last executing test programs:

19m6.449108256s ago: executing program 32 (id=578):
socket$nl_generic(0x10, 0x3, 0x10)
iopl(0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
shutdown(0xffffffffffffffff, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
inotify_init1(0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x2, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)

19m4.445668352s ago: executing program 33 (id=591):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1000000}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0)

19m1.245967054s ago: executing program 34 (id=603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(0xffffffffffffffff)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x101040)
ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x569)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200000}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x8800, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x2d)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KDMKTONE(r2, 0x4b30, 0x8a)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000acc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x90f, 0x0, 0x0}, &(0x7f0000000080)=0xffffff9b)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002010103000000000000000000000008060012400000000008e25ae98f13598bb1813ce1da8e0459ba12dfcb73b0733ec61a6c47bdb303c1ec8f0776e6a35017fd2ad02576fa7d912c4dcfb140dd45c1a73f641182c1018676a5a61e9d99647790a55d93e4fe92c4d9cf205e1c7a38951fafb700b21407e402fbfc3ec6b680ed3f7ad78d7364a719d3099304cb7c8402ce3b600468c457d121484a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

18m54.257401753s ago: executing program 35 (id=630):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r3, r2, 0x0, 0x20000023893)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000102900)={0x1, [], 0x8, "a4f4485a2aaf14"})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e0000009553396933224a693b8492d08a7aa2cfdc50102a4192d4c50cecac881faf8a6d50ab9d2058205753fde7e3861edaa6d067effdaa9e772aea3a1738ac0d563d377ef458fd08f4b7668e7843528724e0f413341588974651dbf93a3c437ca9"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000680)="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", &(0x7f00000003c0)=""/98, 0x4}, 0x20)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000200)={@host})

18m46.725757101s ago: executing program 36 (id=641):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r3 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x1)
fsmount(r3, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

17m32.596843516s ago: executing program 37 (id=851):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0x7, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="24963a369025a04fbfc689a35415d63a2eeab823fb95a11eae4b6e5dece663ae5bbe29e3f76f96daa7e5f71c2341715a106a55793e9b0db85965b471f73b4fb09dff010000a4bc5c416e6d4254e998e7c8cd968e1cfb250fa8476fa0afbeb6f09ad513aefc8a01f4e8b17b2ae197c634e155a81b82f32807f1ad09b407843312452325f283be375130b66c8a0000010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='grpquota')
lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
syz_open_dev$swradio(0x0, 0x1, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x2000c050)
syz_open_dev$sndctrl(0x0, 0x4, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

17m27.805474521s ago: executing program 38 (id=927):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
r1 = io_uring_setup(0x7d2e, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0xdf, {0xdf, 0x5, "83bf52af499fe159194ff7eef7d8b642a4842ecd38a1d6e56c40dc63b5d563eb7b28a04967361b1fdc4b55fc6d43634a2d513a4eeccf8fd3c4fae302fb8bac48fc98942987484a6a9a9d19cef2b059f899c3de097aa4c701864f04d1ddabdad2ed63e209e0601871bb0c89da279880e3f033ee010ce5e232636dde95af329ea5639814fce5dce6d7d3131ce23464b73e03d4645e33af82965d820daa8e13f57a937b9ff5efe08d255582bd892cf1acd0c694a00618e9100ff655766d29812f51e1d89d1ccb0a1e2073860663d820f92e26c5cda5451f43859d53c30a6d"}}, &(0x7f0000000180)={0x0, 0x3, 0x58, @string={0x58, 0x3, "104b72f531e2bc5847a1bc57ac508ac5abbe60f9e5be8229fabfd4f2abe83ccf431c0a32cc5a38824eff320ef47c6a989656608cda094905295307ff9b4617bf0a4c333a8643dc229c2135e985094716478fef8d0749"}}, &(0x7f0000000500)={0x0, 0xf, 0x244, {0x5, 0xf, 0x244, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x401, 0xff00, 0x2, [0xff003f]}, @generic={0x101, 0x10, 0xa, "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"}, @generic={0x30, 0x10, 0x2, "9f6358a4fa5246e5f49325e7f150a3076039cfd858de661aaaf20e33f35d748341cc5c6e0eee7a18ecebf44f3c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0xff, 0x0, 0x8}, @generic={0xf3, 0x10, 0x2, "7382f56e4332ee11c74cdfd7d01c680a9e3617ef8fe414cb95ebf387abee74ffb8bb711be951845475a56c6c133fe0eeefecf4e3b5fde3f5c47a301a27899bef2991b352d2eea983408077f48469253424f79b6bba5137335a2acd60f96e66d23550808798e7ef92a65735b2347900ffe83ef7d76133dfa52ffcde0c92a85a883a7dc445703fa4d69b7d5fe19dd5aa75853b6931106074aa9418575fff6663206e26f3b1c18cfda3904d4f7e770a19282e4a8c84f2dca9ff06fc6499332dcd6683b2bfe67a17af4685806c386f488413868c8c6a80e520e7cdf421f32c3c3f6bdaf562f8f7d3419c66a9fc60a432a67f"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0x4, "5fef919a", "e2e4c0d6"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0xfb, 0x5, 0x0, 0x9, 0x1}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x20, 0x9, 0xa0, "e3637a6323edc51821b2d7f9c73d1e720ac6e7825edbd49549a69486d3b4e1c3cb30954c9184da3c44ae724ef56377eea5abd639f7ef77b9183b9761764034883d8cf02056f7c3a953b3c6e49ad843d74612bc3750fe9044bf6aac464948cdb064202f26c73da2b567e51a714f64723271a4dc020337674aba230e4278131a3826d785f996f2c6869a8ef1b930b0fa789548746779054037758361e89b431068"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a57d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="edc0a2d31ded"}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "971c"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x1e, 0x1}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x80}})
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000082341801d5e30806000608000604"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f0000000380)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$getflags(r1, 0x401)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) (async)
io_uring_setup(0x7d2e, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0xdf, {0xdf, 0x5, "83bf52af499fe159194ff7eef7d8b642a4842ecd38a1d6e56c40dc63b5d563eb7b28a04967361b1fdc4b55fc6d43634a2d513a4eeccf8fd3c4fae302fb8bac48fc98942987484a6a9a9d19cef2b059f899c3de097aa4c701864f04d1ddabdad2ed63e209e0601871bb0c89da279880e3f033ee010ce5e232636dde95af329ea5639814fce5dce6d7d3131ce23464b73e03d4645e33af82965d820daa8e13f57a937b9ff5efe08d255582bd892cf1acd0c694a00618e9100ff655766d29812f51e1d89d1ccb0a1e2073860663d820f92e26c5cda5451f43859d53c30a6d"}}, &(0x7f0000000180)={0x0, 0x3, 0x58, @string={0x58, 0x3, "104b72f531e2bc5847a1bc57ac508ac5abbe60f9e5be8229fabfd4f2abe83ccf431c0a32cc5a38824eff320ef47c6a989656608cda094905295307ff9b4617bf0a4c333a8643dc229c2135e985094716478fef8d0749"}}, &(0x7f0000000500)={0x0, 0xf, 0x244, {0x5, 0xf, 0x244, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x401, 0xff00, 0x2, [0xff003f]}, @generic={0x101, 0x10, 0xa, "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"}, @generic={0x30, 0x10, 0x2, "9f6358a4fa5246e5f49325e7f150a3076039cfd858de661aaaf20e33f35d748341cc5c6e0eee7a18ecebf44f3c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x5, 0xff, 0x0, 0x8}, @generic={0xf3, 0x10, 0x2, "7382f56e4332ee11c74cdfd7d01c680a9e3617ef8fe414cb95ebf387abee74ffb8bb711be951845475a56c6c133fe0eeefecf4e3b5fde3f5c47a301a27899bef2991b352d2eea983408077f48469253424f79b6bba5137335a2acd60f96e66d23550808798e7ef92a65735b2347900ffe83ef7d76133dfa52ffcde0c92a85a883a7dc445703fa4d69b7d5fe19dd5aa75853b6931106074aa9418575fff6663206e26f3b1c18cfda3904d4f7e770a19282e4a8c84f2dca9ff06fc6499332dcd6683b2bfe67a17af4685806c386f488413868c8c6a80e520e7cdf421f32c3c3f6bdaf562f8f7d3419c66a9fc60a432a67f"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x5, 0x4, "5fef919a", "e2e4c0d6"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0xfb, 0x5, 0x0, 0x9, 0x1}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x20, 0x9, 0xa0, "e3637a6323edc51821b2d7f9c73d1e720ac6e7825edbd49549a69486d3b4e1c3cb30954c9184da3c44ae724ef56377eea5abd639f7ef77b9183b9761764034883d8cf02056f7c3a953b3c6e49ad843d74612bc3750fe9044bf6aac464948cdb064202f26c73da2b567e51a714f64723271a4dc020337674aba230e4278131a3826d785f996f2c6869a8ef1b930b0fa789548746779054037758361e89b431068"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a57d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @random="edc0a2d31ded"}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "971c"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x1e, 0x1}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x80}}) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000082341801d5e30806000608000604"], 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f0000000380)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
fcntl$getflags(r1, 0x401) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

15m28.94598595s ago: executing program 4 (id=1315):
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)}, 0x9fc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0x2, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x5, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0x4a1d, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0xfffffffe, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x1, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x1, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x9, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0xfffffff2, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x44d9, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xb, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88c}}, 0x0)

15m27.404525799s ago: executing program 4 (id=1319):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

15m26.496185456s ago: executing program 4 (id=1321):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async, rerun: 32)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, <r1=>0xffffffffffffffff})
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), 0x4) (async, rerun: 64)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64)
socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000002ac0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f00000005c0)=""/4085, 0xff5}, {&(0x7f00000015c0)=""/130, 0x82}, {&(0x7f0000000240)=""/38, 0x26}], 0x6, &(0x7f0000002b40)=""/4110, 0x100e}, 0x5}, {{&(0x7f0000002700)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000002780)=""/158, 0x9e}, {&(0x7f0000002840)=""/100, 0x64}, {&(0x7f00000028c0)=""/25, 0x19}, {&(0x7f0000002900)=""/208, 0xd0}, {&(0x7f0000001700)=""/17, 0x11}, {&(0x7f0000001740)=""/232, 0xe8}], 0x6, &(0x7f0000002a40)=""/68, 0x44}, 0x80000081}], 0x2, 0x2, 0x0) (async)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async, rerun: 64)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
open(&(0x7f0000000100)='./bus\x00', 0x1d2240, 0x8)
ioctl$int_in(r4, 0x5421, &(0x7f00000018c0)=0x8000) (async)
mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x18, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x54}}, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

15m25.506359449s ago: executing program 4 (id=1325):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000800)={0x0, "58d689c7d67093a30f8f4e48db9b2e55"})
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
shutdown(r4, 0x1)

15m24.295735097s ago: executing program 4 (id=1329):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000a775000100000008000100020000000c00048005000300060000000003000000"], 0x30}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0120800", @ANYRES16=r3, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002100290100000400ffdbdf250a00000000000000000000000800180006000000"], 0x38}}, 0x0)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4)
dup2(r6, r6)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={'\x00', 0x0, 0x7fff, 0x67})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10)
socket(0x15, 0x80000, 0x1)

15m24.046544062s ago: executing program 4 (id=1332):
creat(&(0x7f00000004c0)='./bus\x00', 0x40)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="06"], 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000001c0)=""/165, &(0x7f0000000280)=""/180, &(0x7f0000000340)=""/250, 0xffff1000})
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0)
msgrcv(r2, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0)

15m8.670337425s ago: executing program 39 (id=1332):
creat(&(0x7f00000004c0)='./bus\x00', 0x40)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="06"], 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000001c0)=""/165, &(0x7f0000000280)=""/180, &(0x7f0000000340)=""/250, 0xffff1000})
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0)
msgrcv(r2, &(0x7f00000000c0)={0x0, ""/235}, 0xf3, 0x3, 0x0)

15m4.500131428s ago: executing program 0 (id=1433):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

15m3.895007882s ago: executing program 0 (id=1436):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
symlinkat(0x0, r0, &(0x7f0000000280)='./file0\x00')
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000263110c00000000008510000008000000850000183400000300000000000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x9, 0x2, @thr={&(0x7f0000000040), &(0x7f00000001c0)="9819994fcd33cb"}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x18000, 0x0, 0x3000, 0x2000, &(0x7f0000059000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
timer_create(0xb4d1097adfda5ca1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="66baf80cb8c070ea8eef66bafc0ced0f01c566b878008ec866b820010f00d065460f38058d4b74000066460fc7342166baf80cb8e0592d8aef66bafc0cec0f300f7899e74c4f7566450f38815600", 0x4e}], 0x1, 0x20, &(0x7f0000000180)=[@cr4={0x1, 0x100}, @cstype3={0x5, 0x2}], 0x2)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

15m1.767098088s ago: executing program 0 (id=1441):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r5, 0x36, 0x0, @void}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x46, &(0x7f0000000340)=0x41, 0x4)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000001300)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "14f35c", 0x44, 0x2f, 0xff, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xa1, 0x1, 0x0, 0x2, 0x4, 0x6}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x4, {{0xd, 0x2, 0x1, 0x0, 0x1, 0x3, 0x5, 0xc}, 0x2, {0x80000000, 0x1, 0x2, 0x1b, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}}, 0x7e)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

15m0.772572242s ago: executing program 0 (id=1443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(r1, &(0x7f0000000300)='./file1\x00', 0x400, 0x41, &(0x7f00000003c0))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xc1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180))
capset(0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c00009a", @ANYRES16=r8, @ANYBLOB="000200000000000000003b00000008000300", @ANYRES32, @ANYBLOB="5800330050000000080211000000ffffffffffff5050505050500000fcffffffffffffff6400000000060101010101010406000000000000060209002d1a02000000000000000000009000000000000000000000000000000800260064140000"], 0x7c}}, 0x80)

14m57.3499655s ago: executing program 0 (id=1454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
chdir(0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

14m56.630124865s ago: executing program 0 (id=1455):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x700)

14m55.839087343s ago: executing program 3 (id=1456):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x6e20, 0x3, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="b34e5368ba3d5ed2f751cc7d2f94816adbe277be09b652a1d0424866ec165788aebae650e5ef29c45b6a3d9c1d2ba86ec1854276f6c7c5e73206983f180db08fa9a6e8e485717956afe63d1086af66c4040341d3c4c68c70d0e6e0d93ef5d07c0acf1fd238350c04c190ebb77def8101a6798df327a51c9839c5955ea05310e0488faac65532b706a70f19cdaeef65f21676af93ac481122df7005a7c10e98c702d5cfec71398e8e72aa195f245c74f1342712ec9a", 0xb5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001bc0)={0x2020}, 0x2020)
r3 = eventfd2(0x800, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000001c0)={0x3, r3})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)

14m54.66209135s ago: executing program 3 (id=1459):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x5c}}, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x418000)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100), 0x4)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_wakeup_irq', 0x101080, 0x100)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="302db8df41fbc3", 0x7}], 0x1, 0x0, 0x0, 0x10000000}, 0x2000d248)
syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[@ANYRES8=r4], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)

