last executing test programs:

4m8.590801373s ago: executing program 0 (id=302):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe2c82)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m6.574049755s ago: executing program 0 (id=307):
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a5, &(0x7f0000001340)={{}, @any, 0x4, 0x0, 0x0, 0x6bf, 0x0, 0x0, 0xffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x18e420, &(0x7f00000005c0)=ANY=[@ANYBLOB='mode=00000000000000000006004,gid=', @ANYRESDEC=0x0])
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1, @ANYRES16], 0x0)

4m3.190267118s ago: executing program 0 (id=317):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x11, 0x800000003, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100004800c000180080001"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="000425bd11f8fbdbdf45150000004c00018008b5ddf3", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002082d0b11de48003000000000a48d34b961e63c183352b7e7dde33bf052f199fc99bda65bfa164a162d80080b79e5a377fd85f58e6caf786ed5f2d98c792f8687db4ffe3ca5e6443c4dbdb7fbc527091ddff0e9f6e844fdaaa02aa48fa4b3f8f425845497", @ANYRES32=r2, @ANYBLOB="1400020070696d4a72656731000019c02a0d000008000100", @ANYRES32=r8, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r10 = timerfd_create(0x9, 0x0)
timerfd_gettime(r10, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)

4m2.399205529s ago: executing program 0 (id=320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0)
ftruncate(r4, 0x200004)
read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%pK    \x00'}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file0\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0xfffffffc, 0x8, 0x8, 0x8402, 0x1, 0x65, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @value, @void, @void, @value}, 0x50)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r4, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, r8, r9, r10], &(0x7f0000000640)=[{0x5, 0x3, 0x9, 0x3}, {0x0, 0x3, 0xb, 0xc}, {0x0, 0x2, 0x7, 0xb}, {0x5, 0x2, 0xc, 0x3}], 0x10, 0x9, @void, @value}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa520}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x4880)

3m59.73291946s ago: executing program 0 (id=329):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141400010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000890"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x63)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

3m57.901509181s ago: executing program 0 (id=336):
timer_create(0x6, &(0x7f0000000040)={0x0, 0x2, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r1, r2+60000000}, {0x0, 0x3938700}}, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) (fail_nth: 1)

3m42.240495538s ago: executing program 32 (id=336):
timer_create(0x6, &(0x7f0000000040)={0x0, 0x2, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{r1, r2+60000000}, {0x0, 0x3938700}}, &(0x7f0000000100))
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) (fail_nth: 1)

13.890363281s ago: executing program 1 (id=1020):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
syz_io_uring_setup(0x10e, 0x0, 0x0, &(0x7f0000000280))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
mmap(&(0x7f00008bb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xcf38, 0x0, 0x1000, 0xbffffffd, 0x0, r0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40)

12.925998402s ago: executing program 1 (id=1022):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000380)=@ethtool_eee={0x25, 0x1ff, 0x80000000, 0x9, 0x2, 0x7f, 0xa9, 0x800, [0x1, 0x7a]}})
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000002300)={0x0, 'vlan0\x00', {0x4}, 0x41})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000002240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000006800020025bd7000ffdbdf2502000100030000000400040024000c80060001000000000006000100c0dc0000150003"], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x40080)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x32100)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfa21, 0xb, 0x6, 0x1, 0x7, 0x8000, 0xb}, 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r2, &(0x7f0000002280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a0000000208", 0x6)
r8 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)

11.950039264s ago: executing program 1 (id=1024):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0xd646, 0x7, 0xf, 0x120000, 0x1ff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x10003, 0x101, 0x5, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2})
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x124000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.671476221s ago: executing program 5 (id=1034):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x197a, 0x4)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xcf800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)
memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xc7)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x1)

7.501290828s ago: executing program 3 (id=1038):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000020240), 0x10010)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe], 0x0, 0x200394})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="20f46f00"], 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0)

7.434947983s ago: executing program 5 (id=1039):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0)
lseek(r4, 0x400000000000000, 0x3)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2)

7.048523286s ago: executing program 1 (id=1043):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x11c)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/100, 0x64}], 0x100000000000013b)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r3, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24020844}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002200)=ANY=[@ANYBLOB="f000000010003306000000000080000000000000000000000000ffffac1414bbfc01000000000000000000000000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20004881}, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x2, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
r7 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r6, &(0x7f00000011c0)=""/4117, 0x200021d5)

6.974184695s ago: executing program 3 (id=1044):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40)

6.895680917s ago: executing program 3 (id=1045):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x11c)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/100, 0x64}], 0x100000000000013b)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r3, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24020844}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002200)=ANY=[@ANYBLOB="f000000010003306000000000080000000000000000000000000ffffac1414bbfc01000000000000000000000000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20004881}, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x2, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
r7 = socket(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r6, &(0x7f00000011c0)=""/4117, 0x200021d5)

5.810498476s ago: executing program 5 (id=1047):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
tkill(r0, 0xd)
r1 = socket(0x23, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r2 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0x9, 0x8, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000500)=""/173)
socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x24)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f00000001c0))
socket(0x23, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)

5.613551947s ago: executing program 1 (id=1050):
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x64200, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x7c1807, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
close_range(r1, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)

4.864755661s ago: executing program 5 (id=1051):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)

4.760699865s ago: executing program 3 (id=1052):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@private=0xa010102]}, @rr={0x7, 0xb, 0x1, [@remote, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.678287393s ago: executing program 2 (id=1053):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

3.894170476s ago: executing program 2 (id=1054):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (fail_nth: 2)

3.844348388s ago: executing program 5 (id=1055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/64, 0x40)

3.736922753s ago: executing program 4 (id=1056):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/dev\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x1040, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000000000000000009008e02000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4})
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00'})

3.443320391s ago: executing program 2 (id=1057):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000af40600ffffffffffff000006003400990d000004006e80080037000100000005000800000800350000000000e37875f9c511b067d2aad8eda8e3d6cf739ac45aa5ae84632151568a82c11d79730a3fdab82746ee42472798ef44d2db951c903a2cc40a5daa6708790cf57187b2472cf0198bf6d0ff4ea53eaad33873171f9a6ea5ba9b98fa6662aec3286d3d735741f95392cf2ed062f0dcf63fda601417"], 0x54}, 0x1, 0x0, 0x0, 0x2000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x11, 0x800000003, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c000180080001"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="5f0bf3f606b63465a691534d6e3057085b919306c2334adcbccd04c2028d3b7f78b0f96b7e3831142e3162d6f47cdefe75284701637c6ab45229713ee89ce8f319c1e26cfd1a6287d9e9fce0600e821b8484667bfd4e63bcf9ee6b3c39f525516899b987d54c938d02f87cbed0d36ec1050d367a3bdaf0a764c1b101d10060ad5e8e9ccfc9ffc48795f513ea13cdd43b6a4f1b61fa11c8f5ac889d1efbf029e38425f3d144b9dd71000e5744b8dad299e1afa511dbf5262e4548455176e14e078e1c09a86f3348300207e2fa7b6a18150bfffb822a85b7e1d62faf5914919facb5de81094fa6065539f25403d2a6c532a8e98a2a82bb1b54c55bef124c32be47a671cfd6f2c9e6d87759b6520c5f58d848d404b808b61d060f7f7efc3145ffcaa31feb39b447966c2d125786831f06ae8ab78bb192c527735b56ca521bc757741a066274c66eda151b5aa37d345a339a3b45b2fcf7f4eb61d57e28a7b498819a3a1ff30c3599e65d225c9d2e65a73299a8aa930c1aa47a64f0f3d472fdab3482d933cec2e6e25852a17e0dbe76a87956b6a1b0e4f35e4c20ddf4fd40f525ab1cc59e3cdd068745815692c5b6514ea711c06760e3233652d90bbdb4b23ecf25e8c662b7b08bc0989e2ccb3dd3bd2659bddc81f696229eb9cf0b52051fa062af5562c8b6f648518ed5c0c719a542588f494cdf8311ad029ffa7bbe47ec72bde9f1cab022d214156f1bfd6aefd2683bb59ee805c9d0a9bb52612b26ad6d57cf0ca59c55246001eec5c2c672efa6c7f77539e2c9c2399ec4424821c186df52a24d214436c066692ceb8e95924a80300f6b342ca49a815955111117f72c2e36292a92a62e3cb8b22b5991f329cc96d70ba1dd2bcd25b53f8075a32a261e9fbca026aa49a11512454bb8a99653cac9efdba9aaaa2135323f5196aa7c12bdf65a5f9c9318990daeff55e52609d9d55d4f774030a02c193a2b69433f6fc2cffeab779f10ab79ef3530b7c454d1887b8586ad912bf5fcdcf38a7c68fd5fdecc0fd41dd3b74b7951bf95e7264fc51e3c19ed749d1aa47e2ab10810463b5e5ee515966b3b136e40b1c7ca8b749f09d202ffc64456cba06fc2fdc73b43b46342bb66b3b74344bbf2ad3803f1eb54680d2129d86fe417a497d84ee5b9cf9cf276cb033866a32a1764d311dfa51a7c3b75c5598517d4f50bce6042228581b1ea85a596b2ee5612a6fb7a8c4a402d886ace4a388d8f017367aae7446fd03268117226fddbd7d645fd1706dafdd6eca3b681aca2bfc24fb062d453a8d76cbf140060a5e591464fc4b00d95fba01966b2051f90f2508efad7d8ca9504a2eab7bba531818af6d1117a4f93384fd411c6669c0df034a5de1048ba3e8609daaa1bb448a6fa7930bb2f6a5fc3bfc3d5e2ce097b6d9c43b84e748959fc5e441ee2070344c25f323e989063b8e15b30394e929ccd231437633e7cfc7bcf24d4fe1c647f5dbe8541cfeb2c1c2d58204dbe60d9707fa116798c0d7420c5b188d0d7bcc1f7a76e2dc18b87c547e05b8e21a0748f90640c1c0e5cc8b0f00a9a7580147fa0953a826137166f099fa52da0755891a07e1bd9570ed2688c3f186fcb24489ca158af183ba1079a349dc98c0be8333593f9da0019edf45111b80fc050a59f3f1f0d643c61ff440de493e6233bbdd5c2fb55a74ae1d5f5fd7b7b684a8fef50b22b7ea9314dc71b7a21a00614824830fc7caae471c8589698af3d48754978cf4ab5f18cbaadadd4cc895aead050cb559354b1081270ea54da65da8c94f6fe156b8d4b1b3963f7a255e18c2366aa5d9a030911dc1a20afa97ec83190d21b87997d8d015e9c22c0ae034e27766b04548bc2713607d9430cee601722190a4baaca265d384e4cb1eb975fc5c09916711eb7fd0b8715e4871a3628a269c50a0c9732e6afedee4a21b27a98dc1e31bb623f0c881ea9673c82287c6c3baa0f682b68b09c4504c1d73f0ac515ac4831c6a8ce1633f10a66d1411411ecb1d935a2dbf1a203d1856fa6045154987c281ce2d12f4ab9bc5a832a95e7171902ef6147665d425673e5da4de193c44b102177e3d7d92f7e3a964cf369db561cee884bee59f21863648d1d0b6fa3306dddad544f50474fbbed6b73395d6c6f247ceb2e3d78283814a85512adf80131a49e15e7229096177b1d926aac2bb3859c2cb956b86b4d4751beae435da41780bbf818c5c821f09960e32a0e4fd1c79ebf4b0966fc74dfffa677b9dd025274c71ecb76e6d8ce208d9830d9a6eb8f69390be91ebcf75b8f00bf0050497516c5b3c68c5a4b213a45e5c4837d10038184f0f69457ee558f605c71077c67ed7e5114a98968022fb6eac8890cc5a5d851cb183a3571f9ba96808bd82b99799393cd9cd6339234c4c47b65319336918bb46019048987c39263e5aeea4ff6dce462ac5620b9a81d02bcbeeee2d58fbf315bb4fb518b289142082075d1d6eaae889571758bb9b81556d78d27ac5c3f8e36f964f54125ed6da4f4ef866ec852a8d438a17953b7630f6afa4dea346a4fa0f383edffac1f07607611e04942f9c7c3b773462ea63d33ced9019c49c4fca3200bb63baf2ff8418d0f41f03a4e516fe4bbfda593271935d9b7c8ca7353587fcc4deca64e2cf8570adcd7e38b1ae44c1209e232be1a970c846754f59209d0dd6a6a24c0437bf81c2c67a8d3c273c6e21a32c42f883f1e0ac2f3aa1b22cea70f55abf96db22bcba2734dda801125c25b1156c3e82bddface886ad94e7d975f407d00aec9f53e40f99c405bf662151e8280b33e2ef9f523ba4225d26f6ecd94b6335e0dde1892cac810496b6c5a34e69666fe3c21c9a899bdee3a111e5467db3cbbf09ca75d2764ef5af0487991f932cbe592874dfc716a42cf3ed43ea843c84b7c3ebc4fbb7c4319ab75c73ca45e19449d818747390fce97eb3850415e84d845bb2c92ca631d2f882128cb1affae5219af90afe7a88ddc4c90dd5690ab27b9c4a841286cc91013487352df01df1ba96b2dc44f1d4aed42df799b73ee5fa9ac4ef83ebd67cfebd4eec5f0b59c4751b8143b0e81a57b3c93bde54e574133a69dd532ebfa62eed449850737d2a9c19a878511a71fc18b7da1b27b426e671941ff6846a1c0fcf314fbb7c5e3fad90d7ee7a9b694c6619082988b1ad68641bbe6922f8501372f258d4d120fd2862ee07549fba4b1b02187a1facdf8c63333f667f98c6fb8ca545bff1a927785ba9cf67f0054d04fbd387d91b998b31e6cadaa242fc3579af3a15285f82dd532248329f739a430deea13707425601b6734b51f79edd976f8358398c4375fd9f358c612356e87ce519e08551dd544dff8b6f3c65bede050a8f4a428ce7a4af084ccddfe74796198e1e3a2c0817422b26d9fc935496b495fb0b14eca6af5a3568b7bbc3158716f066b85ec0e0c1ea2c7c68cfe6044f5d91ff24a31d5737d21cc263e9190851582912f918e8a0709223cd00246fd1a1953d2fd4d6dee83d5ac8e5225f982fd8d117228d47f178b21801f1ad98ce3de5c5113db540add889ec5f2c3aa49b581c8ad624a30c06f44981005b9eea9fc88859fa69e1e624c52446e1bd3474459b8c20be333a0f53255cea2fd50d3383355bf7e557e18b376be8a55d90f15cfc3c9a7af7796c9ec97763f3b52a7a29251bdae6c033dbc02a53b3d35a986d48eea061054d7b31aff2b32812699ea11ac2dee722a786af8fc2fb90c2f35277147ecf827d373d7f6f11592114a88c5c37520c7c0f5a054319f1f049a1f9879aa43284f8e08cae6f8eb5e9801e0dba6ccda400a9e2d9c9935e8093d9540cb93e08badb25ea469ced9f2beb2bf0dfe23b7eab84949bec4b99c5b9f9e4f7d741bd1e161a6864618211b985b30634e47024184a32f4c85503090a46aeb79e671d4b621de9cf298609580d047704684144905deef5256fb985dad1f94b8c9a048d863b043840d9646c55fa9dfed04bfb0893a6086582009ada430930a2e0d9385f72ae1b71bfe76121cdfa8360f49a52b6050d0b556f92db1afc6ee7ae4884f0ed9d683089bb9531eb35e43a4a00836fcddbacaf6e4927f0ca20875fe45c4f9ab5387072b2d43427936a2758de852bf4ea2d51c6c1cbc7f6e677948760ec0e67cac48ec6d5a6bf1d48a68a1144465b687cc2fc9bd15280501006991af96f8dbd4346cde10af926c7e3ba18b05df8274388186a7e69a93ae4d5d7202c139fcb092cb00b65f31abe2a0a85c5ddc13c102ea14e5072bcdefe5f7ca70e60350d3b9dac3bf72dd159f52f1d51c9eb1898e41adfdd31765d475118aaac65643c49213ab52db956305d5e72a29eb38269edb06704a1e60ca5cd8e09494334d2db4999311d682bd5d136a93328123471e2baf2cae5f840ebf136c12516726bc31d5d53c68d6a905527e035b77e26f353313f58d09fc82d30c8d3a5ff13d16ab96e80e230943211482b9ef76b3ac983bcbcce7c24a7e8cbb5debab98c192ea1934183d2cce637298e513cc3315375410bfb649138d1f3f99aa1cc76f2e918d0ddd517a0f3d5b5b19cfcd6a00b91bff95c331bc91c6e5e09acd82d90ad77637d145120eb89baac9739f0d6e0686434e8895d28385755541217d1f274b37d1487b617733597b95580d57b9d6bacbefb5cf7e0430af60a69dff7d7c423bec27be26dc46ca5ad58d8880c9c479dee0649d840803d29036623d93deacc49aa1c7858ad6761b5021422b800750a3f002b02c8e7d9003e095535a26eca999bbc3c3268e3398112000648063aab2abcda7d2376d2d7759e9866db49958a8799bb8240103eefcb33d666dacc5571a23802550e7f5989ba8bfac43a3a86da3c29c1be340a269d8606dba755f43d65b62beb4a13b20297dbd698d1f3427eedf407de2db25cef5480657ec63a24835636fe5238dd531ade58776ecf82651fe624d76a3c190feda882b68e54ded0cc710c453417aecc5b998d15d5b71c735905b8cdc6eff8cc59655b80032be42ae7be910fcd69f735cc0c72eba26ab5e152380bfd8ba3581656576e004e3cd85adaf0fe9c0778eb2c4055fbb03db5c346f1b5d72c63c53665ebe05b4645c37199cc58a8e6442fe24619e97780665074a574df6359aba73962fde514adea354c6383b8bfc8b91e061d718c1dabe1dd37be53720c436776d287b32bf8a043c6102189f2e90a4c5a45c28a1c903248784cd77212ffab814589d14aa322eba952f0101bbd737f51e3e2b5fce18040ecc3e831f56436db326db5d6cf5feba2640372486a6f13ab85f511159e1ead610546e37aed56fc3602239386b1abb0990ba0e0ca80bedd900233bfc5ccbc24a75e772094bf873a986e52c9320ddf6c4a0c1cd09ad495c8fa214c20f4b7ce069461f7158ecca42583f8d63ac50ad3ad66c1681c52ee38d8078f3bacb44972208a6eac4675230891ac037ae5ff7d6141757ada5d0d47d8964f80a8bdcfc30418a2aba9d5896bcedd6c5368a7a86d9d2f1f49bbd15a11024b1018a704214340f01ab84415443b47ec7e8b24f063e1ee21cb04ca65345a9b1ffa49a14f2317f0450c1677af5e1c564c8326b4a2f339ebd192466b304d4c7c520fd6841e71ba4ae13c40df056edaa5593fab845cd5ef8e03904734da22ed1021014865e488be44fe84193f5d07d2f1f8df3dc6055ff5595283c7d00338ec8f9efe8b1092ed107c37bb6d45db6794cce8af4e463de66342b3004ea47b5dfa65a325e27204cbc9e9a6051c0f5f5f88c89da717e3a900593833855aac2b98d503a277bcd6295593635b0c3", @ANYRESDEC=0x0, @ANYBLOB="000425bd11f8fbdbdf45150000004c00018008b5ddf3", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002082d0b11de48003000000000a48d34b961e63c183352b7e7dde33bf052f199fc99bda65bfa164a162d80080b79e5a377fd85f58e6caf786ed5f2d98c792f8687db4ffe3ca5e6443c4dbdb7fbc527091ddff0e9f6e844fdaaa02aa48fa4b3f8f425845497", @ANYRES32=r2, @ANYBLOB="1400020070696d4a72656731000019c02a0d000008000100", @ANYRES32=r9, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r11 = timerfd_create(0x9, 0x0)
timerfd_gettime(r11, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)

