1: 0:2 : does not exist
[  643.203814][ T5850] usb 10-1: unit 5: unexpected type 0x03
[  643.209543][ T5850] usb 10-1: unit 255 not found!
[  643.234751][T12922] gfs2: not a GFS2 filesystem
[  643.241356][ T5850] usb 10-1: USB disconnect, device number 39
[  643.274982][ T5868] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  643.291664][T12488] udevd[12488]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  643.295316][ T5868] usb 4-1: config 8 has no interface number 0
[  643.339411][ T5868] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  643.344196][ T7857] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  643.365084][ T5868] usb 4-1: config 8 interface 177 has no altsetting 0
[  643.377946][ T5868] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  643.396772][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.413666][T12912] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  643.421565][T12917] No buffer was provided with the request
[  643.514218][ T7857] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  643.523561][ T7857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.541363][ T7857] usb 6-1: config 0 descriptor??
[  643.553743][ T7857] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  643.637863][ T5868] usb 4-1: language id specifier not provided by device, defaulting to English
[  643.692798][ T5850] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[  643.732816][T11456] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  643.787723][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.797282][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.842104][    C1] ir_toy 4-1:8.177: out urb status: -71
[  643.852845][ T5850] usb 10-1: Using ep0 maxpacket: 16
[  643.859346][ T5850] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  643.867836][ T5850] usb 10-1: config 0 has no interface number 0
[  643.875083][ T5850] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  643.886983][ T5850] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  643.898555][ T5850] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  643.907781][T11456] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  643.915841][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  643.924048][T11456] usb 1-1: config 0 has no interface number 0
[  643.930152][T11456] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  643.939544][ T5850] usb 10-1: Product: syz
[  643.944863][ T5850] usb 10-1: SerialNumber: syz
[  643.950312][T11456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.959422][ T5850] usb 10-1: config 0 descriptor??
[  643.966746][ T5850] cm109 10-1:0.8: invalid payload size 0, expected 4
[  643.974759][T11456] usb 1-1: config 0 descriptor??
[  643.981781][ T5850] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input50
[  643.996166][T11456] usb 1-1: selecting invalid altsetting 1
[  644.001979][T11456] dvb_ttusb_budget: ttusb_init_controller: error
[  644.009381][T11456] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  644.011171][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.063546][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.109490][T11456] DVB: Unable to find symbol ves1820_attach()
[  644.152643][T11456] DVB: Unable to find symbol stv0297_attach()
[  644.159581][T11456] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[  644.223546][    C0] cm109_urb_ctl_callback: 9 callbacks suppressed
[  644.223560][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.237257][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.244486][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.252116][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.259309][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.266434][T11456] usb 10-1: USB disconnect, device number 40
[  644.266472][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[  644.266483][    C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  644.290524][T11456] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  644.353494][ T5868] ir_toy 4-1:8.177: could not write reset command: -110
[  644.368395][ T5868] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110
[  644.389431][ T5868] usb 4-1: USB disconnect, device number 55
[  645.730974][ T7857] gp8psk: usb in 128 operation failed.
[  645.948833][ T7857] gp8psk: usb in 137 operation failed.
[  645.954428][ T7857] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  645.965014][ T7857] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  645.976432][ T5890] usb 1-1: USB disconnect, device number 37
[  645.977884][ T7857] usb 6-1: USB disconnect, device number 45
[  646.403340][T12956] gfs2: not a GFS2 filesystem
[  646.723582][ T7857] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  646.757428][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.766005][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.972772][ T7857] usb 1-1: Using ep0 maxpacket: 16
[  646.986037][ T7857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.000168][ T7857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.010869][ T7857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  647.023871][ T7857] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  647.033965][ T7857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.043682][ T7857] usb 1-1: config 0 descriptor??