14m51.203217403s ago: executing program 3 (id=1471):
r0 = socket(0x18, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0/../file0/../file0/file0\x00', 0x0, 0x11000, 0x0)
chroot(&(0x7f0000000300)='./file0\x00')
chdir(&(0x7f0000000040)='./file0\x00')
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1)

14m51.118436455s ago: executing program 3 (id=1473):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28)
write$binfmt_script(r3, &(0x7f0000001300), 0x8f)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40)
writev(r3, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x270bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x4040800)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/disk', 0xc3a01, 0x0)
sendfile(r9, r0, &(0x7f0000002700)=0x1, 0x8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)

14m50.705131497s ago: executing program 3 (id=1476):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
chdir(0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

14m50.443312657s ago: executing program 3 (id=1482):
syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/100, 0x64}], 0x1, 0x6, 0x10001)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8010)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x10002, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

14m48.443831295s ago: executing program 1 (id=1489):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000000)

14m48.371339819s ago: executing program 1 (id=1491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x72d, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8890)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r7, 0x0, 0x0, 0x0, 0x2, 0x4096b, 0x200000000000, 0xffffffffffffff7b})

14m47.391147067s ago: executing program 1 (id=1495):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x222041, 0x0)
close(r0)
r1 = socket(0x1d, 0x2, 0x6)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x4004)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000200)={{r0}, 0x2, 0x6, 0x8})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0)

14m46.006757682s ago: executing program 1 (id=1500):
pipe2$watch_queue(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x80)
close_range(r0, r0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x2, 0xdaac)
tkill(0x0, 0x12)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x20000000000000b6, &(0x7f0000001b40)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d)
write$binfmt_script(r6, &(0x7f0000001b00), 0xfffffd9d)
write$FUSE_INIT(r6, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10810020, 0x9, 0x4, 0xffff856e, 0x9, 0x0, 0x0, 0x8, 0x7}}, 0x50)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r4, r7, 0x0, 0x1000000003fffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x3d0, 0x30, 0x4, 0x70bd2b, 0x0, {0x9}, [{0x3bc, 0x1, [@m_xt={0x3b8, 0x2, 0x0, 0x0, {{0x7}, {0x2c0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x119, 0x6, {0xc5, 'nat\x00', 0x0, 0x4f9a, "9246d6118bcb7d6799e871f5cafd4a2d53bc7ebb224f82807c8ce311d9753cf42212898711276cad4aaf7eda9c80e9b8241e239f613e09db7f5c388d0b5e72e951c65a79d9f9497fe17fa6d365ee6a2437e054d82359903f307df5926867b29c5f0edbdcbffdd7753b2583a1d212f92e7d6931588ebad1764aab075a5d09cdb76deec060b56ebe33ff045fdc2a60bdd8e4e18756dede49d78d39f462297c6460d7dbbcd8260d6ba8719285ecf48c731cbf0c4ac05a5f9c2355de610396dbfaf5edafd7f4e2ef90437db41b92cc80b096dbe2bf84aab9ba2da325c25ee5a6cdbfa193686049c08ac4b4f022885ddf8c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xbc}, @TCA_IPT_INDEX={0x8, 0x3, 0xe0}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x126, 0x6, {0x81, 'mangle\x00', 0x2, 0x1a0, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xd4, 0x6, "70b1504b33353b77b88fbc1688317f719be80b82176a960ca76f9b8aec867cc7d6487cf051f5eea02714f7ff8ccc0e9bf1c23e4865d3c73cdde037320120d77062e677310644a0339840afb857c0fd71c88c12db1c658e3c07225ee6e17adbb1f2cf80124638dd8509e90906c846a0b0899d6fd4a027bf96290cc8362b1e135eee368f4fefb0405227cc719e5615a0fac4c81a2b81a384218b46a32efa0122f3c27c23d4e815bf4ca3ae423e0e1a3d2df6a7dc8e916908ceb9ffc0f5fda91d02e76cd0149d17a6fd5ef64709e9a682f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}]}, 0x3d0}}, 0x0)

14m45.714256061s ago: executing program 6 (id=1501):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)

14m45.619351177s ago: executing program 1 (id=1503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(0x0, 0x0, 0x0)

14m45.555289193s ago: executing program 1 (id=1504):
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)}, 0x9fc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0x2, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x5, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0x4a1d, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0xfffffffe, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x1, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x1, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x9, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0xfffffff2, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x44d9, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xb, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88c}}, 0x0)

14m45.454697238s ago: executing program 6 (id=1507):
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)}, 0x9fc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0x2, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x5, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0x4a1d, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0xfffffffe, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x1, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x1, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x9, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0xfffffff2, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x44d9, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xb, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88c}}, 0x0)

14m45.02395846s ago: executing program 6 (id=1509):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r0 = getpid()
prlimit64(r0, 0x0, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbf8, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c010}, 0x20040050)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0xc629, 0x81, 0x62c, 0x2}, 0xffffffffffffffe9)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04002920"], 0x7)

14m44.867229492s ago: executing program 6 (id=1511):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020)
mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00007ce000/0x2000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc34d, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200000, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

14m43.89924034s ago: executing program 6 (id=1514):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
open(0x0, 0x0, 0x0)

14m43.87100051s ago: executing program 6 (id=1515):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x3, 0xd, "6b05902bd4c4240fada8662506"}, 0x0, 0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r3, r3, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

14m41.064741527s ago: executing program 40 (id=1455):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x700)

14m34.999531669s ago: executing program 41 (id=1482):
syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/100, 0x64}], 0x1, 0x6, 0x10001)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x8010)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x10002, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

14m30.286211129s ago: executing program 42 (id=1504):
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639)
readv(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)}, 0x9fc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0x2, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x5, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0x4a1d, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0xfffffffe, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x1, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x1, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x9, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0xfffffff2, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x44d9, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xb, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88c}}, 0x0)

14m28.818052845s ago: executing program 43 (id=1515):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x3, 0xd, "6b05902bd4c4240fada8662506"}, 0x0, 0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r3, r3, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

11.883644747s ago: executing program 5 (id=5027):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f0000000a40)="3f031c000302140006001e00890033072580000000000000800188a807008100000088a800ff", 0x26, 0x20040895, &(0x7f0000000180)={0xc9, 0x8100, r2, 0x1, 0x8, 0x6, @multicast}, 0x14)

11.039042596s ago: executing program 5 (id=5030):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704000000000000850000001600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r3=>0x0, 0x2, 0x7, 0x8, 0xd37, 0x12, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x1, 0xfffffffd, 0x9}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x3a, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4018004}, 0x20000081)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)

10.547769018s ago: executing program 5 (id=5034):
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a02369101020301090224000100", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='sou2ce', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0)
io_uring_setup(0x4f51, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x3)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000))
close_range(r0, 0xffffffffffffffff, 0x0)

8.395034784s ago: executing program 7 (id=5043):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x644d00, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r3)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x203, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}]}, 0x2c}}, 0x20000840)
ioctl$TCXONC(r1, 0x540a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x1, "60b55241"}]}}, 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000000c0))

8.347404026s ago: executing program 2 (id=5044):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 32)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
eventfd(0x5)

7.901381684s ago: executing program 2 (id=5047):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x20)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)

6.605929808s ago: executing program 9 (id=5050):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x80000)
write$P9_RREADDIR(r7, 0x0, 0x0)
close(0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000080))

6.579627052s ago: executing program 5 (id=5051):
r0 = syz_open_dev$sg(0x0, 0x8, 0x20500)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpid()
r1 = syz_io_uring_setup(0x3c08, &(0x7f0000000340)={0x0, 0xe9c4, 0x400, 0x1, 0x3}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x3a32eb15c0079da3, 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x1000, 0x0)
utime(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x4, 0x7fffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)

5.85630954s ago: executing program 8 (id=5055):
socket$nl_generic(0x10, 0x3, 0x10)
iopl(0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
inotify_init1(0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x2, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (fail_nth: 1)

5.846822495s ago: executing program 2 (id=5056):
socket$nl_generic(0x10, 0x3, 0x10)
iopl(0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
epoll_create1(0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create(0x10000e9)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)

4.982473419s ago: executing program 9 (id=5057):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007"], 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4fed0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

4.926994782s ago: executing program 7 (id=5058):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0xe}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000b, 0x810, r0, 0x869d4000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8000, 0x8, 0x2}, 0x10)

4.917976539s ago: executing program 8 (id=5059):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff09, &(0x7f00000002c0)=0x4)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x7)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x8, <r8=>0x0}, 0x8)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
lseek(r5, 0xc6c3, 0x0)
r10 = add_key(0x0, 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f73", 0x93, 0x0)
add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r10)
socket$inet6_sctp(0xa, 0x5, 0x84)
set_mempolicy(0x1, &(0x7f0000000180)=0x6c0d05c5, 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

4.141600558s ago: executing program 7 (id=5060):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000, 0x1}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, &(0x7f0000000000))
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2717], 0xa9d)
r8 = socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r8, 0x0, 0x0, 0xff17, 0x967edc702e4a7286, 0x1})
io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @multicast2, 0x4621, 0x3, 'lc\x00', 0x15, 0x4, 0x6f}, {@loopback, 0x4e23, 0x2000, 0xcd, 0x12d5f, 0x3}}, 0x44)
socket$inet(0x2b, 0x801, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d80000800034000000001"], 0xf0}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002dbd6d00fbdbdf254340000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x40000)

4.125849945s ago: executing program 9 (id=5061):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x100, 0x80042)
ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000500))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000004c0)={0x1, 0x5, 0x1, 0x0, 0x2, 0x5}, 0xc)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100))
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xfffffffffffffed8, r4, 0x200, 0x70bd2c, 0x25dfdbff}, 0x28}, 0x1, 0x0, 0x0, 0x4c820}, 0x240480c2)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000ffdbdf2501000000040007800c00030008000000000000000c0002000300050000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

3.29093598s ago: executing program 8 (id=5062):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$video4linux(&(0x7f0000001380), 0x20000000000000, 0x0)
socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x200000000000, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@local, 0x8, 0x0, 0x3, 0x3, 0x4, 0x8}, 0x20)
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.297851155s ago: executing program 9 (id=5063):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000f0003000040"])
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b)
sched_setattr(0x0, 0x0, 0x0)
getpid()
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x0, @dev, 0x9}, 0x80, 0x0}, 0x200ce0c0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x58}, 0x0)

2.293663903s ago: executing program 7 (id=5064):
mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x3c1c, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x22, 0xe, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
io_uring_enter(r2, 0x5b43, 0x0, 0x20, 0x0, 0x0)
io_setup(0x9, &(0x7f0000000080)=<r6=>0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x8f)
r8 = epoll_create1(0x0)
io_submit(r6, 0x2, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, r8, 0x0, 0x0, 0x23, 0x0, 0x2}])
close_range(r0, 0xffffffffffffffff, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x0)
r10 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x5065, 0x800, 0x0, 0x99})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_register$IORING_REGISTER_RING_FDS(r10, 0x14, &(0x7f0000001780), 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xa842f8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.059947975s ago: executing program 5 (id=5065):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socket(0x1d, 0x2, 0x6)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc)

2.054214432s ago: executing program 8 (id=5066):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000003dc0)=""/4108, 0x100c}, {&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f00000000c0)=""/35, 0x23}], 0x3, &(0x7f0000000700)=""/240, 0xf0}, 0x2}, {{&(0x7f0000000500)=@in6, 0x80, &(0x7f0000000400)=[{&(0x7f0000000800)=""/99, 0x63}], 0x1, &(0x7f0000000880)=""/217, 0xd9}, 0x6}, {{&(0x7f0000000980)=@ax25={{0x3, @bcast}, [@default, @default, @rose, @bcast, @null, @netrom, @remote, @bcast]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000e80)=""/144, 0x90}, {&(0x7f0000000ac0)=""/241, 0xf1}], 0x2, &(0x7f0000000bc0)=""/174, 0xae}, 0x9}], 0x3, 0x2001, &(0x7f0000000e00)={0x77359400})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
setsockopt$inet_dccp_int(r2, 0x21, 0x55db11492bf10664, &(0x7f0000000e40)=0xffff7fff, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESOCT])
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, &(0x7f00000001c0)=@x86={0xff, 0x0, 0x9, 0x0, 0xffff, 0x1, 0xfe, 0x2, 0x4, 0x10, 0x2, 0x4, 0x0, 0xac26, 0x9, 0x7, 0x0, 0x4, 0x9, '\x00', 0x4b, 0x100000001})
ioctl$KVM_SET_GUEST_DEBUG(r13, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd]})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)

1.862992696s ago: executing program 8 (id=5067):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x80000)
write$P9_RREADDIR(r7, 0x0, 0x0)
close(0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000080))

1.862169979s ago: executing program 2 (id=5068):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x8, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)}, 0x0)
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x82fc, 0xc8081)
ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001340)=""/4108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x400)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0)

1.231996394s ago: executing program 7 (id=5069):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x8, 0xae, &(0x7f0000000140)=""/174, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400af8a7a40f6074a", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32)
r7 = socket$inet6(0xa, 0x805, 0x0) (rerun: 32)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) (async)
getsockopt$bt_hci(r7, 0x84, 0x7b, 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async)
connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x0, @hyper}, 0x10) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async)
mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) (async, rerun: 64)
renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x2) (rerun: 64)

1.039829848s ago: executing program 5 (id=5070):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000e000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
fsopen(0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x880, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0xffffffffffff4acf, 0x8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
sendfile(r6, r5, &(0x7f0000000240)=0x8e, 0x6)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f00000007c0)=""/4096)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x8aba, 0x4, 0x200004, 0x804, 0x8, 0xf, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0xfd, 0x6, 0x1], 0xffff1000, 0x141200})
r9 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd2e, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x8}, {0xc, 0x1}, {0x0, 0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0xa, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xff, 0xffff, 0x7, 0x2, 0xdf08, 0x254000}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c818}, 0x8004)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)

1.034646007s ago: executing program 9 (id=5071):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x10403)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040))
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)

982.968148ms ago: executing program 7 (id=5072):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getpeername$inet(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