3.442482941s ago: executing program 5 (id=1058):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x6, 0x3, 0x3, 0x0, 0xa0}}, 0x120)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r3, 0x0, 0x0)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1)
mlockall(0x5)
write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4)
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)

2.205647188s ago: executing program 4 (id=1059):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r2)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$AUDIT_TTY_SET(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x3f9, 0x1, 0x70bd28, 0x25dfdbfc, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x40000c0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000002000000850000001900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newchain={0x35b8, 0x64, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x4}, {0x10, 0xfff2}, {0xc, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3568, 0x2, [@TCA_CGROUP_EMATCHES={0x25c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x250, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1d8, 0x3, 0x0, 0x0, {{0x1ff, 0x9, 0x1f7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "711fcb7d823d779bf55fecc0f07e4db35c939a5af6c200065219a8361759d36a4e20deda72bef7c4bebac3eaf2dcd96bd737a89df35d5c512cb4a7365fe9cf2f5060deb6a5676df144264fc3c8db6f7f1bf671d4887cb5283b8ecc926b97de1e8364fcb02140edfba295b775c8054e94c3f7e9f1670983f2ccc76ad53cc6e6782054502e11132a9c7b91cab9c5e759e38e801e47ec6e4a1efb5673362db214cd4de2a107b0c88cf7f8c0b35166ebfff40cd9cd068267449553c43aeeefd4ce50c5865e19a325465b845e5fdd185cbcda10b7bcc516f763cbe35e2823ffebc3f518"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xc8, 0x5, "2160fd4f34f5a99ed76d84a97d19e798cf4e35d7a133adcf6b9ad275ee337a10bcb6981cf7d3e361799c1382eb9602130934c43a6ca0daab07fca62a0f21df7c569a8e89c1259b9aeb091f238c763fa5efd6e2e3fb0b8c6273507d75bab54ea42d6d8e92ee3a29f87ecc77a9b945e6bb1a36e62e99be070667ee8aa3087ed5ec2583bed590899d10db09188d8b08d79784e28133e9f2eb23ce57f7500a525cd2a420cafd053d1a958a75388dca410df58b4b46d7775e40e3aa4f133d8a98a5ff58c8aaf8"}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x4}, {0x3, 0x7, 0x8, 0x6, 0x9, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff9, 0x3, 0x46}, {0x26, 0x200, 0x7, 0xf3c}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x1, 0x6}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4}, {0x0, 0x3, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8}, {0x0, 0x2, 0x4}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x0, 0x0, 0x4}}}]}]}, @TCA_CGROUP_ACT={0x2240, 0x1, [@m_tunnel_key={0x138, 0x12, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xa}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x5d, 0x10000000, 0x1592, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10001, 0xf4, 0x0, 0x8000, 0xfffffffa}, 0x1}}]}, {0xab, 0x6, "2b432394f590b27939028aef08a608092d7208e9a031a9502165ce017968955268a28f4f21d26e4bbd209e996ffcb2dc85f543cc35396908ce64074e1206363e2cc08e53fea71c84c31f35356bf1a4f0644416ecbca55d5ec8f0d92c66282aa053fc01106b1648b1964b15a44ef1b2534235b7ab2460c40fa95e4222e65673a84b7d5b1158e163cf45ceaca5eca04c080744140ad76186aec66556a50966c4ee73ee9e81d53fe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xd7c, 0x16, 0x0, 0x0, {{0xb}, {0xca8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x5, 0x9, 0x22cc, 0x82, 0x9, 0x6e27, 0xdb, 0x7f, 0x1, 0x5, 0x8001, 0x7fffffff, 0x5, 0x2, 0x8, 0x6, 0x3, 0x0, 0x80000000, 0x2, 0x2, 0x0, 0x0, 0x7000000, 0x0, 0x80, 0xd, 0xe757, 0x100, 0x4, 0x1, 0x1, 0xffffffff, 0xff, 0x1000, 0x5, 0x5, 0x1, 0xec, 0xf1, 0x80, 0xb718, 0x8, 0x7, 0xe, 0x1, 0xf508, 0xfffffffb, 0x6, 0x31, 0xca9, 0x2, 0x2, 0x9, 0x5dd4, 0x1, 0x4, 0x4, 0x8000, 0xa34, 0x8001, 0x1368, 0xd, 0x9, 0xf19a, 0x8001, 0x101, 0x40, 0x2, 0x1, 0x3, 0x0, 0xd, 0x5, 0x6000, 0x9, 0x1, 0x80000001, 0xdc00000, 0x6, 0x5, 0xffffffc0, 0x5, 0x7f, 0x8, 0x1, 0x1ff, 0x4, 0x1, 0x7, 0xd, 0x8, 0xca, 0x972, 0xfff, 0xf, 0x9, 0x8000, 0x7, 0x6, 0x0, 0x4, 0x5, 0x6, 0x651f8518, 0xd, 0xea7, 0xfffffff3, 0x2, 0x4, 0xffffb23a, 0x74b, 0x10001, 0x7, 0x7, 0x9, 0x9, 0x80000000, 0x7, 0x2, 0x1, 0x7fffffff, 0x928a, 0x3, 0x1, 0x8, 0x926e, 0x8, 0x9a4, 0xf5ce, 0x1, 0x3, 0x7, 0x80000000, 0xd, 0xb, 0x5, 0x5, 0xfffffff9, 0xbe, 0x3, 0x2, 0x93, 0x7, 0x8, 0x2, 0x10000, 0x9, 0x3, 0x5, 0x0, 0x3, 0x8, 0x81, 0x4, 0x4, 0x1, 0x8, 0x1000, 0x3, 0x1, 0x9, 0x2, 0x13f5, 0x3, 0x1000, 0x0, 0x832c, 0x8, 0x6, 0x2, 0x1, 0xffffffff, 0x6, 0xba, 0x6, 0xd, 0x8, 0x8, 0x2, 0xd221, 0x58, 0x0, 0x7, 0x5, 0x101, 0x9, 0x4, 0x0, 0x10000, 0x6, 0x8, 0xbf9, 0x7, 0x1, 0x207, 0x3, 0xf9, 0x34e, 0xf, 0x3, 0x10, 0xffffffff, 0x2, 0x1, 0x6, 0x0, 0x400, 0x1, 0x0, 0xe02, 0xff, 0x1ff, 0x0, 0x26b, 0x7, 0x8c7, 0x2, 0x4, 0x7, 0x2, 0x200, 0x44, 0x0, 0x1, 0x8, 0x7, 0x4, 0x8000, 0x800, 0x7, 0xf, 0x10001, 0x33f, 0xe0c2, 0x7, 0x2, 0x400, 0xb, 0xd27, 0x4, 0x1, 0x82, 0xffff, 0xe91, 0xc3, 0x7, 0x9, 0x9, 0xa, 0x1, 0x2, 0x6, 0xb, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xb823, 0x38eabe00, 0x0, 0x3, 0x7f, 0xea7, 0x4, 0x0, 0x0, 0x7, 0x5, 0xfffffffa, 0x8, 0x1, 0x4bde0dfa, 0x9, 0xffffffff, 0x0, 0x5, 0x5, 0x3, 0x80000001, 0x8, 0x9, 0x5, 0xfd8, 0x7, 0x6, 0x3, 0x5, 0x81, 0x2, 0x1, 0x0, 0x101, 0x9, 0x8, 0x0, 0x80000000, 0xde, 0x2dc, 0xffffe4e1, 0x2b33e61b, 0x8, 0x80000000, 0x7, 0x3, 0x3, 0x7, 0x800, 0x6, 0x10001, 0xdd, 0x4, 0xfffffff8, 0x0, 0xffff, 0x0, 0x8, 0x10001, 0x10, 0x1, 0x4, 0xa32, 0x6, 0x0, 0x400, 0x100, 0x4204, 0x7f, 0x8001, 0x4, 0x3f47, 0x8, 0x800, 0x4, 0x2, 0x3a88, 0x8, 0x8, 0x2, 0x2, 0x6, 0x7f, 0xfffffeff, 0x5, 0x8, 0x81, 0x0, 0x10ae, 0x8, 0xa, 0x9, 0x6, 0x4, 0xf, 0x2, 0x0, 0x3, 0x45, 0x4, 0xac51, 0x9, 0xff, 0x4, 0x7, 0x7, 0x3, 0xffff, 0x7, 0x5, 0x5, 0x2, 0x2, 0x2, 0xc, 0x1, 0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x11, 0xfff, 0x6, 0x4, 0x3, 0xeea, 0xffffffff, 0x8, 0x5, 0xa96, 0x7, 0x852b, 0xcb5, 0x2, 0xb, 0x8001, 0x0, 0x1, 0x7fffffff, 0x2, 0x80000000, 0xe7, 0x0, 0x8, 0x4, 0xc4a, 0x0, 0x800, 0x8, 0x6, 0x800000, 0x10001, 0x7, 0xcf, 0x8, 0xc, 0xe0, 0x40, 0x401, 0x6, 0x0, 0x3f3, 0x21, 0x4, 0x6, 0x3, 0x5, 0x6e, 0x9, 0x4, 0x5, 0x3, 0xffffff68, 0x9, 0xea4a, 0x8, 0x3, 0xffff0000, 0x101, 0x1, 0x0, 0x6, 0x8, 0x0, 0xdca, 0x7375, 0x6000, 0x9, 0x3, 0x80000000, 0xb68, 0x2, 0x8, 0x4, 0x7, 0x9, 0x2, 0x9, 0x5, 0x33a, 0x81, 0x10, 0xfffffff8, 0x8, 0x5, 0x1, 0xf0669f8, 0x6, 0x6, 0x8, 0x3, 0xb46, 0x1, 0x0, 0xe10c, 0x3, 0x0, 0x0, 0x10000, 0x7, 0x1ff, 0xae, 0x7f, 0x1, 0x8, 0x3d63, 0x6, 0x7, 0x2, 0x9, 0x2, 0xffff, 0xffff, 0x7fff, 0x4, 0x3, 0x9, 0xb, 0x6, 0x557, 0x5, 0x3, 0x8897, 0x7, 0x9, 0x1000, 0x6c769bde, 0x7, 0x2, 0x5, 0x1, 0x2, 0xa760]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x3, 0xfff, 0xffffffff, {0xb, 0x1, 0x9, 0x5, 0x1, 0x3}, {0x0, 0x1, 0x3, 0xfff7, 0xc9, 0xa}, 0x4, 0x5, 0x6e14}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x0, 0xbae, 0xc, 0x80, {0xff, 0x2, 0x4, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x7fff, 0x5, 0x2, 0x3}, 0x4, 0x1, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffffff01, 0x401, 0x1, 0x6, 0xa, 0x6, 0xeef, 0x100, 0x5c, 0x5, 0x8, 0x8, 0x0, 0x9, 0x1, 0x10001, 0x5, 0x9, 0x400, 0x9, 0x2, 0x2, 0x6, 0x190e, 0x200, 0x4, 0x8, 0x4, 0x3, 0x0, 0x7, 0x2, 0x9, 0x5, 0x4, 0x8, 0x800, 0x3, 0x60a3793, 0x1, 0x3, 0xfffffffe, 0x77, 0x7, 0x9, 0x80000001, 0x21ff, 0x4, 0x9, 0x8a, 0x5, 0x8, 0x462d, 0xf44, 0xf, 0x2, 0x4, 0x3, 0x800, 0x5, 0x444, 0x81, 0xc, 0x9, 0x0, 0x7, 0x9, 0x9, 0x5, 0x1ff, 0x0, 0x80000000, 0x8, 0x7, 0x200, 0x0, 0x80000001, 0x401, 0x6, 0x90b, 0x6, 0x0, 0xffffffff, 0x100, 0x6, 0x6, 0x10, 0x8, 0x6, 0x7fff, 0x0, 0xf77c, 0xb, 0x401, 0xc, 0x5, 0xa, 0x8, 0x3, 0x4, 0x0, 0x4, 0x2, 0x80000000, 0x9, 0x200, 0xfbc, 0x9, 0x5, 0xd, 0xe, 0x80, 0x4, 0x3, 0xe, 0x5, 0x9, 0x7fffffff, 0x3, 0x5204, 0x100, 0x3, 0xfffffff7, 0xb3e, 0x4, 0x5bd8, 0x4, 0x0, 0x2, 0x9, 0x3, 0x100, 0x287a4a2d, 0x1, 0x8, 0x7, 0x401, 0x8e39, 0x4, 0x8, 0x6, 0x1c, 0xfffffffd, 0x8, 0x5, 0x592f, 0x23a1, 0x4, 0x9, 0x8, 0x3, 0xf, 0x5, 0x6, 0x9, 0x5, 0xb, 0x1, 0x5, 0x2, 0x3, 0x9, 0x6, 0x5, 0x8, 0x3ff, 0x80, 0x65, 0x7, 0x3, 0x10000, 0x1, 0xfff, 0xffffffff, 0x2, 0xdff5, 0x52e, 0x8, 0x3, 0xfffffff4, 0x2, 0x6, 0xfffffffb, 0xffff, 0x4, 0xf, 0x7, 0x2, 0x400, 0x7fffffff, 0x8001, 0x3, 0x5, 0xfffffffb, 0x7, 0xfffffffe, 0x5, 0xffffffff, 0xc, 0x36ef, 0x4, 0x7, 0x5, 0x1, 0x6, 0x40, 0x8, 0x8, 0x7, 0x3ff, 0x7, 0x5, 0x800000, 0x200, 0x635, 0x6, 0x3, 0x8, 0x5, 0x8, 0xc200, 0x8000, 0x70, 0x7, 0x6, 0x8, 0x6, 0x3, 0x7, 0x101, 0x4, 0x1, 0x10, 0x6, 0x7, 0x5, 0xd9f, 0x1000, 0x100, 0x0, 0xcc, 0x40, 0x5, 0x400, 0x7, 0x10001, 0x1000, 0x8, 0x0, 0x8, 0x7fffffff, 0x8, 0x7, 0x3, 0x8]}]]}, {0xab, 0x6, "a423185d6134667f17ba3e1184f6599e3d5c4f00296146dfb934f3419942b8a3a3952fb6e77d85b48cb6eb25007a49fd54116bc13f7f7e78d639808286e672a6f0f76a29121994abf91083e7f489d5b51664236aa5e9eb9a845f9061c9db677449a58b06099c632b19ef9969fba1bf03d2f1c33559014a267dd2643db5ac77ad5dc5563486a8f82742bf0e45016838a04bba6f3caab9828a0b6e211e6f0dac87b82d96de3c8368"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x13c, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x0, 0xb741}}]}, {0xf7, 0x6, "d884a61deb078e4863eea20332a48ea8d5593f794f755eb297c4c3794146e2c269f0c9f0d788342ab77fe2e01cec2e848e4bd1ee416d945ffd12f6fc929b2102cf8db9cadda01432c6d31b0b4050c9d569d3070384a667a9a868f3f4adbe5ceeb1215d2dc9672c09533500e12cd383223eb086dc66697004255406c990728d134c4cd66b0dafff4c2af274e2db14dc98bb224364fb6073d891ed49c46ca76059407d89cd5c8e58915bfc5d34f3dd4b007938cb7edfabcd6002a5a95fefae574677c870fe004db4b6da3b6bc0c7a1fa8984cc01e9310d58dc3e206f7dfa87cb4a2fe464ee40f1765b6972ab346c4608a12a82bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x1058, 0x11, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffff10b, 0x4, 0x6, 0x40, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_nat={0x1f4, 0x7, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x5, 0x1, 0xfffffff7}, @rand_addr=0x64010100, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x21, 0x6, 0x3, 0x5}, @private=0xa010101, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x9, 0x3, 0x80000001, 0x6}, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8c, 0xfffffffffffffff8, 0x5}, @empty, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe60, 0x1, 0xffffffffffffffff, 0xff, 0x8}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x1}}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x6c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x4, 0x9, 0x1, {0x6, 0x1, 0x17b0, 0x0, 0x1, 0x80000000}, {0x0, 0x1, 0x51, 0x400, 0xdbbc, 0xffff8001}, 0x2, 0x446f, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd5d}]}, @TCA_CGROUP_POLICE={0x105c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x10001, 0x3, 0x2, 0xa5, 0x401, 0x777, 0x8, 0x6, 0x1, 0x5, 0x9, 0x9, 0x7c, 0x1ff, 0x9, 0x3, 0x3, 0x1, 0x8, 0x8000, 0x5, 0x9, 0x100, 0x3, 0xed, 0x6, 0x3, 0x0, 0x0, 0x8, 0x5, 0x1000, 0xa, 0x5, 0x4, 0x7, 0x3, 0x5, 0x1d17, 0x401, 0x80000000, 0x80, 0x1ff, 0x5, 0x52, 0x5, 0x2, 0x6, 0x6, 0xffffffff, 0x4, 0x9, 0x3, 0x10000, 0x8001, 0x2ead947c, 0x9, 0x8, 0x8, 0x6, 0x57f6, 0x7, 0x0, 0x8a25, 0x495231bc, 0x1, 0xeba0, 0xf11, 0x0, 0x4, 0x8, 0x200, 0x1, 0x80, 0x18, 0xffffff00, 0xffffffff, 0x0, 0x3, 0x7, 0x80000000, 0x10001, 0xb8, 0x6a5e, 0x101, 0x1ff, 0x6, 0x5, 0x1, 0x59, 0x80000001, 0x2b, 0x6, 0x7, 0xac, 0x2, 0x1, 0x5, 0x0, 0x11ff69dd, 0x5, 0xaa8, 0xffff, 0x9, 0x2, 0xb, 0x4, 0x0, 0x2, 0xee1a, 0x6, 0x3, 0x7, 0x1, 0xffff0001, 0x401, 0x4, 0x1000, 0x4, 0xc, 0x6, 0x0, 0x8, 0x4f, 0x1, 0x7, 0xffff, 0x649, 0x80000000, 0x9, 0x6, 0xff, 0x9, 0x80, 0x99, 0x81, 0x1, 0x4, 0x4c, 0xc85, 0x800, 0x9a5, 0x7, 0x7, 0x1, 0x4, 0xfffffff8, 0x7fff, 0x6, 0x75, 0x3, 0xd, 0x3, 0x2, 0x80, 0xbf80, 0x6, 0xfffffeff, 0xd, 0xfffff001, 0x0, 0xd1, 0x101, 0xfff, 0x0, 0x9, 0xfffffeff, 0x308, 0x1, 0x0, 0xe4f2, 0x6, 0x0, 0x9, 0xff, 0x6, 0x46, 0x3, 0x7, 0x8001, 0x9, 0x7f, 0x8001, 0x9, 0x2, 0x8a4, 0x101, 0x10000, 0x4fa, 0xff, 0xfffffff8, 0x9b2, 0x0, 0x0, 0x6, 0x5, 0x8, 0x3, 0x6, 0xd02, 0x0, 0x0, 0x6, 0x84c1, 0x40, 0x6, 0x1, 0xc, 0x3, 0xb, 0x2, 0x1, 0x3, 0x2, 0x8, 0x3, 0x4, 0x6, 0x7, 0xa31, 0x1, 0x401, 0x4, 0x800, 0x2000, 0x8, 0x9, 0x5, 0x9, 0x8, 0xe2, 0x7, 0x6, 0x8, 0x5, 0x4, 0x5, 0x9, 0x8, 0x4, 0x4, 0x3b, 0xd, 0x3, 0x6d, 0x5, 0x6, 0x66e, 0x9, 0xe, 0x4, 0xb, 0x64759aa6, 0x109]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x3, 0x4, 0x4, 0x7, 0x2, 0x4, 0x894c, 0x2, 0x5, 0x4, 0x6, 0x7ff, 0x3, 0x9, 0x7, 0x0, 0x44d, 0x7fffffff, 0x8, 0x7ff, 0xfffffff9, 0x4, 0x3, 0xfffff801, 0x0, 0xffff, 0x6, 0x4d, 0xffffffff, 0xd, 0x4, 0xac, 0x1, 0x10, 0x672, 0x4, 0xfffffff9, 0x4, 0x7, 0x3, 0x3, 0xbd6, 0xfffffff1, 0x3, 0x7, 0x4, 0x6f, 0xff, 0x5, 0x7, 0x7, 0x6, 0x0, 0x8, 0x401, 0x4, 0x3, 0x50, 0x9, 0x8, 0x6c60, 0x1, 0xfffffffe, 0x9, 0xd1ad, 0x6, 0xc9, 0x0, 0x10001, 0x6, 0xffff4343, 0x9, 0x0, 0xfffffffa, 0x9, 0x8, 0x800, 0x2, 0x8, 0xf972, 0x6, 0x809e, 0x9, 0x2, 0x2, 0xffff, 0x8, 0x2, 0x3, 0x3, 0x9, 0x0, 0xf, 0x1, 0x5, 0x9, 0x5, 0x6, 0x8, 0x4, 0x7f, 0x4, 0x8, 0xfffffffb, 0x9, 0x3, 0x2, 0x6f9, 0x8, 0xa6c0, 0x1, 0x10, 0x8, 0x5, 0x7, 0x80000001, 0xfffff800, 0x7, 0x9, 0x8, 0x4, 0x7, 0x4, 0x0, 0x77c, 0xb, 0x200, 0x5321, 0x9, 0x2, 0x4, 0x1, 0x10000, 0xfffff801, 0x6, 0x9, 0x3, 0xfffffffa, 0x6, 0xff, 0xc0, 0x8, 0x1, 0x7, 0x7, 0x7, 0x40, 0x1b, 0x100, 0xe, 0xc6c, 0x100, 0x5, 0x8000, 0x1, 0xfffffeff, 0x7, 0x80000000, 0x18d4c533, 0xd6c6, 0x80000000, 0x8, 0x7, 0x3, 0x8, 0xd97, 0x81, 0x9, 0x0, 0x7238, 0x64d, 0x33fa, 0x1, 0x9, 0x200, 0x9b, 0x100, 0x5, 0x23, 0x2, 0x3, 0x4, 0x90000, 0xe34, 0xffffff99, 0x7, 0x5, 0x6, 0x6, 0x1, 0x1f1, 0x6, 0x2, 0xa, 0x5, 0x4, 0x1, 0xc68, 0x6, 0x0, 0x249b, 0xfffffff9, 0xfffffffe, 0xffff, 0xfee, 0x2, 0x0, 0x5, 0xfa, 0x5, 0x8, 0x2, 0x6, 0x3ff, 0x7, 0x1, 0x9a, 0x6, 0x4, 0x4, 0x4, 0x9, 0x0, 0xffffffff, 0x6c60, 0x6a, 0x200, 0xa, 0x6cbb, 0x7fffffff, 0xb, 0x2, 0x10000000, 0x1, 0x8, 0x5, 0xb, 0x8, 0x4, 0x8, 0x65, 0x10, 0x5, 0x1, 0x7fff, 0x93e, 0x5, 0x0, 0xfffffff7, 0x5, 0x3, 0xfff, 0x5, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xff, 0x7, 0x5, 0x1, 0x4ca9, 0x7fffffff, 0xb, 0x0, 0x3, 0x3, 0x6, 0x200, 0x8, 0x2ef, 0x5, 0x3, 0x3, 0x1000, 0xb, 0x9, 0xd7e, 0x504, 0xfff, 0x101, 0x8, 0x1c0, 0x5, 0x1, 0x4, 0x100, 0xb, 0x0, 0xa, 0x9, 0x51, 0xb, 0x0, 0x3, 0xe, 0x6, 0xffffffac, 0xfe, 0x80000000, 0x10001, 0x81, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1ff, 0x7, 0x8001, 0x6, 0x7, 0x6, 0x8, 0x345, 0xfe, 0x0, 0x7, 0x7f, 0x3, 0xfffffff7, 0x1, 0x7fffffff, 0x5, 0x3, 0xfffffff7, 0x6, 0x5b9, 0x2, 0x80000000, 0x7, 0x0, 0x0, 0x3, 0x8, 0x1, 0x7962, 0xb39, 0x0, 0x5, 0x3, 0x0, 0x1, 0x6, 0x0, 0x3, 0x1, 0x6, 0x6, 0x40, 0x5, 0x175, 0x4, 0x2, 0xc7a, 0x4b6, 0x6cc89d4b, 0x1, 0x2266, 0xffff, 0xffffffff, 0x3, 0x8ad, 0x0, 0x0, 0x1, 0x3, 0x44, 0x3f22, 0x4fe, 0x8, 0x30000, 0x40, 0x80000001, 0x6, 0x978f, 0x100, 0x6, 0x80000001, 0xfff, 0x5, 0x5, 0x8, 0x7, 0x70bf827e, 0x5, 0x2, 0x7, 0x1, 0x4, 0x0, 0x6, 0x8, 0x1000, 0x0, 0x6f, 0x9, 0xb, 0x3, 0x2, 0xf0, 0x5, 0x8, 0x2, 0x100, 0x654c, 0x1, 0x7, 0x8, 0x5, 0x7, 0x3, 0x10, 0x9, 0x5, 0x4, 0x3, 0x0, 0x800, 0x9, 0xf, 0x9, 0x1d, 0x10, 0x9, 0x2, 0x5, 0x6, 0x1, 0x6, 0x100, 0xfffffffb, 0x8, 0x7, 0x800, 0x8cf1, 0xa, 0x3, 0x80000001, 0x9, 0x9, 0x3, 0x6, 0x7ff, 0x3, 0x7, 0x6, 0x7ff, 0x80000, 0x2ff6, 0x7, 0x1ff, 0x5, 0xfff, 0x3, 0x40, 0xe, 0x74, 0x7, 0xaaca, 0x9, 0x29e, 0x6, 0x0, 0x13211713, 0x9, 0x2, 0x2, 0x0, 0x16, 0x3, 0x9, 0x9, 0xfff, 0x5, 0x2, 0x0, 0x7, 0x20200000, 0x9, 0xc84, 0x3, 0x80000001, 0xfffff801, 0x9, 0x4, 0x6, 0x701a, 0x5, 0x2, 0x0, 0x8, 0x8, 0x4, 0x3, 0x5, 0x0, 0x8001, 0x9, 0x5, 0x6, 0x9, 0x6, 0x9, 0x7, 0x6, 0x2, 0x101, 0xc05f, 0x200, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x5, 0x9, 0x5fd, {0x5, 0x0, 0x2, 0x9, 0x3, 0xfffffffd}, {0x2, 0x2, 0x1ff, 0x38, 0x4, 0x6}, 0xfffffffa, 0x2000, 0x80}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x3, 0x3, 0xa5b9, 0x400, 0x6cc, 0x80, 0x800, 0x7, 0x2, 0x8, 0xe, 0x8, 0x6, 0x11, 0x10000, 0x0, 0x8001, 0xfffff001, 0x7fffffff, 0x6, 0x6b, 0x8, 0x10, 0x0, 0xc20, 0x3, 0x5, 0x7, 0xfffffff9, 0x1, 0x3, 0x9, 0x7, 0x80000001, 0x570c, 0x7, 0x4, 0x8, 0xff, 0x800, 0x40, 0x80000001, 0x3, 0x5, 0x3, 0x9, 0xffffffff, 0x8, 0x4, 0x5, 0x1b, 0x80, 0x5, 0x8, 0x7, 0x81, 0x4, 0x80000000, 0xe2, 0x4, 0x10, 0xfffff801, 0x7, 0x40, 0x1, 0x9, 0x8bc, 0x3, 0x3, 0xffffffff, 0x6, 0x6, 0x5, 0x2, 0x23c, 0x1, 0x6, 0x5562, 0x8, 0x5, 0x400, 0xcf, 0x8000, 0x0, 0x1, 0x3, 0x5, 0xfffffc01, 0x6, 0x6, 0x101, 0x4, 0x555, 0x3, 0x3d, 0x40, 0x1, 0x7, 0x7, 0x80000000, 0x1000, 0xb56f, 0x6, 0x40, 0x2, 0x4, 0x0, 0xffffffff, 0x6, 0x7, 0x3, 0xe, 0xe, 0x401, 0xb7e, 0x2, 0x4, 0x1, 0x101, 0x3, 0x6, 0x5, 0x1, 0x1, 0x9, 0x5, 0x6, 0x8, 0x401, 0x0, 0x7, 0xffffffff, 0xc1b5, 0x9, 0xfac0, 0x2, 0x8, 0x6, 0xb, 0x5, 0xb, 0x5, 0x1, 0xfffffffd, 0x3, 0x9, 0x5, 0x1, 0x3, 0x7f, 0x2, 0x7f, 0x9, 0x6, 0x1, 0xeb, 0x7fffffff, 0x7, 0x9, 0x0, 0x2, 0x3, 0x4, 0x101, 0x9, 0x0, 0x8, 0xc, 0x72, 0x100, 0x6, 0xfff, 0x1, 0xb, 0x5, 0x0, 0x80000000, 0x632, 0xc000, 0x9, 0x2, 0xffffff67, 0x6, 0x8, 0x3, 0x58, 0x66, 0xf98, 0xfffffff0, 0x3, 0x9, 0x61, 0x55f, 0x8, 0xd76, 0x9, 0x9, 0xde, 0x5, 0x4ae0, 0x4, 0x4, 0x4, 0x8, 0x7ff, 0x2, 0x0, 0x4, 0xc, 0x4, 0x1, 0x7, 0x400, 0x2, 0x400, 0xd6b, 0x1, 0x8, 0x1dd, 0x5, 0x9, 0x9, 0x2, 0x1, 0x7ff, 0x3, 0x1, 0x2, 0xc, 0x1, 0x7, 0xfb35, 0x5d24, 0x8, 0x5220, 0x8, 0x25eceb30, 0x0, 0x7, 0x10001, 0x2, 0x5, 0x5d2d, 0xe57, 0xffff7fff, 0x1, 0x4, 0xb450, 0x6, 0x8001, 0x2, 0x5, 0x5, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x35b8}}, 0x4000844)

1.596782357s ago: executing program 3 (id=1060):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x84000000, &(0x7f00000000c0)="a0f8a228a209dc2d16d7e1d888c52d9913c1eba2f6cac9fa8e1d5deaca4d9cc7887dcf51", 0x24, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e1cbfe83774cbf59d3d78b5b3d5a7fafd689f072bf45f640c025c2a52a8d0ff98dc56c90feab1d23277a59f1203ec3a7035881810b1305af6b42e12b387f8043887933a1e6da97d509334f6a5d6677028d81a390e7c50e0f91d0fcea73b5cddf48c72403d1f2824dbe434030f2429b32ca0406c80914dbd0ebfbdb30f454a5e711706077be41ba384dec187a1f2e2d30ec339001f19580236ae65d8ab49217b883a0965e8412935bcf28e4e6dafdfacabf7943db1b631c0684bbf15fb9455824cf6185")
connect$can_bcm(r0, &(0x7f0000000440), 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0, 0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}], 0x20}}], 0x1, 0x40025)
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresgid(0xee01, r3, r4)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)

1.394172526s ago: executing program 4 (id=1061):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240)={'#! ', '', [{0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {0x20, '/dev/kvm\x00'}]}, 0x30)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f00000015c0), 0x0, 0xfffffff8, 0xb)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000956000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000656000/0x1000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x52de994789af003)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x20004000)
ioctl$FBIOBLANK(r3, 0x4611, 0x3)
truncate(0x0, 0x0)
r4 = dup(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "7c639b539e19370a", "7a088bae03a99ddd4e4e0fd31d44b9da137e2d09167eab832b64fe0199c7062e", "6276a45a", "b593df9446434c20"}, 0x38)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x19)

1.266793172s ago: executing program 3 (id=1062):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x3, 0x9c, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x2, 0x0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x1, "14dd72"}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x2, 0x4, "77d8866349"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x5, 0x4, "02"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x20, 0xf4, 0x9, {0x7, 0x25, 0x1, 0x2, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x42}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x5, 0x0, {0x7, 0x25, 0x1, 0x80, 0x8, 0x10}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x81, 0x7, 0x1, 0x8, 0x40}, 0x0, 0x0, 0x3, [{0x17, &(0x7f0000000440)=@string={0x17, 0x3, "4a94add24225eaf72be3b18e94ea5ea5b792ce30d7"}}, {0x4b, &(0x7f0000000500)=@string={0x4b, 0x3, "2fc2303a6e5daef87260fb9c39ba1ce39667d382b671947ac782590b22b27551ef27e843df8a3d8b4e97f66aaed40c43613916ecbee10c037f126035d62e36df36b08ae58c58d871ed"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4ff}}]})
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x40000)

1.211598794s ago: executing program 2 (id=1063):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket(0x1a, 0xa, 0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x10080, 0x5)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f07ebbef5, 0x110, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [<r10=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, <r11=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11})

980.595055ms ago: executing program 4 (id=1064):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x4040850)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})

901.299183ms ago: executing program 2 (id=1065):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = accept$packet(r3, 0x0, &(0x7f0000000180))
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000300)=@req3={0x8, 0x9bf, 0x0, 0xfa, 0x57e, 0x5}, 0x1c)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000002", @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b00"], 0x20}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r11, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r13, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b)

758.588958ms ago: executing program 4 (id=1066):
r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000001a40)=[{0x8, 0x7408, 0x0, 0x0}], 0x1})
sendto$inet6(r1, 0x0, 0x0, 0x400bcff, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r5})
close_range(r0, 0xffffffffffffffff, 0x0)

318.522372ms ago: executing program 2 (id=1067):
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="7603abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da9da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb20971f7f4031183b1ef33a6b6292c4d96927f019fba2ad2987739c5e0d"]}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000008c0)={"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"})
r3 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x80a0000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000010100c0"])
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
r10 = socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0xb, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1fffc}, [@map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffc0, 0x1}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000880)='GPL\x00', 0x10000, 0xa1, &(0x7f0000000d40)=""/161, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x28, r4, 0x8, &(0x7f0000000e00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x1, 0x8, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000e80)=[r5, r5, r5, r3, r5], &(0x7f0000000ec0)=[{0x2, 0x80, 0xc, 0x1}, {0x0, 0x5, 0xf, 0x5}, {0x0, 0x4, 0x4, 0xc}, {0x1, 0x1, 0x7, 0x4}, {0x4, 0x5, 0x7, 0xa}, {0x4, 0x2, 0x10, 0xc}], 0x10, 0x80000000, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000640))
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000780)={0x1, @win={{0x8, 0x7, 0x3, 0x7fff}, 0x0, 0x5, &(0x7f00000006c0)={{0x200, 0xffffffff, 0x4b9b88bd, 0x200}, &(0x7f0000000680)={{0x7, 0x80000000, 0x6, 0x6}}}, 0x2, &(0x7f0000000700)="f5c6b054f2c783373ffc4b6481b5949f4152f48dfa33ad3a82b0d3b487319df6bd138253c86c6a3f6e14a94a4ea319d3553fa99030ed9733e1d88c12ced432d17d0d564fbe", 0xb}})
readv(r10, &(0x7f0000002480)=[{&(0x7f0000001080)=""/231, 0xe7}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000bf58fffc9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
shutdown(r10, 0x0)
splice(r4, 0x0, r6, 0x0, 0x7fff, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6516, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @alu={0x7, 0x0, 0x2, 0x4, 0x0, 0xc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0xcc, &(0x7f0000000340)=""/204, 0x41100, 0x4c, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[r5, r4, r4, r5, r4, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x1, 0xc, 0x1}, {0x5, 0x2, 0xf, 0x7}, {0x3, 0x3, 0x0, 0xc}, {0x5, 0x4, 0xa, 0xa}, {0x3, 0x1, 0xe, 0x2}, {0x4, 0x3, 0x0, 0xc}, {0x1, 0x1, 0x3, 0x7}, {0x1, 0x5, 0x10, 0x1}, {0x0, 0x5, 0x5, 0x3}], 0x10, 0xfd, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000080), &(0x7f00000005c0)=r11}, 0x20)

246.177383ms ago: executing program 1 (id=1068):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop, @noop, @noop, @rr={0x7, 0xb, 0x1, [@remote, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 4 (id=1069):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x100600})
ioctl$KVM_RUN(r2, 0xae80, 0x2000000)

kernel console output (not intermixed with test programs):

ce 4-1:47.0: usb_submit_urb failed: -71
[  293.909304][ T5871] usb 5-1: SerialNumber: syz
[  293.913967][ T5871] usb 5-1: config 0 descriptor??
[  293.942972][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  293.957855][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  293.970733][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  293.982562][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  293.996263][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.011403][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.018305][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.025194][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.031677][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.038321][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.050020][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.059510][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.068512][ T5868] iforce 4-1:47.0: usb_submit_urb failed: -71
[  294.075154][ T5868] input input15: Timeout waiting for response from device.
[  294.087163][ T5868] usb 4-1: USB disconnect, device number 15
[  294.152527][   T29] audit: type=1400 audit(1736825241.723:461): avc:  denied  { listen } for  pid=8355 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  294.772605][   T29] audit: type=1326 audit(1736825242.283:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  294.782823][ T1201] usb 2-1: reset high-speed USB device number 25 using dummy_hcd
[  294.796851][   T29] audit: type=1326 audit(1736825242.283:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  294.835531][   T29] audit: type=1326 audit(1736825242.283:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  294.859257][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.868056][   T29] audit: type=1326 audit(1736825242.283:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.014256][   T29] audit: type=1326 audit(1736825242.283:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.040574][   T29] audit: type=1326 audit(1736825242.283:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.068921][   T29] audit: type=1326 audit(1736825242.283:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.100651][   T29] audit: type=1326 audit(1736825242.283:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.135494][   T29] audit: type=1326 audit(1736825242.283:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.215903][   T29] audit: type=1326 audit(1736825242.283:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa144185d29 code=0x7ffc0000
[  295.271686][ T8385] ieee802154 phy0 wpan0: encryption failed: -22
[  296.150364][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.290984][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8394 comm=syz.5.669
[  296.301090][ T5871] io_ti 5-1:0.111: required endpoints missing
[  296.305864][ T5871] usb 5-1: USB disconnect, device number 33
[  296.307575][ T5914] usb 2-1: USB disconnect, device number 25
[  296.365542][ T8395] netlink: 36 bytes leftover after parsing attributes in process `syz.2.668'.
[  296.503510][ T8403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  296.846941][ T8405] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.863503][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.152848][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.221186][ T8411] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  297.418889][ T8411] netlink: 165 bytes leftover after parsing attributes in process `syz.1.674'.
[  297.451136][ T8417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.675'.
[  297.877308][ T5914] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  298.110716][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.389804][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.489355][ T8423] xt_hashlimit: max too large, truncated to 1048576
[  298.620477][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  298.634687][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  298.643796][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.655127][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.655143][ T5914] usb 5-1: config 0 descriptor??
[  298.908992][ T8426] netlink: 165 bytes leftover after parsing attributes in process `syz.1.678'.
[  299.190417][ T5914] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  299.697276][ T5914] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  299.813143][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.875329][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.452795][ T5914] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  300.682460][ T1201] usb 5-1: reset high-speed USB device number 34 using dummy_hcd
[  300.842494][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.995929][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.5.682'.
[  301.023638][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.033859][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  301.046823][ T5914] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  301.056002][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.071018][ T5914] usb 3-1: config 0 descriptor??
[  301.340584][ T5914] usb 3-1: USB disconnect, device number 25
[  301.378020][ T8456] netlink: 'syz.3.685': attribute type 10 has an invalid length.
[  301.429069][ T8456] bridge0: port 3(team0) entered disabled state
[  301.463976][ T8457] netlink: 'syz.3.685': attribute type 10 has an invalid length.
[  301.491104][ T8457] netlink: 2 bytes leftover after parsing attributes in process `syz.3.685'.
[  301.514144][ T8456] team0: left allmulticast mode
[  301.541381][ T8456] team_slave_0: left allmulticast mode
[  301.550944][ T8456] team_slave_1: left allmulticast mode
[  301.561095][ T8456] team0: left promiscuous mode
[  301.571186][ T8456] team_slave_0: left promiscuous mode
[  301.589508][ T8456] team_slave_1: left promiscuous mode
[  301.599155][ T8456] bridge0: port 3(team0) entered disabled state
[  301.629359][ T8456] batman_adv: batadv0: Adding interface: team0
[  301.636428][ T8456] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.664296][ T8456] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  301.677889][ T8457] team0: entered promiscuous mode
[  301.684578][ T8457] team_slave_0: entered promiscuous mode
[  301.763333][ T8464] xt_CT: You must specify a L4 protocol and not use inversions on it
[  302.302844][ T8457] team_slave_1: entered promiscuous mode
[  302.310114][ T8457] 8021q: adding VLAN 0 to HW filter on device team0
[  302.316994][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.325731][ T8457] batman_adv: batadv0: Interface activated: team0
[  302.356829][ T8457] batman_adv: batadv0: Interface deactivated: team0
[  302.371023][ T8457] batman_adv: batadv0: Removing interface: team0
[  302.430192][ T8457] bridge0: port 3(team0) entered blocking state
[  302.443228][ T8457] bridge0: port 3(team0) entered disabled state
[  302.509560][ T8457] team0: entered allmulticast mode
[  302.540737][ T8457] team_slave_0: entered allmulticast mode
[  302.564423][ T8457] team_slave_1: entered allmulticast mode
[  302.589233][ T8457] bridge0: port 3(team0) entered blocking state
[  302.595670][ T8457] bridge0: port 3(team0) entered forwarding state
[  302.615962][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.994048][ T8476] SELinux:  Context � is not valid (left unmapped).
[  303.638135][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.710461][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.040117][ T5871] usb 5-1: USB disconnect, device number 34
[  304.104243][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.692'.
[  304.648067][ T8483] xt_hashlimit: max too large, truncated to 1048576
[  306.241624][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'.
[  306.340914][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'.
[  306.362139][ T8508] FAULT_INJECTION: forcing a failure.
[  306.362139][ T8508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.409355][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.3.699 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  306.420027][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  306.430100][ T8508] Call Trace:
[  306.433383][ T8508]  <TASK>
[  306.436316][ T8508]  dump_stack_lvl+0x16c/0x1f0
[  306.441012][ T8508]  should_fail_ex+0x497/0x5b0
[  306.445709][ T8508]  _copy_from_user+0x2e/0xd0
[  306.450309][ T8508]  copy_msghdr_from_user+0x99/0x160
[  306.455523][ T8508]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  306.461352][ T8508]  ___sys_sendmsg+0xff/0x1e0
[  306.465952][ T8508]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.471176][ T8508]  ? __pfx_lock_release+0x10/0x10
[  306.476215][ T8508]  ? trace_lock_acquire+0x14e/0x1f0
[  306.481442][ T8508]  ? __fget_files+0x206/0x3a0
[  306.486150][ T8508]  __sys_sendmsg+0x16e/0x220
[  306.490760][ T8508]  ? __pfx___sys_sendmsg+0x10/0x10
[  306.495896][ T8508]  do_syscall_64+0xcd/0x250
[  306.500423][ T8508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.506339][ T8508] RIP: 0033:0x7fa144185d29
[  306.510758][ T8508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.530377][ T8508] RSP: 002b:00007fa144f95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.538801][ T8508] RAX: ffffffffffffffda RBX: 00007fa144376160 RCX: 00007fa144185d29
[  306.546777][ T8508] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  306.554751][ T8508] RBP: 00007fa144f95090 R08: 0000000000000000 R09: 0000000000000000
[  306.562721][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.570690][ T8508] R13: 0000000000000000 R14: 00007fa144376160 R15: 00007ffd0785c1e8
[  306.578680][ T8508]  </TASK>
[  306.608768][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.700'.
[  306.617849][ T5871] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  306.672820][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.723328][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.737229][ T8509] netlink: 165 bytes leftover after parsing attributes in process `syz.2.693'.
[  307.172917][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.183896][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.193702][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  307.206669][ T5871] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  307.216442][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.243533][ T5871] usb 2-1: config 0 descriptor??
[  307.716115][ T5871] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving
[  307.752653][ T5871] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  307.964156][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.678135][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.998603][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.282622][  T969] usb 2-1: reset high-speed USB device number 26 using dummy_hcd
[  309.392865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.429950][ T8532] netlink: 'syz.2.707': attribute type 10 has an invalid length.
[  309.471859][ T8532] batman_adv: batadv0: Adding interface: team0
[  309.478386][ T8532] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.514337][ T8532] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  309.531836][ T8534] netlink: 'syz.2.707': attribute type 10 has an invalid length.
[  309.541078][ T8534] netlink: 2 bytes leftover after parsing attributes in process `syz.2.707'.
[  309.559229][ T8534] team0: entered promiscuous mode
[  309.566249][ T8534] team_slave_0: entered promiscuous mode
[  309.586263][ T8534] team_slave_1: entered promiscuous mode
[  309.601172][ T8534] 8021q: adding VLAN 0 to HW filter on device team0
[  309.608560][ T8534] batman_adv: batadv0: Interface activated: team0
[  309.621623][ T8534] batman_adv: batadv0: Interface deactivated: team0
[  309.629075][ T8534] batman_adv: batadv0: Removing interface: team0
[  309.635918][ T5872] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  309.661806][ T8534] bridge0: port 3(team0) entered blocking state
[  309.670299][ T8534] bridge0: port 3(team0) entered disabled state
[  309.684260][ T8533] netlink: 165 bytes leftover after parsing attributes in process `syz.4.706'.
[  309.700100][ T8534] team0: entered allmulticast mode
[  309.709702][ T8534] team_slave_0: entered allmulticast mode
[  309.715709][ T8534] team_slave_1: entered allmulticast mode
[  309.722799][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.759930][ T8534] bridge0: port 3(team0) entered blocking state
[  309.766361][ T8534] bridge0: port 3(team0) entered forwarding state
[  309.812507][ T5872] usb 6-1: Using ep0 maxpacket: 16
[  309.820570][ T5872] usb 6-1: config 0 has no interfaces?
[  309.837260][ T5872] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  309.849676][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.011321][ T5872] usb 6-1: Product: syz
[  310.108666][ T5872] usb 6-1: Manufacturer: syz
[  310.291824][ T5872] usb 6-1: SerialNumber: syz
[  310.344122][ T5872] usb 6-1: config 0 descriptor??
[  310.379260][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.679356][ T7705] usb 6-1: USB disconnect, device number 9
[  310.692662][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  310.692735][   T29] audit: type=1400 audit(1736825258.263:537): avc:  denied  { create } for  pid=8540 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  310.737545][ T8548] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  310.770810][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.807800][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.833463][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.934634][ T8549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.017294][ T8548] netlink: 165 bytes leftover after parsing attributes in process `syz.4.712'.
[  311.386475][   T29] audit: type=1400 audit(1736825258.973:538): avc:  denied  { setopt } for  pid=8542 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  311.613715][ T5868] usb 2-1: USB disconnect, device number 26
[  312.056570][ T5921] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  312.150177][ T1201] hid-generic 0000:0003:0000.0027: unknown main item tag 0x0
[  312.157763][ T1201] hid-generic 0000:0003:0000.0027: unknown main item tag 0x0
[  312.171361][ T1201] hid-generic 0000:0003:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  312.196260][ T8574] netlink: 165 bytes leftover after parsing attributes in process `syz.2.718'.
[  312.246100][ T8573] netdevsim netdevsim1: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  312.256070][ T8573] netdevsim netdevsim1: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  312.265500][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  312.277374][ T5921] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  312.300799][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.321172][ T5921] usb 4-1: Product: syz
[  312.329855][ T5921] usb 4-1: Manufacturer: syz
[  312.340347][ T5921] usb 4-1: SerialNumber: syz
[  312.386094][ T5921] usb 4-1: config 0 descriptor??
[  312.551759][ T5921] appledisplay 4-1:0.0: Could not find int-in endpoint
[  312.560573][ T5921] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  313.528586][ T5871] net_ratelimit: 3 callbacks suppressed
[  313.528602][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.547597][ T8571] [U] v�3
[  314.239672][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.521594][ T5872] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  314.534789][ T5868] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  314.653097][ T8609] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  314.710290][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.723328][ T5868] usb 3-1: Using ep0 maxpacket: 32
[  314.732776][ T5868] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  314.741113][ T5868] usb 3-1: config 0 has no interface number 0
[  314.773060][ T5868] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  314.779455][ T5921] usb 4-1: USB disconnect, device number 16
[  314.794594][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.897421][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  314.928020][ T5868] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  315.005668][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.048221][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  315.084934][ T5868] usb 3-1: Product: syz
[  315.089153][ T5868] usb 3-1: Manufacturer: syz
[  315.099598][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.112618][ T5868] usb 3-1: SerialNumber: syz
[  315.129653][ T5872] usb 5-1: config 0 descriptor??
[  315.136463][ T5868] usb 3-1: config 0 descriptor??
[  315.149408][ T8594] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  315.165336][ T5868] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  315.178117][ T5868] em28xx 3-1:0.132: Video interface 132 found: bulk
[  315.178777][   T29] audit: type=1400 audit(1736825262.763:539): avc:  denied  { getopt } for  pid=8613 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  315.275615][ T8616] netlink: 165 bytes leftover after parsing attributes in process `syz.5.729'.
[  315.348612][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.575975][ T5868] em28xx 3-1:0.132: chip ID is em28174
[  316.229387][ T5872] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving
[  316.331113][ T5872] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  316.380544][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.066673][   T29] audit: type=1400 audit(1736825264.623:540): avc:  denied  { getopt } for  pid=8593 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  317.126072][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.361539][ T5868] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  317.371087][ T5868] em28xx 3-1:0.132: board has no eeprom
[  317.432916][ T5868] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  317.441013][ T5868] em28xx 3-1:0.132: analog set to bulk mode.
[  317.446799][ T8632] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  317.460905][  T969] em28xx 3-1:0.132: Registering V4L2 extension
[  317.493041][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.613869][ T5868] usb 3-1: USB disconnect, device number 26
[  317.815213][ T5868] em28xx 3-1:0.132: Disconnecting em28xx
[  317.888777][ T5921] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0
[  317.907076][ T5921] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0
[  317.923861][ T5921] hid-generic 0000:0003:0000.0029: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  317.934046][ T5871] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  317.957282][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.022182][ T5872] usb 5-1: USB disconnect, device number 35
[  318.087840][ T8636] netdevsim netdevsim1: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  318.097741][ T8636] netdevsim netdevsim1: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  318.112464][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  318.158436][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.167542][  T969] usb 3-1: Decoder not found
[  318.172164][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.184668][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  318.198211][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.206437][  T969] em28xx 3-1:0.132: failed to create media graph
[  318.217450][ T5871] usb 6-1: config 0 descriptor??
[  318.222707][  T969] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  318.241543][  T969] em28xx 3-1:0.132: Remote control support is not available for this card.
[  318.254284][ T5871] hub 6-1:0.0: USB hub found
[  318.260277][ T5868] em28xx 3-1:0.132: Closing input extension
[  318.473044][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it
[  319.171466][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  319.177912][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  319.185934][   T29] audit: type=1400 audit(1736825265.843:541): avc:  denied  { ioctl } for  pid=8641 comm="syz.4.736" path="socket:[21927]" dev="sockfs" ino=21927 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  319.259966][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.275132][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.291998][ T5868] em28xx 3-1:0.132: Freeing device
[  319.335772][ T8635] [U] v�3
[  319.460716][ T5131] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  320.376947][ T5871] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  320.394142][ T8654] netlink: 165 bytes leftover after parsing attributes in process `syz.2.740'.
[  320.403133][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.412642][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.698119][ T8668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.741'.
[  320.986303][ T8675] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  321.029526][   T29] audit: type=1400 audit(1736825268.603:542): avc:  denied  { mount } for  pid=8671 comm="syz.2.742" name="/" dev="rpc_pipefs" ino=22566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  321.657978][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.798071][ T5871] usbhid 6-1:0.0: can't add hid device: -71
[  321.807256][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  321.867813][ T5871] usb 6-1: USB disconnect, device number 10
[  321.879633][ T8672] xt_hashlimit: max too large, truncated to 1048576
[  322.882192][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.225297][ T8694] Invalid ELF header magic: != ELF
[  323.234177][ T8694] FAULT_INJECTION: forcing a failure.
[  323.234177][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.247703][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.2.747 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  323.258296][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  323.268354][ T8694] Call Trace:
[  323.271639][ T8694]  <TASK>
[  323.274578][ T8694]  dump_stack_lvl+0x16c/0x1f0
[  323.279277][ T8694]  should_fail_ex+0x497/0x5b0
[  323.283976][ T8694]  _copy_from_user+0x2e/0xd0
[  323.288576][ T8694]  memdup_user+0x71/0xd0
[  323.292840][ T8694]  strndup_user+0x78/0xe0
[  323.297183][ T8694]  __x64_sys_mount+0x138/0x320
[  323.301956][ T8694]  ? __pfx___x64_sys_mount+0x10/0x10
[  323.307257][ T8694]  do_syscall_64+0xcd/0x250
[  323.311778][ T8694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.317690][ T8694] RIP: 0033:0x7f46f4185d29
[  323.322113][ T8694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.341731][ T8694] RSP: 002b:00007f46f4fa5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  323.350158][ T8694] RAX: ffffffffffffffda RBX: 00007f46f4376160 RCX: 00007f46f4185d29
[  323.358133][ T8694] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000020000100
[  323.366108][ T8694] RBP: 00007f46f4fa5090 R08: 0000000020000340 R09: 0000000000000000
[  323.374081][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.382053][ T8694] R13: 0000000000000000 R14: 00007f46f4376160 R15: 00007ffe780aee68
[  323.390042][ T8694]  </TASK>
[  323.559155][   T29] audit: type=1400 audit(1736825270.813:543): avc:  denied  { module_load } for  pid=8690 comm="syz.2.747" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  323.630923][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.870031][ T5914] hid-generic 0000:0003:0000.002A: unknown main item tag 0x0
[  323.928833][ T5914] hid-generic 0000:0003:0000.002A: unknown main item tag 0x0
[  323.954147][ T5914] hid-generic 0000:0003:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  323.963640][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.217024][ T8709] netdevsim netdevsim2: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  324.227115][ T8709] netdevsim netdevsim2: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  325.041757][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.059502][ T8700] [U] v�3
[  325.078588][   T29] audit: type=1400 audit(1736825272.663:544): avc:  denied  { map } for  pid=8684 comm="syz.5.745" path="socket:[22192]" dev="sockfs" ino=22192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  325.282055][ T8728] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  325.310776][ T8728] bridge0: port 3(team0) entered disabled state
[  325.326322][ T8728] team0: left allmulticast mode
[  325.331687][ T8728] team_slave_0: left allmulticast mode
[  325.350348][ T8728] team_slave_1: left allmulticast mode
[  325.359803][ T8728] team0: left promiscuous mode
[  325.368245][ T8728] team_slave_0: left promiscuous mode
[  325.381133][ T8728] team_slave_1: left promiscuous mode
[  325.523520][ T8733] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  326.112891][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.249995][ T5914] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  326.252539][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  326.284803][ T8728] bridge0: port 3(team0) entered disabled state
[  326.386605][ T8728] batman_adv: batadv0: Adding interface: team0
[  326.417416][ T8728] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.454203][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  326.468961][ T8728] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  326.478861][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  326.502515][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  326.535495][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.580140][ T8726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.590634][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  326.673340][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.839989][ T8738] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:0
[  327.265285][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.282696][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.142581][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.150895][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.442480][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.360029][ T5868] usb 2-1: USB disconnect, device number 27
[  330.365222][ T8780] netlink: 'syz.1.768': attribute type 10 has an invalid length.
[  330.457198][ T8778] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  330.739810][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.835588][ T8780] batman_adv: batadv0: Adding interface: team0
[  330.859656][ T8780] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.917910][ T8780] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  331.915553][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.017498][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'.
[  332.135336][ T8799] FAULT_INJECTION: forcing a failure.
[  332.135336][ T8799] name failslab, interval 1, probability 0, space 0, times 0
[  332.148293][ T8799] CPU: 0 UID: 0 PID: 8799 Comm: syz.3.774 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  332.158925][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  332.168977][ T8799] Call Trace:
[  332.172252][ T8799]  <TASK>
[  332.175195][ T8799]  dump_stack_lvl+0x16c/0x1f0
[  332.179875][ T8799]  should_fail_ex+0x497/0x5b0
[  332.184562][ T8799]  ? fs_reclaim_acquire+0xae/0x150
[  332.189699][ T8799]  should_failslab+0xc2/0x120
[  332.194404][ T8799]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  332.200228][ T8799]  ? __alloc_skb+0x2b1/0x380
[  332.204832][ T8799]  __alloc_skb+0x2b1/0x380
[  332.209258][ T8799]  ? __pfx___alloc_skb+0x10/0x10
[  332.214198][ T8799]  ? selinux_socket_getpeersec_dgram+0x1a5/0x370
[  332.220525][ T8799]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  332.227194][ T8799]  ? cap_capable+0x1cf/0x240
[  332.231780][ T8799]  netlink_alloc_large_skb+0x69/0x130
[  332.237155][ T8799]  netlink_sendmsg+0x689/0xd70
[  332.241915][ T8799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.247200][ T8799]  ____sys_sendmsg+0xaaf/0xc90
[  332.251959][ T8799]  ? copy_msghdr_from_user+0x10b/0x160
[  332.257408][ T8799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.262694][ T8799]  ___sys_sendmsg+0x135/0x1e0
[  332.267360][ T8799]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.272555][ T8799]  ? __pfx_lock_release+0x10/0x10
[  332.277574][ T8799]  ? trace_lock_acquire+0x14e/0x1f0
[  332.282774][ T8799]  ? __fget_files+0x206/0x3a0
[  332.287447][ T8799]  __sys_sendmsg+0x16e/0x220
[  332.292026][ T8799]  ? __pfx___sys_sendmsg+0x10/0x10
[  332.297138][ T8799]  do_syscall_64+0xcd/0x250
[  332.301643][ T8799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.307536][ T8799] RIP: 0033:0x7fa144185d29
[  332.311940][ T8799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.331554][ T8799] RSP: 002b:00007fa144fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.339967][ T8799] RAX: ffffffffffffffda RBX: 00007fa144375fa0 RCX: 00007fa144185d29
[  332.347933][ T8799] RDX: 00000000000000d0 RSI: 0000000020000180 RDI: 0000000000000003
[  332.355898][ T8799] RBP: 00007fa144fd7090 R08: 0000000000000000 R09: 0000000000000000
[  332.363862][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.371825][ T8799] R13: 0000000000000000 R14: 00007fa144375fa0 R15: 00007ffd0785c1e8
[  332.379803][ T8799]  </TASK>
[  332.458327][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.599092][ T8802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.771'.
[  332.901540][   T29] audit: type=1400 audit(1736825280.483:545): avc:  denied  { sqpoll } for  pid=8816 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  332.916943][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz.4.779'.
[  332.947137][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'.
[  332.994123][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.243553][ T8822] xt_hashlimit: max too large, truncated to 1048576
[  333.467508][ T8826] netlink: 'syz.5.781': attribute type 10 has an invalid length.
[  333.471156][ T8824] xt_hashlimit: max too large, truncated to 1048576
[  333.538657][ T8826] batman_adv: batadv0: Adding interface: team0
[  333.555394][ T8826] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.624719][ T8831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.658586][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.676088][ T8831] xt_CT: You must specify a L4 protocol and not use inversions on it
[  333.753314][ T8826] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  334.232598][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.103660][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'.
[  335.833661][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.842631][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.136437][ T8870] netlink: 'syz.3.794': attribute type 10 has an invalid length.
[  337.176502][ T8870] bridge0: port 3(team0) entered disabled state
[  337.187516][ T8870] team0: left allmulticast mode
[  337.201352][ T8870] team_slave_0: left allmulticast mode
[  337.210777][ T8870] team_slave_1: left allmulticast mode
[  337.220937][ T8872] netlink: 'syz.3.794': attribute type 10 has an invalid length.
[  337.631884][ T8870] team0: left promiscuous mode
[  337.637425][ T8870] team_slave_0: left promiscuous mode
[  337.637948][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.647829][ T8870] team_slave_1: left promiscuous mode
[  337.651471][ T8872] netlink: 2 bytes leftover after parsing attributes in process `syz.3.794'.
[  337.657244][ T8870] bridge0: port 3(team0) entered disabled state
[  337.679527][ T8870] batman_adv: batadv0: Adding interface: team0
[  337.693658][ T8870] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.723642][ T8870] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  337.744225][ T8872] team0: entered promiscuous mode
[  337.820661][ T8872] team_slave_0: entered promiscuous mode
[  337.826871][ T8872] team_slave_1: entered promiscuous mode
[  337.835169][ T8872] 8021q: adding VLAN 0 to HW filter on device team0
[  337.860561][ T8872] batman_adv: batadv0: Interface activated: team0
[  337.881342][ T8872] batman_adv: batadv0: Interface deactivated: team0
[  337.888294][ T8872] batman_adv: batadv0: Removing interface: team0
[  337.896956][ T8872] bridge0: port 3(team0) entered blocking state
[  337.903386][ T8872] bridge0: port 3(team0) entered disabled state
[  337.909819][ T8872] team0: entered allmulticast mode
[  337.916928][ T8872] team_slave_0: entered allmulticast mode
[  337.922530][ T7705] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  337.922955][ T8872] team_slave_1: entered allmulticast mode
[  337.943753][ T8872] bridge0: port 3(team0) entered blocking state
[  337.950257][ T8872] bridge0: port 3(team0) entered forwarding state
[  338.072616][ T7705] usb 2-1: device descriptor read/64, error -71
[  338.216181][ T8890] netlink: 56 bytes leftover after parsing attributes in process `syz.5.797'.
[  338.315455][ T7705] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  338.443562][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.692095][ T8897] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.158689][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.168922][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.601952][ T8907] sctp: [Deprecated]: syz.3.801 (pid 8907) Use of int in max_burst socket option deprecated.
[  339.601952][ T8907] Use struct sctp_assoc_value instead
[  340.435364][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.463733][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.083065][ T8919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8919 comm=syz.1.805
[  341.903011][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.969133][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.473020][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.282921][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.348712][ T8941] fuse: Bad value for 'fd'
[  345.140499][ T8946] xt_CT: You must specify a L4 protocol and not use inversions on it
[  345.751538][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.449730][ T5921] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0
[  346.459790][ T5921] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0
[  346.468950][ T5921] hid-generic 0000:0003:0000.002B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  347.052724][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.281689][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.332825][ T8961] syz.5.817: attempt to access beyond end of device
[  347.332825][ T8961] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[  347.386148][ T8956] netdevsim netdevsim2: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  347.396135][ T8956] netdevsim netdevsim2: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  347.714375][ T8955] [U] v�3
[  347.904310][ T8976] FAULT_INJECTION: forcing a failure.
[  347.904310][ T8976] name failslab, interval 1, probability 0, space 0, times 0
[  347.921600][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.2.822 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  347.932226][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  347.942306][ T8976] Call Trace:
[  347.945596][ T8976]  <TASK>
[  347.948537][ T8976]  dump_stack_lvl+0x16c/0x1f0
[  347.953257][ T8976]  should_fail_ex+0x497/0x5b0
[  347.957958][ T8976]  ? fs_reclaim_acquire+0xae/0x150
[  347.963089][ T8976]  should_failslab+0xc2/0x120
[  347.967787][ T8976]  __kmalloc_noprof+0xcb/0x510
[  347.972596][ T8976]  ? __get_fs_type+0x21/0x170
[  347.977295][ T8976]  tomoyo_encode2+0x100/0x3e0
[  347.981999][ T8976]  tomoyo_encode+0x29/0x50
[  347.986436][ T8976]  tomoyo_mount_acl+0x314/0x880
[  347.991303][ T8976]  ? hlock_class+0x4e/0x130
[  347.995825][ T8976]  ? __lock_acquire+0x15a9/0x3c40
[  348.000876][ T8976]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  348.006268][ T8976]  ? __pfx___lock_acquire+0x10/0x10
[  348.011472][ T8976]  ? stack_trace_save+0x95/0xd0
[  348.016341][ T8976]  ? __pfx_lock_release+0x10/0x10
[  348.021388][ T8976]  ? trace_lock_acquire+0x14e/0x1f0
[  348.026606][ T8976]  ? tomoyo_mount_permission+0x149/0x420
[  348.032251][ T8976]  ? lock_acquire+0x2f/0xb0
[  348.036770][ T8976]  ? tomoyo_mount_permission+0x149/0x420
[  348.042519][ T8976]  tomoyo_mount_permission+0x16e/0x420
[  348.047993][ T8976]  ? tomoyo_mount_permission+0x149/0x420
[  348.053644][ T8976]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  348.059654][ T8976]  ? get_current_fs_domain+0x184/0x1f0
[  348.065149][ T8976]  security_sb_mount+0x9b/0x260
[  348.070018][ T8976]  path_mount+0x129/0x1f10
[  348.074459][ T8976]  ? kmem_cache_free+0x152/0x4c0
[  348.079414][ T8976]  ? __pfx_path_mount+0x10/0x10
[  348.083334][ T5131] Bluetooth: Wrong link type (-71)
[  348.084273][ T8976]  ? putname+0x13c/0x180
[  348.084308][ T8976]  __x64_sys_mount+0x294/0x320
[  348.098395][ T8976]  ? __pfx___x64_sys_mount+0x10/0x10
[  348.103702][ T8976]  do_syscall_64+0xcd/0x250
[  348.108239][ T8976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.114158][ T8976] RIP: 0033:0x7f46f4185d29
[  348.118585][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.138209][ T8976] RSP: 002b:00007f46f4fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  348.146649][ T8976] RAX: ffffffffffffffda RBX: 00007f46f4375fa0 RCX: 00007f46f4185d29
[  348.154638][ T8976] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000
[  348.162626][ T8976] RBP: 00007f46f4fe7090 R08: 00000000200003c0 R09: 0000000000000000
[  348.170621][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  348.178600][ T8976] R13: 0000000000000000 R14: 00007f46f4375fa0 R15: 00007ffe780aee68
[  348.186574][ T8976]  </TASK>
[  348.190449][    C1] vkms_vblank_simulate: vblank timer overrun
[  348.200860][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.268173][ T7705] hid-generic 0000:0003:0000.002C: unknown main item tag 0x0
[  348.276354][ T7705] hid-generic 0000:0003:0000.002C: unknown main item tag 0x0
[  348.355963][   T29] audit: type=1400 audit(1736825295.943:546): avc:  denied  { listen } for  pid=8982 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  348.357466][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.428094][ T7705] hid-generic 0000:0003:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  348.846522][    C0] Illegal XDP return value 16128 on prog  (id 238) dev bond_slave_0, expect packet loss!
[  348.886379][ T8981] netdevsim netdevsim1: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  348.897126][ T8981] netdevsim netdevsim1: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  348.920717][   T29] audit: type=1400 audit(1736825296.503:547): avc:  denied  { write } for  pid=8982 comm="syz.2.824" path="socket:[24079]" dev="sockfs" ino=24079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  349.730945][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.802533][   T29] audit: type=1400 audit(1736825296.753:548): avc:  denied  { watch_mount } for  pid=8992 comm="syz.3.827" path="/176" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  350.255234][ T8980] [U] v�3
[  350.281489][ T9007] netlink: 'syz.2.830': attribute type 10 has an invalid length.
[  350.292495][ T9007] netlink: 'syz.2.830': attribute type 10 has an invalid length.
[  350.300619][ T9007] netlink: 2 bytes leftover after parsing attributes in process `syz.2.830'.
[  350.309857][ T9007] team0: entered promiscuous mode
[  350.315116][ T9007] team_slave_0: entered promiscuous mode
[  350.320971][ T9007] team_slave_1: entered promiscuous mode
[  350.329705][ T9007] 8021q: adding VLAN 0 to HW filter on device team0
[  350.336620][ T9007] batman_adv: batadv0: Interface activated: team0
[  350.345003][ T9007] batman_adv: batadv0: Interface deactivated: team0
[  350.351743][ T9007] batman_adv: batadv0: Removing interface: team0
[  350.358478][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.382269][ T9007] bridge0: port 3(team0) entered blocking state
[  350.389956][ T9007] bridge0: port 3(team0) entered disabled state
[  350.398578][ T9007] team0: entered allmulticast mode
[  350.411250][ T9007] team_slave_0: entered allmulticast mode
[  350.418241][ T9007] team_slave_1: entered allmulticast mode
[  350.432150][ T9007] bridge0: port 3(team0) entered blocking state
[  350.438605][ T9007] bridge0: port 3(team0) entered forwarding state
[  350.629094][ T5833] Bluetooth: hci3: hardware error 0x04
[  350.662754][ T5921] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  351.237401][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.523331][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.588199][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  351.600688][   T29] audit: type=1400 audit(1736825299.183:549): avc:  denied  { accept } for  pid=9025 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  351.627882][ T5921] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  351.637219][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.654435][ T5921] usb 5-1: config 0 descriptor??
[  351.833306][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  351.995479][ T5868] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  352.047090][ T5868] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  352.091148][ T5868] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  352.125226][ T9032] netlink: 165 bytes leftover after parsing attributes in process `syz.3.838'.
[  352.131018][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.150831][ T5921] usb 5-1: USB disconnect, device number 36
[  352.179980][ T9021] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  352.197679][ T5868] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  352.273073][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.640896][ T9043] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  353.313090][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.514684][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  353.543259][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.743680][   T29] audit: type=1400 audit(1736825301.333:550): avc:  denied  { mounton } for  pid=9047 comm="syz.4.842" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  353.743715][ T9048] tmpfs: Unknown parameter '�iz%'
[  353.832736][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  354.003332][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  354.015181][ T5921] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  354.030881][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.062092][ T5921] usb 4-1: Product: syz
[  354.074002][ T5921] usb 4-1: Manufacturer: syz
[  354.086084][ T5921] usb 4-1: SerialNumber: syz
[  354.115166][ T5921] usb 4-1: config 0 descriptor??
[  354.352264][ T7705] usb 6-1: USB disconnect, device number 11
[  354.375816][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.469747][ T5921] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  354.952734][ T9070] FAULT_INJECTION: forcing a failure.
[  354.952734][ T9070] name failslab, interval 1, probability 0, space 0, times 0
[  354.965882][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.2.847 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  354.976511][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.986593][ T9070] Call Trace:
[  354.989890][ T9070]  <TASK>
[  354.992830][ T9070]  dump_stack_lvl+0x16c/0x1f0
[  354.997542][ T9070]  should_fail_ex+0x497/0x5b0
[  355.002234][ T9070]  ? fs_reclaim_acquire+0xae/0x150
[  355.007346][ T9070]  should_failslab+0xc2/0x120
[  355.012025][ T9070]  __kmalloc_cache_node_noprof+0x6e/0x420
[  355.017737][ T9070]  ? mark_lock+0xb5/0xc60
[  355.022061][ T9070]  ? __get_vm_area_node+0x101/0x2f0
[  355.027254][ T9070]  __get_vm_area_node+0x101/0x2f0
[  355.032269][ T9070]  __vmalloc_node_range_noprof+0x26a/0x1530
[  355.038155][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.043708][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.049253][ T9070]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  355.055573][ T9070]  ? __pfx___lock_acquire+0x10/0x10
[  355.060762][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.066302][ T9070]  __vmalloc_noprof+0x6d/0x90
[  355.070970][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.076504][ T9070]  bpf_prog_alloc_no_stats+0x54/0x620
[  355.081890][ T9070]  ? security_capable+0x7e/0x260
[  355.086820][ T9070]  bpf_prog_alloc+0x3b/0x230
[  355.091401][ T9070]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  355.097289][ T9070]  bpf_prog_load+0x1b3f/0x2660
[  355.102052][ T9070]  ? __pfx_bpf_prog_load+0x10/0x10
[  355.107157][ T9070]  ? avc_has_perm_noaudit+0x143/0x3a0
[  355.112542][ T9070]  ? selinux_bpf+0xde/0x130
[  355.117041][ T9070]  __sys_bpf+0x4043/0x49c0
[  355.121449][ T9070]  ? __pfx_lock_release+0x10/0x10
[  355.126467][ T9070]  ? __pfx___sys_bpf+0x10/0x10
[  355.131224][ T9070]  ? vfs_write+0x306/0x1150
[  355.135724][ T9070]  ? __mutex_unlock_slowpath+0x164/0x690
[  355.141366][ T9070]  ? fput+0x67/0x440
[  355.145260][ T9070]  ? ksys_write+0x1ba/0x250
[  355.149754][ T9070]  ? __pfx_ksys_write+0x10/0x10
[  355.154598][ T9070]  __x64_sys_bpf+0x78/0xc0
[  355.159034][ T9070]  ? lockdep_hardirqs_on+0x7c/0x110
[  355.164247][ T9070]  do_syscall_64+0xcd/0x250
[  355.168761][ T9070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.174676][ T9070] RIP: 0033:0x7f46f4185d29
[  355.179089][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.198703][ T9070] RSP: 002b:00007f46f4fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.207131][ T9070] RAX: ffffffffffffffda RBX: 00007f46f4376160 RCX: 00007f46f4185d29
[  355.215097][ T9070] RDX: 0000000000000094 RSI: 0000000020000680 RDI: 0000000000000005
[  355.223064][ T9070] RBP: 00007f46f4fa5090 R08: 0000000000000000 R09: 0000000000000000
[  355.231029][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.238995][ T9070] R13: 0000000000000000 R14: 00007f46f4376160 R15: 00007ffe780aee68
[  355.247010][ T9070]  </TASK>
[  355.253015][ T9070] syz.2.847: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  355.336653][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.2.847 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  355.347321][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  355.357395][ T9070] Call Trace:
[  355.360686][ T9070]  <TASK>
[  355.363607][ T9070]  dump_stack_lvl+0x16c/0x1f0
[  355.368290][ T9070]  warn_alloc+0x24d/0x3a0
[  355.372626][ T9070]  ? __pfx_warn_alloc+0x10/0x10
[  355.377498][ T9070]  ? lockdep_hardirqs_on+0x7c/0x110
[  355.382726][ T9070]  __vmalloc_node_range_noprof+0xd27/0x1530
[  355.388656][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.394218][ T9070]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  355.400573][ T9070]  ? __pfx___lock_acquire+0x10/0x10
[  355.405784][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.411334][ T9070]  __vmalloc_noprof+0x6d/0x90
[  355.416013][ T9070]  ? bpf_prog_alloc_no_stats+0x54/0x620
[  355.421583][ T9070]  bpf_prog_alloc_no_stats+0x54/0x620
[  355.426966][ T9070]  ? security_capable+0x7e/0x260
[  355.431899][ T9070]  bpf_prog_alloc+0x3b/0x230
[  355.436483][ T9070]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  355.442387][ T9070]  bpf_prog_load+0x1b3f/0x2660
[  355.447159][ T9070]  ? __pfx_bpf_prog_load+0x10/0x10
[  355.452274][ T9070]  ? avc_has_perm_noaudit+0x143/0x3a0
[  355.457746][ T9070]  ? selinux_bpf+0xde/0x130
[  355.462250][ T9070]  __sys_bpf+0x4043/0x49c0
[  355.466664][ T9070]  ? __pfx_lock_release+0x10/0x10
[  355.471682][ T9070]  ? __pfx___sys_bpf+0x10/0x10
[  355.476460][ T9070]  ? vfs_write+0x306/0x1150
[  355.480966][ T9070]  ? __mutex_unlock_slowpath+0x164/0x690
[  355.486631][ T9070]  ? fput+0x67/0x440
[  355.490534][ T9070]  ? ksys_write+0x1ba/0x250
[  355.495040][ T9070]  ? __pfx_ksys_write+0x10/0x10
[  355.499891][ T9070]  __x64_sys_bpf+0x78/0xc0
[  355.504309][ T9070]  ? lockdep_hardirqs_on+0x7c/0x110
[  355.509526][ T9070]  do_syscall_64+0xcd/0x250
[  355.514030][ T9070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.519922][ T9070] RIP: 0033:0x7f46f4185d29
[  355.524330][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.543950][ T9070] RSP: 002b:00007f46f4fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.552364][ T9070] RAX: ffffffffffffffda RBX: 00007f46f4376160 RCX: 00007f46f4185d29
[  355.560332][ T9070] RDX: 0000000000000094 RSI: 0000000020000680 RDI: 0000000000000005
[  355.568298][ T9070] RBP: 00007f46f4fa5090 R08: 0000000000000000 R09: 0000000000000000
[  355.576284][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.584264][ T9070] R13: 0000000000000000 R14: 00007f46f4376160 R15: 00007ffe780aee68
[  355.592249][ T9070]  </TASK>
[  355.599244][ T9070] Mem-Info:
[  355.602898][ T9070] active_anon:21366 inactive_anon:0 isolated_anon:0
[  355.602898][ T9070]  active_file:20772 inactive_file:39023 isolated_file:0
[  355.602898][ T9070]  unevictable:768 dirty:301 writeback:22
[  355.602898][ T9070]  slab_reclaimable:11743 slab_unreclaimable:99907
[  355.602898][ T9070]  mapped:39278 shmem:18334 pagetables:805
[  355.602898][ T9070]  sec_pagetables:0 bounce:0
[  355.602898][ T9070]  kernel_misc_reclaimable:0
[  355.602898][ T9070]  free:1296467 free_pcp:2246 free_cma:0
[  355.603301][ T7705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.657501][ T9070] Node 0 active_anon:85464kB inactive_anon:0kB active_file:83088kB inactive_file:156020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157112kB dirty:1204kB writeback:88kB shmem:71800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11412kB pagetables:3220kB sec_pagetables:0kB all_unreclaimable? no
[  355.690855][ T9070] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  355.726661][ T5921] gspca_sunplus: reg_w_riv err -110
[  355.738939][ T5921] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  355.881219][ T9070] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  355.908910][ T9070] lowmem_reserve[]: 0 2459 2459 0 0
[  355.915608][ T9070] Node 0 DMA32 free:1256148kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:97004kB inactive_anon:0kB active_file:83088kB inactive_file:155916kB unevictable:1536kB writepending:1316kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:9820kB local_pcp:4772kB free_cma:0kB
[  356.612580][ T9070] lowmem_reserve[]: 0 0 0 0 0
[  356.618565][ T9070] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  356.732466][ T9070] lowmem_reserve[]: 0 0 0 0 0
[  356.737842][ T9070] Node 1 Normal free:3897232kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4220kB local_pcp:68kB free_cma:0kB
[  356.767627][ T9070] lowmem_reserve[]: 0 0 0 0 0
[  356.772644][ T9070] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  356.788899][ T9070] Node 0 DMA32: 899*4kB (U) 498*8kB (UME) 480*16kB (UME) 139*32kB (UME) 181*64kB (UME) 112*128kB (UME) 51*256kB (UME) 23*512kB (UME) 10*1024kB (UME) 4*2048kB (U) 289*4096kB (M) = 1272636kB
[  356.809337][ T5873] usb 4-1: USB disconnect, device number 17
[  356.817555][ T9070] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  356.830802][ T9070] Node 1 Normal: 188*4kB (UE) 54*8kB (UME) 49*16kB (UME) 233*32kB (UME) 109*64kB (UME) 33*128kB (UME) 17*256kB (UME) 9*512kB (UM) 3*1024kB (UM) 5*2048kB (UE) 941*4096kB (M) = 3897232kB
[  356.850331][ T9070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  356.966716][ T9070] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  356.976360][ T9070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  356.989618][ T9070] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  356.999110][ T9070] 80955 total pagecache pages
[  357.003973][ T9070] 0 pages in swap cache
[  357.008205][ T9070] Free swap  = 124592kB
[  357.012584][ T9070] Total swap = 124996kB
[  357.602955][ T9070] 2097051 pages RAM
[  357.606990][ T9070] 0 pages HighMem/MovableOnly
[  357.611784][ T9070] 428606 pages reserved
[  357.619574][ T9070] 0 pages cma reserved
[  358.954866][ T9097] netlink: 'syz.1.855': attribute type 10 has an invalid length.
[  358.964462][ T9097] netlink: 'syz.1.855': attribute type 10 has an invalid length.
[  358.972212][ T9097] netlink: 2 bytes leftover after parsing attributes in process `syz.1.855'.
[  358.981353][ T9097] team0: entered promiscuous mode
[  358.986472][ T9097] team_slave_0: entered promiscuous mode
[  358.992620][ T9097] team_slave_1: entered promiscuous mode
[  358.999853][ T9097] 8021q: adding VLAN 0 to HW filter on device team0
[  359.006829][ T9097] batman_adv: batadv0: Interface activated: team0
[  359.013417][ T9097] batman_adv: batadv0: Interface deactivated: team0
[  359.020186][ T9097] batman_adv: batadv0: Removing interface: team0
[  359.069360][ T9097] bridge0: port 3(team0) entered blocking state
[  359.076014][ T9097] bridge0: port 3(team0) entered disabled state
[  359.082625][ T9097] team0: entered allmulticast mode
[  359.083759][ T9102] syz.5.856: attempt to access beyond end of device
[  359.083759][ T9102] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[  359.087867][ T9097] team_slave_0: entered allmulticast mode
[  359.106356][ T9097] team_slave_1: entered allmulticast mode
[  359.114047][ T9097] bridge0: port 3(team0) entered blocking state
[  359.120405][ T9097] bridge0: port 3(team0) entered forwarding state
[  359.441211][ T9103] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  359.572539][ T5914] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  359.995689][ T9124] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  360.158694][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.172394][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.200155][ T5914] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  360.214020][ T9129] netlink: 'syz.1.862': attribute type 10 has an invalid length.
[  360.221973][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.234448][ T9129] bridge0: port 3(team0) entered disabled state
[  360.245663][ T5914] usb 5-1: config 0 descriptor??
[  360.252264][ T9129] team0: left allmulticast mode
[  360.260926][ T9129] team_slave_0: left allmulticast mode
[  360.267048][ T9129] team_slave_1: left allmulticast mode
[  360.272880][ T9129] team0: left promiscuous mode
[  360.277782][ T9129] team_slave_0: left promiscuous mode
[  360.284864][ T9130] netlink: 'syz.1.862': attribute type 10 has an invalid length.
[  360.293040][ T9129] team_slave_1: left promiscuous mode
[  360.298620][ T9130] netlink: 2 bytes leftover after parsing attributes in process `syz.1.862'.
[  360.322999][ T9129] bridge0: port 3(team0) entered disabled state
[  360.332106][ T9129] batman_adv: batadv0: Adding interface: team0
[  360.343296][ T9129] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.400726][ T9129] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  360.432484][ T9130] team0: entered promiscuous mode
[  360.457989][ T9130] team_slave_0: entered promiscuous mode
[  360.492644][ T9130] team_slave_1: entered promiscuous mode
[  360.503953][ T9130] 8021q: adding VLAN 0 to HW filter on device team0
[  360.511136][ T9130] batman_adv: batadv0: Interface activated: team0
[  360.522903][ T9130] batman_adv: batadv0: Interface deactivated: team0
[  360.529676][ T9130] batman_adv: batadv0: Removing interface: team0
[  360.544954][ T9130] bridge0: port 3(team0) entered blocking state
[  360.556640][ T9130] bridge0: port 3(team0) entered disabled state
[  360.566292][ T9130] team0: entered allmulticast mode
[  360.571526][ T9130] team_slave_0: entered allmulticast mode
[  360.580964][ T9130] team_slave_1: entered allmulticast mode
[  360.589937][ T9130] bridge0: port 3(team0) entered blocking state
[  360.596319][ T9130] bridge0: port 3(team0) entered forwarding state
[  360.752442][ T1201] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  361.091641][ T1201] usb 6-1: Using ep0 maxpacket: 8
[  361.101234][ T1201] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.121475][ T1201] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  361.161886][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.172401][ T1201] usb 6-1: config 0 descriptor??
[  361.182547][ T1201] gspca_main: vc032x-2.14.0 probing 046d:0892
[  361.216103][ T5914] usbhid 5-1:0.0: can't add hid device: -71
[  361.222678][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  361.241754][ T5914] usb 5-1: USB disconnect, device number 37
[  362.332442][ T1201] gspca_vc032x: reg_w err -110
[  362.338592][ T1201] vc032x 6-1:0.0: probe with driver vc032x failed with error -110
[  362.442859][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  362.494696][ T5921] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  362.627792][   T29] audit: type=1400 audit(1736825310.213:551): avc:  denied  { connect } for  pid=9155 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  362.652434][   T29] audit: type=1400 audit(1736825310.243:552): avc:  denied  { read } for  pid=9155 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  362.694127][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.707418][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.717917][ T5873] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  362.727536][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.735855][ T9161] netlink: 'syz.5.863': attribute type 3 has an invalid length.
[  362.746723][ T5873] usb 4-1: config 0 descriptor??
[  362.767746][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  362.780214][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -71
[  362.792160][ T5921] usb 3-1: can't read configurations, error -71
[  363.157487][ T5873] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0
[  363.165302][ T5873] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0
[  363.174165][ T5873] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.002D/input/input16
[  363.196391][ T5873] cm6533_jd 0003:0D8C:0022.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  363.415314][ T9142] tmpfs: Bad value for 'mpol'
[  363.479073][ T5914] usb 4-1: USB disconnect, device number 18
[  364.083278][ T9177] xt_hashlimit: max too large, truncated to 1048576
[  364.555936][   T29] audit: type=1400 audit(1736825312.143:553): avc:  denied  { write } for  pid=9187 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  364.682487][ T5872] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  364.692527][ T5873] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  364.792635][ T5921] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  364.832558][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  364.839177][ T5872] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  364.848266][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  364.858377][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  364.869423][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  364.879697][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  364.893059][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  364.902218][ T5873] usb 2-1: config 1 has an invalid descriptor of length 24, skipping remainder of the config
[  364.912634][ T5868] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  364.920361][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.929201][ T5873] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  364.946130][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.949187][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  364.960586][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.966401][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.984864][ T5873] usb 2-1: Product: syz
[  364.984876][ T5921] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  364.989061][ T5873] usb 2-1: Manufacturer: syz
[  364.989091][ T5873] usb 2-1: SerialNumber: syz
[  365.008067][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.018215][ T5921] usb 5-1: config 0 descriptor??
[  365.072544][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  365.087563][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  365.098006][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  365.109234][ T5868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  365.118426][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.126567][ T5868] usb 3-1: Product: syz
[  365.130771][ T5868] usb 3-1: Manufacturer: syz
[  365.135444][ T5868] usb 3-1: SerialNumber: syz
[  365.166125][ T5872] usb 4-1: usb_control_msg returned -32
[  365.172100][ T5872] usbtmc 4-1:16.0: can't read capabilities
[  365.199455][ T5873] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  365.212770][ T5873] usb 2-1: USB disconnect, device number 30
[  365.401798][ T5873] usb 6-1: USB disconnect, device number 12
[  365.571521][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.580536][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.672653][ T5872] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  365.838555][ T5872] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[  365.939251][ T5872] usb 2-1: config 16 has an invalid descriptor of length 24, skipping remainder of the config
[  366.181811][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.382198][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[  366.499949][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  366.511425][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64
[  366.522723][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  366.531787][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.536510][ T5921] usbhid 5-1:0.0: can't add hid device: -71
[  366.545949][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  366.553985][ T9183] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  366.566626][ T5921] usb 5-1: USB disconnect, device number 38
[  366.594872][ T5868] usb 3-1: USB disconnect, device number 29
[  366.767404][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.776755][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.787025][ T5872] usb 2-1: usb_control_msg returned -71
[  366.792838][ T5872] usbtmc 2-1:16.0: can't read capabilities
[  366.806891][ T5872] usb 2-1: USB disconnect, device number 31
[  367.170306][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  367.179429][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  367.368685][ T9224] syz.1.891: attempt to access beyond end of device
[  367.368685][ T9224] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  367.490296][ T9229] netlink: 64 bytes leftover after parsing attributes in process `syz.5.893'.
[  367.760727][ T9232] xt_hashlimit: max too large, truncated to 1048576
[  368.350169][ T5921] usb 4-1: USB disconnect, device number 19
[  368.742587][   T29] audit: type=1400 audit(1736825316.083:554): avc:  denied  { create } for  pid=9234 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  369.195529][ T5868] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  369.452508][ T5868] usb 5-1: Using ep0 maxpacket: 8
[  369.463645][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  369.493266][ T5868] usb 5-1: config 0 has no interface number 0
[  369.510596][ T5868] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.530012][ T5868] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  369.619692][   T29] audit: type=1400 audit(1736825317.203:555): avc:  denied  { checkpoint_restore } for  pid=9248 comm="syz.1.899" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  369.969945][ T9256] fuseblk: Unknown parameter 'roo>�o�'�mode900000000000002Ӑ�?^(�r_id'
[  370.289513][ T5868] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  370.306871][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.317728][ T5868] usb 5-1: config 0 descriptor??
[  370.326552][ T5868] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  370.490327][   T29] audit: type=1400 audit(1736825317.573:556): avc:  denied  { accept } for  pid=9239 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  370.629956][ T5914] usb 5-1: USB disconnect, device number 39
[  370.698497][ T5921] hid-generic 0000:0003:0000.002E: unknown main item tag 0x0
[  370.707743][ T5921] hid-generic 0000:0003:0000.002E: unknown main item tag 0x0
[  370.726418][ T5921] hid-generic 0000:0003:0000.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  370.747908][ T9265] netlink: 48 bytes leftover after parsing attributes in process `syz.1.904'.
[  370.819290][ T9268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.902'.
[  370.899925][ T9268] xt_hashlimit: max too large, truncated to 1048576
[  370.943977][ T9266] netdevsim netdevsim5: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  370.962281][ T9265] xt_hashlimit: max too large, truncated to 1048576
[  370.990290][ T9266] netdevsim netdevsim5: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  371.020859][   T29] audit: type=1400 audit(1736825318.593:557): avc:  denied  { getopt } for  pid=9270 comm="syz.3.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  371.206496][   T29] audit: type=1400 audit(1736825318.643:558): avc:  denied  { append } for  pid=9270 comm="syz.3.905" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  371.233167][   T29] audit: type=1400 audit(1736825318.643:559): avc:  denied  { setattr } for  pid=9270 comm="syz.3.905" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  372.167962][ T9262] [U] v�3
[  372.253505][ T9279] FAULT_INJECTION: forcing a failure.
[  372.253505][ T9279] name failslab, interval 1, probability 0, space 0, times 0
[  372.340270][ T9279] CPU: 1 UID: 0 PID: 9279 Comm: syz.4.907 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  372.350915][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  372.360984][ T9279] Call Trace:
[  372.364253][ T9279]  <TASK>
[  372.367266][ T9279]  dump_stack_lvl+0x16c/0x1f0
[  372.371946][ T9279]  should_fail_ex+0x497/0x5b0
[  372.376622][ T9279]  ? fs_reclaim_acquire+0xae/0x150
[  372.381725][ T9279]  should_failslab+0xc2/0x120
[  372.386500][ T9279]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  372.392302][ T9279]  ? __alloc_skb+0x2b1/0x380
[  372.396905][ T9279]  ? __pfx___lock_acquire+0x10/0x10
[  372.402097][ T9279]  __alloc_skb+0x2b1/0x380
[  372.406510][ T9279]  ? __pfx___alloc_skb+0x10/0x10
[  372.411440][ T9279]  ? __lock_acquire+0xcc5/0x3c40
[  372.416392][ T9279]  alloc_skb_with_frags+0xe4/0x850
[  372.421495][ T9279]  ? __pfx___lock_acquire+0x10/0x10
[  372.426699][ T9279]  ? __pfx_mark_lock+0x10/0x10
[  372.431454][ T9279]  sock_alloc_send_pskb+0x7f1/0x980
[  372.436649][ T9279]  ? find_held_lock+0x2d/0x110
[  372.441412][ T9279]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  372.447148][ T9279]  ? lock_acquire+0x2f/0xb0
[  372.451657][ T9279]  ? dev_get_by_index+0x37/0x380
[  372.456590][ T9279]  packet_sendmsg+0x1f70/0x5660
[  372.461463][ T9279]  ? sock_has_perm+0x25a/0x2f0
[  372.466219][ T9279]  ? __pfx_sock_has_perm+0x10/0x10
[  372.471320][ T9279]  ? __pfx_packet_sendmsg+0x10/0x10
[  372.476522][ T9279]  ____sys_sendmsg+0xaaf/0xc90
[  372.481279][ T9279]  ? copy_msghdr_from_user+0x10b/0x160
[  372.486734][ T9279]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.492006][ T9279]  ? __lock_acquire+0xcc5/0x3c40
[  372.496942][ T9279]  ___sys_sendmsg+0x135/0x1e0
[  372.501610][ T9279]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.506808][ T9279]  ? trace_lock_acquire+0x14e/0x1f0
[  372.512012][ T9279]  __sys_sendmmsg+0x201/0x420
[  372.516679][ T9279]  ? __pfx___sys_sendmmsg+0x10/0x10
[  372.521871][ T9279]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  372.527854][ T9279]  ? fput+0x67/0x440
[  372.531746][ T9279]  ? ksys_write+0x1ba/0x250
[  372.536237][ T9279]  ? __pfx_ksys_write+0x10/0x10
[  372.541083][ T9279]  __x64_sys_sendmmsg+0x9c/0x100
[  372.546014][ T9279]  ? lockdep_hardirqs_on+0x7c/0x110
[  372.551207][ T9279]  do_syscall_64+0xcd/0x250
[  372.555710][ T9279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.561600][ T9279] RIP: 0033:0x7fbc59f85d29
[  372.566009][ T9279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.585609][ T9279] RSP: 002b:00007fbc57df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  372.594012][ T9279] RAX: ffffffffffffffda RBX: 00007fbc5a175fa0 RCX: 00007fbc59f85d29
[  372.601970][ T9279] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000008
[  372.609926][ T9279] RBP: 00007fbc57df6090 R08: 0000000000000000 R09: 0000000000000000
[  372.617883][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.626797][ T9279] R13: 0000000000000000 R14: 00007fbc5a175fa0 R15: 00007ffc6528b0f8
[  372.634771][ T9279]  </TASK>
[  373.048735][   T29] audit: type=1400 audit(1736825320.633:560): avc:  denied  { remount } for  pid=9284 comm="syz.5.910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  373.182559][   T29] audit: type=1400 audit(1736825320.763:561): avc:  denied  { unmount } for  pid=7318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  373.273629][ T9291] syz.4.911: attempt to access beyond end of device
[  373.273629][ T9291] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0
[  373.418313][ T9295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.912'.
[  373.572630][ T5872] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  374.018478][ T5872] usb 6-1: Using ep0 maxpacket: 32
[  374.036903][ T5872] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  374.057087][ T5872] usb 6-1: config 0 has no interface number 0
[  374.067613][ T5872] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  374.088961][ T5872] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  374.109352][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.132090][ T5872] usb 6-1: Product: syz
[  374.138383][ T5872] usb 6-1: Manufacturer: syz
[  374.146331][ T5872] usb 6-1: SerialNumber: syz
[  374.156037][ T5872] usb 6-1: config 0 descriptor??
[  374.168814][ T9294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  374.188083][ T5872] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  374.206639][ T5872] em28xx 6-1:0.132: Video interface 132 found: bulk
[  374.279069][ T9311] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  374.730590][ T5872] em28xx 6-1:0.132: chip ID is em28174
[  375.070760][ T9318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.921'.
[  376.055344][ T9318] xt_hashlimit: max too large, truncated to 1048576
[  376.081179][   T29] audit: type=1400 audit(1736825323.663:562): avc:  denied  { getopt } for  pid=9315 comm="syz.4.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  376.188075][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'.
[  376.215325][ T5872] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  376.225271][ T5872] em28xx 6-1:0.132: board has no eeprom
[  376.229690][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'.
[  376.245895][ T9327] syz.4.924: attempt to access beyond end of device
[  376.245895][ T9327] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0
[  376.293382][ T5872] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  376.602482][   T29] audit: type=1400 audit(1736825324.073:563): avc:  denied  { ioctl } for  pid=9323 comm="syz.2.922" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  376.628428][ T5872] em28xx 6-1:0.132: analog set to bulk mode.
[  376.645020][ T5873] em28xx 6-1:0.132: Registering V4L2 extension
[  376.882524][ T5872] usb 6-1: USB disconnect, device number 13
[  376.888652][ T5873] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  376.903348][ T5872] em28xx 6-1:0.132: Disconnecting em28xx
[  376.917129][   T29] audit: type=1400 audit(1736825324.503:564): avc:  denied  { ioctl } for  pid=9334 comm="syz.4.925" path="socket:[25921]" dev="sockfs" ino=25921 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  377.108324][ T5873] usb 6-1: Decoder not found
[  377.113196][ T5873] em28xx 6-1:0.132: failed to create media graph
[  377.119967][ T5873] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  377.160600][ T5873] em28xx 6-1:0.132: Remote control support is not available for this card.
[  377.180248][ T5872] em28xx 6-1:0.132: Closing input extension
[  377.201856][ T5872] em28xx 6-1:0.132: Freeing device
[  377.396693][ T9348] bridge1: entered promiscuous mode
[  377.402005][   T29] audit: type=1326 audit(1736825324.973:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  377.610188][   T29] audit: type=1326 audit(1736825324.973:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  377.758377][   T29] audit: type=1326 audit(1736825324.973:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  377.847398][   T29] audit: type=1326 audit(1736825324.973:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  377.917573][   T29] audit: type=1326 audit(1736825324.973:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  378.042661][ T9359] xt_CT: You must specify a L4 protocol and not use inversions on it
[  378.631050][   T29] audit: type=1326 audit(1736825324.973:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  378.658682][   T29] audit: type=1326 audit(1736825324.973:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f4185d29 code=0x7ffc0000
[  378.907834][ T9367] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  379.574399][ T5914] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  379.713842][ T5921] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  379.742538][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  379.766935][ T9374] xt_CT: You must specify a L4 protocol and not use inversions on it
[  379.842397][ T5914] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  379.875848][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.952808][ T5921] usb 3-1: Using ep0 maxpacket: 16
[  379.999277][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.039148][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  380.052474][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  380.099530][ T5914] usb 2-1: Product: syz
[  380.153537][ T5914] usb 2-1: Manufacturer: syz
[  380.185207][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.264643][ T5914] usb 2-1: SerialNumber: syz
[  380.272046][ T5914] usb 2-1: config 0 descriptor??
[  380.277308][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.287336][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  380.300199][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  380.310960][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  380.325652][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  380.336965][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  380.345187][ T5921] usb 3-1: Manufacturer: syz
[  380.352487][ T5921] usb 3-1: config 0 descriptor??
[  380.363446][ T5921] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed!
[  380.370631][ T5921] mceusb 3-1:0.0: probe with driver mceusb failed with error -12
[  380.389471][ T5921] usbhid 3-1:0.0: can't add hid device: -22
[  380.400003][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  380.418263][ T5131] Bluetooth: hci4: hardware error 0x04
[  380.804551][ T5914] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  380.813019][ T5914] gspca_sunplus: reg_w_riv err -71
[  380.818222][ T5914] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  380.846871][ T5914] usb 2-1: USB disconnect, device number 32
[  380.912417][ T9387] FAULT_INJECTION: forcing a failure.
[  380.912417][ T9387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.925617][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.3.939 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  380.936214][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  380.946297][ T9387] Call Trace:
[  380.949591][ T9387]  <TASK>
[  380.952530][ T9387]  dump_stack_lvl+0x16c/0x1f0
[  380.957223][ T9387]  should_fail_ex+0x497/0x5b0
[  380.961915][ T9387]  _copy_to_user+0x32/0xd0
[  380.966338][ T9387]  simple_read_from_buffer+0xd0/0x160
[  380.971726][ T9387]  proc_fail_nth_read+0x198/0x270
[  380.976765][ T9387]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  380.982330][ T9387]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  380.987882][ T9387]  vfs_read+0x1df/0xbe0
[  380.992041][ T9387]  ? __fget_files+0x1fc/0x3a0
[  380.996722][ T9387]  ? __pfx___mutex_lock+0x10/0x10
[  381.001758][ T9387]  ? __pfx_vfs_read+0x10/0x10
[  381.006447][ T9387]  ? __fget_files+0x206/0x3a0
[  381.011136][ T9387]  ksys_read+0x12b/0x250
[  381.015384][ T9387]  ? __pfx_ksys_read+0x10/0x10
[  381.020158][ T9387]  do_syscall_64+0xcd/0x250
[  381.024682][ T9387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.030591][ T9387] RIP: 0033:0x7fa14418473c
[  381.035008][ T9387] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  381.054625][ T9387] RSP: 002b:00007fa144f95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  381.063059][ T9387] RAX: ffffffffffffffda RBX: 00007fa144376160 RCX: 00007fa14418473c
[  381.071029][ T9387] RDX: 000000000000000f RSI: 00007fa144f950a0 RDI: 0000000000000007
[  381.079000][ T9387] RBP: 00007fa144f95090 R08: 0000000000000000 R09: 0000000000000000
[  381.086972][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.094942][ T9387] R13: 0000000000000000 R14: 00007fa144376160 R15: 00007ffd0785c1e8
[  381.102932][ T9387]  </TASK>
[  381.260241][ T5873] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  381.325440][ T9390] netlink: 76 bytes leftover after parsing attributes in process `syz.3.940'.
[  381.425125][ T5873] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  381.442462][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.483684][ T5873] usb 5-1: config 0 descriptor??
[  381.496258][ T5873] cp210x 5-1:0.0: cp210x converter detected
[  381.622520][ T5872] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  382.096088][ T5872] usb 4-1: Using ep0 maxpacket: 32
[  382.143033][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.188829][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'.
[  382.213171][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.259565][ T5872] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  382.315695][ T5873] usb 5-1: cp210x converter now attached to ttyUSB0
[  382.333532][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.382798][ T5872] usb 4-1: config 0 descriptor??
[  382.405637][ T5872] hub 4-1:0.0: USB hub found
[  382.497065][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  382.497083][   T29] audit: type=1326 audit(1736825330.083:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.573646][ T5131] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  382.598399][   T29] audit: type=1326 audit(1736825330.133:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.626425][ T5872] hub 4-1:0.0: 1 port detected
[  382.697504][   T29] audit: type=1326 audit(1736825330.133:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.747293][   T29] audit: type=1326 audit(1736825330.133:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.799173][   T29] audit: type=1326 audit(1736825330.133:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.840718][   T29] audit: type=1326 audit(1736825330.143:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.905177][   T29] audit: type=1326 audit(1736825330.143:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  382.957969][   T29] audit: type=1326 audit(1736825330.143:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  383.025513][   T29] audit: type=1326 audit(1736825330.143:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  383.048684][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.088579][   T29] audit: type=1326 audit(1736825330.143:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd418185d29 code=0x7ffc0000
[  383.146732][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.502508][ T5868] hub 4-1:0.0: activate --> -90
[  383.859983][ T5872] usb 5-1: USB disconnect, device number 40
[  383.877961][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  384.073068][ T5873] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  384.168017][ T5872] cp210x 5-1:0.0: device disconnected
[  384.233146][ T5873] usb 2-1: Using ep0 maxpacket: 8
[  384.251922][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short
[  384.297887][ T5873] usb 2-1: config 2 has an invalid interface number: 242 but max is 0
[  384.348439][ T5873] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  384.408703][ T5873] usb 2-1: config 2 has no interface number 0
[  384.453613][ T5873] usb 2-1: config 2 interface 242 altsetting 250 has an invalid endpoint descriptor of length 2, skipping
[  384.522039][ T5868] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[  384.536548][ T5873] usb 2-1: config 2 interface 242 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  384.594812][ T5873] usb 2-1: config 2 interface 242 has no altsetting 0
[  384.625294][ T5873] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=62.62
[  384.640426][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.656972][ T5873] usb 2-1: Product: syz
[  384.665850][ T5873] usb 2-1: Manufacturer: syz
[  384.676007][ T5873] usb 2-1: SerialNumber: syz
[  384.742616][ T5871] usb 3-1: USB disconnect, device number 30
[  384.923031][ T5873] usb 2-1: selecting invalid altsetting 1
[  384.929016][ T5873] catc 2-1:2.242: Can't set altsetting 1.
[  384.945744][ T5873] catc 2-1:2.242: probe with driver catc failed with error -5
[  384.997742][ T5873] usb 2-1: USB disconnect, device number 33
[  385.155751][ T9390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.200576][ T9390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.264036][ T9390] bond0 (unregistering): Released all slaves
[  385.364186][ T9435] netlink: 'syz.2.952': attribute type 5 has an invalid length.
[  385.535535][ T5871] usb 4-1: USB disconnect, device number 20
[  385.982179][ T9449] FAULT_INJECTION: forcing a failure.
[  385.982179][ T9449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.995490][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.1.955 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  386.006106][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  386.016176][ T9449] Call Trace:
[  386.019453][ T9449]  <TASK>
[  386.022378][ T9449]  dump_stack_lvl+0x16c/0x1f0
[  386.027068][ T9449]  should_fail_ex+0x497/0x5b0
[  386.031766][ T9449]  _copy_from_iter+0x2a1/0x1560
[  386.036637][ T9449]  ? trace_lock_acquire+0x14e/0x1f0
[  386.041852][ T9449]  ? __alloc_skb+0x1fe/0x380
[  386.046447][ T9449]  ? __pfx__copy_from_iter+0x10/0x10
[  386.051733][ T9449]  ? __virt_addr_valid+0x1a4/0x590
[  386.056848][ T9449]  ? __virt_addr_valid+0x5e/0x590
[  386.061868][ T9449]  ? __phys_addr_symbol+0x30/0x80
[  386.066889][ T9449]  ? __check_object_size+0x488/0x710
[  386.072172][ T9449]  netlink_sendmsg+0x813/0xd70
[  386.076948][ T9449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.082240][ T9449]  ____sys_sendmsg+0xaaf/0xc90
[  386.087002][ T9449]  ? copy_msghdr_from_user+0x10b/0x160
[  386.092453][ T9449]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.097745][ T9449]  ___sys_sendmsg+0x135/0x1e0
[  386.102416][ T9449]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.107611][ T9449]  ? __pfx_lock_release+0x10/0x10
[  386.112625][ T9449]  ? trace_lock_acquire+0x14e/0x1f0
[  386.117825][ T9449]  ? __fget_files+0x206/0x3a0
[  386.122498][ T9449]  __sys_sendmsg+0x16e/0x220
[  386.127079][ T9449]  ? __pfx___sys_sendmsg+0x10/0x10
[  386.132201][ T9449]  do_syscall_64+0xcd/0x250
[  386.136707][ T9449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.142596][ T9449] RIP: 0033:0x7fd418185d29
[  386.147000][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.166606][ T9449] RSP: 002b:00007fd418ffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.175011][ T9449] RAX: ffffffffffffffda RBX: 00007fd418375fa0 RCX: 00007fd418185d29
[  386.182974][ T9449] RDX: 0000000000000010 RSI: 0000000020000400 RDI: 0000000000000005
[  386.190934][ T9449] RBP: 00007fd418ffc090 R08: 0000000000000000 R09: 0000000000000000
[  386.198895][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.206851][ T9449] R13: 0000000000000000 R14: 00007fd418375fa0 R15: 00007ffdd59e1cc8
[  386.214819][ T9449]  </TASK>
[  386.651237][ T9457] [U] Eh
[  387.421470][ T5831] Bluetooth: hci0: hardware error 0x04
[  387.472591][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  387.618653][ T9470] syz.1.962[9470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.618723][ T9470] syz.1.962[9470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.630199][ T9470] syz.1.962[9470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  387.794208][ T9475] netlink: 48 bytes leftover after parsing attributes in process `syz.2.964'.
[  387.832597][ T5873] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  387.850536][ T9475] xt_hashlimit: max too large, truncated to 1048576
[  387.891529][ T9480] syz.3.967 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  387.982492][ T5873] usb 5-1: Using ep0 maxpacket: 8
[  387.994295][ T5873] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  388.003686][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.387001][ T9496] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.404698][ T9492] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.454061][ T5873] usb 5-1: Product: syz
[  388.458406][ T5873] usb 5-1: Manufacturer: syz
[  388.463335][ T5873] usb 5-1: SerialNumber: syz
[  388.469661][ T5873] usb 5-1: config 0 descriptor??
[  388.690330][ T5873] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  389.155742][ T9508] random: crng reseeded on system resumption
[  389.932580][ T5873] gspca_sunplus: reg_w_riv err -110
[  389.934906][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  389.937858][ T5873] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  389.962457][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  389.962476][   T29] audit: type=1400 audit(1736825336.903:641): avc:  denied  { read } for  pid=9504 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  392.092646][   T29] audit: type=1400 audit(1736825339.583:642): avc:  denied  { search } for  pid=9523 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.199472][   T29] audit: type=1400 audit(1736825339.633:643): avc:  denied  { read } for  pid=9530 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.242959][ T9531] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  392.505575][   T29] audit: type=1400 audit(1736825339.633:644): avc:  denied  { open } for  pid=9530 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.539680][   T29] audit: type=1400 audit(1736825339.633:645): avc:  denied  { getattr } for  pid=9530 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  392.570519][   T29] audit: type=1400 audit(1736825339.643:646): avc:  denied  { getattr } for  pid=9530 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  392.822582][   T29] audit: type=1400 audit(1736825340.273:647): avc:  denied  { read } for  pid=9535 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  392.845467][   T29] audit: type=1400 audit(1736825340.273:648): avc:  denied  { open } for  pid=9535 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  393.019897][ T5873] usb 5-1: USB disconnect, device number 41
[  393.406052][ T9556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  394.069075][   T29] audit: type=1400 audit(1736825340.873:649): avc:  denied  { write } for  pid=9523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  394.092409][   T29] audit: type=1400 audit(1736825340.873:650): avc:  denied  { add_name } for  pid=9523 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  394.349418][ T9567] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:0
[  395.295892][ T9578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.985'.
[  395.605079][ T9579] xt_hashlimit: max too large, truncated to 1048576
[  395.783870][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  395.783887][   T29] audit: type=1400 audit(1736825343.373:657): avc:  denied  { listen } for  pid=9558 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  395.846516][ T5831] Bluetooth: hci5: hardware error 0x04
[  395.993653][ T9593] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  396.575474][ T5914] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  396.693158][   T29] audit: type=1400 audit(1736825344.283:658): avc:  denied  { module_request } for  pid=9597 comm="syz.3.989" kmod="netdev-wpan3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  396.714822][    C1] vkms_vblank_simulate: vblank timer overrun
[  396.823724][ T5914] usb 5-1: Using ep0 maxpacket: 8
[  396.831230][ T5914] usb 5-1: config 0 has no interfaces?
[  396.846999][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  396.872573][ T5873] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  396.875151][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.906476][ T5914] usb 5-1: config 0 descriptor??
[  397.034005][ T5873] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  397.053653][ T5873] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  397.074007][ T5873] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  397.112626][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.142466][  T969] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  397.156344][ T9595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  397.179214][ T5873] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  397.191391][ T5872] usb 5-1: USB disconnect, device number 42
[  397.292917][  T969] usb 2-1: Using ep0 maxpacket: 8
[  397.306449][  T969] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  397.318179][  T969] usb 2-1: config 0 has no interface number 0
[  397.341878][  T969] usb 2-1: config 0 interface 1 has no altsetting 0
[  397.397141][  T969] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  397.486091][  T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.515772][  T969] usb 2-1: Product: syz
[  397.520076][  T969] usb 2-1: Manufacturer: syz
[  397.648096][  T969] usb 2-1: SerialNumber: syz
[  397.662501][  T969] usb 2-1: config 0 descriptor??
[  397.972839][ T5831] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  398.022164][  T969] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  399.026606][ T9613] xt_ipvs: protocol family 7 not supported
[  399.088425][  T969] usb 2-1: USB disconnect, device number 34
[  399.219980][   T29] audit: type=1400 audit(1736825346.803:659): avc:  denied  { connect } for  pid=9659 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  399.265846][ T9664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.999'.
[  399.386306][ T9666] xt_hashlimit: max too large, truncated to 1048576
[  400.133753][   T29] audit: type=1400 audit(1736825347.723:660): avc:  denied  { getopt } for  pid=9671 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  400.762561][  T969] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  400.907189][   T29] audit: type=1400 audit(1736825348.493:661): avc:  denied  { mount } for  pid=9690 comm="syz.5.1004" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  400.940415][  T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.985663][  T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.012162][   T29] audit: type=1400 audit(1736825348.493:662): avc:  denied  { remount } for  pid=9690 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  401.031931][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.052652][ T5872] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  401.077537][  T969] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00
[  401.090143][   T29] audit: type=1400 audit(1736825348.593:663): avc:  denied  { mounton } for  pid=9690 comm="syz.5.1004" path="/105/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  401.112444][   T29] audit: type=1400 audit(1736825348.643:664): avc:  denied  { unmount } for  pid=7318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  401.127312][  T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.133131][ T5921] usb 6-1: USB disconnect, device number 14
[  401.188586][  T969] usb 3-1: config 0 descriptor??
[  401.212795][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  401.225424][ T5872] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  401.235755][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.247047][ T5872] usb 4-1: config 0 has no interface number 0
[  401.336220][ T9705] xt_CT: You must specify a L4 protocol and not use inversions on it
[  401.996010][ T5872] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  402.006279][ T5872] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  402.019495][ T5872] usb 4-1: config 0 interface 52 has no altsetting 0
[  402.038498][ T5872] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  402.072503][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  402.081881][ T5872] usb 4-1: Product: syz
[  402.086663][ T5872] usb 4-1: SerialNumber: syz
[  402.111144][ T5872] usb 4-1: config 0 descriptor??
[  403.750116][  T969] usbhid 3-1:0.0: can't add hid device: -71
[  403.764260][  T969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  403.786180][  T969] usb 3-1: USB disconnect, device number 31
[  404.130233][ T5872] usb 4-1: Can not set alternate setting to 1, error: -71
[  404.191457][ T5872] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  404.255031][ T9720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1010'.
[  404.319884][ T5872] usb 4-1: USB disconnect, device number 21
[  404.497124][ T9725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1011'.
[  404.531175][   T29] audit: type=1400 audit(1736825352.113:665): avc:  denied  { execmod } for  pid=9730 comm="syz.1.1012" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  404.594722][ T9728] xt_hashlimit: max too large, truncated to 1048576
[  404.670699][ T9726] xt_hashlimit: max too large, truncated to 1048576
[  404.980666][ T9745] xt_CT: You must specify a L4 protocol and not use inversions on it
[  405.515694][ T5872] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  405.674319][ T9752] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  405.793076][ T5872] usb 4-1: Using ep0 maxpacket: 32
[  405.829484][ T5872] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  405.892976][ T5872] usb 4-1: config 0 has no interface number 0
[  406.257251][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  406.268042][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.278859][ T5872] usb 4-1: Product: syz
[  406.286381][ T5872] usb 4-1: Manufacturer: syz
[  406.364802][ T9758] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.904944][ T5872] usb 4-1: SerialNumber: syz
[  406.914934][ T5872] usb 4-1: config 0 descriptor??
[  406.921792][ T5872] smsc95xx v2.0.0
[  407.964863][ T9732] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  408.082604][ T5873] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  408.250047][ T5873] usb 6-1: Using ep0 maxpacket: 32
[  408.268067][ T5873] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  408.538117][ T5873] usb 6-1: config 0 has no interface number 0
[  408.636388][ T9776] overlayfs: failed to resolve './file0': -2
[  408.678236][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32
[  408.692547][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  408.933123][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.941587][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.976107][ T5873] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  409.002927][ T5873] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  409.012044][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.023358][ T5873] usb 6-1: Product: syz
[  409.028036][ T5873] usb 6-1: Manufacturer: syz
[  409.033076][ T5873] usb 6-1: SerialNumber: syz
[  409.045624][ T5873] usb 6-1: config 0 descriptor??
[  409.051521][ T9763] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  409.061293][ T5873] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  409.071130][ T5873] em28xx 6-1:0.132: Video interface 132 found: bulk
[  409.106646][ T5872] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  409.117778][ T5872] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  409.153128][ T5872] usb 4-1: USB disconnect, device number 22
[  409.782458][ T5873] em28xx 6-1:0.132: chip ID is em28174
[  409.890487][ T9795] xt_CT: You must specify a L4 protocol and not use inversions on it
[  410.612507][ T5921] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  410.662317][ T9797] netlink: 'syz.3.1029': attribute type 10 has an invalid length.
[  410.670334][ T9797] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1029'.
[  410.806376][ T5921] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  410.818380][ T5921] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  410.831972][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  410.844992][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.877254][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  410.902846][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  411.526792][ T9804] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1030'.
[  411.555790][ T5873] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  411.564740][ T5873] em28xx 6-1:0.132: board has no eeprom
[  411.633150][ T5873] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  411.641238][ T5873] em28xx 6-1:0.132: analog set to bulk mode.
[  411.653070][ T5869] em28xx 6-1:0.132: Registering V4L2 extension
[  411.670771][ T5873] usb 6-1: USB disconnect, device number 15
[  411.679927][ T5873] em28xx 6-1:0.132: Disconnecting em28xx
[  411.754507][ T9815] xt_hashlimit: max too large, truncated to 1048576
[  411.795610][ T9808] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1031'.
[  412.257493][ T5869] usb 6-1: Decoder not found
[  412.262327][ T5869] em28xx 6-1:0.132: failed to create media graph
[  412.304671][ T5869] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  412.343820][ T5869] em28xx 6-1:0.132: Remote control support is not available for this card.
[  412.363585][ T5873] em28xx 6-1:0.132: Closing input extension
[  412.391153][ T5873] em28xx 6-1:0.132: Freeing device
[  412.563873][ T9821] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  412.595262][ T9821] cramfs: wrong magic
[  412.772001][ T9833] xt_CT: You must specify a L4 protocol and not use inversions on it
[  413.693947][ T9843] xt_CT: You must specify a L4 protocol and not use inversions on it
[  413.758038][ T9840] netlink: 'syz.4.1040': attribute type 10 has an invalid length.
[  413.766532][ T9840] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1040'.
[  413.962702][ T5873] usb 2-1: USB disconnect, device number 35
[  413.997983][ T5921] hid-generic 0000:0003:0000.002F: unknown main item tag 0x0
[  414.014379][ T5921] hid-generic 0000:0003:0000.002F: unknown main item tag 0x0
[  414.037642][ T5921] hid-generic 0000:0003:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  414.133233][ T9853] netdevsim netdevsim1: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  414.144986][ T9853] netdevsim netdevsim1: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  414.190070][ T5921] hid-generic 0000:0003:0000.0030: unknown main item tag 0x0
[  414.200398][ T5921] hid-generic 0000:0003:0000.0030: unknown main item tag 0x0
[  414.219345][ T5921] hid-generic 0000:0003:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  415.235177][ T9861] netdevsim netdevsim3: Direct firmware load for 1GB.usage_in_bytes failed with error -2
[  415.382537][ T9861] netdevsim netdevsim3: Falling back to sysfs fallback for: 1GB.usage_in_bytes
[  416.170696][ T9856] [U] v�3v�3
[  416.448935][ T9887] xt_CT: You must specify a L4 protocol and not use inversions on it
[  416.990917][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[  417.213780][ T9893] FAULT_INJECTION: forcing a failure.
[  417.213780][ T9893] name failslab, interval 1, probability 0, space 0, times 0
[  417.248174][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.2.1054 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  417.258893][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  417.268939][ T9893] Call Trace:
[  417.272198][ T9893]  <TASK>
[  417.275114][ T9893]  dump_stack_lvl+0x16c/0x1f0
[  417.279782][ T9893]  should_fail_ex+0x497/0x5b0
[  417.284450][ T9893]  ? fs_reclaim_acquire+0xae/0x150
[  417.289541][ T9893]  should_failslab+0xc2/0x120
[  417.294218][ T9893]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  417.300029][ T9893]  ? __alloc_skb+0x2b1/0x380
[  417.304621][ T9893]  __alloc_skb+0x2b1/0x380
[  417.309035][ T9893]  ? __pfx___alloc_skb+0x10/0x10
[  417.313967][ T9893]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  417.319938][ T9893]  netlink_alloc_large_skb+0x69/0x130
[  417.325315][ T9893]  netlink_sendmsg+0x689/0xd70
[  417.330083][ T9893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.335362][ T9893]  ____sys_sendmsg+0xaaf/0xc90
[  417.340126][ T9893]  ? copy_msghdr_from_user+0x10b/0x160
[  417.345568][ T9893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  417.350864][ T9893]  ___sys_sendmsg+0x135/0x1e0
[  417.355535][ T9893]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.360721][ T9893]  ? __pfx_lock_release+0x10/0x10
[  417.365728][ T9893]  ? trace_lock_acquire+0x14e/0x1f0
[  417.370929][ T9893]  ? __fget_files+0x206/0x3a0
[  417.375606][ T9893]  __sys_sendmsg+0x16e/0x220
[  417.380188][ T9893]  ? __pfx___sys_sendmsg+0x10/0x10
[  417.385302][ T9893]  do_syscall_64+0xcd/0x250
[  417.389816][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.395713][ T9893] RIP: 0033:0x7f46f4185d29
[  417.400125][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.419732][ T9893] RSP: 002b:00007f46f4fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.428139][ T9893] RAX: ffffffffffffffda RBX: 00007f46f4375fa0 RCX: 00007f46f4185d29
[  417.436103][ T9893] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003
[  417.444061][ T9893] RBP: 00007f46f4fe7090 R08: 0000000000000000 R09: 0000000000000000
[  417.452018][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.459974][ T9893] R13: 0000000000000000 R14: 00007f46f4375fa0 R15: 00007ffe780aee68
[  417.467945][ T9893]  </TASK>
[  418.428584][ T9901] xt_hashlimit: max too large, truncated to 1048576
[  418.657032][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.669325][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.676850][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.732985][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.750733][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.770973][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  418.779717][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.119812][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.127491][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.135220][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.142831][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.150233][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.157867][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.165404][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.180699][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.180703][   T29] audit: type=1400 audit(1736825366.693:666): avc:  denied  { create } for  pid=9904 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  419.196035][   T29] audit: type=1400 audit(1736825366.783:667): avc:  denied  { sys_admin } for  pid=9904 comm="syz.4.1059" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  419.207950][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.207979][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.208002][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.228803][    C1] vkms_vblank_simulate: vblank timer overrun
[  419.286605][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.295751][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.303209][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.310702][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.318385][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.325908][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.333340][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.341236][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.349604][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.358624][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.366273][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.375054][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.382524][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.392638][ T5921] hid-generic 0006:0003:0003.0031: unknown main item tag 0x0
[  419.714238][ T5921] hid-generic 0006:0003:0003.0031: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz0
[  419.782460][ T1201] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  419.980115][ T1201] usb 6-1: config 0 has no interfaces?
[  419.985840][ T1201] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  419.995094][ T5871] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  420.017102][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.053014][ T1201] usb 6-1: config 0 descriptor??
[  420.109296][ T9921] netlink: 'syz.4.1064': attribute type 10 has an invalid length.
[  420.120577][ T9921] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1064'.
[  420.182540][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.213253][ T5871] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  420.250554][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.308182][ T5871] usb 4-1: config 0 descriptor??
[  420.748644][ T5869] usb 6-1: USB disconnect, device number 16
[  420.826855][ T5871] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor
[  420.846099][ T5871] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0032/input/input17
[  420.883446][ T9927] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560516746 (28484133968 ns) > initial count (26428273480 ns). Using initial count to start timer.
[  420.965131][ T5871] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  421.143244][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.165252][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.214114][ T5871] 
[  421.214132][ T5871] ======================================================
[  421.214144][ T5871] WARNING: possible circular locking dependency detected
[  421.214152][ T5871] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted
[  421.214165][ T5871] ------------------------------------------------------
[  421.214172][ T5871] kworker/0:5/5871 is trying to acquire lock:
[  421.214183][ T5871] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310
[  421.214240][ T5871] 
[  421.214240][ T5871] but task is already holding lock:
[  421.214246][ T5871] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310
[  421.214290][ T5871] 
[  421.214290][ T5871] which lock already depends on the new lock.
[  421.214290][ T5871] 
[  421.214299][ T5871] 
[  421.214299][ T5871] the existing dependency chain (in reverse order) is:
[  421.214306][ T5871] 
[  421.214306][ T5871] -> #2 (console_lock){+.+.}-{0:0}:
[  421.214333][ T5871]        console_lock+0x7a/0xa0
[  421.214360][ T5871]        con_flush_chars+0x5e/0x80
[  421.214408][ T5871]        n_tty_receive_buf_common+0xa99/0x1980
[  421.214437][ T5871]        tty_ioctl+0x575/0x15d0
[  421.214455][ T5871]        __x64_sys_ioctl+0x190/0x200
[  421.214483][ T5871]        do_syscall_64+0xcd/0x250
[  421.214512][ T5871]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.214540][ T5871] 
[  421.214540][ T5871] -> #1 (&tty->termios_rwsem){++++}-{4:4}:
[  421.214568][ T5871]        down_write+0x93/0x200
[  421.214595][ T5871]        n_tty_flush_buffer+0x25/0x1b0
[  421.214616][ T5871]        tty_buffer_flush+0x236/0x310
[  421.214634][ T5871]        tty_ldisc_flush+0x64/0xe0
[  421.214656][ T5871]        tty_port_close_start+0x337/0x540
[  421.214671][ T5871]        tty_port_close+0x26/0x160
[  421.214686][ T5871]        tty_release+0x3a8/0x1410
[  421.214700][ T5871]        __fput+0x3f8/0xb60
[  421.214719][ T5871]        task_work_run+0x14e/0x250
[  421.214736][ T5871]        syscall_exit_to_user_mode+0x27b/0x2a0
[  421.214756][ T5871]        do_syscall_64+0xda/0x250
[  421.214775][ T5871]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.214796][ T5871] 
[  421.214796][ T5871] -> #0 (&buf->lock){+.+.}-{4:4}:
[  421.214820][ T5871]        __lock_acquire+0x249e/0x3c40
[  421.214840][ T5871]        lock_acquire.part.0+0x11b/0x380
[  421.214859][ T5871]        __mutex_lock+0x19b/0xa60
[  421.214881][ T5871]        tty_buffer_flush+0x72/0x310
[  421.214896][ T5871]        tty_ldisc_flush+0x64/0xe0
[  421.214919][ T5871]        __do_SAK+0x6a1/0x800
[  421.214935][ T5871]        vc_SAK+0x7f/0x310
[  421.214956][ T5871]        process_one_work+0x9c5/0x1ba0
[  421.214976][ T5871]        worker_thread+0x6c8/0xf00
[  421.214993][ T5871]        kthread+0x2c1/0x3a0
[  421.215014][ T5871]        ret_from_fork+0x45/0x80
[  421.215034][ T5871]        ret_from_fork_asm+0x1a/0x30
[  421.215061][ T5871] 
[  421.215061][ T5871] other info that might help us debug this:
[  421.215061][ T5871] 
[  421.215067][ T5871] Chain exists of:
[  421.215067][ T5871]   &buf->lock --> &tty->termios_rwsem --> console_lock
[  421.215067][ T5871] 
[  421.215096][ T5871]  Possible unsafe locking scenario:
[  421.215096][ T5871] 
[  421.215101][ T5871]        CPU0                    CPU1
[  421.215105][ T5871]        ----                    ----
[  421.215110][ T5871]   lock(console_lock);
[  421.215122][ T5871]                                lock(&tty->termios_rwsem);
[  421.215135][ T5871]                                lock(console_lock);
[  421.215148][ T5871]   lock(&buf->lock);
[  421.215159][ T5871] 
[  421.215159][ T5871]  *** DEADLOCK ***
[  421.215159][ T5871] 
[  421.215163][ T5871] 4 locks held by kworker/0:5/5871:
[  421.215175][ T5871]  #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  421.215219][ T5871]  #1: ffffc90004007d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  421.215265][ T5871]  #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310
[  421.215311][ T5871]  #3: ffff8880122060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0
[  421.215360][ T5871] 
[  421.215360][ T5871] stack backtrace:
[  421.215371][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:5 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  421.215393][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  421.215411][ T5871] Workqueue: events vc_SAK
[  421.215434][ T5871] Call Trace:
[  421.215440][ T5871]  <TASK>
[  421.215448][ T5871]  dump_stack_lvl+0x116/0x1f0
[  421.215475][ T5871]  print_circular_bug+0x419/0x5d0
[  421.215496][ T5871]  check_noncircular+0x31a/0x400
[  421.215516][ T5871]  ? __pfx_check_noncircular+0x10/0x10
[  421.215537][ T5871]  ? lockdep_lock+0xc6/0x200
[  421.215563][ T5871]  ? __pfx_lockdep_lock+0x10/0x10
[  421.215589][ T5871]  __lock_acquire+0x249e/0x3c40
[  421.215613][ T5871]  ? __pfx___lock_acquire+0x10/0x10
[  421.215636][ T5871]  lock_acquire.part.0+0x11b/0x380
[  421.215655][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.215673][ T5871]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  421.215695][ T5871]  ? rcu_is_watching+0x12/0xc0
[  421.215719][ T5871]  ? trace_lock_acquire+0x14e/0x1f0
[  421.215744][ T5871]  ? __pfx___lock_acquire+0x10/0x10
[  421.215763][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.215781][ T5871]  ? lock_acquire+0x2f/0xb0
[  421.215799][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.215817][ T5871]  __mutex_lock+0x19b/0xa60
[  421.215840][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.215858][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.215875][ T5871]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  421.215896][ T5871]  ? __pfx___mutex_lock+0x10/0x10
[  421.215919][ T5871]  ? trace_lock_acquire+0x14e/0x1f0
[  421.215944][ T5871]  ? lock_acquire.part.0+0x11b/0x380
[  421.215963][ T5871]  ? tty_ldisc_flush+0x1c/0xe0
[  421.215989][ T5871]  ? ldsem_down_read_trylock+0x11b/0x180
[  421.216012][ T5871]  ? tty_buffer_flush+0x72/0x310
[  421.216029][ T5871]  tty_buffer_flush+0x72/0x310
[  421.216048][ T5871]  tty_ldisc_flush+0x64/0xe0
[  421.216073][ T5871]  __do_SAK+0x6a1/0x800
[  421.216092][ T5871]  ? lock_acquire+0x2f/0xb0
[  421.216110][ T5871]  ? vc_SAK+0x13/0x310
[  421.216133][ T5871]  vc_SAK+0x7f/0x310
[  421.216154][ T5871]  process_one_work+0x9c5/0x1ba0
[  421.216178][ T5871]  ? __pfx_console_callback+0x10/0x10
[  421.216197][ T5871]  ? __pfx_process_one_work+0x10/0x10
[  421.216216][ T5871]  ? rcu_is_watching+0x12/0xc0
[  421.216242][ T5871]  ? assign_work+0x1a0/0x250
[  421.216261][ T5871]  worker_thread+0x6c8/0xf00
[  421.216283][ T5871]  ? __kthread_parkme+0x148/0x220
[  421.216307][ T5871]  ? __pfx_worker_thread+0x10/0x10
[  421.216326][ T5871]  kthread+0x2c1/0x3a0
[  421.216353][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[  421.216374][ T5871]  ? __pfx_kthread+0x10/0x10
[  421.216397][ T5871]  ret_from_fork+0x45/0x80
[  421.216421][ T5871]  ? __pfx_kthread+0x10/0x10
[  421.216443][ T5871]  ret_from_fork_asm+0x1a/0x30
[  421.216472][ T5871]  </TASK>
[  421.218605][   T29] audit: type=1400 audit(1736825368.803:668): avc:  denied  { shutdown } for  pid=9926 comm="syz.2.1067" laddr=fe80::12 lport=36838 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  421.218621][ T5871] tty tty1: SAK: killed process 8747 (syz.3.757): by fd#3
[  421.606860][ T1201] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  421.687574][ T5914] usb 4-1: USB disconnect, device number 23
[  421.758134][ T1201] usb 5-1: Using ep0 maxpacket: 16
[  421.773924][ T1201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  421.773951][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  421.796424][ T1201] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  421.796454][ T1201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.796477][ T1201] usb 5-1: Product: syz
[  421.796494][ T1201] usb 5-1: Manufacturer: syz
[  421.796511][ T1201] usb 5-1: SerialNumber: syz
[  422.787198][ T1201] usb 5-1: 0:2 : does not exist
[  422.792166][ T1201] usb 5-1: unit 6 not found!
[  422.800309][ T1201] usb 5-1: USB disconnect, device number 43