[  647.062819][ T5850] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  647.120723][T12968] tipc: Started in network mode
[  647.126013][T12968] tipc: Node identity 8e198919b8b, cluster identity 4711
[  647.133994][T12968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.141374][T12968] syzkaller0: entered promiscuous mode
[  647.146966][T12968] syzkaller0: entered allmulticast mode
[  647.155811][T12968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  647.173989][T12968] syzkaller0: mtu greater than device maximum
[  647.180692][T12967] tipc: Resetting bearer <eth:syzkaller0>
[  647.197348][T12967] tipc: Disabling bearer <eth:syzkaller0>
[  647.215628][ T5850] usb 4-1: Using ep0 maxpacket: 8
[  647.223552][ T5850] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  647.232314][ T5850] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  647.242663][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.255657][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  647.271137][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.279641][ T5850] usb 4-1: Product: syz
[  647.285925][ T5850] usb 4-1: Manufacturer: syz
[  647.290657][ T5850] usb 4-1: SerialNumber: syz
[  647.296003][T12958] rtc_cmos 00:00: Alarms can be up to one day in the future
[  647.745262][   T30] audit: type=1400 audit(1768412973.342:1130): avc:  denied  { write } for  pid=12969 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  647.767039][ T7857] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input51
[  647.978653][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1442'.
[  648.221527][ T6104] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.308444][ T6104] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.401399][ T6104] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.505307][ T6104] rtc_cmos 00:00: Alarms can be up to one day in the future
[  648.609811][ T6104] rtc rtc0: __rtc_set_alarm: err=-22
[  648.796397][ T7857] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  648.911673][   T30] audit: type=1400 audit(1768412974.632:1131): avc:  denied  { ioctl } for  pid=12985 comm="syz.4.1444" path="socket:[45419]" dev="sockfs" ino=45419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  648.925399][ T7857] usb 1-1: USB disconnect, device number 38
[  649.338735][T12998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.783933][T12998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.502966][ T7857] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  650.652786][ T7857] usb 1-1: Using ep0 maxpacket: 32
[  650.661291][ T5850] usb 4-1: USB disconnect, device number 56
[  650.672426][ T7857] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  650.680648][T11456] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  650.705738][ T7857] usb 1-1: config 0 has no interface number 0
[  650.715719][ T7857] usb 1-1: config 0 interface 89 has no altsetting 0
[  650.724784][ T7857] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  650.744250][ T7857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.752551][ T7857] usb 1-1: Product: syz
[  650.757931][ T7857] usb 1-1: Manufacturer: syz
[  650.764704][ T7857] usb 1-1: SerialNumber: syz
[  650.774987][ T7857] usb 1-1: config 0 descriptor??
[  650.787945][ T7857] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  650.809150][ T7857] em28xx 1-1:0.89: Video interface 89 found: bulk
[  650.817721][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.826606][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.852900][T11456] usb 10-1: Using ep0 maxpacket: 32
[  650.863436][T11456] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.884317][T11456] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  650.894025][T11456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.904493][T11456] usb 10-1: Product: syz
[  650.908875][T11456] usb 10-1: Manufacturer: syz
[  650.914016][T11456] usb 10-1: SerialNumber: syz
[  650.957621][T11456] usb 10-1: config 0 descriptor??
[  650.969740][T11456] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  651.097383][T13007] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.125607][T13020] Cannot find add_set index 2 as target
[  651.303385][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.311787][   T30] audit: type=1400 audit(1768412976.792:1132): avc:  denied  { read } for  pid=13015 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  651.332397][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.374390][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.390246][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  651.407452][ T5850] rtc rtc0: __rtc_set_alarm: err=-22
[  651.548407][ T7857] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  652.315290][T13031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1458'.
[  652.416926][ T5850] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  652.892809][ T5850] usb 6-1: Using ep0 maxpacket: 8
[  652.905568][ T5850] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  652.915057][ T7857] em28xx 1-1:0.89: board has no eeprom
[  652.927505][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.951881][ T5850] usb 6-1: Product: syz
[  652.959408][ T5850] usb 6-1: Manufacturer: syz
[  652.973943][ T5850] usb 6-1: SerialNumber: syz
[  652.994072][ T5850] usb 6-1: config 0 descriptor??