885.115778ms ago: executing program 8 (id=5073):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x703d2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x15, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000007000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000007300)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000072c0)={&(0x7f0000007040)={0x27c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x607db6b6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x1777}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x7fff}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x800}, 0x4004001)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004b00)=<r2=>0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000402)
utime(&(0x7f0000000340)='./file0\x00', 0x0)
lseek(r3, 0x0, 0x3)
syz_clone3(&(0x7f0000005d00)={0xa00000, &(0x7f0000004b40), &(0x7f0000004b80), &(0x7f0000004bc0)=<r4=>0x0, {0x36}, &(0x7f0000004c00)=""/135, 0x87, &(0x7f0000004cc0)=""/4096, &(0x7f0000005cc0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r5, 0x6, &(0x7f0000000140)={0x9, 0x87}, 0x0)
r6 = syz_clone(0x1000000, &(0x7f0000005dc0)="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", 0x1000, &(0x7f0000006dc0), &(0x7f0000006e00), &(0x7f0000006e40)="9a8ee00749ec3624866dfccb75a9d9a89e720ea6d3d5b6d57a742e2c1954d7ea89fd3edb0101a24f7e65e77adcbbb70aab080248b88a41506cd45dca6e0ed7935d7f370047b5fe43c9f4a7872da0838f1671aad3e6aa9d60fdbcb7861ce17c01a972b3a6adf6e7f8c63d52ebceb08c5e5e87af1974359fc8d52fc62d66c1fd65e93975a03c1210f95ed5a3")
syz_clone3(&(0x7f0000006f40)={0x20000, &(0x7f0000004900), &(0x7f0000004940), &(0x7f0000004980), {0x2b}, &(0x7f00000049c0)=""/248, 0xf8, &(0x7f0000004ac0)=""/25, &(0x7f0000006f00)=[r2, r4, r5, 0xffffffffffffffff, 0x0, r6], 0x6}, 0x58)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000003500)={<r10=>0x0, 0x8, 0x8, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000003900)={r10, "15f5e899061bbd28197ef4b7f6380c58"})
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r12=>r9}, './file0\x00'})
preadv(r12, &(0x7f0000003480)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/202, 0xca}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f00000033c0)=""/148, 0x94}], 0x8, 0x3, 0x950c)
sendfile(r11, r9, &(0x7f00000000c0)=0x58, 0x5)

816.875026ms ago: executing program 2 (id=5074):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0xa2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1000, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
waitid(0x2, r3, 0x0, 0x80000000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0})
fsopen(0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x125342, 0x8)
write$tcp_mem(r7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18)
write$cgroup_int(r7, &(0x7f00000002c0)=0x1, 0x12)

710.844804ms ago: executing program 9 (id=5075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=<r2=>0x0, &(0x7f0000001340)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x102, 0x1})
io_uring_enter(r1, 0x415, 0xbebe, 0xa, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, &(0x7f0000000080))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r7 = fcntl$dupfd(r6, 0x0, r6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendmsg$inet6(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

0s ago: executing program 2 (id=5076):
r0 = syz_open_dev$sg(0x0, 0x8, 0x20500)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpid()
r1 = syz_io_uring_setup(0x3c08, &(0x7f0000000340)={0x0, 0xe9c4, 0x400, 0x1, 0x3}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x3a32eb15c0079da3, 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x1000, 0x0)
utime(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x4, 0x7fffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6)

kernel console output (not intermixed with test programs):

Q 0x0 after dequeue, screwing up backlog
[ 1250.626696][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1250.645165][   T29] audit: type=1326 audit(2000000044.990:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1250.701992][   T29] audit: type=1326 audit(2000000044.990:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1250.803598][   T29] audit: type=1326 audit(2000000044.990:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1250.923040][ T6094] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1250.930532][   T29] audit: type=1326 audit(2000000044.990:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1250.962936][ T6094] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.007882][ T6094] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1251.072618][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1251.121157][ T6094] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.185019][   T29] audit: type=1326 audit(2000000044.990:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.210778][ T6094] usb 8-1: config 0 descriptor??
[ 1251.467832][   T29] audit: type=1326 audit(2000000045.000:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.557207][   T29] audit: type=1326 audit(2000000045.000:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.557245][   T29] audit: type=1326 audit(2000000045.000:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.557276][   T29] audit: type=1326 audit(2000000045.000:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.557307][   T29] audit: type=1326 audit(2000000045.000:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22327 comm="syz.9.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1251.681088][ T6094] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[ 1251.690176][T22336] trusted_key: encrypted_key: hex blob is missing
[ 1251.743614][ T6094] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected
[ 1251.751256][ T6094] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[ 1251.955952][ T5870] usb 8-1: USB disconnect, device number 54
[ 1251.970793][ T5870] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected
[ 1252.102509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1252.353166][ T5830] Bluetooth: hci0: command 0x1407 tx timeout
[ 1252.383176][ T5829] Bluetooth: hci0: Opcode 0x1407 failed: -110
[ 1253.142867][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1253.937278][ T6094] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1254.112788][ T6094] usb 6-1: Using ep0 maxpacket: 16
[ 1254.136290][ T6094] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1254.182696][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1254.209931][ T6094] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1254.279674][ T5870] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1254.286719][ T6094] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1254.442686][ T6094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.463086][ T5870] usb 9-1: device descriptor read/64, error -71
[ 1254.470134][ T6094] usb 6-1: config 0 descriptor??
[ 1254.546239][T22373] CIFS: Unable to determine destination address
[ 1254.777964][ T5870] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1254.954155][ T5870] usb 9-1: device descriptor read/64, error -71
[ 1254.996062][T22380] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0
[ 1255.045777][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4570'.
[ 1255.106304][ T5870] usb usb9-port1: attempt power cycle
[ 1255.126460][T22375] nbd7: detected capacity change from 0 to 18
[ 1255.222631][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1255.255269][T22383] nbd7: detected capacity change from 18 to 67108884
[ 1255.463172][ T5870] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1255.493738][ T5870] usb 9-1: device descriptor read/8, error -71
[ 1255.743222][ T5870] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1255.805625][ T5870] usb 9-1: device descriptor read/8, error -71
[ 1255.842168][T22375] block nbd7: shutting down sockets
[ 1255.872151][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[ 1255.947048][ T5870] usb usb9-port1: unable to enumerate USB device
[ 1256.024084][T21709] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1256.272503][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1256.503253][T21709] usb 3-1: Using ep0 maxpacket: 8
[ 1256.509924][T21709] usb 3-1: config 1 interface 0 altsetting 165 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1256.521702][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1256.530580][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1256.547594][T21709] usb 3-1: config 1 interface 0 altsetting 165 bulk endpoint 0x3 has invalid maxpacket 32
[ 1256.589316][T21709] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1256.607313][T21709] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1256.627139][T21709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.643468][    T8] usb 6-1: USB disconnect, device number 34
[ 1256.650494][T21709] usb 3-1: Product: syz
[ 1256.659665][T21709] usb 3-1: Manufacturer: syz
[ 1256.667338][T21709] usb 3-1: SerialNumber: syz
[ 1256.684877][T22395] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1256.692118][T22395] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1256.748792][T22405] FAULT_INJECTION: forcing a failure.
[ 1256.748792][T22405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1256.765882][T22405] CPU: 0 UID: 0 PID: 22405 Comm: syz.5.4576 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1256.765900][T22405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1256.765907][T22405] Call Trace:
[ 1256.765911][T22405]  <TASK>
[ 1256.765915][T22405]  dump_stack_lvl+0x16c/0x1f0
[ 1256.765935][T22405]  should_fail_ex+0x50a/0x650
[ 1256.765956][T22405]  _copy_from_user+0x2e/0xd0
[ 1256.765967][T22405]  do_ip_setsockopt+0x21fa/0x3680
[ 1256.765984][T22405]  ? hlock_class+0x4e/0x130
[ 1256.765997][T22405]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1256.766012][T22405]  ? sock_has_perm+0x25a/0x2f0
[ 1256.766025][T22405]  ? __pfx_sock_has_perm+0x10/0x10
[ 1256.766036][T22405]  ? selinux_netlbl_socket_setsockopt+0x184/0x470
[ 1256.766052][T22405]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[ 1256.766070][T22405]  ip_setsockopt+0x59/0xf0
[ 1256.766086][T22405]  udp_setsockopt+0x7d/0xd0
[ 1256.766100][T22405]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1256.766117][T22405]  do_sock_setsockopt+0x222/0x480
[ 1256.766133][T22405]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 1256.766150][T22405]  ? lock_acquire+0x2f/0xb0
[ 1256.766171][T22405]  __sys_setsockopt+0x1a0/0x230
[ 1256.766187][T22405]  __x64_sys_setsockopt+0xbd/0x160
[ 1256.766200][T22405]  ? do_syscall_64+0x91/0x250
[ 1256.766211][T22405]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1256.766223][T22405]  do_syscall_64+0xcd/0x250
[ 1256.766236][T22405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1256.766250][T22405] RIP: 0033:0x7f1abfb8d0a9
[ 1256.766259][T22405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1256.766269][T22405] RSP: 002b:00007f1abd9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1256.766279][T22405] RAX: ffffffffffffffda RBX: 00007f1abfda5fa0 RCX: 00007f1abfb8d0a9
[ 1256.766285][T22405] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000003
[ 1256.766291][T22405] RBP: 00007f1abd9f6090 R08: 000000000000000c R09: 0000000000000000
[ 1256.766297][T22405] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001
[ 1256.766302][T22405] R13: 0000000000000000 R14: 00007f1abfda5fa0 R15: 00007ffd6a30c3b8
[ 1256.766315][T22405]  </TASK>
[ 1256.979696][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1257.199601][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1257.235297][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1257.256530][T21709] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[ 1257.312637][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1257.320690][T21709] usb 3-1: USB disconnect, device number 41
[ 1257.338337][T22414] tmpfs: Unknown parameter 'func'
[ 1257.868997][T22415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4578'.
[ 1257.898282][   T29] kauditd_printk_skb: 17 callbacks suppressed
[ 1257.898367][   T29] audit: type=1400 audit(2000000052.530:1855): avc:  denied  { execute } for  pid=22412 comm="syz.7.4578" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=79820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1258.079563][T22424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4582'.
[ 1258.114594][   T29] audit: type=1400 audit(2000000052.720:1856): avc:  denied  { bind } for  pid=22423 comm="syz.7.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1258.352523][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1259.382517][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1260.012652][T20535] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1260.125920][   T29] audit: type=1400 audit(2000000054.760:1857): avc:  denied  { bind } for  pid=22448 comm="syz.7.4590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1260.293482][T20535] usb 6-1: Using ep0 maxpacket: 16
[ 1260.354041][T20535] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1260.373816][T20535] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1260.422741][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1260.435758][T20535] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1260.453054][T20535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.462165][T20535] usb 6-1: Product: syz
[ 1260.467404][T20535] usb 6-1: Manufacturer: syz
[ 1260.472989][T20535] usb 6-1: SerialNumber: syz
[ 1261.112952][   T29] audit: type=1400 audit(2000000055.740:1858): avc:  denied  { read } for  pid=22458 comm="syz.2.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1261.463194][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1261.481270][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4592'.
[ 1261.504110][T22466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1261.833209][T22463] input: syz0 as /devices/virtual/input/input60
[ 1262.111949][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1262.120862][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1262.512536][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1263.382013][T20535] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1263.442963][T20535] usb 6-1: USB disconnect, device number 35
[ 1263.461491][T22487] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4597'.
[ 1264.031637][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1264.097665][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4599'.
[ 1264.105248][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.133645][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.145454][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.157532][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.169108][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.181143][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.194127][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.205783][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.216498][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.227224][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.238879][T22496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1264.250687][T22496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1264.533295][ T5870] usb 10-1: new full-speed USB device number 56 using dummy_hcd
[ 1264.632786][ T5827] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1264.864454][ T5827] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1264.892990][ T5870] usb 10-1: config 0 has an invalid interface number: 133 but max is 0
[ 1264.901286][ T5870] usb 10-1: config 0 has no interface number 0
[ 1264.901946][ T5827] usb 6-1: config 1 interface 0 has no altsetting 1
[ 1264.929232][ T5827] usb 6-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[ 1264.932312][ T5870] usb 10-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1264.969389][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.997854][ T5827] usb 6-1: Product: syz
[ 1265.006745][ T5870] usb 10-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1265.010868][ T5827] usb 6-1: Manufacturer: syz
[ 1265.027791][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.039733][ T5827] usb 6-1: SerialNumber: syz
[ 1265.062870][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.071238][ T5870] usb 10-1: Product: syz
[ 1265.086918][ T5870] usb 10-1: Manufacturer: syz
[ 1265.110437][ T5870] usb 10-1: SerialNumber: syz
[ 1265.144836][ T5870] usb 10-1: config 0 descriptor??
[ 1265.331444][   T29] audit: type=1400 audit(2000000059.960:1859): avc:  denied  { ioctl } for  pid=22484 comm="syz.5.4600" path="socket:[81251]" dev="sockfs" ino=81251 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1265.356245][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1265.419119][ T5870] keyspan 10-1:0.133: Keyspan 1 port adapter converter detected
[ 1265.428529][ T5870] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 81
[ 1265.455833][ T5870] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 1
[ 1265.477935][ T5870] keyspan 10-1:0.133: found no endpoint descriptor for endpoint 2
[ 1265.512587][ T5924] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1265.546437][ T5870] usb 10-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1265.569742][ T5870] usb 10-1: USB disconnect, device number 56
[ 1265.588443][ T5870] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1265.605352][ T5870] keyspan 10-1:0.133: device disconnected
[ 1265.683059][ T5924] usb 3-1: Using ep0 maxpacket: 16
[ 1265.689753][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1265.716552][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1265.744669][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1265.754840][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.764038][ T5924] usb 3-1: Product: syz
[ 1265.768549][ T5924] usb 3-1: Manufacturer: syz
[ 1265.773356][ T5924] usb 3-1: SerialNumber: syz
[ 1265.803730][ T5924] usb 3-1: config 0 descriptor??
[ 1265.811634][ T5924] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1265.825593][ T5924] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1266.102589][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1266.610776][T20535] usb 6-1: USB disconnect, device number 36
[ 1266.924037][ T5924] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1266.936650][ T5924] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1267.142915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1267.425818][   T29] audit: type=1326 audit(2000000062.060:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1267.450378][   T29] audit: type=1326 audit(2000000062.090:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1267.659636][ T5924] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[ 1267.677829][   T29] audit: type=1326 audit(2000000062.090:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1267.703678][ T5924] em28xx 3-1:0.0: couldn't setup AC97 register 2
[ 1267.710217][   T29] audit: type=1326 audit(2000000062.090:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1267.734971][ T5924] em28xx 3-1:0.0: couldn't setup AC97 register 4
[ 1267.862993][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1267.871315][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1268.182551][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1268.237630][ T5924] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 1268.244708][   T29] audit: type=1326 audit(2000000062.090:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1268.269592][ T5924] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 1268.276662][   T29] audit: type=1326 audit(2000000062.090:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1268.300726][   T29] audit: type=1326 audit(2000000062.090:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1268.325027][ T5924] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 1268.336898][ T5924] usb 3-1: USB disconnect, device number 42
[ 1268.361367][   T29] audit: type=1326 audit(2000000062.090:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1268.430759][ T5829] Bluetooth: hci6: unexpected event 0x03 length: 17 > 11
[ 1268.439734][   T29] audit: type=1326 audit(2000000062.090:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22527 comm="syz.9.4612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b738d0a9 code=0x7ffc0000
[ 1269.173689][T22547] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1269.232494][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1270.262619][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1270.733178][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4621'.
[ 1271.302482][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1271.497080][   T29] kauditd_printk_skb: 21 callbacks suppressed
[ 1271.497096][   T29] audit: type=1400 audit(2000000066.130:1890): avc:  denied  { name_connect } for  pid=22574 comm="syz.7.4624" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 1271.797979][T22564] hsr_slave_1 (unregistering): left promiscuous mode
[ 1272.088372][T22581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22581 comm=syz.5.4627
[ 1272.352507][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1272.994413][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1273.003045][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1273.382611][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1274.264810][T22602] sctp: [Deprecated]: syz.9.4629 (pid 22602) Use of int in maxseg socket option.
[ 1274.264810][T22602] Use struct sctp_assoc_value instead
[ 1274.283197][   T29] audit: type=1400 audit(2000000068.890:1891): avc:  denied  { read } for  pid=22593 comm="syz.9.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1274.303180][   T29] audit: type=1400 audit(2000000068.900:1892): avc:  denied  { write } for  pid=22593 comm="syz.9.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1274.432497][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1274.613737][T22599] tipc: Enabled bearer <eth:batadv0>, priority 0
[ 1274.743108][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1275.472530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1275.877508][T22620] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20002
[ 1276.502638][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1276.900997][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4640'.
[ 1276.943805][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4641'.
[ 1277.171042][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4641'.
[ 1277.552492][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1278.582516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1278.861598][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1278.870178][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1278.974564][T22654] ip6gre1: entered allmulticast mode
[ 1279.622900][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1280.662695][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1281.541885][T12884] usb 10-1: new low-speed USB device number 57 using dummy_hcd
[ 1281.702509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1282.068759][T22699] VFS: could not find a valid V7 on nullb0.
[ 1282.183282][T22701] bond0: option resend_igmp: invalid value (7540)
[ 1282.189743][T22701] bond0: option resend_igmp: allowed values 0 - 255
[ 1282.204987][T12884] usb 10-1: No LPM exit latency info found, disabling LPM.
[ 1282.226600][T12884] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1282.259050][T12884] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1282.403030][ T5870] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1282.490973][   T29] audit: type=1400 audit(2000000077.120:1893): avc:  denied  { map } for  pid=22706 comm="syz.8.4662" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1282.514432][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1282.532606][ T5870] usb 8-1: device descriptor read/64, error -71
[ 1282.543156][ T5924] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1282.706479][ T5924] usb 3-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3
[ 1282.718207][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.727482][ T5924] usb 3-1: Product: syz
[ 1282.732231][ T5924] usb 3-1: Manufacturer: syz
[ 1282.737532][ T5924] usb 3-1: SerialNumber: syz
[ 1282.743043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1282.752261][ T5924] usb 3-1: config 0 descriptor??
[ 1282.773021][ T5870] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1282.912980][ T5870] usb 8-1: device descriptor read/64, error -71
[ 1283.026689][ T5870] usb usb8-port1: attempt power cycle
[ 1283.382682][ T5829] Bluetooth: hci2: command 0x1003 tx timeout
[ 1283.391061][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1283.782505][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1283.817733][T12884] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1283.839672][T12884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.853090][ T5870] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1283.871430][T12884] usb 10-1: Product: Љ
[ 1283.877084][T12884] usb 10-1: Manufacturer: 㴼
[ 1283.878556][T22714] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[ 1283.883562][T12884] usb 10-1: can't set config #1, error -71
[ 1283.896882][T22714] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[ 1283.915397][T12884] usb 10-1: USB disconnect, device number 57
[ 1284.065421][T21709] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1284.086754][ T5870] usb 8-1: device not accepting address 57, error -71
[ 1284.233125][ T5871] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1284.248495][T21709] usb 6-1: Using ep0 maxpacket: 32
[ 1284.260464][T21709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1284.272044][T21709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1284.289356][T21709] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1284.299736][T22727] syz.9.4669: attempt to access beyond end of device
[ 1284.299736][T22727] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1284.313414][T21709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.321218][T22727] syz.9.4669: attempt to access beyond end of device
[ 1284.321218][T22727] nbd9: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1284.334048][T21709] usb 6-1: config 0 descriptor??
[ 1284.346253][T22727] Mount JFS Failure: -5
[ 1284.346347][T21709] hub 6-1:0.0: USB hub found
[ 1284.403157][ T5871] usb 9-1: Using ep0 maxpacket: 8