[  653.012415][T11456] gspca_sunplus: reg_r err -71
[  653.018666][T11456] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[  653.050015][T11456] usb 10-1: USB disconnect, device number 41
[  653.172770][ T7857] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  653.187425][ T7857] em28xx 1-1:0.89: analog set to bulk mode.
[  653.200232][ T5861] em28xx 1-1:0.89: Registering V4L2 extension
[  653.215619][ T5850] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  653.229585][ T7857] usb 1-1: USB disconnect, device number 39
[  653.261352][ T7857] em28xx 1-1:0.89: Disconnecting em28xx
[  653.372305][ T5861] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  653.386612][ T5861] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  653.404976][ T5861] em28xx 1-1:0.89: No AC97 audio processor
[  653.449225][ T5861] usb 1-1: Decoder not found
[  653.458306][ T5861] em28xx 1-1:0.89: failed to create media graph
[  653.477984][ T5861] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  653.616477][ T5861] em28xx 1-1:0.89: Registering snapshot button...
[  653.640630][ T5861] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input52
[  653.997462][ T5861] em28xx 1-1:0.89: Remote control support is not available for this card.
[  654.007909][ T7857] em28xx 1-1:0.89: Closing input extension
[  654.014777][ T7857] em28xx 1-1:0.89: Deregistering snapshot button
[  654.081430][ T7857] em28xx 1-1:0.89: Freeing device
[  654.702173][T13059] fuse: Unknown parameter '��u���u���n��fin�d 
[  654.702173][T13059] V�<Hry�Ӷ	'
[  654.919888][ T5850] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  655.000499][ T5850] usb 6-1: USB disconnect, device number 46
[  655.308986][T13066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1465'.
[  655.320530][T13066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1465'.
[  655.419854][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.429489][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.646003][ T5809] Bluetooth: hci3: command 0x0406 tx timeout
[  656.696671][T13089] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1473'.
[  656.712785][   T30] audit: type=1400 audit(1768412982.422:1133): avc:  denied  { nlmsg_read } for  pid=13088 comm="syz.9.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  656.753906][   T30] audit: type=1400 audit(1768412982.442:1134): avc:  denied  { name_connect } for  pid=13088 comm="syz.9.1473" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  656.828940][   T30] audit: type=1400 audit(1768412982.452:1135): avc:  denied  { listen } for  pid=13088 comm="syz.9.1473" laddr=fe80::13 lport=60728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  657.050551][T13092] netlink: 'syz.9.1473': attribute type 10 has an invalid length.
[  657.391233][   T30] audit: type=1400 audit(1768412982.452:1136): avc:  denied  { accept } for  pid=13088 comm="syz.9.1473" laddr=fe80::13 lport=60728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  657.682615][T13092] syz_tun: entered promiscuous mode
[  657.692934][T13092] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  658.840267][   T30] audit: type=1400 audit(1768412984.562:1137): avc:  denied  { getopt } for  pid=13112 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  659.002921][T11456] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  659.010556][ T5850] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  659.052990][ T5861] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  659.162767][ T5850] usb 10-1: Using ep0 maxpacket: 32
[  659.174601][T11456] usb 4-1: Using ep0 maxpacket: 8
[  659.181117][ T5850] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  659.192679][T11456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.212010][ T5850] usb 10-1: config 0 interface 0 has no altsetting 0
[  659.232789][ T5861] usb 1-1: Using ep0 maxpacket: 32
[  659.597154][ T5861] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  659.617182][ T5850] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  659.626783][T11456] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  659.635940][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.648505][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.656813][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.664842][ T5861] usb 1-1: Product: syz
[  659.671535][ T5861] usb 1-1: Manufacturer: syz
[  659.680178][ T5850] usb 10-1: config 0 descriptor??