[ 1284.410654][ T5871] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1284.420479][ T5871] usb 9-1: config 128 has an invalid interface number: 209 but max is 0
[ 1284.429733][ T5871] usb 9-1: config 128 has no interface number 0
[ 1284.436706][ T5871] usb 9-1: config 128 interface 209 altsetting 247 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 1284.449153][ T5871] usb 9-1: config 128 interface 209 altsetting 247 has a duplicate endpoint with address 0xA, skipping
[ 1284.461111][ T5871] usb 9-1: config 128 interface 209 has no altsetting 0
[ 1284.471553][ T5871] usb 9-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=fe.e7
[ 1284.481434][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.490199][ T5871] usb 9-1: Product: syz
[ 1284.504283][ T5871] usb 9-1: Manufacturer: syz
[ 1284.515266][ T5871] usb 9-1: SerialNumber: syz
[ 1284.523124][ T5870] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1284.543665][ T5870] usb 8-1: device descriptor read/8, error -71
[ 1284.557969][T21709] hub 6-1:0.0: 1 port detected
[ 1284.653532][ T5870] usb usb8-port1: unable to enumerate USB device
[ 1284.753803][ T5871] plusb 9-1:128.209: probe with driver plusb failed with error -22
[ 1284.766804][ T5871] usb 9-1: USB disconnect, device number 18
[ 1284.822510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1285.235925][T21709] hub 6-1:0.0: activate --> -90
[ 1285.364505][ T5924] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -71
[ 1285.376524][ T5924] usb 3-1: USB disconnect, device number 43
[ 1285.487878][T22739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1285.534917][T22739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1285.561587][T12884] usb 6-1: USB disconnect, device number 37
[ 1285.561625][T21709] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[ 1285.862611][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1286.373089][T15238] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1286.830111][   T29] audit: type=1400 audit(2000000081.460:1894): avc:  denied  { read write } for  pid=22754 comm="syz.9.4676" dev="sockfs" ino=82505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1286.902512][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1287.742365][T15233] Bluetooth: hci7: Frame reassembly failed (-84)
[ 1287.942494][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1288.022512][ T5924] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 1288.089988][T22780] tmpfs: Unknown parameter 'func'
[ 1288.182148][ T5924] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1288.426807][T22767] Bluetooth: hci2: command 0x1003 tx timeout
[ 1288.433923][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1288.543748][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.571441][ T5924] usb 8-1: Product: syz
[ 1288.577039][ T5924] usb 8-1: Manufacturer: syz
[ 1288.581839][ T5924] usb 8-1: SerialNumber: syz
[ 1288.591181][ T5924] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1288.611178][T21709] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1288.923029][   T29] audit: type=1400 audit(2000000083.550:1895): avc:  denied  { getopt } for  pid=22788 comm="syz.9.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1288.982887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1289.051717][T22793] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.4684'.
[ 1289.062024][T22793] openvswitch: netlink: Flow key attr not present in new flow.
[ 1289.184386][ T5924] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1289.428215][T22796] netlink: 'syz.7.4680': attribute type 10 has an invalid length.
[ 1289.463147][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1289.606735][ T5924] usb 9-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[ 1289.616485][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.664412][ T5870] usb 8-1: USB disconnect, device number 59
[ 1289.688351][ T5924] usb 9-1: Product: syz
[ 1289.694130][ T5924] usb 9-1: Manufacturer: syz
[ 1289.698750][ T5924] usb 9-1: SerialNumber: syz
[ 1289.704078][T21709] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 1289.711739][T21709] ath9k_htc: Failed to initialize the device
[ 1289.721024][ T5924] usb 9-1: config 0 descriptor??
[ 1289.729990][ T5870] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1289.744752][ T5924] usb 9-1: interface 1 not found
[ 1289.784057][T22801] netlink: 'syz.9.4690': attribute type 26 has an invalid length.
[ 1289.946453][T22809] x_tables: duplicate underflow at hook 2
[ 1290.022516][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1290.431068][T22814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22814 comm=syz.5.4694
[ 1290.776724][   T29] audit: type=1400 audit(2000000085.400:1896): avc:  denied  { listen } for  pid=22815 comm="syz.7.4695" laddr=::ffff:172.20.20.11 lport=55884 faddr=::ffff:172.20.20.170 fport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1291.062491][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1291.105918][ T5829] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[ 1291.105950][ T5829] Bluetooth: hci5: Malformed Event: 0x2f
[ 1291.106418][T12884] usb 9-1: USB disconnect, device number 19
[ 1291.372840][ T5827] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1291.522521][ T5827] usb 10-1: device descriptor read/64, error -71
[ 1291.819473][ T5827] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1292.474039][T15231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1292.480957][T15238] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1292.567148][ T5827] usb 10-1: device descriptor read/64, error -71
[ 1292.695273][ T5827] usb usb10-port1: attempt power cycle
[ 1292.776215][   T29] audit: type=1400 audit(2000000087.410:1897): avc:  denied  { map } for  pid=22842 comm="syz.8.4705" path="socket:[83014]" dev="sockfs" ino=83014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1292.802100][T22843] netlink: 'syz.8.4705': attribute type 10 has an invalid length.
[ 1292.816643][T22843] 8021q: adding VLAN 0 to HW filter on device team0
[ 1292.827720][T22843] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1292.839352][T22843] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4705'.
[ 1292.849145][T22843] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4705'.
[ 1293.047002][T12884] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1293.112575][ T5827] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1293.474246][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1293.483197][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1293.542809][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1293.584296][T12884] usb 6-1: device descriptor read/64, error -71
[ 1293.591479][ T5827] usb 10-1: device descriptor read/8, error -71
[ 1293.661786][T22858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4709'.
[ 1293.670907][T22858] nbd: must specify at least one socket
[ 1293.852813][ T5827] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1293.861575][T12884] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1293.909777][ T5827] usb 10-1: device descriptor read/8, error -71
[ 1294.034437][ T5827] usb usb10-port1: unable to enumerate USB device
[ 1294.112994][T12884] usb 6-1: device descriptor read/64, error -71
[ 1294.183160][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1294.262944][T12884] usb usb6-port1: attempt power cycle
[ 1294.423009][ T5827] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1294.582482][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1294.623668][T12884] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1294.702650][ T5827] usb 9-1: Using ep0 maxpacket: 8
[ 1294.729160][ T5827] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1294.740569][T12884] usb 6-1: device descriptor read/8, error -71
[ 1294.763454][ T5827] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1294.907394][ T5827] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[ 1294.926007][ T5827] usb 9-1: Product: syz
[ 1294.930790][ T5827] usb 9-1: Manufacturer: syz
[ 1294.936072][ T5827] usb 9-1: SerialNumber: syz
[ 1294.953392][ T5827] usb 9-1: config 0 descriptor??
[ 1294.994374][ T5827] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1295.052857][T12884] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1295.073324][T12884] usb 6-1: device descriptor read/8, error -71
[ 1295.131602][T22881] netlink: 'syz.7.4716': attribute type 4 has an invalid length.
[ 1295.165803][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4716'.
[ 1295.191850][T22881] input: syz0 as /devices/virtual/input/input61
[ 1295.211240][T22883] netlink: 'syz.9.4717': attribute type 4 has an invalid length.
[ 1295.213584][T12884] usb usb6-port1: unable to enumerate USB device
[ 1295.257780][T22883] netlink: 'syz.9.4717': attribute type 4 has an invalid length.
[ 1295.622577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1296.346587][ T5827] gspca_zc3xx: reg_w_i err -110
[ 1296.654584][T22901] netlink: 'syz.5.4723': attribute type 3 has an invalid length.
[ 1296.662707][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1296.932462][ T5827] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1296.955027][ T5827] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1297.209947][T22913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1297.217251][T22913] IPv6: NLM_F_CREATE should be set when creating new route
[ 1297.301006][T22916] lo: entered allmulticast mode
[ 1297.312667][ T5829] Bluetooth: hci6: command 0x0406 tx timeout
[ 1297.322216][ T5900] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[ 1297.326580][T22916] tunl0: entered allmulticast mode
[ 1297.355734][ T5900] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[ 1297.497091][T22916] gre0: entered allmulticast mode
[ 1297.658631][T22916] gretap0: entered allmulticast mode
[ 1297.702486][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1297.742358][T22916] erspan0: entered allmulticast mode
[ 1297.760137][T22916] ip_vti0: entered allmulticast mode
[ 1297.777015][T22916] ip6_vti0: entered allmulticast mode
[ 1297.876883][T22916] sit0: entered allmulticast mode
[ 1297.907411][T22916] ip6tnl0: entered allmulticast mode
[ 1298.046843][T22916] ip6gre0: entered allmulticast mode
[ 1298.608474][T22916] syz_tun: entered allmulticast mode
[ 1298.638522][T22916] ip6gretap0: entered allmulticast mode
[ 1298.697307][T22916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1298.705012][T22916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1298.742582][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1298.742755][T22916] bridge0: entered allmulticast mode
[ 1298.791609][T22916] vcan0: entered allmulticast mode
[ 1298.808385][T22916] bond0: entered allmulticast mode
[ 1298.819104][T22916] bond_slave_0: entered allmulticast mode
[ 1298.827522][ T5827] usb 9-1: USB disconnect, device number 20
[ 1298.828120][T22916] bond_slave_1: entered allmulticast mode
[ 1298.859891][T22916] team0: entered allmulticast mode
[ 1298.870808][T22916] team_slave_0: entered allmulticast mode
[ 1298.881063][T22916] team_slave_1: entered allmulticast mode
[ 1298.897270][T22916] dummy0: entered allmulticast mode
[ 1298.916211][T22916] nlmon0: entered allmulticast mode
[ 1298.925022][T22916] caif0: entered allmulticast mode
[ 1298.931286][T22916] batadv0: entered allmulticast mode
[ 1298.947321][T22916] vxcan0: entered allmulticast mode
[ 1298.958884][T22916] vxcan1: entered allmulticast mode
[ 1298.971837][T22916] veth0: entered allmulticast mode
[ 1298.987348][T22916] veth1: entered allmulticast mode
[ 1298.989709][T22935] x_tables: duplicate underflow at hook 2
[ 1298.999639][T22916] wg0: entered allmulticast mode
[ 1299.011813][T22916] wg1: entered allmulticast mode
[ 1299.051353][T22916] wg2: entered allmulticast mode
[ 1299.087510][T22936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22936 comm=syz.8.4732
[ 1299.097825][T22916] veth0_to_bridge: entered allmulticast mode
[ 1299.160441][T22916] veth1_to_bridge: entered allmulticast mode
[ 1299.189117][T22916] veth0_to_bond: entered allmulticast mode
[ 1299.215082][T22916] veth1_to_bond: entered allmulticast mode
[ 1299.233750][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1299.242118][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1299.262096][T22916] veth0_to_team: entered allmulticast mode
[ 1299.289389][T22916] veth1_to_team: entered allmulticast mode
[ 1299.324926][T22916] veth0_to_batadv: entered allmulticast mode
[ 1299.340080][T22916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1299.351225][T22916] batadv_slave_0: entered allmulticast mode
[ 1299.372046][T22916] veth1_to_batadv: entered allmulticast mode
[ 1299.388265][T22916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1299.399777][T22916] batadv_slave_1: entered allmulticast mode
[ 1299.417058][T22916] xfrm0: entered allmulticast mode
[ 1299.433547][T22916] veth0_to_hsr: entered allmulticast mode
[ 1299.449890][T22916] hsr_slave_0: entered allmulticast mode
[ 1299.468531][T22916] hsr0: entered allmulticast mode
[ 1299.475561][ T5829] Bluetooth: hci3: command 0x0405 tx timeout
[ 1299.481832][ T5900] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 1299.488396][ T5900] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[ 1299.492183][T22916] veth1_virt_wifi: entered allmulticast mode
[ 1299.560063][T22916] veth0_virt_wifi: entered allmulticast mode
[ 1299.580694][T22916] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 1299.594010][T22916] veth1_vlan: entered allmulticast mode
[ 1299.601996][T22916] veth0_vlan: entered allmulticast mode
[ 1299.615902][T22916] vlan0: entered allmulticast mode
[ 1299.621233][T22916] vlan1: entered allmulticast mode
[ 1299.631244][T22916] macvlan0: entered allmulticast mode
[ 1299.639466][T22916] macvlan1: entered allmulticast mode
[ 1299.658854][T22916] ipvlan0: entered allmulticast mode
[ 1299.672677][T22916] ipvlan1: entered allmulticast mode
[ 1299.681320][T22916] veth1_macvtap: entered allmulticast mode
[ 1299.689822][T22916] veth0_macvtap: entered allmulticast mode
[ 1299.699562][T22916] macvtap0: entered allmulticast mode
[ 1299.708061][T22916] macsec0: entered allmulticast mode
[ 1299.718054][T22916] geneve0: entered allmulticast mode
[ 1299.726031][T22916] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.735203][T22916] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.748934][T22916] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.759290][T22916] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.761304][T22945] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4734'.
[ 1299.778644][T22916] geneve1: entered allmulticast mode
[ 1299.782615][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1299.802216][T22916] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[ 1299.811831][T22916] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[ 1299.821901][T22916] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[ 1299.832788][T22916] netdevsim netdevsim5 netdevsim3: entered allmulticast mode
[ 1299.845012][T22916] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[ 1299.852278][T22916] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode
[ 1299.860126][T22916] batadv_slave_0.: entered allmulticast mode
[ 1299.866616][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.832470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1301.020888][T22962] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1301.045031][   T29] audit: type=1400 audit(2000000095.620:1898): avc:  denied  { getopt } for  pid=22956 comm="syz.5.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1301.242857][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4740'.
[ 1301.504342][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4740'.
[ 1301.862567][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1302.103029][ T5900] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[ 1302.109248][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1302.119739][ T5900] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[ 1302.557818][T22984] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4744'.
[ 1302.778622][T22993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1302.912461][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1303.244818][   T29] audit: type=1400 audit(2000000097.870:1899): avc:  denied  { read } for  pid=22996 comm="syz.2.4750" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1303.267946][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1303.613701][T23000] syz.2.4750 (23000): drop_caches: 2
[ 1303.942466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1304.185121][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[ 1304.207729][ T5900] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1304.214391][ T5900] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[ 1304.343681][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1304.351940][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1304.791729][   T29] audit: type=1400 audit(2000000099.420:1900): avc:  denied  { unlink } for  pid=23013 comm="syz.8.4754" name="#1f" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1304.982584][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1306.022488][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1306.148131][T23041] FAULT_INJECTION: forcing a failure.
[ 1306.148131][T23041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1306.161806][T23041] CPU: 0 UID: 0 PID: 23041 Comm: syz.9.4761 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1306.161827][T23041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1306.161841][T23041] Call Trace:
[ 1306.161847][T23041]  <TASK>
[ 1306.161854][T23041]  dump_stack_lvl+0x16c/0x1f0
[ 1306.161880][T23041]  should_fail_ex+0x50a/0x650
[ 1306.161908][T23041]  _copy_from_iter+0x2a1/0x1560
[ 1306.161926][T23041]  ? trace_lock_acquire+0x14e/0x1f0
[ 1306.161948][T23041]  ? __alloc_skb+0x1fe/0x380
[ 1306.161970][T23041]  ? __pfx__copy_from_iter+0x10/0x10
[ 1306.161985][T23041]  ? __virt_addr_valid+0x1a4/0x590
[ 1306.162007][T23041]  ? __virt_addr_valid+0x5e/0x590
[ 1306.162025][T23041]  ? __phys_addr_symbol+0x30/0x80
[ 1306.162041][T23041]  ? __check_object_size+0x488/0x710
[ 1306.162066][T23041]  netlink_sendmsg+0x813/0xd70
[ 1306.162093][T23041]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1306.162123][T23041]  ____sys_sendmsg+0xaaf/0xc90
[ 1306.162140][T23041]  ? copy_msghdr_from_user+0x10b/0x160
[ 1306.162162][T23041]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1306.162190][T23041]  ___sys_sendmsg+0x135/0x1e0
[ 1306.162214][T23041]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1306.162246][T23041]  ? __pfx_lock_release+0x10/0x10
[ 1306.162269][T23041]  ? trace_lock_acquire+0x14e/0x1f0
[ 1306.162296][T23041]  ? __fget_files+0x206/0x3a0
[ 1306.162319][T23041]  __sys_sendmsg+0x16e/0x220
[ 1306.162342][T23041]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1306.162383][T23041]  do_syscall_64+0xcd/0x250
[ 1306.162405][T23041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1306.162426][T23041] RIP: 0033:0x7ff9b738d0a9
[ 1306.162439][T23041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1306.162455][T23041] RSP: 002b:00007ff9b8118038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1306.162470][T23041] RAX: ffffffffffffffda RBX: 00007ff9b75a6160 RCX: 00007ff9b738d0a9
[ 1306.162481][T23041] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000004
[ 1306.162490][T23041] RBP: 00007ff9b8118090 R08: 0000000000000000 R09: 0000000000000000
[ 1306.162499][T23041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1306.162508][T23041] R13: 0000000000000000 R14: 00007ff9b75a6160 R15: 00007ffe0c40c608
[ 1306.162528][T23041]  </TASK>
[ 1306.876441][ T5829] Bluetooth: hci0: command 0x1407 tx timeout
[ 1306.893373][   T29] audit: type=1400 audit(2000000101.500:1901): avc:  denied  { map } for  pid=23037 comm="syz.8.4762" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1306.918768][   T29] audit: type=1400 audit(2000000101.510:1902): avc:  denied  { execute } for  pid=23037 comm="syz.8.4762" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1306.988766][ T5900] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1306.995132][ T5900] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1307.062466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1307.298930][T23045] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1308.103184][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1308.242900][   T29] audit: type=1400 audit(2000000102.870:1903): avc:  denied  { load_policy } for  pid=23044 comm="syz.8.4764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1308.264424][T23045] SELinux:  policydb magic number 0xf86a5272 does not match expected magic number 0xf97cff8c
[ 1308.272184][T23059] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4767'.
[ 1308.297937][T23045] SELinux: failed to load policy
[ 1308.385079][T23045] could not allocate digest TFM handle vmac64(sm4)
[ 1309.142495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1309.150803][T22767] Bluetooth: hci2: command 0x1003 tx timeout
[ 1309.165715][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1309.166386][   T29] audit: type=1400 audit(2000000103.460:1904): avc:  denied  { getopt } for  pid=23074 comm="syz.9.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1309.314710][   T29] audit: type=1400 audit(2000000103.930:1905): avc:  denied  { shutdown } for  pid=23080 comm="syz.8.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1309.841104][T23086] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4774'.
[ 1309.892830][   T29] audit: type=1400 audit(2000000104.320:1906): avc:  denied  { ioctl } for  pid=23074 comm="syz.9.4773" path="socket:[84264]" dev="sockfs" ino=84264 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1309.917694][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1309.959788][   T29] audit: type=1400 audit(2000000104.530:1907): avc:  denied  { accept } for  pid=23074 comm="syz.9.4773" lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1310.007940][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4776'.
[ 1310.165640][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1310.179746][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1310.189742][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1310.470016][T23096] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1310.563662][T23101] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4780'.
[ 1311.222588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1311.970630][T23116] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1312.019649][   T29] audit: type=1326 audit(2000000106.650:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1312.208671][   T29] audit: type=1326 audit(2000000106.650:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1312.262470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1312.685273][T23122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23122 comm=syz.5.4787
[ 1312.805498][   T29] audit: type=1326 audit(2000000106.650:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1312.904151][   T29] audit: type=1326 audit(2000000106.650:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1312.928322][   T29] audit: type=1326 audit(2000000106.650:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1312.952911][   T29] audit: type=1326 audit(2000000106.650:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1313.299182][   T29] audit: type=1326 audit(2000000106.650:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1313.302475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1313.529101][   T29] audit: type=1326 audit(2000000106.680:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1313.633115][   T29] audit: type=1326 audit(2000000106.680:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1313.742615][   T29] audit: type=1326 audit(2000000106.680:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23117 comm="syz.8.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f711258d0a9 code=0x7ffc0000
[ 1314.342575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1314.943817][T23152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4795'.
[ 1315.380639][T23158] netlink: 'syz.8.4797': attribute type 1 has an invalid length.
[ 1315.382460][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1315.390765][T23158] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4797'.
[ 1315.481905][T23165] overlay: ./bus is not a directory
[ 1315.593040][T22876] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 1315.743023][T22876] usb 8-1: Using ep0 maxpacket: 16
[ 1315.770850][T22876] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1315.840559][T22876] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1315.889746][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1315.893636][T22876] usb 8-1: Product: syz
[ 1315.898591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1315.972931][T22876] usb 8-1: Manufacturer: syz
[ 1316.022620][T22876] usb 8-1: SerialNumber: syz
[ 1316.117515][T22876] usb 8-1: config 0 descriptor??
[ 1316.253488][T23179] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.4805' resets device
[ 1316.350325][T23179] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4805'.
[ 1316.413335][ T5870] usb 8-1: USB disconnect, device number 60
[ 1316.422627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1317.462600][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1317.488236][T23196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4809'.
[ 1318.065420][T23207] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4814'.
[ 1318.502475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1319.542476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1320.582595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1320.623597][   T29] kauditd_printk_skb: 24 callbacks suppressed
[ 1320.623609][   T29] audit: type=1400 audit(2000000115.260:1942): avc:  denied  { append } for  pid=23229 comm="syz.2.4819" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1320.653053][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1320.899695][   T29] audit: type=1400 audit(2000000115.520:1943): avc:  denied  { setopt } for  pid=23236 comm="syz.9.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1321.232710][T22876] usb 10-1: new full-speed USB device number 62 using dummy_hcd
[ 1321.252323][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1321.260809][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1321.317036][   T29] audit: type=1400 audit(2000000115.610:1944): avc:  denied  { read } for  pid=23236 comm="syz.9.4820" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1321.395466][T22876] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1321.436997][   T29] audit: type=1400 audit(2000000115.610:1945): avc:  denied  { open } for  pid=23236 comm="syz.9.4820" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1321.453227][T22876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.480078][   T29] audit: type=1400 audit(2000000115.610:1946): avc:  denied  { ioctl } for  pid=23236 comm="syz.9.4820" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1321.510728][T22876] usb 10-1: Product: syz
[ 1321.556752][T22876] usb 10-1: Manufacturer: syz
[ 1321.573630][T22876] usb 10-1: SerialNumber: syz
[ 1321.578048][T23246] netlink: 'syz.2.4824': attribute type 1 has an invalid length.
[ 1321.580092][T22876] usb 10-1: config 0 descriptor??
[ 1321.593944][T23246] sp0: Synchronizing with TNC
[ 1321.598790][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4822'.
[ 1321.622455][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1322.014351][T15232] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1322.024692][T15232] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1322.051419][T22876] airspy 10-1:0.0: Board ID: 00
[ 1322.099259][T22876] airspy 10-1:0.0: Firmware version: 
[ 1322.501348][T23237] mkiss: ax0: crc mode is auto.
[ 1322.662460][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1322.767846][T22876] airspy 10-1:0.0: usb_control_msg() failed -71 request 12
[ 1322.783386][T22876] airspy 10-1:0.0: Registered as swradio24
[ 1322.789781][T22876] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1323.630580][   T29] audit: type=1400 audit(2000000117.490:1947): avc:  denied  { listen } for  pid=23256 comm="syz.5.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1323.702554][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1323.774695][T22876] usb 10-1: USB disconnect, device number 62
[ 1324.164710][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1324.287084][   T29] audit: type=1326 audit(2000000118.920:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23276 comm="syz.5.4832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1abfb8d0a9 code=0x0
[ 1324.548348][   T29] audit: type=1400 audit(2000000119.180:1949): avc:  denied  { bind } for  pid=23278 comm="syz.9.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1324.742434][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1325.792475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1326.832779][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1326.857070][T15231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1326.865989][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1327.809920][   T29] audit: type=1400 audit(2000000122.440:1950): avc:  denied  { ioctl } for  pid=23325 comm="syz.5.4845" path="socket:[85156]" dev="sockfs" ino=85156 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1327.835007][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1327.872518][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1327.897667][T23336] x_tables: duplicate underflow at hook 2
[ 1327.938718][T21709] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1328.269398][T21709] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1328.281104][T21709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1328.302969][T21709] usb 3-1: Product: syz
[ 1328.307170][T21709] usb 3-1: Manufacturer: syz
[ 1328.316204][T21709] usb 3-1: SerialNumber: syz
[ 1328.326901][T21709] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1328.340289][T21709] r8152-cfgselector 3-1: config 0 descriptor??
[ 1328.902505][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1329.259206][T22876] r8152-cfgselector 3-1: USB disconnect, device number 44
[ 1329.533041][T23360] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4854'.
[ 1329.719072][T12884] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1329.954449][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1330.022651][T12884] usb 9-1: device descriptor read/64, error -71
[ 1330.282583][T12884] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1330.463128][T12884] usb 9-1: device descriptor read/64, error -71
[ 1330.614355][T12884] usb usb9-port1: attempt power cycle
[ 1330.666678][T23370] x_tables: duplicate underflow at hook 2
[ 1330.992432][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1330.992789][T12884] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1331.103295][T12884] usb 9-1: device descriptor read/8, error -71
[ 1331.255850][   T29] audit: type=1400 audit(2000000125.890:1951): avc:  denied  { read write } for  pid=23378 comm="syz.9.4863" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1331.289569][   T29] audit: type=1400 audit(2000000125.890:1952): avc:  denied  { open } for  pid=23378 comm="syz.9.4863" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1331.372889][T12884] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1331.405001][T12884] usb 9-1: device descriptor read/8, error -71
[ 1331.442593][T22876] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1331.545322][T12884] usb usb9-port1: unable to enumerate USB device
[ 1331.648529][T22876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.730824][T22876] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[ 1331.765990][T22876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.789730][T22876] usb 8-1: config 0 descriptor??
[ 1331.911845][   T29] audit: type=1400 audit(2000000126.540:1953): avc:  denied  { read } for  pid=23386 comm="syz.5.4865" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1332.022434][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1332.037616][   T29] audit: type=1400 audit(2000000126.540:1954): avc:  denied  { open } for  pid=23386 comm="syz.5.4865" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1332.081242][   T29] audit: type=1400 audit(2000000126.540:1955): avc:  denied  { ioctl } for  pid=23386 comm="syz.5.4865" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[ 1332.305719][   T29] audit: type=1400 audit(2000000126.950:1956): avc:  denied  { unmount } for  pid=20915 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1332.375271][   T29] audit: type=1400 audit(2000000127.000:1957): avc:  denied  { append } for  pid=23396 comm="syz.2.4869" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1332.519736][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1332.528730][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1333.125110][ T5870] usb 8-1: USB disconnect, device number 61
[ 1333.211297][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1333.386725][T15236] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1333.405272][   T35] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1333.436811][   T29] audit: type=1400 audit(2000000128.060:1958): avc:  denied  { getopt } for  pid=23406 comm="syz.8.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1333.520065][T23411] bridge: RTM_NEWNEIGH with invalid ether address
[ 1333.564706][T23414] x_tables: duplicate underflow at hook 2
[ 1334.272464][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1334.676604][T23424] can0: slcan on ttyS3.
[ 1335.239170][T23420] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4874'.
[ 1335.253659][T23421] can0 (unregistered): slcan off ttyS3.
[ 1335.312444][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1335.395651][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1335.624954][T12884] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1335.999329][T12884] usb 9-1: Using ep0 maxpacket: 32
[ 1336.005906][T12884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1336.039054][T12884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.062513][T12884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1336.093103][ T5870] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1336.104222][T12884] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1336.140006][T12884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.191853][T12884] usb 9-1: config 0 descriptor??
[ 1336.253006][ T5870] usb 3-1: Using ep0 maxpacket: 32
[ 1336.293011][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1336.326461][T22767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1336.334994][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.345573][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1336.373106][T22767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1336.384326][T22767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1336.407643][T22767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1336.416920][T22767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1336.424771][T22767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1336.432292][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1336.454773][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1336.464144][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1336.468181][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.479827][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1336.487330][T23447] nvme_fabrics: missing parameter 'transport=%s'
[ 1336.498387][T23447] nvme_fabrics: missing parameter 'nqn=%s'
[ 1336.506186][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1336.509773][T23451] nvme_fabrics: unknown parameter or missing value 'gDf�' in ctrl creation request
[ 1336.524914][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1336.530991][ T5870] usb 3-1: config 0 descriptor??
[ 1336.532209][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1336.544294][   T29] audit: type=1400 audit(2000000131.190:1959): avc:  denied  { map } for  pid=23446 comm="syz.5.4884" path="socket:[86163]" dev="sockfs" ino=86163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1336.567578][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1336.650422][T15232] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.676818][T12884] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.001D/input/input63
[ 1336.688795][T15232] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.739997][T12884] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.001D/input/input64
[ 1336.834192][T12884] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0
[ 1337.266432][T15232] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1337.297039][T15232] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.340896][   T29] audit: type=1400 audit(2000000131.970:1960): avc:  denied  { append } for  pid=23454 comm="syz.5.4887" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1337.392426][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1337.495718][T15232] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1337.508369][T15232] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.773099][T15232] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1337.799709][    C1] kye 0003:0458:5011.001D: usb_submit_urb(ctrl) failed: -1
[ 1337.831510][T15232] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.876505][T23444] chnl_net:caif_netlink_parms(): no params data found
[ 1338.012456][   T29] audit: type=1400 audit(2000000132.640:1961): avc:  denied  { write } for  pid=23434 comm="syz.2.4880" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1338.255818][T23444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.264029][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1338.272247][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1338.288718][T23444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.297218][T23444] bridge_slave_0: entered allmulticast mode
[ 1338.315578][T23444] bridge_slave_0: entered promiscuous mode
[ 1338.349769][T23444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.361057][T23444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.372657][T23444] bridge_slave_1: entered allmulticast mode
[ 1338.390717][T23444] bridge_slave_1: entered promiscuous mode
[ 1338.422505][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1338.673716][T22767] Bluetooth: hci2: command tx timeout
[ 1338.718079][ T5924] usb 9-1: USB disconnect, device number 25
[ 1339.462984][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1339.749041][ T5870] usbhid 3-1:0.0: can't add hid device: -71
[ 1339.755498][ T5870] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1339.785930][ T5870] usb 3-1: USB disconnect, device number 45
[ 1340.180199][T23444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1340.217992][T23444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1340.502429][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1340.780680][T22767] Bluetooth: hci2: command tx timeout
[ 1341.077497][T15232] tipc: Left network mode
[ 1341.552475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1341.578749][T23444] team0: Port device team_slave_0 added
[ 1341.612304][T23444] team0: Port device team_slave_1 added
[ 1341.722840][T22876] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1341.808170][T23444] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1341.818792][T23444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1341.847099][T23444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1341.862913][T22876] usb 3-1: device descriptor read/64, error -71
[ 1341.887175][T23444] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1341.911443][T23444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1341.923129][T23518] FAULT_INJECTION: forcing a failure.
[ 1341.923129][T23518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1341.948880][T23444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1342.002423][T23518] CPU: 0 UID: 0 PID: 23518 Comm: syz.5.4901 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1342.002450][T23518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1342.002459][T23518] Call Trace:
[ 1342.002465][T23518]  <TASK>
[ 1342.002473][T23518]  dump_stack_lvl+0x16c/0x1f0
[ 1342.002496][T23518]  should_fail_ex+0x50a/0x650
[ 1342.002520][T23518]  _copy_from_user+0x2e/0xd0
[ 1342.002536][T23518]  copy_msghdr_from_user+0x99/0x160
[ 1342.002556][T23518]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1342.002586][T23518]  ___sys_sendmsg+0xff/0x1e0
[ 1342.002605][T23518]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1342.002633][T23518]  ? __pfx_lock_release+0x10/0x10
[ 1342.002651][T23518]  ? trace_lock_acquire+0x14e/0x1f0
[ 1342.002675][T23518]  ? __fget_files+0x206/0x3a0
[ 1342.002695][T23518]  __sys_sendmsg+0x16e/0x220
[ 1342.002713][T23518]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1342.002747][T23518]  do_syscall_64+0xcd/0x250
[ 1342.002766][T23518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.002786][T23518] RIP: 0033:0x7f1abfb8d0a9
[ 1342.002799][T23518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1342.002812][T23518] RSP: 002b:00007f1abd9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1342.002828][T23518] RAX: ffffffffffffffda RBX: 00007f1abfda5fa0 RCX: 00007f1abfb8d0a9
[ 1342.002838][T23518] RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000003
[ 1342.002847][T23518] RBP: 00007f1abd9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1342.002856][T23518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1342.002864][T23518] R13: 0000000000000000 R14: 00007f1abfda5fa0 R15: 00007ffd6a30c3b8
[ 1342.002891][T23518]  </TASK>
[ 1342.183706][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1342.252658][T22876] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1342.545288][T22876] usb 3-1: device descriptor read/64, error -71
[ 1342.582826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1342.663583][T22876] usb usb3-port1: attempt power cycle
[ 1342.826602][T22767] Bluetooth: hci2: command tx timeout
[ 1342.831599][   T29] audit: type=1400 audit(2000000137.460:1962): avc:  denied  { validate_trans } for  pid=23522 comm="syz.8.4903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1343.095154][T22876] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1343.383805][T15231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1343.392118][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1343.622456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1344.144069][T22876] usb 3-1: device descriptor read/8, error -71
[ 1344.672452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1344.914115][T22767] Bluetooth: hci2: command tx timeout
[ 1345.703826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1345.883972][   T35] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1346.505728][T23444] hsr_slave_0: entered promiscuous mode
[ 1346.511873][T23444] hsr_slave_1: entered promiscuous mode
[ 1346.520881][T23444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1346.529046][T23444] Cannot create hsr debugfs directory
[ 1346.747455][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1346.784647][T23565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1346.800196][T23565] dccp_invalid_packet: pskb_may_pull failed
[ 1347.532632][T22876] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1347.536593][T15232] IPVS: stop unused estimator thread 0...
[ 1347.685315][T22876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1347.702926][T22876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1347.771540][T22876] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[ 1347.783076][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1347.802724][T22876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.813146][T22876] usb 3-1: Product: syz
[ 1347.817333][T22876] usb 3-1: Manufacturer: syz
[ 1347.821935][T22876] usb 3-1: SerialNumber: syz
[ 1347.864988][T22876] usb 3-1: config 0 descriptor??
[ 1347.942582][T22767] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1348.104830][   T29] audit: type=1400 audit(2000000142.710:1963): avc:  denied  { map } for  pid=23569 comm="syz.2.4916" path="socket:[85733]" dev="sockfs" ino=85733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1348.133596][T22876] usb 3-1: USB disconnect, device number 50
[ 1348.458666][   T29] audit: type=1400 audit(2000000142.710:1964): avc:  denied  { accept } for  pid=23569 comm="syz.2.4916" path="socket:[85733]" dev="sockfs" ino=85733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1348.535691][T23444] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1348.823078][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1349.108662][T23444] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1349.143916][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1349.152172][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1349.171141][T23444] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1349.253227][T23444] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1349.284524][T23596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4925'.