[  659.688567][T11456] usb 4-1: Product: syz
[  659.692966][ T5861] usb 1-1: SerialNumber: syz
[  659.697602][T11456] usb 4-1: Manufacturer: syz
[  659.706991][ T5861] usb 1-1: config 0 descriptor??
[  659.718625][T11456] usb 4-1: SerialNumber: syz
[  659.731103][T11456] usb 4-1: config 0 descriptor??
[  659.742551][T11456] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  659.950784][ T5861] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 040
[  660.076480][T13131] kvm: kvm [13130]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x2000006
[  660.164318][T13121] i2c i2c-1: adapter quirk: no zero length (addr 0x0001, size 0, read)
[  660.177789][T13121] gfs2: not a GFS2 filesystem
[  660.185107][   T24] usb 1-1: USB disconnect, device number 40
[  660.393521][ T5915] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  660.469058][ T5850] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0
[  660.544227][ T5915] usb 6-1: config 128 has no interfaces?
[  660.670666][ T5915] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  660.689308][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.732852][ T5915] usb 6-1: Product: syz
[  660.739464][ T5915] usb 6-1: Manufacturer: syz
[  660.746265][ T5915] usb 6-1: SerialNumber: syz
[  660.864541][ T5850] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -110
[  660.916893][ T5850] usb 10-1: USB disconnect, device number 42
[  660.960743][T11456] usb 6-1: USB disconnect, device number 47
[  660.971230][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1485'.
[  661.817604][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.826357][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.880165][ T5915] usb 4-1: USB disconnect, device number 57
[  663.747620][T13178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'.
[  664.491343][T13184] No buffer was provided with the request
[  664.961506][T13191] kvm: kvm [13187]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000074) = 0x2000006
[  665.162897][   T30] audit: type=1400 audit(1768412990.762:1138): avc:  denied  { write } for  pid=13188 comm="syz.4.1500" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  665.519395][ T5850] usb 10-1: new full-speed USB device number 43 using dummy_hcd
[  665.539601][   T30] audit: type=1400 audit(1768412990.772:1139): avc:  denied  { open } for  pid=13188 comm="syz.4.1500" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  665.577187][   T30] audit: type=1400 audit(1768412990.792:1140): avc:  denied  { write } for  pid=13188 comm="syz.4.1500" path="socket:[46043]" dev="sockfs" ino=46043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  665.588510][T13201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=13201 comm=syz.5.1502
[  665.613561][T13201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=13201 comm=syz.5.1502
[  665.626074][T13201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=13201 comm=syz.5.1502
[  665.743957][ T5850] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  665.762596][ T5850] usb 10-1: config 0 has no interface number 0
[  665.773153][ T5850] usb 10-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  665.793596][T11456] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  665.804667][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.840465][ T5850] usb 10-1: config 0 descriptor??
[  665.850020][ T5850] usb 10-1: selecting invalid altsetting 1
[  665.857569][ T5850] dvb_ttusb_budget: ttusb_init_controller: error
[  665.863920][ T5850] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  665.919744][ T5850] DVB: Unable to find symbol ves1820_attach()
[  666.042306][ T5850] DVB: Unable to find symbol stv0297_attach()
[  666.054908][T11456] usb 4-1: config 128 has no interfaces?
[  666.063554][ T5861] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  666.078024][T11456] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  666.114612][ T5850] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[  666.180830][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'.
[  666.774960][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.980304][T11456] usb 4-1: Product: syz
[  666.992961][T11456] usb 4-1: Manufacturer: syz
[  666.997579][T11456] usb 4-1: SerialNumber: syz
[  667.022926][ T5861] usb 1-1: Using ep0 maxpacket: 8
[  667.040833][ T5861] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  667.059045][ T5861] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  667.068317][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.076351][ T5861] usb 1-1: Product: syz
[  667.081322][ T5861] usb 1-1: Manufacturer: syz
[  667.089694][ T5861] usb 1-1: SerialNumber: syz
[  667.119449][ T5915] usb 10-1: USB disconnect, device number 43
[  667.126429][ T5861] usb 1-1: config 0 descriptor??
[  667.167830][ T5861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  667.240868][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'.
[  667.402215][   T24] usb 4-1: USB disconnect, device number 58
[  668.152858][ T5861] usb 1-1: setting power ON
[  668.157483][ T5861] dvb-usb: bulk message failed: -22 (2/0)
[  668.178110][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  668.208088][ T5861] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  668.216610][ T5861] usb 1-1: media controller created
[  668.241416][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  668.308121][ T5861] usb 1-1: selecting invalid altsetting 6
[  668.316223][ T5861] usb 1-1: digital interface selection failed (-22)
[  668.323066][ T5861] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  668.332661][ T5861] usb 1-1: setting power OFF
[  668.340161][ T5861] dvb-usb: bulk message failed: -22 (2/0)
[  668.381939][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  668.408490][ T5861] (NULL device *): no alternate interface
[  668.442912][   T24] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[  668.492417][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  668.622801][   T24] usb 10-1: Using ep0 maxpacket: 16
[  668.629641][   T24] usb 10-1: unable to get BOS descriptor or descriptor too short
[  668.648742][   T24] usb 10-1: config 128 has an invalid interface number: 66 but max is 0
[  668.676285][   T24] usb 10-1: config 128 has no interface number 0
[  668.781160][ T5850] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  669.055912][   T24] usb 10-1: config 128 interface 66 has no altsetting 0
[  669.065424][   T24] usb 10-1: string descriptor 0 read error: -22
[  669.071760][   T24] usb 10-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=1e.90
[  669.081301][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.159032][T13232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.169118][T13232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.191584][ T5869] usb 1-1: USB disconnect, device number 41
[  669.247939][T13234] tipc: Started in network mode
[  669.253579][T13234] tipc: Node identity e2bbe4cadeef, cluster identity 4711
[  669.260809][T13234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.267990][ T5850] usb 6-1: Using ep0 maxpacket: 16
[  669.274694][ T5850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  669.285055][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  669.301496][   T24] comedi comedi5: could not set alternate setting 3 in high speed
[  669.303231][ T5850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  669.329756][   T24] usbduxsigma 10-1:128.66: driver 'usbduxsigma' failed to auto-configure device.
[  669.370995][   T24] usbduxsigma 10-1:128.66: probe with driver usbduxsigma failed with error -71
[  669.395946][   T24] usb 10-1: USB disconnect, device number 44
[  669.423103][ T5850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  669.440823][ T5850] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.455040][ T5850] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  669.480062][ T5850] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  669.490077][ T5850] usb 6-1: Manufacturer: syz
[  669.505297][ T5850] usb 6-1: config 0 descriptor??
[  669.604201][T13233] tipc: Disabling bearer <eth:syzkaller0>
[  669.958024][   T30] audit: type=1400 audit(1768412995.682:1141): avc:  denied  { mount } for  pid=13252 comm="syz.4.1518" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  670.122775][ T5850] rc_core: IR keymap rc-hauppauge not found
[  670.128751][ T5850] Registered IR keymap rc-empty
[  670.133938][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.183999][   T30] audit: type=1400 audit(1768412995.912:1142): avc:  denied  { unmount } for  pid=11823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  670.212065][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.250723][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'.
[  670.300837][ T5850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  670.320074][ T5850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54
[  670.335300][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.352791][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.448714][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.472813][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.493028][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.532845][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.694095][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.742811][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.768483][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.802804][ T5850] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  670.837473][ T5850] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  670.858762][ T5850] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  670.886487][ T5850] usb 6-1: USB disconnect, device number 48
[  671.397851][   T24] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  671.417637][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.431218][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.573490][   T24] usb 10-1: Using ep0 maxpacket: 16
[  671.628977][   T24] usb 10-1: config 4 has an invalid interface number: 9 but max is 0
[  671.701797][   T24] usb 10-1: config 4 has no interface number 0
[  671.746303][   T24] usb 10-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  671.780674][   T24] usb 10-1: config 4 interface 9 has no altsetting 0
[  671.804547][   T24] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  671.819999][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.847105][   T24] usb 10-1: Product: syz
[  671.853136][   T24] usb 10-1: Manufacturer: syz
[  671.858026][   T24] usb 10-1: SerialNumber: syz
[  671.878745][T13276] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  671.917779][   T24] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  672.100517][ T3942] usb 10-1: Failed to submit usb control message: -71
[  672.107744][   T24] usb 10-1: USB disconnect, device number 45
[  672.121001][ T3942] usb 10-1: unable to send the bmi data to the device: -71
[  672.130977][ T3942] usb 10-1: unable to get target info from device
[  672.138107][ T3942] usb 10-1: could not get target info (-71)
[  672.145277][ T3942] usb 10-1: could not probe fw (-71)
[  672.447270][   T30] audit: type=1400 audit(1768412998.172:1143): avc:  denied  { read } for  pid=13296 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  672.892781][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.903267][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.023028][   T30] audit: type=1400 audit(1768412998.692:1144): avc:  denied  { write } for  pid=13296 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  673.466857][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'.
[  674.222763][   T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  674.460052][   T24] usb 1-1: Using ep0 maxpacket: 16
[  674.473054][ T5850] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  674.482145][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  674.495456][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  674.517825][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  674.534839][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  674.551795][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  674.597376][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  674.621263][   T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  674.638752][   T24] usb 1-1: Manufacturer: syz
[  674.656276][   T24] usb 1-1: config 0 descriptor??
[  674.733421][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  685.313226][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  685.319543][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  780.382660][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  780.389623][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13327/1:b..l
[  780.398089][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=54505, q=329 ncpus=2)
[  780.405790][    C0] task:syz.3.1539      state:R  running task     stack:27680 pid:13327 tgid:13326 ppid:5808   task_flags:0x400040 flags:0x00080000
[  780.419782][    C0] Call Trace:
[  780.423054][    C0]  <TASK>
[  780.425976][    C0]  ? __schedule+0x10b9/0x6150
[  780.430649][    C0]  __schedule+0x1139/0x6150
[  780.435161][    C0]  ? __pfx___schedule+0x10/0x10
[  780.440002][    C0]  ? irqentry_exit+0x1dd/0x8c0
[  780.444769][    C0]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  780.450826][    C0]  preempt_schedule_notrace+0x62/0xe0
[  780.456190][    C0]  preempt_schedule_notrace_thunk+0x16/0x30
[  780.462080][    C0]  rcu_is_watching+0x8e/0xc0
[  780.466660][    C0]  unwind_next_frame+0xa3b/0x20b0
[  780.471680][    C0]  ? tomoyo_path_number_perm+0x245/0x580
[  780.477307][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  780.483457][    C0]  arch_stack_walk+0x94/0x100
[  780.488131][    C0]  ? security_file_ioctl+0x9b/0x240
[  780.493326][    C0]  stack_trace_save+0x8e/0xc0
[  780.497994][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  780.503360][    C0]  ? __lock_acquire+0x436/0x2890
[  780.508289][    C0]  ? tomoyo_encode2+0x100/0x3e0
[  780.513132][    C0]  ? tomoyo_encode+0x29/0x50
[  780.517713][    C0]  kasan_save_stack+0x33/0x60
[  780.522383][    C0]  ? kasan_save_stack+0x33/0x60
[  780.527221][    C0]  ? kasan_save_track+0x14/0x30
[  780.532062][    C0]  ? kasan_save_free_info+0x3b/0x60
[  780.537245][    C0]  ? __kasan_slab_free+0x5f/0x80
[  780.542171][    C0]  ? kfree+0x2f8/0x6e0
[  780.546229][    C0]  ? tomoyo_realpath_from_path+0x19f/0x6e0
[  780.552032][    C0]  ? tomoyo_path_number_perm+0x245/0x580
[  780.557692][    C0]  kasan_save_track+0x14/0x30
[  780.562359][    C0]  kasan_save_free_info+0x3b/0x60
[  780.567370][    C0]  __kasan_slab_free+0x5f/0x80
[  780.572126][    C0]  kfree+0x2f8/0x6e0
[  780.576009][    C0]  ? tomoyo_realpath_from_path+0x19f/0x6e0
[  780.581815][    C0]  ? tomoyo_realpath_from_path+0x19f/0x6e0
[  780.587611][    C0]  ? tomoyo_encode+0x31/0x50
[  780.592193][    C0]  tomoyo_realpath_from_path+0x19f/0x6e0
[  780.597825][    C0]  tomoyo_path_number_perm+0x245/0x580
[  780.603276][    C0]  ? tomoyo_path_number_perm+0x237/0x580
[  780.608903][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  780.614900][    C0]  ? find_held_lock+0x2b/0x80
[  780.619569][    C0]  ? hook_file_ioctl_common+0x144/0x410
[  780.625115][    C0]  ? __fget_files+0x20e/0x3c0
[  780.629792][    C0]  security_file_ioctl+0x9b/0x240
[  780.634812][    C0]  __x64_sys_ioctl+0xb7/0x210
[  780.639484][    C0]  do_syscall_64+0xcd/0xf80
[  780.643981][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.649863][    C0] RIP: 0033:0x7ffaee98f34b
[  780.654268][    C0] RSP: 002b:00007ffaef7e0f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  780.662675][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ffaee98f34b
[  780.670649][    C0] RDX: 00007ffaef7e0fd0 RSI: 0000000040085503 RDI: 0000000000000003
[  780.678613][    C0] RBP: 00007ffaef7e1fe0 R08: 0000000000000080 R09: 00007ffaef7e0fd8
[  780.686573][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[  780.694532][    C0] R13: 0000000800000000 R14: 0000000000000012 R15: 00007ffaeea1f52a
[  780.702510][    C0]  </TASK>
[  780.705524][    C0] rcu: rcu_preempt kthread starved for 10520 jiffies! g54505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  780.716707][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  780.726661][    C0] rcu: RCU grace-period kthread stack dump:
[  780.732530][    C0] task:rcu_preempt     state:R  running task     stack:28064 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  780.746006][    C0] Call Trace:
[  780.749275][    C0]  <TASK>
[  780.752197][    C0]  ? __schedule+0x10b9/0x6150
[  780.756869][    C0]  __schedule+0x1139/0x6150
[  780.761367][    C0]  ? __lock_acquire+0x436/0x2890
[  780.766307][    C0]  ? __mod_timer+0x8f2/0xd30
[  780.770898][    C0]  ? __pfx___schedule+0x10/0x10
[  780.775736][    C0]  ? find_held_lock+0x2b/0x80
[  780.780408][    C0]  ? schedule+0x2d7/0x3a0
[  780.784734][    C0]  schedule+0xe7/0x3a0
[  780.788796][    C0]  schedule_timeout+0x123/0x290
[  780.793635][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  780.799000][    C0]  ? __pfx_process_timeout+0x10/0x10
[  780.804280][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  780.810077][    C0]  ? prepare_to_swait_event+0xf5/0x480
[  780.815529][    C0]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  780.820290][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  780.825570][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  780.830760][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  780.835687][    C0]  ? rcu_gp_cleanup+0x7c1/0xe90
[  780.840534][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  780.846334][    C0]  rcu_gp_kthread+0x26d/0x380
[  780.851012][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  780.856202][    C0]  ? rcu_is_watching+0x12/0xc0
[  780.860955][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  780.866151][    C0]  ? __kthread_parkme+0x19e/0x250
[  780.871168][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  780.876356][    C0]  kthread+0x3c5/0x780
[  780.880424][    C0]  ? __pfx_kthread+0x10/0x10
[  780.885012][    C0]  ? rcu_is_watching+0x12/0xc0
[  780.889778][    C0]  ? __pfx_kthread+0x10/0x10
[  780.894359][    C0]  ret_from_fork+0x983/0xb10
[  780.898947][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  780.904053][    C0]  ? __switch_to+0x7af/0x10d0
[  780.908725][    C0]  ? __pfx_kthread+0x10/0x10
[  780.913308][    C0]  ret_from_fork_asm+0x1a/0x30
[  780.918084][    C0]  </TASK>
[  780.921091][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  780.927405][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  780.937892][    C0] Tainted: [L]=SOFTLOCKUP
[  780.942199][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  780.952240][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  780.958647][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 ce 1e f6 48 89 df e8 9e 21 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 24 0f f6 65 8b 05 2e 89 37 08 85 c0 74 16 5b
[  780.978243][    C0] RSP: 0018:ffffc90000007f10 EFLAGS: 00000246
[  780.984313][    C0] RAX: 0000000000000002 RBX: ffff8880b8428440 RCX: ffffffff81c71f1f
[  780.992273][    C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480
[  781.000234][    C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001
[  781.008192][    C0] R10: ffffffff9088bdd7 R11: ffffffff8e098670 R12: 0000000000000100
[  781.016149][    C0] R13: 0000000080000101 R14: 0000000000000000 R15: ffffffff8e00c100
[  781.024110][    C0] FS:  0000000000000000(0000) GS:ffff8881248f4000(0000) knlGS:0000000000000000
[  781.033027][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  781.039602][    C0] CR2: 00007f601a3b9358 CR3: 000000007b5bc000 CR4: 00000000003526f0
[  781.047564][    C0] DR0: 0000000000000008 DR1: 0000000000000001 DR2: 0000000000000004
[  781.055524][    C0] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  781.063485][    C0] Call Trace:
[  781.066751][    C0]  <IRQ>
[  781.069584][    C0]  handle_softirqs+0x219/0x950
[  781.074348][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  781.079637][    C0]  __irq_exit_rcu+0x109/0x170
[  781.084306][    C0]  irq_exit_rcu+0x9/0x30
[  781.088541][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  781.094167][    C0]  </IRQ>
[  781.097084][    C0]  <TASK>
[  781.100001][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  781.105968][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  781.111594][    C0] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  781.131185][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[  781.137237][    C0] RAX: 0000000002fdaab3 RBX: 0000000000000000 RCX: ffffffff8b7866d9
[  781.145198][    C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480
[  781.153157][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[  781.161118][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[  781.169076][    C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000
[  781.177043][    C0]  ? ct_kernel_exit+0x139/0x190
[  781.181890][    C0]  default_idle+0x13/0x20
[  781.186218][    C0]  default_idle_call+0x6c/0xb0
[  781.190975][    C0]  do_idle+0x38d/0x510
[  781.195041][    C0]  ? __pfx_do_idle+0x10/0x10
[  781.199634][    C0]  cpu_startup_entry+0x4f/0x60
[  781.204397][    C0]  rest_init+0x16b/0x2b0
[  781.208625][    C0]  ? acpi_subsystem_init+0x133/0x180
[  781.213901][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  781.219436][    C0]  start_kernel+0x3ef/0x4d0
[  781.223929][    C0]  x86_64_start_reservations+0x18/0x30
[  781.229378][    C0]  x86_64_start_kernel+0x130/0x190
[  781.234479][    C0]  common_startup_64+0x13e/0x148
[  781.239419][    C0]  </TASK>