[ 1349.862412][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1350.069016][T23444] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.191710][T23444] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.218446][ T5871] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1350.308429][T12887] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.315508][T12887] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.497382][ T5871] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1350.645763][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.657701][ T5871] usb 10-1: config 0 descriptor??
[ 1350.657872][T15233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.666679][ T5871] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1350.669859][T15233] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.850338][T23613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4928'.
[ 1350.902567][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1351.247027][ T5871] cpia1 10-1:0.0: unexpected state after lo power cmd: 00
[ 1351.285226][T23444] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1351.461035][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.470283][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.514063][ T5871] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0)
[ 1351.715582][T22876] usb 10-1: USB disconnect, device number 63
[ 1351.957635][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1352.199698][T23444] veth0_vlan: entered promiscuous mode
[ 1352.244938][T23444] veth1_vlan: entered promiscuous mode
[ 1352.368580][T23444] veth0_macvtap: entered promiscuous mode
[ 1352.396137][T23444] veth1_macvtap: entered promiscuous mode
[ 1352.420650][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1352.443101][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1352.462977][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1352.474251][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1352.484804][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1352.558224][T23640] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004
[ 1352.565465][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1352.565491][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1352.565507][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1352.565528][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1352.565540][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1352.566443][T23444] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1352.843683][T21709] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1352.992440][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1353.057793][T21709] usb 6-1: not running at top speed; connect to a high speed hub
[ 1353.117173][T21709] usb 6-1: config 1 interface 0 altsetting 65 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1353.151213][T21709] usb 6-1: config 1 interface 0 altsetting 65 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1353.189265][T21709] usb 6-1: config 1 interface 0 altsetting 65 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1353.220492][T21709] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1353.243915][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.254531][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.265317][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.275835][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.285684][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.296481][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.707970][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.750780][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.776051][T23444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.810111][T23444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.834844][T21709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1353.844710][T21709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.850832][T23444] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1353.852727][T21709] usb 6-1: Product: ᐇ
[ 1353.871962][T21709] usb 6-1: Manufacturer: Ь
[ 1353.878383][T21709] usb 6-1: SerialNumber: 銭繈誮䌱淠歵舝腗งꢈ腚⽱험⃊間볲㕌癧ᛃ邱퉼팦뎆〬鐓ㅁ寉펟ጾ꓌௽쨩셯栖丷顸㬍힃널鿄肜䠼映經㫟➻㑊⚗㭩䂃嶃ﰃ焿鑄躌
[ 1353.907016][T21709] usb 6-1: rejected 1 configuration due to insufficient available bus power
[ 1353.919397][T21709] usb 6-1: no configuration chosen from 1 choice
[ 1353.928955][T23444] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1353.950294][T23444] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1353.968151][T23444] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1353.977031][T23444] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.023020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.088776][ T6143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1354.104336][ T6143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1354.297865][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1354.309710][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4940'.
[ 1354.319920][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1354.489818][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4940'.
[ 1354.732211][T23666] netlink: 'syz.9.4940': attribute type 12 has an invalid length.
[ 1354.741299][   T29] audit: type=1400 audit(2000000149.360:1965): avc:  denied  { bind } for  pid=23665 comm="syz.9.4940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1354.752881][T23666] netlink: 'syz.9.4940': attribute type 11 has an invalid length.
[ 1354.797838][   T29] audit: type=1400 audit(2000000149.360:1966): avc:  denied  { ioctl } for  pid=23665 comm="syz.9.4940" path="socket:[87318]" dev="sockfs" ino=87318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1354.904319][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1354.912887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1355.062575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1355.821799][T12884] usb 6-1: USB disconnect, device number 42
[ 1356.102436][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1356.260825][T22767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1356.296304][T22767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1356.915110][T23703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1356.926668][T23703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1356.936448][T23703] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1356.936664][   T52] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.943689][T23703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1357.143072][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1357.360953][T23705] block device autoloading is deprecated and will be removed.
[ 1357.563746][   T52] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.173023][T12887] Bluetooth: hci7: Frame reassembly failed (-84)
[ 1358.192572][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1358.250723][   T52] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.761861][   T52] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.903112][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1359.088817][T23725] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4954'.
[ 1359.179117][T23699] chnl_net:caif_netlink_parms(): no params data found
[ 1359.223073][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1359.234072][ T5830] Bluetooth: hci3: command tx timeout
[ 1359.390879][T23699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.399064][T23699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.407079][T23699] bridge_slave_0: entered allmulticast mode
[ 1359.414634][T23699] bridge_slave_0: entered promiscuous mode
[ 1359.423290][T23699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.430553][T23699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1359.437960][T23699] bridge_slave_1: entered allmulticast mode
[ 1359.445605][T23699] bridge_slave_1: entered promiscuous mode
[ 1359.597870][T23699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1359.628096][T23699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1359.783115][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1360.023382][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1360.031675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1360.262515][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1360.924443][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'.
[ 1361.082995][T23757] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1361.091425][T23757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1361.480906][ T5829] Bluetooth: hci3: command tx timeout
[ 1361.487719][T15238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1361.496412][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.669885][   T29] audit: type=1400 audit(2000000156.300:1967): avc:  denied  { connect } for  pid=23736 comm="syz.8.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1362.513332][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1362.562926][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1362.574341][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1362.586640][   T52] bond0 (unregistering): Released all slaves
[ 1363.069532][   T52] bond1 (unregistering): Released all slaves
[ 1363.099523][T23699] team0: Port device team_slave_0 added
[ 1363.221989][T23699] team0: Port device team_slave_1 added
[ 1363.255515][T23738] pimreg: entered allmulticast mode
[ 1363.260802][   T52] tipc: Left network mode
[ 1363.261157][T23699] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1363.272272][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1363.298765][T23699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1363.542413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1363.858727][ T5829] Bluetooth: hci3: command tx timeout
[ 1363.897028][T23699] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1363.916834][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1363.942727][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.132432][T23699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1364.183929][T23699] hsr_slave_0: entered promiscuous mode
[ 1364.189930][T23699] hsr_slave_1: entered promiscuous mode
[ 1364.211159][T23699] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1364.219156][T23699] Cannot create hsr debugfs directory
[ 1364.260046][T23781] FAULT_INJECTION: forcing a failure.
[ 1364.260046][T23781] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.287873][T23781] CPU: 1 UID: 0 PID: 23781 Comm: syz.8.4968 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1364.287897][T23781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1364.287907][T23781] Call Trace:
[ 1364.287912][T23781]  <TASK>
[ 1364.287918][T23781]  dump_stack_lvl+0x16c/0x1f0
[ 1364.287946][T23781]  should_fail_ex+0x50a/0x650
[ 1364.287967][T23781]  ? fs_reclaim_acquire+0xae/0x150
[ 1364.287990][T23781]  should_failslab+0xc2/0x120
[ 1364.288008][T23781]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[ 1364.288028][T23781]  ? __alloc_skb+0x2b1/0x380
[ 1364.288049][T23781]  __alloc_skb+0x2b1/0x380
[ 1364.288065][T23781]  ? __pfx___alloc_skb+0x10/0x10
[ 1364.288088][T23781]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1364.288109][T23781]  netlink_alloc_large_skb+0x69/0x130
[ 1364.288128][T23781]  netlink_sendmsg+0x689/0xd70
[ 1364.288149][T23781]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1364.288173][T23781]  ____sys_sendmsg+0xaaf/0xc90
[ 1364.288189][T23781]  ? copy_msghdr_from_user+0x10b/0x160
[ 1364.288207][T23781]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1364.288235][T23781]  ___sys_sendmsg+0x135/0x1e0
[ 1364.288255][T23781]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1364.288286][T23781]  ? __pfx_lock_release+0x10/0x10
[ 1364.288306][T23781]  ? trace_lock_acquire+0x14e/0x1f0
[ 1364.288333][T23781]  ? __fget_files+0x206/0x3a0
[ 1364.288358][T23781]  __sys_sendmsg+0x16e/0x220
[ 1364.288377][T23781]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1364.288408][T23781]  do_syscall_64+0xcd/0x250
[ 1364.288430][T23781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.288450][T23781] RIP: 0033:0x7f711258d0a9
[ 1364.288462][T23781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1364.288477][T23781] RSP: 002b:00007f7113480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1364.288493][T23781] RAX: ffffffffffffffda RBX: 00007f71127a6160 RCX: 00007f711258d0a9
[ 1364.288503][T23781] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000007
[ 1364.288513][T23781] RBP: 00007f7113480090 R08: 0000000000000000 R09: 0000000000000000
[ 1364.288521][T23781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1364.288533][T23781] R13: 0000000000000000 R14: 00007f71127a6160 R15: 00007ffe5c9f91f8
[ 1364.288552][T23781]  </TASK>
[ 1364.514483][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.582583][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1364.689047][T23781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23781 comm=syz.8.4968
[ 1364.704084][   T29] audit: type=1400 audit(2000000159.320:1968): avc:  denied  { connect } for  pid=23776 comm="syz.8.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1364.724010][T21709] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1364.862931][T23786] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4969'.
[ 1364.893209][T21709] usb 6-1: Using ep0 maxpacket: 8
[ 1364.920602][T21709] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1364.943455][T21709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.015227][T21709] usb 6-1: Product: syz
[ 1365.034397][T21709] usb 6-1: Manufacturer: syz
[ 1365.039052][T21709] usb 6-1: SerialNumber: syz
[ 1365.070794][T21709] usb 6-1: config 0 descriptor??
[ 1365.140499][T21709] gspca_main: se401-2.14.0 probing 047d:5003
[ 1365.586109][   T29] audit: type=1400 audit(2000000160.220:1969): avc:  denied  { ioctl } for  pid=23778 comm="syz.5.4967" path="socket:[87703]" dev="sockfs" ino=87703 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1365.622433][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1365.891383][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1365.899762][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1365.915684][T21709] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input65
[ 1365.925177][   T52] hsr_slave_0: left promiscuous mode
[ 1365.931107][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1365.933786][T21709] usb 6-1: USB disconnect, device number 43
[ 1365.952841][ T5830] Bluetooth: hci3: command tx timeout
[ 1365.953219][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1365.985277][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1365.993151][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1366.042585][   T52] veth1_macvtap: left promiscuous mode
[ 1366.048130][   T52] veth0_macvtap: left promiscuous mode
[ 1366.072624][   T52] veth1_vlan: left promiscuous mode
[ 1366.085301][   T52] veth0_vlan: left promiscuous mode
[ 1366.662431][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1367.704662][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1368.049500][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1368.106173][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1368.742533][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1368.955673][   T29] audit: type=1400 audit(2000000163.590:1970): avc:  denied  { map } for  pid=23817 comm="syz.5.4977" path="socket:[87752]" dev="sockfs" ino=87752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1369.057813][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4976'.
[ 1369.242816][T22876] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1369.402523][T22876] usb 3-1: Using ep0 maxpacket: 16
[ 1369.414181][T22876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1369.455231][T22876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1369.457004][T23830] netlink: 'syz.8.4981': attribute type 11 has an invalid length.
[ 1369.542910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1369.560517][T22876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=ec01, bcdDevice= 0.2e
[ 1369.622542][T22876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.631104][T22876] usb 3-1: Product: syz
[ 1369.653494][T22876] usb 3-1: Manufacturer: syz
[ 1369.658128][T22876] usb 3-1: SerialNumber: syz
[ 1369.736199][T23835] Malformed UNC in devname
[ 1369.736199][T23835] 
[ 1369.751914][T23835] CIFS: VFS: Malformed UNC in devname
[ 1369.782420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.438128][T23699] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1370.468269][T23699] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1370.475382][T22876] usb 3-1: 0:2 : does not exist
[ 1370.802600][T23699] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1370.822543][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1370.852790][T23699] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1371.033041][T23699] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1371.058406][T22876] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1371.074492][T23699] 8021q: adding VLAN 0 to HW filter on device team0
[ 1371.096575][T22876] usb 3-1: USB disconnect, device number 51
[ 1371.109394][T15232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1371.116549][T15232] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1371.491522][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1371.498624][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1371.513928][T23853] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4986'.
[ 1371.524404][T23849] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4986'.
[ 1371.542649][T12887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1371.550881][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1371.686235][   T29] audit: type=1400 audit(2000000166.320:1971): avc:  denied  { watch watch_reads } for  pid=23858 comm="syz.8.4988" path="/proc/1308/net/stat" dev="proc" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[ 1371.714864][   T29] audit: type=1326 audit(2000000166.320:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.8.4988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f711258d0a9 code=0x0
[ 1371.803089][T23699] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1371.862420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1372.902447][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1373.483726][T23699] veth0_vlan: entered promiscuous mode
[ 1373.517539][T23699] veth1_vlan: entered promiscuous mode
[ 1373.553893][T23699] veth0_macvtap: entered promiscuous mode
[ 1373.657149][T23699] veth1_macvtap: entered promiscuous mode
[ 1373.669515][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.680068][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.690559][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.701483][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.712539][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.729489][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.942582][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1374.230516][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1374.241041][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.251126][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1374.261845][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.276816][T23699] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1374.290802][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.301657][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.312485][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.323993][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.334037][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.344914][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.354917][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.365446][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.375290][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.429155][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.459174][T23699] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1374.483781][T23699] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.492736][T23699] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.501480][T23699] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.510877][T23699] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.735979][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1374.756900][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.791414][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1374.819179][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.901439][   T29] audit: type=1400 audit(2000000169.530:1973): avc:  denied  { write } for  pid=23699 comm="syz-executor" name="pids.max" dev="cgroup2" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0"
[ 1374.962551][   T29] audit: type=1400 audit(2000000169.530:1974): avc:  denied  { open } for  pid=23699 comm="syz-executor" path="/syzcgroup/unified/syz9/pids.max" dev="cgroup2" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0"
[ 1374.991297][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1375.062507][ T5829] Bluetooth: hci6: command 0x1003 tx timeout
[ 1375.075908][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1375.645914][   T29] audit: type=1400 audit(2000000170.280:1975): avc:  denied  { append } for  pid=23905 comm="syz.5.4997" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1376.022421][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1377.064438][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1377.303321][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1377.311553][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1377.325597][T23921] dlm: non-version read from control device 0
[ 1377.384382][T23922] block nbd7: shutting down sockets
[ 1378.102396][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1378.576437][ T5924] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1378.787439][ T5924] usb 9-1: Using ep0 maxpacket: 32
[ 1378.806736][ T5924] usb 9-1: config 0 has an invalid interface number: 146 but max is 0
[ 1378.816238][ T5924] usb 9-1: config 0 has no interface number 0
[ 1378.999874][ T5924] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1379.142407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1379.894421][ T5924] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1379.906940][ T5924] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1379.921866][ T5924] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1379.952052][ T5924] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1379.959889][T23954] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5010'.
[ 1379.987227][ T5924] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1380.126852][ T5924] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1380.147959][ T5924] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1380.159680][ T5924] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1380.182535][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1380.185150][ T5924] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1380.212216][ T5924] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1380.221981][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.236349][ T5924] usb 9-1: Product: syz
[ 1380.240589][ T5924] usb 9-1: Manufacturer: syz
[ 1380.271888][ T5924] usb 9-1: SerialNumber: syz
[ 1380.290507][ T5924] usb 9-1: config 0 descriptor??
[ 1380.302965][T23929] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1380.311555][ T5924] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1380.330795][ T5924] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1380.357073][ T5924] scsi host1: microtekX6
[ 1380.363134][T23961] block nbd5: shutting down sockets
[ 1380.381179][   T35] microtek usb (rev 0.4.3): error -90 submitting URB
[ 1380.412435][   T10] microtek usb (rev 0.4.3): error -90 submitting URB
[ 1380.452702][   T10] microtek usb (rev 0.4.3): error -90 submitting URB
[ 1380.492455][   T10] microtek usb (rev 0.4.3): error -90 submitting URB
[ 1380.512560][T22876] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1380.812491][T22876] usb 10-1: Using ep0 maxpacket: 16
[ 1381.222428][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1381.341706][T22876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1381.368460][T22876] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1381.382092][T22876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.528554][T22876] usb 10-1: Product: syz
[ 1381.533021][T22876] usb 10-1: Manufacturer: syz
[ 1381.537826][T22876] usb 10-1: SerialNumber: syz
[ 1381.553525][T22876] usb 10-1: config 0 descriptor??
[ 1381.886134][T22876] usb 10-1: USB disconnect, device number 64
[ 1381.945859][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1381.955029][T23703] Bluetooth: hci6: command 0x1003 tx timeout
[ 1382.092799][   T35] Bluetooth: hci7: Frame reassembly failed (-84)
[ 1382.122520][ T5924] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1382.262418][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.300623][ T5924] usb 6-1: Using ep0 maxpacket: 8
[ 1382.316315][T22876] usb 9-1: USB disconnect, device number 26
[ 1382.329750][ T5924] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1382.351099][ T5924] usb 6-1: config 179 has no interface number 0
[ 1382.364403][ T5924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1382.393152][ T5924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1382.408371][ T5924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1382.420898][ T5924] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1382.432697][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.432836][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1382.450244][ T5924] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1382.467771][ T5924] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1382.518166][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.530372][T23967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1383.302533][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1383.414105][   T29] audit: type=1400 audit(2000000177.940:1976): avc:  denied  { setopt } for  pid=23966 comm="syz.5.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1383.595438][ T5924] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input66
[ 1383.770424][T23967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1383.779202][T23967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1383.862429][ T5830] Bluetooth: hci7: command 0x1003 tx timeout
[ 1383.862944][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110
[ 1383.872580][ T5870] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1384.099687][ T5900] usb 6-1: USB disconnect, device number 44
[ 1384.099704][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1384.116007][ T5900] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1384.116028][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[ 1384.282485][ T5870] usb 9-1: Using ep0 maxpacket: 16
[ 1384.295162][ T5870] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1384.312500][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.328025][ T5870] usb 9-1: Product: syz
[ 1384.334982][ T5870] usb 9-1: Manufacturer: syz
[ 1384.339670][ T5870] usb 9-1: SerialNumber: syz
[ 1384.342870][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1384.426761][ T5870] usb 9-1: config 0 descriptor??
[ 1384.943391][ T5870] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110
[ 1385.382408][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1385.693812][T24004] netlink: 'syz.2.5023': attribute type 5 has an invalid length.
[ 1385.952711][T24013] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:17953
[ 1386.422511][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1386.812843][ T5924] usb 9-1: USB disconnect, device number 27
[ 1387.258205][T24024] CIFS: Unable to determine destination address
[ 1387.462416][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1387.634012][T24029] netlink: 'syz.5.5030': attribute type 19 has an invalid length.
[ 1387.716457][ T5924] kernel write not supported for file /snd/seq (pid: 5924 comm: kworker/0:8)
[ 1388.047875][T24043] CIFS: Unable to determine destination address
[ 1388.184705][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1388.193270][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1388.502435][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1388.873172][ T5900] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1389.082526][ T5900] usb 6-1: Using ep0 maxpacket: 32
[ 1389.089434][ T5900] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1389.101125][ T5900] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1389.112165][ T5900] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1389.133757][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.167687][ T5900] usb 6-1: Product: syz
[ 1389.176884][ T5900] usb 6-1: Manufacturer: syz
[ 1389.181544][ T5900] usb 6-1: SerialNumber: syz
[ 1389.197581][ T5900] usb 6-1: rejected 1 configuration due to insufficient available bus power
[ 1389.219084][ T5900] usb 6-1: no configuration chosen from 1 choice
[ 1389.454977][ T5870] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1389.542534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1390.072375][ T5870] usb 10-1: Using ep0 maxpacket: 32
[ 1390.105169][ T5870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.131624][ T5870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.142432][ T5870] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1390.151576][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.164607][ T5870] usb 10-1: config 0 descriptor??
[ 1390.175615][ T5870] hub 10-1:0.0: USB hub found
[ 1390.294763][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5042'.
[ 1390.382487][ T5870] hub 10-1:0.0: 1 port detected
[ 1390.582388][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1390.630229][ T5870] hub 10-1:0.0: hub_hub_status failed (err = -71)
[ 1390.642443][ T5900] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1390.652630][ T5870] hub 10-1:0.0: config failed, can't get hub status (err -71)
[ 1390.689795][ T5870] usbhid 10-1:0.0: can't add hid device: -71
[ 1390.712573][ T5870] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1390.753644][ T5870] usb 10-1: USB disconnect, device number 65
[ 1390.765963][T24083] bond_slave_1: entered promiscuous mode
[ 1390.779982][T24083] bond0: (slave bond_slave_1): Releasing backup interface
[ 1390.803628][T24083] netlink: 'syz.8.5046': attribute type 2 has an invalid length.
[ 1390.811719][T24083] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[ 1390.944154][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.960742][ T5900] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.987616][ T5900] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1391.622420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1391.988216][ T5900] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1392.012446][ T5900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.012725][ T5870] usb 6-1: USB disconnect, device number 45
[ 1392.064851][ T5900] usb 8-1: config 0 descriptor??
[ 1392.308322][   T29] audit: type=1400 audit(2000000186.940:1977): avc:  denied  { ioctl } for  pid=24098 comm="syz.8.5052" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1392.484539][ T5900] acrux 0003:1A34:0802.001E: item fetching failed at offset 1/5
[ 1392.496227][ T5900] acrux 0003:1A34:0802.001E: parse failed
[ 1392.502751][ T5900] acrux 0003:1A34:0802.001E: probe with driver acrux failed with error -22
[ 1392.525493][T24103] TCP: TCP_TX_DELAY enabled
[ 1392.530752][   T29] audit: type=1400 audit(2000000187.160:1978): avc:  denied  { map } for  pid=24102 comm="syz.8.5053" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1392.662581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1392.687723][T22876] usb 8-1: USB disconnect, device number 62
[ 1392.905494][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5055'.
[ 1392.920424][T24111] FAULT_INJECTION: forcing a failure.
[ 1392.920424][T24111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1392.934368][T24111] CPU: 1 UID: 0 PID: 24111 Comm: syz.8.5055 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1392.934391][T24111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1392.934400][T24111] Call Trace:
[ 1392.934406][T24111]  <TASK>
[ 1392.934413][T24111]  dump_stack_lvl+0x16c/0x1f0
[ 1392.934439][T24111]  should_fail_ex+0x50a/0x650
[ 1392.934469][T24111]  _copy_from_user+0x2e/0xd0
[ 1392.934486][T24111]  move_addr_to_kernel+0x68/0x160
[ 1392.934507][T24111]  __sys_connect+0xb0/0x170
[ 1392.934525][T24111]  ? __pfx___sys_connect+0x10/0x10
[ 1392.934549][T24111]  ? __pfx_ksys_write+0x10/0x10
[ 1392.934573][T24111]  __x64_sys_connect+0x72/0xb0
[ 1392.934586][T24111]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1392.934601][T24111]  do_syscall_64+0xcd/0x250
[ 1392.934622][T24111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.934640][T24111] RIP: 0033:0x7f711258d0a9
[ 1392.934651][T24111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1392.934663][T24111] RSP: 002b:00007f7113480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1392.934676][T24111] RAX: ffffffffffffffda RBX: 00007f71127a6160 RCX: 00007f711258d0a9
[ 1392.934685][T24111] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000009
[ 1392.934692][T24111] RBP: 00007f7113480090 R08: 0000000000000000 R09: 0000000000000000
[ 1392.934700][T24111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.934707][T24111] R13: 0000000000000000 R14: 00007f71127a6160 R15: 00007ffe5c9f91f8
[ 1392.934723][T24111]  </TASK>
[ 1393.702391][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1393.982800][T12887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1393.991125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1394.088218][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'.
[ 1394.233042][   T29] audit: type=1400 audit(2000000188.730:1979): avc:  denied  { map } for  pid=24115 comm="syz.7.5058" path="socket:[89679]" dev="sockfs" ino=89679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1394.742387][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1395.032507][   T29] audit: type=1400 audit(2000000188.730:1980): avc:  denied  { read } for  pid=24115 comm="syz.7.5058" path="socket:[89679]" dev="sockfs" ino=89679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1395.352290][T24132] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:17953
[ 1395.368651][   T29] audit: type=1400 audit(2000000189.930:1981): avc:  denied  { setopt } for  pid=24127 comm="syz.9.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1395.782497][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.453321][   T29] audit: type=1400 audit(2000000191.090:1982): avc:  denied  { mounton } for  pid=24137 comm="syz.7.5064" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[ 1396.557808][T24142] 9pnet_fd: Insufficient options for proto=fd
[ 1396.609863][   T29] audit: type=1326 audit(2000000191.240:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24144 comm="syz.5.5065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1abfb8d0a9 code=0x0
[ 1396.822406][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1396.951709][T24146] syz.9.5063 (24146): drop_caches: 2
[ 1396.985875][T24146] syz.9.5063 (24146): drop_caches: 2
[ 1397.749695][T24168] tipc: Started in network mode
[ 1397.754815][T24168] tipc: Node identity ac14140f, cluster identity 4711
[ 1397.765394][T24168] tipc: New replicast peer: 255.255.255.255
[ 1397.771754][T24168] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1397.801230][ T6143] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1397.862407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1398.683212][T24174] 
[ 1398.685556][T24174] ======================================================
[ 1398.692555][T24174] WARNING: possible circular locking dependency detected
[ 1398.699550][T24174] 6.14.0-rc3-syzkaller-00166-g334426094588 #0 Not tainted
[ 1398.706642][T24174] ------------------------------------------------------
[ 1398.713634][T24174] syz.5.5070/24174 is trying to acquire lock:
[ 1398.719665][T24174] ffff88802b021c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0
[ 1398.728073][T24174] 
[ 1398.728073][T24174] but task is already holding lock:
[ 1398.735421][T24174] ffff888063eeb068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1398.743702][T24174] 
[ 1398.743702][T24174] which lock already depends on the new lock.
[ 1398.743702][T24174] 
[ 1398.754085][T24174] 
[ 1398.754085][T24174] the existing dependency chain (in reverse order) is:
[ 1398.763075][T24174] 
[ 1398.763075][T24174] -> #4 (&pipe->mutex){+.+.}-{4:4}:
[ 1398.770436][T24174]        __mutex_lock+0x19b/0xb10
[ 1398.775446][T24174]        pipe_lock+0x64/0x80
[ 1398.780016][T24174]        iter_file_splice_write+0x1eb/0x10b0
[ 1398.785984][T24174]        do_splice+0x146a/0x1f70
[ 1398.790912][T24174]        __do_splice+0x327/0x360
[ 1398.795835][T24174]        __x64_sys_splice+0x187/0x250
[ 1398.801190][T24174]        do_syscall_64+0xcd/0x250
[ 1398.806195][T24174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.812592][T24174] 
[ 1398.812592][T24174] -> #3 (sb_writers#6){.+.+}-{0:0}:
[ 1398.819964][T24174]        mnt_want_write+0x6f/0x450
[ 1398.825056][T24174]        ovl_create_object+0x12e/0x300
[ 1398.830496][T24174]        lookup_open.isra.0+0x11d2/0x1580
[ 1398.836198][T24174]        path_openat+0x904/0x2d80
[ 1398.841201][T24174]        do_filp_open+0x20c/0x470
[ 1398.846207][T24174]        do_sys_openat2+0x17a/0x1e0
[ 1398.851383][T24174]        __x64_sys_openat+0x175/0x210
[ 1398.856736][T24174]        do_syscall_64+0xcd/0x250
[ 1398.861745][T24174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.868144][T24174] 
[ 1398.868144][T24174] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[ 1398.876809][T24174]        down_read+0x9a/0x330
[ 1398.881468][T24174]        walk_component+0x342/0x5b0
[ 1398.886650][T24174]        path_lookupat+0x17f/0x770
[ 1398.891742][T24174]        filename_lookup+0x221/0x5f0
[ 1398.897008][T24174]        kern_path+0x35/0x50
[ 1398.901580][T24174]        lookup_bdev+0xd9/0x280
[ 1398.906404][T24174]        resume_store+0x1d8/0x460
[ 1398.911405][T24174]        kobj_attr_store+0x55/0x80
[ 1398.916495][T24174]        sysfs_kf_write+0x117/0x170
[ 1398.921671][T24174]        kernfs_fop_write_iter+0x33d/0x500
[ 1398.927452][T24174]        vfs_write+0x5ae/0x1150
[ 1398.932723][T24174]        ksys_write+0x12b/0x250
[ 1398.937555][T24174]        do_syscall_64+0xcd/0x250
[ 1398.942559][T24174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.948956][T24174] 
[ 1398.948956][T24174] -> #1 (&of->mutex){+.+.}-{4:4}:
[ 1398.956140][T24174]        __mutex_lock+0x19b/0xb10
[ 1398.961142][T24174]        kernfs_seq_start+0x4d/0x240
[ 1398.966406][T24174]        seq_read_iter+0x2ab/0x12b0
[ 1398.971584][T24174]        kernfs_fop_read_iter+0x414/0x580
[ 1398.977282][T24174]        copy_splice_read+0x61d/0xb80
[ 1398.982638][T24174]        do_splice_read+0x282/0x370
[ 1398.987817][T24174]        splice_direct_to_actor+0x2a4/0xa40
[ 1398.993690][T24174]        do_splice_direct+0x178/0x250
[ 1398.999041][T24174]        do_sendfile+0xafb/0xe40
[ 1399.003960][T24174]        __x64_sys_sendfile64+0x1da/0x220
[ 1399.009655][T24174]        do_syscall_64+0xcd/0x250
[ 1399.014658][T24174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.021052][T24174] 
[ 1399.021052][T24174] -> #0 (&p->lock){+.+.}-{4:4}:
[ 1399.028061][T24174]        __lock_acquire+0x249e/0x3c40
[ 1399.033414][T24174]        lock_acquire.part.0+0x11b/0x380
[ 1399.039026][T24174]        __mutex_lock+0x19b/0xb10
[ 1399.044028][T24174]        seq_read_iter+0xd8/0x12b0
[ 1399.049122][T24174]        proc_reg_read_iter+0x21d/0x310
[ 1399.054644][T24174]        copy_splice_read+0x61d/0xb80
[ 1399.059996][T24174]        do_splice_read+0x282/0x370
[ 1399.065174][T24174]        splice_file_to_pipe+0x109/0x120
[ 1399.070788][T24174]        do_sendfile+0x3fd/0xe40
[ 1399.075707][T24174]        __x64_sys_sendfile64+0x155/0x220
[ 1399.081488][T24174]        do_syscall_64+0xcd/0x250
[ 1399.086498][T24174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.092896][T24174] 
[ 1399.092896][T24174] other info that might help us debug this:
[ 1399.092896][T24174] 
[ 1399.103098][T24174] Chain exists of:
[ 1399.103098][T24174]   &p->lock --> sb_writers#6 --> &pipe->mutex
[ 1399.103098][T24174] 
[ 1399.114981][T24174]  Possible unsafe locking scenario:
[ 1399.114981][T24174] 
[ 1399.122403][T24174]        CPU0                    CPU1
[ 1399.127740][T24174]        ----                    ----
[ 1399.133078][T24174]   lock(&pipe->mutex);
[ 1399.137212][T24174]                                lock(sb_writers#6);
[ 1399.143866][T24174]                                lock(&pipe->mutex);
[ 1399.150520][T24174]   lock(&p->lock);
[ 1399.154308][T24174] 
[ 1399.154308][T24174]  *** DEADLOCK ***
[ 1399.154308][T24174] 
[ 1399.162424][T24174] 1 lock held by syz.5.5070/24174:
[ 1399.167506][T24174]  #0: ffff888063eeb068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[ 1399.176195][T24174] 
[ 1399.176195][T24174] stack backtrace:
[ 1399.182065][T24174] CPU: 1 UID: 0 PID: 24174 Comm: syz.5.5070 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0
[ 1399.182081][T24174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 1399.182089][T24174] Call Trace:
[ 1399.182094][T24174]  <TASK>
[ 1399.182099][T24174]  dump_stack_lvl+0x116/0x1f0
[ 1399.182118][T24174]  print_circular_bug+0x490/0x760
[ 1399.182137][T24174]  check_noncircular+0x31a/0x400
[ 1399.182154][T24174]  ? __pfx_check_noncircular+0x10/0x10
[ 1399.182170][T24174]  ? mark_lock+0xb5/0xc60
[ 1399.182188][T24174]  ? lockdep_lock+0xc6/0x200
[ 1399.182202][T24174]  ? __pfx_lockdep_lock+0x10/0x10
[ 1399.182216][T24174]  __lock_acquire+0x249e/0x3c40
[ 1399.182237][T24174]  ? __pfx___lock_acquire+0x10/0x10
[ 1399.182254][T24174]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1399.182270][T24174]  lock_acquire.part.0+0x11b/0x380
[ 1399.182288][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182311][T24174]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1399.182330][T24174]  ? rcu_is_watching+0x12/0xc0
[ 1399.182346][T24174]  ? trace_lock_acquire+0x14e/0x1f0
[ 1399.182363][T24174]  ? kasan_save_stack+0x33/0x60
[ 1399.182376][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182393][T24174]  ? lock_acquire+0x2f/0xb0
[ 1399.182410][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182428][T24174]  __mutex_lock+0x19b/0xb10
[ 1399.182443][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182461][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182479][T24174]  ? __pfx___mutex_lock+0x10/0x10
[ 1399.182495][T24174]  ? alloc_pages_bulk_noprof+0xa46/0x1390
[ 1399.182512][T24174]  ? seq_read_iter+0xd8/0x12b0
[ 1399.182529][T24174]  seq_read_iter+0xd8/0x12b0
[ 1399.182548][T24174]  ? __kmalloc_noprof+0x23b/0x510
[ 1399.182563][T24174]  proc_reg_read_iter+0x21d/0x310
[ 1399.182576][T24174]  copy_splice_read+0x61d/0xb80
[ 1399.182597][T24174]  ? __pfx_copy_splice_read+0x10/0x10
[ 1399.182615][T24174]  ? __pfx___mutex_lock+0x10/0x10
[ 1399.182633][T24174]  ? __pfx_copy_splice_read+0x10/0x10
[ 1399.182651][T24174]  do_splice_read+0x282/0x370
[ 1399.182669][T24174]  splice_file_to_pipe+0x109/0x120
[ 1399.182690][T24174]  do_sendfile+0x3fd/0xe40
[ 1399.182711][T24174]  ? __pfx_do_sendfile+0x10/0x10
[ 1399.182728][T24174]  ? __might_fault+0xe3/0x190
[ 1399.182744][T24174]  ? __might_fault+0xe3/0x190
[ 1399.182761][T24174]  __x64_sys_sendfile64+0x155/0x220
[ 1399.182776][T24174]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1399.182792][T24174]  do_syscall_64+0xcd/0x250
[ 1399.182808][T24174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1399.182828][T24174] RIP: 0033:0x7f1abfb8d0a9
[ 1399.182839][T24174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1399.182852][T24174] RSP: 002b:00007f1abd9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1399.182864][T24174] RAX: ffffffffffffffda RBX: 00007f1abfda6080 RCX: 00007f1abfb8d0a9
[ 1399.182873][T24174] RDX: 0000400000000240 RSI: 0000000000000007 RDI: 0000000000000009
[ 1399.182885][T24174] RBP: 00007f1abfc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1399.182893][T24174] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 1399.182900][T24174] R13: 0000000000000000 R14: 00007f1abfda6080 R15: 00007ffd6a30c3b8
[ 1399.182912][T24174]  </TASK>
[ 1399.491850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1399.512660][T22876] tipc: Node number set to 2886997007
[ 1399.730554][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1399.738823][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1399.862368][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1400.512517][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1401.542414][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1402.582545][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1403.622407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1404.672503][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1406.102998][T15238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1407.142411][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1408.182378][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog