last executing test programs:

5m28.902879476s ago: executing program 1 (id=474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x101, 0x20, r0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0x5646, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000120000000800080003000000180001801400020076657468305f746f5f62617461647600080009"], 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c00000003060500000000e58faef26b04c536d92f5600000000100300000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r6 = getpid()
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd27, 0x24dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xfff1, 0x8}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000040)={@private1, 0xb166, 0x1, 0x1, 0xc, 0x40, 0xfff0}, 0x20)
fchdir(r7)
syz_clone3(&(0x7f0000001340)={0x100004000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1f}, 0x0, 0x0, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[r6], 0x1, {r7}}, 0x58)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r2, 0x1d)

5m27.537221655s ago: executing program 1 (id=479):
r0 = gettid()
clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080))
tkill(r0, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000140)={0x2000, 0x2000, 0x9, 0x1, 0x1})
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x30, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r4, 0x8, 0x0)
close(r4)
fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "7ca2ebde37e4a054d9e07b273c3f7fbf3e04b810"}, 0x15, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

5m25.380405219s ago: executing program 1 (id=487):
mkdir(0x0, 0x0)
chdir(0x0)
creat(&(0x7f0000001100)='./file0\x00', 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = io_uring_setup(0x3580, &(0x7f0000000080)={0x0, 0x328c, 0x80, 0x0, 0xfffffffc})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x18, 0x0, 0x0)
mknod$loop(&(0x7f00000000c0)='./file1\x00', 0x0, 0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x90081)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0x100}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00'})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

5m24.150104438s ago: executing program 1 (id=491):
modify_ldt$write(0x1, &(0x7f0000000040)={0x400, 0xffffffffffffffff}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x98181, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r2, 0x0, 0x2, 0xfffffffffffffffb})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2, 0x0, 0x9, 0x9})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$bsg(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'team_slave_1\x00'}}, 0x1e)
ioctl$PPPOEIOCDFWD(r4, 0x80047437, 0x1000000000000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r5 = dup(r3)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

5m24.097167218s ago: executing program 1 (id=492):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
readv(r0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysinfo(&(0x7f0000000000)=""/114)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
io_getevents(0x0, 0x37d1, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x428000, 0x8)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchownat(r4, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r5, 0x400)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000640)=@arm64_sys={0x603000000013deae, &(0x7f0000000580)=0xff})
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

5m23.118083833s ago: executing program 1 (id=494):
r0 = socket(0x26, 0x800, 0x5)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
dup(0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x801000, 0x3a, 0x2001000, 0x3a, 0x0, 0x4000, 0x2}, 0x1c)
recvmmsg(r3, &(0x7f0000000180), 0x0, 0x60, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x8008330e, 0x0)

5m7.044574653s ago: executing program 32 (id=494):
r0 = socket(0x26, 0x800, 0x5)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
dup(0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x801000, 0x3a, 0x2001000, 0x3a, 0x0, 0x4000, 0x2}, 0x1c)
recvmmsg(r3, &(0x7f0000000180), 0x0, 0x60, 0x0)
ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r1, 0x8008330e, 0x0)

50.797903647s ago: executing program 4 (id=1349):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x2016}}}, 0x7)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
timerfd_create(0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x800, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
preadv(r1, &(0x7f0000000300), 0x0, 0x1, 0x10)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r9)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r9, 0x0, 0x0}, 0x10)

50.257348884s ago: executing program 4 (id=1354):
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000100)={0x4000000004003, 0xffffffffffffffff}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bd840f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273222225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7dedc3c20e815f6e2cedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a504b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e5", 0x2000, 0x0)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x18, 0x140b, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLL', 0xd, 0x1c})
r5 = epoll_create1(0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLL', 0x10, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0x2})

46.782125848s ago: executing program 4 (id=1360):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x801)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=<r7=>0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100d58d7436d1cd98ec3ceb892c196708274c2659dcdd72e3632478bc7a251d099229781feef26ae6a3d6bf199d2e28e2b0575486688733d08a151790199e3d63228affcf2784ac8cc857ddb11c6e2718703fee8370cb1f5517c206f2c8d55aa7fc2f0a35541d32b9b411f46085f288fb54bc9c6b6d2fa5ad71285a8bb72a", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="340000002bc2ee8e788d3b148b02202f8a4c18c4081c225e4b71425e1acf81ec4ad676e7dc330d6a46d0ab637b811b7bd5c0b9017b8b218c6a8c71da04d650f270903d0e1e52d09597b362890339aed72a5f201a00d6d0d2232573537f59abf86b8e4071d9c651167cdb37b984f952fdc5e1c6b7b49cf1d973a79424225a003bc4dac0fc583eb8b492c35e04ed22bec47177025f4f9337ae0e7ca86ed7eb664b353be9342aacb340d4bbcad82ac24bc384a123135c38979fb10b41740d921d4d283c88c047c7f9e10d7d6830675033c50e3bfccc18697e52e826766a92d64489612e044eb8a99ddf2c9a1f6049bcda3bfc2d31cdc634ee022407e8323f5ed80d7c49d31deaf2868ce21d6212629b0a9ba10fa5bc8dd4f3e10871791bf58468b1df7848a5a7b65b02a1e4ab7432e76912b08399cbc700000000000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r9=>0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x60}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x90}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0)

41.736179433s ago: executing program 4 (id=1364):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x20}}, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x100000, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1f4, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c0, 0x3, 0x0, 0x1, [{0x1a8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x185, 0x2, 'bitmap:port\x00qu#\xd3\x9e\xd0\xbd\xea\x88\xceS\xca0\xffJ\x9b\x8bE\xf5\xd0V\xdaC\x8aX\xba^M\"\xfa\xb3Ea:\xa9\xfbzx\xce\xd6\xcb\xdf\x9bn\x80\xf9\'E\x10R\xee\x9a\xfd\x1bR\x99\x8d|\xeccY#@Z\x94\xfa9\x8c\xd1=D)\x9a\x8c\xc7\xdbS\xe9\xc3\v6J@\xb7\xd5\xbe\x06\xb2\x8e[\xd9@\xfe\xd3\xc5\xa7\x99\x174Aa\x95\x8d\xe9\x18\xe7\xbb\xed\x8cq\xe6\x98\xf6\xb4P\xca\x94\x1d\xf7\xb8\xd9\xdf\xac\xb9\x8d\x85\xb7RS\xee\x1f\xd7;MKK\x84:\xe6v\x1eZA\xbe\xe0\xad{\xbe\xda\xe5\x1f\xc0\xacO\xe47<\xdf\xed\xe8\xd3D\x1e\x99!z\xe7*\xd6\xd9n\x9e\xb1A\xa1:\x9e1\xe8\x12}A\x19\xec\xea;\xe9\xc6#\x91\xdb\xb5\xfcx\x06g\xc4\x9d\x8d\x05\x0f8L\x15\x17T\xd5\x05\xec\xee\xd5\x06\xbdx\xa1V$\xe6p\xff&\xb8Tc=k;\x04\x98\xdc\xa0|]\x06\xaf\x98\xa3\xd5\xf9\xfb\xbc\xbb\xa4\xcc5\xbd\x18}\x14X\xbbQ\xb5a\xd0\xf0\xeep2?%\xb5\xe7qt\xfe2\x05\x85<\xd7\xb6\x83+\xfc(\x92\xc3\xb8b\x01\xace\xbe\xc0a\xcc\xae0\x14!4QF\x9d\xaa!\xc7\"<\xa5-5w\xc9a\xf5G\xbd\xbc*mnN\xb3\x12 \xa7\xb2M\x86*\xb9\x1c(\x8e\xfc\xdc@\xad\xd1\x9b\xb07I\xc5xd\xa3p\x9a7\xd9\x10\x17\xa5\xb30A;\xc8\x82\x84Y\xd8g\xb6\xf8H4X\x1a\xb6\xb5\x82H\x99\x82\xa9C\xbaa\xa1'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1f4}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0xa1, 0x2a, 0x10, 0x102c, 0x6151, 0x44e6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xcc, 0x4e}}]}}]}}, 0x0)

40.52868168s ago: executing program 2 (id=1365):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2, @in6=@private0, 0x2000, 0x0, 0x0, 0x1, 0xa}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0xeb}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x80, 0x0, 0x0, 0x3, 0xfffbfffd, 0x2, 0x20000}}, 0xe8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x41, 0x9, @private0}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r3, 0x28543634fae43ad}, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000040001000004000000000000ea909b202ec65c5ce26df2ce1f3d683fecc71608818f204e9c94d5f072f8d5e7290f1474ffff1aedebff598328652944fd513fafba9126f34b9b1846e288bec02030556715cd955abc74d4fdc905d5b8ef7fe8e2b526670449bafc709cfc4f31306be1593576c6fb8595f10b0aa0606d1ba4c02fd6c48537a529311a1b4531c7bdefe1f8c5d0e9b945d26c9146829866dc20bf52d5804a246dfba8e38e7dc7abec6830e8b1bfe38d616f5e5a8be98d0be3869f5e411e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x78, 0x91, 0xf, 0x8, 0x10c4, 0xeac1, 0xf792, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe3, 0x9b, 0xe9}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000003a000b00000000000000000002000000f87884fdd39a193cd8eeb30266432a6a038e9b01ad115cd0f95e4634293c5ed0d70e327a7de1b2502f6f321376a684fde4ed4152fdb93073f6d72ac1e07727a3a14aea234dcd2a151a3dc65e2673caf7ed3990f6e86ed4c5c82b332b1beefe2d5b26b908754f37198bd6c6d0cfbd61e30cfa1c23b439c59ebb62acff50f1a995cd91db6b2500"], 0x8c}}, 0x0)

38.209725728s ago: executing program 3 (id=1367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0x1002, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@arp={@loopback, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'syz_tun\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @loopback, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'ip6gre0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001718a1f573f86f9bf1b34ef6fe4ce3c8e76b39ca9e5af9377a133d4ef4cd7441ec02fbaf6ae5ba8dbd2ec906ffcc0ddd49a7310a0f5f9fcb1c2e803137be87803d69c68f688b043317431ab1f9c3da6ebd2006cc2"], 0x7c}}, 0x0)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000480)=""/4096, 0x1000)
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000000000000020000000900010073797a30"], 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'xfrm0\x00'})
sigaltstack(&(0x7f0000000080)={&(0x7f0000000000)=""/94, 0x2, 0x5e}, &(0x7f0000000180)={&(0x7f00000000c0)=""/132, 0x0, 0x84})

38.075538651s ago: executing program 0 (id=1368):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x280100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r4, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
accept$alg(r2, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x4f}, 0xfffffdef)

36.586918099s ago: executing program 2 (id=1369):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10)
r5 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0)
close(r5)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x400040)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100"], 0x0)
eventfd(0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

36.195178409s ago: executing program 4 (id=1370):
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000100)={0x4000000004003, 0xffffffffffffffff}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x18, 0x140b, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLL', 0xd, 0x1c})
r5 = epoll_create1(0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLL', 0x10, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0x2})

35.105926159s ago: executing program 4 (id=1372):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2, @in6=@private0, 0x2000, 0x0, 0x0, 0x1, 0xa}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0xeb}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x80, 0x0, 0x0, 0x3, 0xfffbfffd, 0x2, 0x20000}}, 0xe8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x41, 0x9, @private0}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r3, 0x28543634fae43ad}, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000040001000004000000000000ea909b202ec65c5ce26df2ce1f3d683fecc71608818f204e9c94d5f072f8d5e7290f1474ffff1aedebff598328652944fd513fafba9126f34b9b1846e288bec02030556715cd955abc74d4fdc905d5b8ef7fe8e2b526670449bafc709cfc4f31306be1593576c6fb8595f10b0aa0606d1ba4c02fd6c48537a529311a1b4531c7bdefe1f8c5d0e9b945d26c9146829866dc20bf52d5804a246dfba8e38e7dc7abec6830e8b1bfe38d616f5e5a8be98d0be3869f5e411e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r7, 0x333, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0xa60d000000000000, 0x0, 0x40}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x78, 0x91, 0xf, 0x8, 0x10c4, 0xeac1, 0xf792, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe3, 0x9b, 0xe9}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000003a000b00000000000000000002000000f87884fdd39a193cd8eeb30266432a6a038e9b01ad115cd0f95e4634293c5ed0d70e327a7de1b2502f6f321376a684fde4ed4152fdb93073f6d72ac1e07727a3a14aea234dcd2a151a3dc65e2673caf7ed3990f6e86ed4c5c82b332b1beefe2d5b26b908754f37198bd6c6d0cfbd61e30cfa1c23b439c59ebb62acff50f1a995cd91db6b2500"], 0x8c}}, 0x0)

33.326110885s ago: executing program 2 (id=1373):
r0 = inotify_init()
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="e29e696e8443b7be75f5b2ce528707b68a754141c4add764540b6d671b02a8c210fa275254b8b9c7fac162ff45b532307e471e55f10c1a7d81ea7eca21e0a1ed1b3f38d8cfbcf2f3339876b223486fdc9256e8e3f89afc4fd1c0cbe92ddd3d6fd0ebbb64d628540121", @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"})
r5 = dup(r4)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x82f6, 0xff, "0800000000000002"})
read(r5, &(0x7f0000000c80)=""/4096, 0x1000)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
accept(0xffffffffffffffff, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x5, 0xc00)

32.977914666s ago: executing program 0 (id=1374):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c886800000042000100ff030000000000000a001c801fd6bcc39f08"], 0x1c}], 0x1, 0x0, 0x0, 0x4044054}, 0x6010801)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000001100)=[{{&(0x7f0000000240)=@llc={0x1a, 0xf, 0x0, 0x4, 0x9, 0xf7}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="88726c4e72937f5f023480079909670487786a9d5a445ff7ed481ef444ff60d511ac790f36456cd150f143dfa4c1368c7b7e735c6ef4816d1341f2806d71f87dcb7db02a78dd4c9b9f03ca86c63f0e16a65db7297205d2c8b185a5bfad8f2a4321b78abf", 0x64}, {&(0x7f0000000500)="1f6efffb188858aebea57602ae53c03a34e1e0709827d1b621edcbf7b6168c0ba9ce3ee9e9370dcd937c3ae99843654cb34d58a0ac94ab9f435eddbc562e84130d7494445c61f41b6cc9c80189fb43334105bc7ce272e6d15c969261bae18db90669eb757969f7364bd351dbe31ef4d63d54e4f7319744079ba8c1ab2bebc1e75989f082c1989d9aac1d1a10f83583ea13d6c09a2c7e68a8ea89f13f799ffb30d16900087c", 0xa5}, {&(0x7f00000005c0)="0e8b0de81e2f7d0a8ad192afa5929aef5ed7b43c6cdb300f5f79b6adf5be3fbc0260d9f59f415bdebc0b0a92577d6fe147bb0e2e7acc333ea61ebb0d0ccee49b4cf50d4d78cbff9accaf85ba491f8063c081d5a184f759d228734c1b62ecca3f09aa0780040b10cf69e4dfc9dcc258ad8fd48a3df01b6deae72a60976c6ac01556aa13d7088e82f154000481750e0dec45961b574a2251e65f13b1ffa24d55d5dfb22176da2c13276d040b076581ea20038e2afdd735cf24265d158ffdb78f91aead36c90036a5df6a824b613191f476ece7dcb42a7e159e09da0432fb2ff315d86750634d71d2d5c2246be2d0a6", 0xee}, {&(0x7f00000006c0)="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", 0xfe}], 0x4, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0xd3bb}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x5227}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xc1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xd8}}, {{&(0x7f0000000940)=@ll={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000008c0)="5081a8ce171214aac9", 0x9}, {&(0x7f00000009c0)="6945d23c23221d8de4ff1b5c77718244fe1741ed7af43b177536dce6e76bc07d51b881f3be82572e669e3a1977e4c45a9251ad7b637f954fb32ae043a62ba51f0e7d1c9748762add9d621efe1c7dade9952cfed2a5f9f1e3545dce4a2ee5c501efc454150213b2b7d78818ff500a2863a3d4a5cf1e1d5929f3409bf2c7a748933e3dae5fc0128b3b6c6e773f1e4231230e0fa5043f8399f123fecfd06d603f81e434268b90", 0xa5}, {&(0x7f0000000a80)="38bf592162eb85b691cff6cbde5818dc3559d8c85847", 0x16}, {&(0x7f0000000ac0)="be272bae526e590ec3992740052d92c5216148c25c03323345e52e5810ffb83a6c00febd0ed86339b59ae2c406c546bcd55cb7c9c413d91f4bd097a7329c6f944ae3de54af1fa8fea56668314e041691dc429a9374e28e1e25607ca817c2386815cd8a655c14973f34a47adecd94cfc6376566919980814a46a3177cb5c599b5d0a294568110ed1a3e739560cabf496d54486c8c620e0e960d0f4f77b5744427779622a4d8905ee378ed8c7ad7ab4092c716ec85061ab985863fe76d0089a10890b532116dcb029428d9da524f9a6e64b434", 0xd2}, {&(0x7f0000000bc0)="feeeb71d361f0d55b6e646b5a277881eccef5aec429491e02506fec3671516ea575b30817fd29b1859905b2b4934ba8500f746962c092403a91f34b3699cad0ebaaad51eedc680fcc3d9ea588e0f1e8f141f315dac4a6e5d9efc336ce3d82335e1492bb3bfafef37b9fc8d521376ddb2120478c14388f5af07ce1714d521f42ae04f59d4c456aa17aba4", 0x8a}, {&(0x7f0000000c80)="6f73494059ada624009af718ede42c6edfb29b493e85be7082f91e6dcb0c89eb4589d4923ab872f58c902c", 0x2b}, {&(0x7f0000000cc0)="87d9f215fe5028ff2fe83cad3d6f288e3f906b8eaaeff20eb16a86c1f9f9735b68641016e0f00695bf5fd5f73b55fcf814bbd46edd348058c09fb6cb325b1bf3b60b18b2a7bd7e2c756b8006f86ea9ec814c7db555679c50d51c529cbb3f4b13448848717a02214d2836717957e215cb53d96929c9a22fe34980d0dcc37bfc6500fb685114aff337e289f3b06c97e85ce2132aaf384a26194c5d0b09b120d2e88f5dcd93b781371e002d19abaede823059f7736e864c1a0885d521", 0xbb}, {&(0x7f0000000d80)="4bcc831ef2cff58f485e508a9cd08b5fd98c3f4084736283ef12f2fb055bd8a970c5ed33eecc777c739e92d47c109aaf5259e42a2cee8afe83f420a13489be6429a16840b5099daeb286880a9dbf2d9c7cff9e652da234a74ecd6697198bb1530104d0d923e070390e176e2d139e8331628929f3ca6d2a772f3a3a393da28c0a1b345d7b4d6eee5e7ec7fbd71b6c91cc10eb954a629ac294d7bca00acc4ac541dbfd34eed9dfc464feaa5f25930811ff66c3a9662d2002d8e59a3ab5b148249775dde13f5e70438328b52330eed06565848c1a330cd61c16441b11bddb434adafc9d91223eb4ae2601444f6c6b60", 0xee}], 0x8, &(0x7f0000000f00)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x18}}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip6_vti0\x00'}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000fc0)="7139f405497615b7d978cfecd5de8b59aea07aaa938cf6dbed932e0d590d00b97c021fb193c953fc527ee096add14adc42daaf96e3bf3cbd4e62cfd42937b3d0916c42bbf17cb5df1e671ca22674ca11ff4dc6fbb391d5", 0x57}], 0x1, &(0x7f0000001080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5fc}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}], 0x3, 0x4000000)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])

32.816371643s ago: executing program 3 (id=1376):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48})
close(r0)

28.677248803s ago: executing program 0 (id=1377):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x801)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=<r7=>0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100d58d7436d1cd98ec3ceb892c196708274c2659dcdd72e3632478bc7a251d099229781feef26ae6a3d6bf199d2e28e2b0575486688733d08a151790199e3d63228affcf2784ac8cc857ddb11c6e2718703fee8370cb1f5517c206f2c8d55aa7fc2f0a35541d32b9b411f46085f288fb54bc9c6b6d2fa5ad71285a8bb72a", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"/319, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r9=>0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x60}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x90}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0)

23.879456774s ago: executing program 5 (id=1378):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x2016}}}, 0x7)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
timerfd_create(0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x800, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x1, 0x10)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r9)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r9, 0x0, 0x0}, 0x10)

22.859277092s ago: executing program 0 (id=1379):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="71eced8e46f62a572261adcf0e51", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10)
r5 = io_uring_setup(0x1de0, &(0x7f0000000440))
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010429bd78000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000040770100200037800b000100626174616476000010000280e2ff01004241544d414e5f4956000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

22.858876603s ago: executing program 5 (id=1380):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000001440)=0x7f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140003000000000000007000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r2 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r2})
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141001, 0x0)

22.62638428s ago: executing program 5 (id=1381):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) (fail_nth: 1)

22.493812537s ago: executing program 3 (id=1382):
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000100)={0x4000000004003, 0xffffffffffffffff}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0)
madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x18, 0x140b, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLL', 0xd, 0x1c})
r5 = epoll_create1(0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLL', 0x10, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0x2})

21.202165863s ago: executing program 2 (id=1383):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x280100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r6 = accept$alg(r2, 0x0, 0x0)
r7 = dup(r6)
write$FUSE_INIT(r7, &(0x7f0000000080)={0x4f}, 0xfffffdef)

20.320134036s ago: executing program 5 (id=1384):
r0 = socket(0x10, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0xa, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x32) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a80180005"], 0x3c}}, 0x0) (async)
setresuid(0x0, r4, 0x0) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

19.863207855s ago: executing program 2 (id=1385):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
landlock_create_ruleset(&(0x7f0000000200)={0x65d5}, 0x10, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {}, {}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

19.862331836s ago: executing program 3 (id=1386):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r3=>0x0})
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='+\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000d89000/0x2000)=nil, 0x2000, 0x11)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r3, r1, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$kcm(0x21, 0x2, 0x2)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
pipe2$watch_queue(0x0, 0x80)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000089ab0a405e04450400df0102030109020700000000000009040000017b"], 0x0)
accept$unix(r6, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000440)={0x9, {{0xa, 0x4e20, 0x0, @mcast2, 0x1}}, {{0xa, 0x4e22, 0xb736, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}}}, 0x108)
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
close(r0)

19.805716801s ago: executing program 33 (id=1372):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2, @in6=@private0, 0x2000, 0x0, 0x0, 0x1, 0xa}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0xeb}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x80, 0x0, 0x0, 0x3, 0xfffbfffd, 0x2, 0x20000}}, 0xe8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x41, 0x9, @private0}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r3, 0x28543634fae43ad}, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000040001000004000000000000ea909b202ec65c5ce26df2ce1f3d683fecc71608818f204e9c94d5f072f8d5e7290f1474ffff1aedebff598328652944fd513fafba9126f34b9b1846e288bec02030556715cd955abc74d4fdc905d5b8ef7fe8e2b526670449bafc709cfc4f31306be1593576c6fb8595f10b0aa0606d1ba4c02fd6c48537a529311a1b4531c7bdefe1f8c5d0e9b945d26c9146829866dc20bf52d5804a246dfba8e38e7dc7abec6830e8b1bfe38d616f5e5a8be98d0be3869f5e411e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r7, 0x333, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0xa60d000000000000, 0x0, 0x40}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x78, 0x91, 0xf, 0x8, 0x10c4, 0xeac1, 0xf792, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe3, 0x9b, 0xe9}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000003a000b00000000000000000002000000f87884fdd39a193cd8eeb30266432a6a038e9b01ad115cd0f95e4634293c5ed0d70e327a7de1b2502f6f321376a684fde4ed4152fdb93073f6d72ac1e07727a3a14aea234dcd2a151a3dc65e2673caf7ed3990f6e86ed4c5c82b332b1beefe2d5b26b908754f37198bd6c6d0cfbd61e30cfa1c23b439c59ebb62acff50f1a995cd91db6b2500"], 0x8c}}, 0x0)

19.794300565s ago: executing program 0 (id=1388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000099a7e8ee19a46a56273", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{}], &(0x7f00000001c0)=0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r4, 0x0, 0x6042001)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
kexec_load(0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000000800003000000"], 0x14}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

18.044116175s ago: executing program 0 (id=1389):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x280100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = dup(r6)
write$FUSE_INIT(r7, &(0x7f0000000080)={0x4f}, 0xfffffdef)

16.624142751s ago: executing program 3 (id=1390):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x801)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=<r7=>0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100d58d7436d1cd98ec3ceb892c196708274c2659dcdd72e3632478bc7a251d099229781feef26ae6a3d6bf199d2e28e2b0575486688733d08a151790199e3d63228affcf2784ac8cc857ddb11c6e2718703fee8370cb1f5517c206f2c8d55aa7fc2f0a35541d32b9b411f46085f288fb54bc9c6b6d2fa5ad71285a8bb72a", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="340000002bc2ee8e788d3b148b02202f8a4c18c4081c225e4b71425e1acf81ec4ad676e7dc330d6a46d0ab637b811b7bd5c0b9017b8b218c6a8c71da04d650f270903d0e1e52d09597b362890339aed72a5f201a00d6d0d2232573537f59abf86b8e4071d9c651167cdb37b984f952fdc5e1c6b7b49cf1d973a79424225a003bc4dac0fc583eb8b492c35e04ed22bec47177025f4f9337ae0e7ca86ed7eb664b353be9342aacb340d4bbcad82ac24bc384a123135c38979fb10b41740d921d4d283c88c047c7f9e10d7d6830675033c50e3bfccc18697e52e826766a92d64489612e044eb8a99ddf2c9a1f6049bcda3bfc2d31cdc634ee022407e8323f5ed80d7c49d31deaf2868ce21d6212629b0a9ba10fa5bc8dd4f3e10871791bf58468b1df7848a5a7b65b02a1e4ab7432e76912b08399cbc700"/319, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r9=>0x0)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x60}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x90}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}, "060086dd030020a9"}}}}}, 0x0)

16.623881008s ago: executing program 2 (id=1391):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0x5646, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000120000000800080003000000180001801400020076657468305f746f5f62617461647600080009"], 0x3c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c00000003060500000000e58faef26b04c536d92f5600000000100300000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r5 = getpid()
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd27, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x8}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private1, 0xb166, 0x1, 0x1, 0xc, 0x40, 0xfff0}, 0x20)
fchdir(r6)
syz_clone3(&(0x7f0000001340)={0x100004000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1f}, 0x0, 0x0, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[r5], 0x1, {r6}}, 0x58)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r1, 0x1d)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

15.329949017s ago: executing program 3 (id=1392):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000001440)=0x7f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140003000000000000007000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r2 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r2})
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)

12.604481174s ago: executing program 5 (id=1393):
r0 = inotify_init()
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="e29e696e8443b7be75f5b2ce528707b68a754141c4add764540b6d671b02a8c210fa275254b8b9c7fac162ff45b532307e471e55f10c1a7d81ea7eca21e0a1ed1b3f38d8cfbcf2f3339876b223486fdc9256e8e3f89afc4fd1c0cbe92ddd3d6fd0ebbb64d628540121", @ANYBLOB='\x00'/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"})
r5 = dup(r4)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x82f6, 0xff, "0800000000000002"})
read(r5, &(0x7f0000000c80)=""/4096, 0x1000)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
accept(0xffffffffffffffff, 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x5, 0xc00)

2.73221262s ago: executing program 34 (id=1389):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x280100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = dup(r6)
write$FUSE_INIT(r7, &(0x7f0000000080)={0x4f}, 0xfffffdef)

750.062913ms ago: executing program 35 (id=1391):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x101, 0x20, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0x5646, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000120000000800080003000000180001801400020076657468305f746f5f62617461647600080009"], 0x3c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c00000003060500000000e58faef26b04c536d92f5600000000100300000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r5 = getpid()
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd27, 0x24dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x8}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private1, 0xb166, 0x1, 0x1, 0xc, 0x40, 0xfff0}, 0x20)
fchdir(r6)
syz_clone3(&(0x7f0000001340)={0x100004000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1f}, 0x0, 0x0, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[r5], 0x1, {r6}}, 0x58)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r1, 0x1d)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

70.235669ms ago: executing program 5 (id=1396):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1)

0s ago: executing program 36 (id=1392):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000001440)=0x7f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140003000000000000007000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
r2 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r2})
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)

kernel console output (not intermixed with test programs):

e syscall=257 compat=0 ip=0x7ff510d7e719 code=0x7ffc0000
[  380.910125][   T29] audit: type=1326 audit(1731285718.240:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510d7e719 code=0x7ffc0000
[  380.913696][  T965] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  380.962300][   T29] audit: type=1326 audit(1731285718.240:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510d7e719 code=0x7ffc0000
[  380.962375][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'.
[  381.008657][ T9853] loop2: detected capacity change from 0 to 7
[  381.028670][   T29] audit: type=1326 audit(1731285718.240:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff510d7e719 code=0x7ffc0000
[  381.047422][ T9853] Dev loop2: unable to read RDB block 7
[  381.052464][   T29] audit: type=1326 audit(1731285718.240:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff510d7e719 code=0x7ffc0000
[  381.058719][ T9853]  loop2: unable to read partition table
[  381.103764][  T965] usb 5-1: Using ep0 maxpacket: 16
[  381.143902][ T9853] loop2: partition table beyond EOD, truncated
[  381.150455][ T9853] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  381.150543][  T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.210619][ T5204] Dev loop2: unable to read RDB block 7
[  381.213363][  T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  381.225159][ T5204]  loop2: unable to read partition table
[  381.227259][  T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  381.233578][ T5204] loop2: partition table beyond EOD, 
[  381.243342][  T965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  381.259430][  T965] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.276924][ T5204] truncated
[  381.383264][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.394934][ T5831] usb 4-1: 0:2 : does not exist
[  381.399944][ T5831] usb 4-1: unit 5 not found!
[  381.575741][ T9891] syz.2.1097: attempt to access beyond end of device
[  381.575741][ T9891] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  381.590172][ T9891] (syz.2.1097,9891,0):ocfs2_get_sector:1769 ERROR: status = -5
[  381.597808][ T9891] (syz.2.1097,9891,0):ocfs2_sb_probe:749 ERROR: status = -5
[  381.605157][ T9891] (syz.2.1097,9891,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  381.613824][ T9891] (syz.2.1097,9891,0):ocfs2_fill_super:1178 ERROR: status = -5
[  382.015374][ T5831] usb 4-1: USB disconnect, device number 42
[  382.628966][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.749334][  T965] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  382.758874][  T965] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  382.780457][  T965] usb 5-1: Manufacturer: syz
[  382.787354][  T965] usb 5-1: config 0 descriptor??
[  382.816832][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  383.264315][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.206420][  T965] rc_core: IR keymap rc-hauppauge not found
[  384.214186][  T965] Registered IR keymap rc-empty
[  384.219307][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  384.245659][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.687564][ T9920] openvswitch: netlink: Actions may not be safe on all matching packets
[  384.763662][ T5876] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  384.835303][ T9916] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  384.963626][ T5876] usb 3-1: Using ep0 maxpacket: 32
[  385.035381][ T5876] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  385.079393][ T5876] usb 3-1: config 0 has no interface number 0
[  385.093616][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.117013][ T5831] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  385.143136][ T5876] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  385.162156][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.177431][ T9929] ALSA: seq fatal error: cannot create timer (-22)
[  385.200485][ T5876] usb 3-1: Product: syz
[  385.222685][ T9929] ALSA: seq fatal error: cannot create timer (-22)
[  385.229506][ T5876] usb 3-1: Manufacturer: syz
[  385.411286][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.421532][ T5876] usb 3-1: SerialNumber: syz
[  386.450200][ T5831] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  386.463161][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  386.468051][ T5876] usb 3-1: config 0 descriptor??
[  386.476942][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.484152][  T965] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  386.592077][  T965] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26
[  386.618637][ T5877] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  386.642183][ T5876] smsc95xx v2.0.0
[  386.650605][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  386.689282][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  386.827114][ T9941] hub 6-0:1.0: USB hub found
[  386.834056][ T9941] hub 6-0:1.0: 1 port detected
[  386.893910][ T9941] Invalid ELF header magic: != ELF
[  386.923605][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  386.923642][   T29] audit: type=1400 audit(1731285724.990:1214): avc:  denied  { module_load } for  pid=9934 comm="syz.4.1110" path="/sys/kernel/notes" dev="sysfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  387.173664][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.214784][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.263692][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.303721][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.331181][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.353143][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.383732][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.395502][ T5877] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  387.395917][   T29] audit: type=1400 audit(1731285725.490:1215): avc:  denied  { connect } for  pid=9946 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  387.403715][ T5877] usb 4-1: config 0 has no interface number 0
[  387.403779][ T5877] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  387.443569][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.458979][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  387.464347][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.482349][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  387.504218][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.513547][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  387.548686][ T5877] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  387.555227][  T965] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  387.579816][ T5877] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  387.587795][  T965] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  387.614972][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  387.628116][ T5877] usb 4-1: Product: syz
[  387.632422][ T5877] usb 4-1: SerialNumber: syz
[  387.641263][  T965] usb 5-1: USB disconnect, device number 15
[  387.644460][ T5877] usb 4-1: config 0 descriptor??
[  387.658825][ T5877] cm109 4-1:0.8: invalid payload size 0, expected 4
[  387.671999][ T5877] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input27
[  387.902593][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  387.903633][ T5903] usb 4-1: USB disconnect, device number 43
[  387.909896][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  388.146134][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.440634][ T5903] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  388.549374][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.646027][ T9963] FAULT_INJECTION: forcing a failure.
[  388.646027][ T9963] name failslab, interval 1, probability 0, space 0, times 0
[  388.659447][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.0.1116 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  388.670141][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  388.680207][ T9963] Call Trace:
[  388.683487][ T9963]  <TASK>
[  388.686416][ T9963]  dump_stack_lvl+0x16c/0x1f0
[  388.691103][ T9963]  should_fail_ex+0x497/0x5b0
[  388.695785][ T9963]  ? fs_reclaim_acquire+0xae/0x150
[  388.700905][ T9963]  should_failslab+0xc2/0x120
[  388.705593][ T9963]  __kmalloc_noprof+0xcb/0x400
[  388.710374][ T9963]  tls_get_rec+0xfa/0x670
[  388.714715][ T9963]  ? tls_sw_sendmsg+0x48b/0x23c0
[  388.719664][ T9963]  ? tls_sw_sendmsg+0x499/0x23c0
[  388.724612][ T9963]  tls_sw_sendmsg+0xf3d/0x23c0
[  388.729393][ T9963]  ? avc_has_perm+0x11b/0x1c0
[  388.734083][ T9963]  ? __pfx___schedule+0x10/0x10
[  388.738953][ T9963]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  388.744164][ T9963]  ? irqentry_exit+0x3b/0x90
[  388.748757][ T9963]  ? lockdep_hardirqs_on+0x7c/0x110
[  388.753974][ T9963]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  388.759183][ T9963]  ? inet6_sendmsg+0x4e/0x140
[  388.763866][ T9963]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  388.769076][ T9963]  inet6_sendmsg+0x119/0x140
[  388.773672][ T9963]  __sys_sendto+0x36b/0x4d0
[  388.778181][ T9963]  ? __pfx___sys_sendto+0x10/0x10
[  388.783211][ T9963]  ? __schedule+0xe5d/0x5740
[  388.787840][ T9963]  ? ksys_write+0x1ad/0x260
[  388.792354][ T9963]  __x64_sys_sendto+0xe0/0x1c0
[  388.797132][ T9963]  ? do_syscall_64+0x91/0x250
[  388.801813][ T9963]  ? lockdep_hardirqs_on+0x7c/0x110
[  388.807024][ T9963]  do_syscall_64+0xcd/0x250
[  388.811546][ T9963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.817455][ T9963] RIP: 0033:0x7fb33137e719
[  388.821874][ T9963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.841489][ T9963] RSP: 002b:00007fb332166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  388.849910][ T9963] RAX: ffffffffffffffda RBX: 00007fb331536130 RCX: 00007fb33137e719
[  388.857885][ T9963] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000005
[  388.865862][ T9963] RBP: 00007fb332166090 R08: 0000000000000000 R09: 0000000003000137
[  388.873838][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.881817][ T9963] R13: 0000000000000000 R14: 00007fb331536130 R15: 00007ffce1334bd8
[  388.889807][ T9963]  </TASK>
[  388.934898][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  388.946122][ T5876] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  388.965716][ T5876] usb 3-1: USB disconnect, device number 35
[  390.150057][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.318370][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.335154][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.531487][ T5914] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  392.551498][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.963556][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  392.975229][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  392.992585][ T5914] usb 4-1: config 0 has no interface number 0
[  393.242565][ T9996] openvswitch: netlink: Actions may not be safe on all matching packets
[  393.533863][ T5914] usb 4-1: string descriptor 0 read error: -71
[  393.540137][ T5914] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92
[  393.610311][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.628534][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.703576][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.722516][ T5914] usb 4-1: config 0 descriptor??
[  393.728420][ T5914] usb 4-1: can't set config #0, error -71
[  393.744388][ T5914] usb 4-1: USB disconnect, device number 44
[  394.189177][T10014] openvswitch: netlink: Actions may not be safe on all matching packets
[  394.486646][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.566401][T10013] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  394.733009][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.738928][ T5831] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  394.974891][T10025] FAULT_INJECTION: forcing a failure.
[  394.974891][T10025] name failslab, interval 1, probability 0, space 0, times 0
[  395.009435][   T29] audit: type=1400 audit(1731285733.070:1216): avc:  denied  { listen } for  pid=10026 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  395.030215][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.5.1131 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  395.041001][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  395.051044][T10025] Call Trace:
[  395.054323][T10025]  <TASK>
[  395.057251][T10025]  dump_stack_lvl+0x16c/0x1f0
[  395.061926][T10025]  should_fail_ex+0x497/0x5b0
[  395.066618][T10025]  ? fs_reclaim_acquire+0xae/0x150
[  395.071732][T10025]  should_failslab+0xc2/0x120
[  395.076406][T10025]  __kmalloc_noprof+0xcb/0x400
[  395.081171][T10025]  ? d_absolute_path+0x137/0x1b0
[  395.086106][T10025]  tomoyo_encode2+0x100/0x3e0
[  395.090781][T10025]  tomoyo_encode+0x29/0x50
[  395.095194][T10025]  tomoyo_realpath_from_path+0x19d/0x720
[  395.100914][T10025]  tomoyo_path_number_perm+0x245/0x590
[  395.106366][T10025]  ? tomoyo_path_number_perm+0x232/0x590
[  395.111993][T10025]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  395.118011][T10025]  ? trace_lock_acquire+0x14a/0x1d0
[  395.123228][T10025]  ? lock_acquire+0x2f/0xb0
[  395.127728][T10025]  ? __fget_files+0x40/0x3f0
[  395.132330][T10025]  ? __fget_files+0x244/0x3f0
[  395.137011][T10025]  security_file_ioctl+0x9b/0x240
[  395.142032][T10025]  __x64_sys_ioctl+0xbb/0x220
[  395.146710][T10025]  do_syscall_64+0xcd/0x250
[  395.151213][T10025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.157105][T10025] RIP: 0033:0x7ff1e137e719
[  395.161511][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.181127][T10025] RSP: 002b:00007ff1df7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  395.189566][T10025] RAX: ffffffffffffffda RBX: 00007ff1e1535f80 RCX: 00007ff1e137e719
[  395.197547][T10025] RDX: 0000000020000040 RSI: 00000000400445a0 RDI: 0000000000000004
[  395.205521][T10025] RBP: 00007ff1df7f6090 R08: 0000000000000000 R09: 0000000000000000
[  395.213488][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.221454][T10025] R13: 0000000000000000 R14: 00007ff1e1535f80 R15: 00007ffc6b535ab8
[  395.229439][T10025]  </TASK>
[  395.233862][   T29] audit: type=1326 audit(1731285733.070:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.0.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb33137e719 code=0x0
[  395.271793][T10025] ERROR: Out of memory at tomoyo_realpath_from_path.
[  395.486276][   T29] audit: type=1400 audit(1731285733.580:1218): avc:  denied  { create } for  pid=10018 comm="syz.4.1130" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  395.596695][   T29] audit: type=1400 audit(1731285733.590:1219): avc:  denied  { ioctl } for  pid=10018 comm="syz.4.1130" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  395.760665][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.796989][T10038] FAULT_INJECTION: forcing a failure.
[  395.796989][T10038] name failslab, interval 1, probability 0, space 0, times 0
[  395.809806][T10038] CPU: 1 UID: 0 PID: 10038 Comm: syz.3.1135 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  395.820586][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  395.830663][T10038] Call Trace:
[  395.833955][T10038]  <TASK>
[  395.836901][T10038]  dump_stack_lvl+0x16c/0x1f0
[  395.841600][T10038]  should_fail_ex+0x497/0x5b0
[  395.846310][T10038]  ? fs_reclaim_acquire+0xae/0x150
[  395.851416][T10038]  should_failslab+0xc2/0x120
[  395.856080][T10038]  kmem_cache_alloc_node_noprof+0x71/0x310
[  395.861866][T10038]  ? __alloc_skb+0x2b1/0x380
[  395.866438][T10038]  __alloc_skb+0x2b1/0x380
[  395.870832][T10038]  ? __pfx___alloc_skb+0x10/0x10
[  395.875759][T10038]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  395.881737][T10038]  netlink_alloc_large_skb+0x69/0x130
[  395.887098][T10038]  netlink_sendmsg+0x689/0xd70
[  395.891844][T10038]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.897122][T10038]  ____sys_sendmsg+0xaaf/0xc90
[  395.901876][T10038]  ? copy_msghdr_from_user+0x10b/0x160
[  395.907317][T10038]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.912586][T10038]  ? __pfx___lock_acquire+0x10/0x10
[  395.917764][T10038]  ___sys_sendmsg+0x135/0x1e0
[  395.922424][T10038]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.927607][T10038]  ? lock_acquire+0x2f/0xb0
[  395.932090][T10038]  ? __fget_files+0x40/0x3f0
[  395.936672][T10038]  ? fdget+0x176/0x210
[  395.940723][T10038]  __sys_sendmsg+0x117/0x1f0
[  395.945310][T10038]  ? __pfx___sys_sendmsg+0x10/0x10
[  395.950431][T10038]  ? __fget_files+0x244/0x3f0
[  395.955108][T10038]  do_syscall_64+0xcd/0x250
[  395.959595][T10038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.965474][T10038] RIP: 0033:0x7f78f997e719
[  395.969869][T10038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.989637][T10038] RSP: 002b:00007f78fa807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.998045][T10038] RAX: ffffffffffffffda RBX: 00007f78f9b35f80 RCX: 00007f78f997e719
[  396.006019][T10038] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  396.013972][T10038] RBP: 00007f78fa807090 R08: 0000000000000000 R09: 0000000000000000
[  396.021921][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.029871][T10038] R13: 0000000000000000 R14: 00007f78f9b35f80 R15: 00007ffccc4f09f8
[  396.037832][T10038]  </TASK>
[  396.146308][T10045] ALSA: seq fatal error: cannot create timer (-22)
[  396.160110][   T29] audit: type=1400 audit(1731285734.260:1220): avc:  denied  { unlink } for  pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  396.315456][T10045] ALSA: seq fatal error: cannot create timer (-22)
[  397.064195][T10055] openvswitch: netlink: Actions may not be safe on all matching packets
[  397.217203][T10053] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  397.236061][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.715735][T10065] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[  397.777106][T10066] FAULT_INJECTION: forcing a failure.
[  397.777106][T10066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.790338][T10066] CPU: 0 UID: 0 PID: 10066 Comm: syz.0.1140 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  397.801098][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  397.811157][T10066] Call Trace:
[  397.814430][T10066]  <TASK>
[  397.817366][T10066]  dump_stack_lvl+0x16c/0x1f0
[  397.822102][T10066]  should_fail_ex+0x497/0x5b0
[  397.826807][T10066]  strncpy_from_user+0x3b/0x2c0
[  397.831680][T10066]  getname_flags.part.0+0x8f/0x550
[  397.836811][T10066]  getname_flags+0x93/0xf0
[  397.841216][T10066]  user_path_at+0x24/0x60
[  397.845541][T10066]  path_listxattr+0x99/0x160
[  397.850148][T10066]  ? ksys_write+0x1ad/0x260
[  397.854675][T10066]  ? __pfx_path_listxattr+0x10/0x10
[  397.859907][T10066]  do_syscall_64+0xcd/0x250
[  397.863150][ T5914] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  397.864413][T10066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.864445][T10066] RIP: 0033:0x7fb33137e719
[  397.864462][T10066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.901876][T10066] RSP: 002b:00007fb3321a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  397.910277][T10066] RAX: ffffffffffffffda RBX: 00007fb331535f80 RCX: 00007fb33137e719
[  397.918236][T10066] RDX: 000000000000006f RSI: 0000000020000280 RDI: 00000000200001c0
[  397.926210][T10066] RBP: 00007fb3321a8090 R08: 0000000000000000 R09: 0000000000000000
[  397.934197][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.942156][T10066] R13: 0000000000000000 R14: 00007fb331535f80 R15: 00007ffce1334bd8
[  397.950147][T10066]  </TASK>
[  397.953241][    C0] vkms_vblank_simulate: vblank timer overrun
[  398.033537][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  398.040143][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  398.049010][ T5914] usb 4-1: config 0 has no interface number 0
[  398.062261][ T5914] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92
[  398.082543][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.090946][ T5914] usb 4-1: Product: syz
[  398.098436][ T5914] usb 4-1: Manufacturer: syz
[  398.103167][ T5914] usb 4-1: SerialNumber: syz
[  398.109750][ T5914] usb 4-1: config 0 descriptor??
[  398.119359][ T5914] usb 4-1: selecting invalid altsetting 2
[  398.125194][ T5914] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  398.325142][  T965] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  398.396956][ T5914] net_ratelimit: 1 callbacks suppressed
[  398.396973][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.985666][  T965] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  398.999437][  T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  399.011032][  T965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  399.044161][  T965] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  399.098930][  T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.252919][  T965] usb 1-1: config 0 descriptor??
[  399.474909][T10084] tipc: Started in network mode
[  399.479841][T10084] tipc: Node identity 32f1336df9cf, cluster identity 4711
[  399.487296][T10084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.503685][   T29] audit: type=1400 audit(1731285737.570:1221): avc:  denied  { write } for  pid=10081 comm="syz.4.1146" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  399.516292][T10084] tipc: Resetting bearer <eth:syzkaller0>
[  399.550023][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.562149][   T45] usb 4-1: USB disconnect, device number 45
[  399.769700][  T965] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  399.848024][  T965] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  400.168615][   T29] audit: type=1400 audit(1731285738.270:1222): avc:  denied  { getopt } for  pid=10075 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  400.195607][  T965] usb 1-1: USB disconnect, device number 30
[  400.208679][T10084] tipc: Resetting bearer <eth:syzkaller0>
[  400.799297][   T45] tipc: Node number set to 3409851245
[  400.806639][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.829111][   T29] audit: type=1400 audit(1731285738.270:1223): avc:  denied  { append } for  pid=10075 comm="syz.0.1144" name="file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  400.847309][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.905367][   T29] audit: type=1400 audit(1731285738.270:1224): avc:  denied  { open } for  pid=10075 comm="syz.0.1144" path="/221/file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  400.915325][T10100] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  400.951401][T10100] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  401.015957][   T29] audit: type=1400 audit(1731285738.290:1225): avc:  denied  { accept } for  pid=10075 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  401.036819][   T29] audit: type=1400 audit(1731285738.480:1226): avc:  denied  { getopt } for  pid=10091 comm="syz.2.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  401.327700][ T5914] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  401.793733][  T965] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  401.953689][  T965] usb 3-1: Using ep0 maxpacket: 16
[  401.961012][  T965] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  401.979834][  T965] usb 3-1: config 0 has no interface number 0
[  401.998243][  T965] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  402.038238][  T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.061082][  T965] usb 3-1: Product: syz
[  402.073209][  T965] usb 3-1: Manufacturer: syz
[  402.087853][  T965] usb 3-1: SerialNumber: syz
[  402.112740][  T965] usb 3-1: config 0 descriptor??
[  402.135723][  T965] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  402.422984][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.436966][ T5914] usb 6-1: config 0 has no interfaces?
[  402.454677][ T3501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.464613][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.474612][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.504747][ T5914] usb 6-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.00
[  402.513914][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.521927][ T5914] usb 6-1: Product: syz
[  402.583061][  T965] gspca_spca1528: reg_w err -71
[  402.610422][  T965] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  402.646988][ T5914] usb 6-1: Manufacturer: syz
[  402.647937][  T965] usb 3-1: USB disconnect, device number 36
[  403.023845][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.476326][ T5914] usb 6-1: SerialNumber: syz
[  403.484104][ T5914] usb 6-1: config 0 descriptor??
[  403.504337][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.678810][T10104] openvswitch: netlink: Actions may not be safe on all matching packets
[  403.782378][ T5878] usb 6-1: USB disconnect, device number 11
[  403.904222][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.081744][T10084] tipc: Disabling bearer <eth:syzkaller0>
[  404.433474][ T5880] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  404.603038][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.637549][T10128] FAULT_INJECTION: forcing a failure.
[  404.637549][T10128] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.671567][T10128] CPU: 1 UID: 0 PID: 10128 Comm: syz.3.1158 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  404.682382][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  404.692454][T10128] Call Trace:
[  404.695757][T10128]  <TASK>
[  404.698703][T10128]  dump_stack_lvl+0x16c/0x1f0
[  404.703416][T10128]  should_fail_ex+0x497/0x5b0
[  404.708201][T10128]  _copy_from_user+0x2e/0xd0
[  404.712821][T10128]  sctp_setsockopt+0x204a/0xb810
[  404.717785][T10128]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  404.724578][T10128]  ? __pfx_sctp_setsockopt+0x10/0x10
[  404.729889][T10128]  ? find_held_lock+0x2d/0x110
[  404.734681][T10128]  ? selinux_socket_setsockopt+0x6a/0x80
[  404.740334][T10128]  ? sock_common_setsockopt+0x2e/0xf0
[  404.745745][T10128]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  404.751661][T10128]  do_sock_setsockopt+0x222/0x480
[  404.756703][T10128]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  404.762290][T10128]  ? fdget+0x176/0x210
[  404.766369][T10128]  __sys_setsockopt+0x1a4/0x270
[  404.771215][T10128]  ? __pfx___sys_setsockopt+0x10/0x10
[  404.776582][T10128]  ? fput+0x30/0x390
[  404.780475][T10128]  ? ksys_write+0x1ad/0x260
[  404.784969][T10128]  ? __pfx_ksys_write+0x10/0x10
[  404.789823][T10128]  __x64_sys_setsockopt+0xbd/0x160
[  404.794936][T10128]  ? do_syscall_64+0x91/0x250
[  404.799608][T10128]  ? lockdep_hardirqs_on+0x7c/0x110
[  404.804807][T10128]  do_syscall_64+0xcd/0x250
[  404.809302][T10128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.815198][T10128] RIP: 0033:0x7f78f997e719
[  404.819604][T10128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.839208][T10128] RSP: 002b:00007f78fa807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  404.847613][T10128] RAX: ffffffffffffffda RBX: 00007f78f9b35f80 RCX: 00007f78f997e719
[  404.855577][T10128] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003
[  404.863538][T10128] RBP: 00007f78fa807090 R08: 0000000000000008 R09: 0000000000000000
[  404.871498][T10128] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[  404.879461][T10128] R13: 0000000000000000 R14: 00007f78f9b35f80 R15: 00007ffccc4f09f8
[  404.887435][T10128]  </TASK>
[  406.077946][  T965] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  406.079392][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.096151][ T3543] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  406.347543][T10143] vcan0 speed is unknown, defaulting to 1000
[  406.466366][T10143] lo speed is unknown, defaulting to 1000
[  407.084059][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.115301][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.185534][T10154] FAULT_INJECTION: forcing a failure.
[  408.185534][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.333574][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.4.1163 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  408.344383][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  408.354461][T10154] Call Trace:
[  408.357737][T10154]  <TASK>
[  408.360664][T10154]  dump_stack_lvl+0x16c/0x1f0
[  408.365340][T10154]  should_fail_ex+0x497/0x5b0
[  408.370026][T10154]  _copy_from_user+0x2e/0xd0
[  408.374618][T10154]  kstrtouint_from_user+0xd7/0x1c0
[  408.379738][T10154]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  408.385470][T10154]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  408.391099][T10154]  proc_fail_nth_write+0x84/0x250
[  408.396125][T10154]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  408.401761][T10154]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  408.407386][T10154]  vfs_write+0x24c/0x1150
[  408.411719][T10154]  ? __fget_files+0x23a/0x3f0
[  408.416427][T10154]  ? fdget_pos+0x24c/0x360
[  408.420856][T10154]  ? __pfx_lock_release+0x10/0x10
[  408.425891][T10154]  ? trace_lock_acquire+0x14a/0x1d0
[  408.431094][T10154]  ? __pfx_vfs_write+0x10/0x10
[  408.435858][T10154]  ? __pfx___mutex_lock+0x10/0x10
[  408.440885][T10154]  ? __fget_files+0x244/0x3f0
[  408.445568][T10154]  ksys_write+0x12f/0x260
[  408.449892][T10154]  ? __pfx_ksys_write+0x10/0x10
[  408.454748][T10154]  do_syscall_64+0xcd/0x250
[  408.459246][T10154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.465144][T10154] RIP: 0033:0x7f51add7d1ff
[  408.469552][T10154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  408.489163][T10154] RSP: 002b:00007f51aeb63030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  408.497578][T10154] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51add7d1ff
[  408.505542][T10154] RDX: 0000000000000001 RSI: 00007f51aeb630a0 RDI: 0000000000000004
[  408.513507][T10154] RBP: 00007f51aeb63090 R08: 0000000000000000 R09: 0000000000000000
[  408.521468][T10154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  408.529432][T10154] R13: 0000000000000001 R14: 00007f51adf36058 R15: 00007ffdb4508808
[  408.537410][T10154]  </TASK>
[  409.500524][ T5876] net_ratelimit: 4 callbacks suppressed
[  409.500542][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.938702][   T29] audit: type=1400 audit(1731285748.040:1227): avc:  denied  { map } for  pid=10164 comm="syz.4.1169" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  409.965420][T10168] FAULT_INJECTION: forcing a failure.
[  409.965420][T10168] name failslab, interval 1, probability 0, space 0, times 0
[  409.967458][   T29] audit: type=1400 audit(1731285748.040:1228): avc:  denied  { execute } for  pid=10164 comm="syz.4.1169" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  410.003203][   T29] audit: type=1400 audit(1731285748.070:1229): avc:  denied  { ioctl } for  pid=10164 comm="syz.4.1169" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  410.028786][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.4.1169 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  410.039575][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  410.049656][T10168] Call Trace:
[  410.052935][T10168]  <TASK>
[  410.055873][T10168]  dump_stack_lvl+0x16c/0x1f0
[  410.060591][T10168]  should_fail_ex+0x497/0x5b0
[  410.065297][T10168]  ? fs_reclaim_acquire+0xae/0x150
[  410.070423][T10168]  should_failslab+0xc2/0x120
[  410.075098][T10168]  __kmalloc_noprof+0xcb/0x400
[  410.079853][T10168]  ? d_absolute_path+0x137/0x1b0
[  410.084776][T10168]  tomoyo_encode2+0x100/0x3e0
[  410.089450][T10168]  tomoyo_encode+0x29/0x50
[  410.093878][T10168]  tomoyo_realpath_from_path+0x19d/0x720
[  410.099509][T10168]  tomoyo_path_number_perm+0x245/0x590
[  410.104950][T10168]  ? tomoyo_path_number_perm+0x232/0x590
[  410.110567][T10168]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  410.116575][T10168]  ? trace_lock_acquire+0x14a/0x1d0
[  410.121805][T10168]  ? lock_acquire+0x2f/0xb0
[  410.126288][T10168]  ? __fget_files+0x40/0x3f0
[  410.130865][T10168]  ? __fget_files+0x244/0x3f0
[  410.135557][T10168]  security_file_ioctl+0x9b/0x240
[  410.140580][T10168]  __x64_sys_ioctl+0xbb/0x220
[  410.143895][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.145239][T10168]  do_syscall_64+0xcd/0x250
[  410.145281][T10168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.163685][T10168] RIP: 0033:0x7f51add7e719
[  410.168087][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.187697][T10168] RSP: 002b:00007f51aeb63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  410.196097][T10168] RAX: ffffffffffffffda RBX: 00007f51adf36058 RCX: 00007f51add7e719
[  410.204325][T10168] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000008
[  410.212274][T10168] RBP: 00007f51aeb63090 R08: 0000000000000000 R09: 0000000000000000
[  410.220243][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.228209][T10168] R13: 0000000000000000 R14: 00007f51adf36058 R15: 00007ffdb4508808
[  410.236180][T10168]  </TASK>
[  410.244595][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.254060][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.264439][T10168] ERROR: Out of memory at tomoyo_realpath_from_path.
[  410.271987][T10168] Trying to write to read-only block-device nullb0
[  410.285841][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.544027][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.667800][   T29] audit: type=1400 audit(1731285748.760:1230): avc:  denied  { bind } for  pid=10171 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  410.699712][   T29] audit: type=1400 audit(1731285748.760:1231): avc:  denied  { listen } for  pid=10171 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  410.727270][   T29] audit: type=1400 audit(1731285748.760:1232): avc:  denied  { accept } for  pid=10171 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  410.878847][   T29] audit: type=1326 audit(1731285748.850:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.5.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  410.908015][   T29] audit: type=1326 audit(1731285748.850:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.5.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  411.583003][   T29] audit: type=1326 audit(1731285748.850:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.5.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  411.613470][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.624319][   T29] audit: type=1326 audit(1731285748.850:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.5.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  411.627237][T10183] trusted_key: encrypted_key: insufficient parameters specified
[  411.675263][ T5880] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  411.819760][T10187] siw: device registration error -23
[  412.058853][ T3501] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  412.323378][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  412.467083][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  412.496581][ T5880] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  412.505781][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  412.513909][ T5880] usb 4-1: SerialNumber: syz
[  412.563275][T10194] binder: 10193:10194 ioctl c0306201 0 returned -14
[  412.705736][T10196] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1178'.
[  412.881917][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.890071][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.953637][ T5878] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  413.384938][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'.
[  413.551275][ T5878] usb 3-1: Using ep0 maxpacket: 8
[  413.566637][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  413.578542][ T5878] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  413.598005][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.630849][ T5878] usb 3-1: config 0 descriptor??
[  413.853408][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.869340][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.894599][ T5880] usb 4-1: 0:2 : does not exist
[  413.928087][ T5880] usb 4-1: unit 5: unexpected type 0x0a
[  413.963990][ T5878] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  414.026399][ T5880] usb 4-1: USB disconnect, device number 46
[  414.068281][T10210] ptrace attach of ""[10211] was attempted by "./syz-executor exec"[10210]
[  414.117738][T10213] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1183'.
[  414.255083][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  414.664657][ T5914] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  414.714998][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1185'.
[  415.073769][ T5875] net_ratelimit: 3 callbacks suppressed
[  415.073787][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.105336][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.116420][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.232561][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  415.253543][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.274770][ T5914] usb 4-1: config 0 descriptor??
[  416.503755][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  416.503774][   T29] audit: type=1400 audit(1731285754.380:1258): avc:  denied  { getopt } for  pid=10219 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  416.940621][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.949118][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.997363][ T5914] microsoft 0003:045E:009D.000A: unknown main item tag 0x0
[  417.007362][ T5914] microsoft 0003:045E:009D.000A: unknown main item tag 0x0
[  417.023550][ T5914] microsoft 0003:045E:009D.000A: unknown main item tag 0x0
[  417.030856][ T5914] microsoft 0003:045E:009D.000A: unknown main item tag 0x0
[  417.042897][ T5914] microsoft 0003:045E:009D.000A: unknown main item tag 0x0
[  417.183654][ T5914] microsoft 0003:045E:009D.000A: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0
[  417.195225][ T5914] microsoft 0003:045E:009D.000A: no inputs found
[  417.201645][ T5914] microsoft 0003:045E:009D.000A: could not initialize ff, continuing anyway
[  417.243601][ T5914] usb 4-1: USB disconnect, device number 47
[  417.343801][   T45] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  417.731074][ T5875] usb 3-1: USB disconnect, device number 37
[  417.754632][ T5875] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[  417.790263][   T45] usb 1-1: device descriptor read/64, error -71
[  417.815617][ T3563] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  418.223548][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'.
[  418.834283][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.880756][T10255] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.345492][   T45] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[  419.458343][T10255] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  419.523672][   T45] usb 1-1: device descriptor read/64, error -71
[  419.564051][T10259] FAULT_INJECTION: forcing a failure.
[  419.564051][T10259] name failslab, interval 1, probability 0, space 0, times 0
[  419.574881][T10260] trusted_key: encrypted_key: keylen parameter is missing
[  419.578912][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.3.1194 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  419.594546][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  419.604597][T10259] Call Trace:
[  419.607869][T10259]  <TASK>
[  419.610790][T10259]  dump_stack_lvl+0x16c/0x1f0
[  419.615464][T10259]  should_fail_ex+0x497/0x5b0
[  419.620138][T10259]  ? fs_reclaim_acquire+0xae/0x150
[  419.625247][T10259]  should_failslab+0xc2/0x120
[  419.629920][T10259]  kmem_cache_alloc_node_noprof+0x71/0x310
[  419.635722][T10259]  ? __alloc_skb+0x2b1/0x380
[  419.640313][T10259]  __alloc_skb+0x2b1/0x380
[  419.644732][T10259]  ? __pfx___alloc_skb+0x10/0x10
[  419.649664][T10259]  ? __lock_acquire+0x163e/0x3ce0
[  419.654681][T10259]  ? selinux_socket_getpeersec_dgram+0x1a5/0x370
[  419.661003][T10259]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  419.667678][T10259]  netlink_alloc_large_skb+0x69/0x130
[  419.673044][T10259]  netlink_sendmsg+0x689/0xd70
[  419.677807][T10259]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.683091][T10259]  ____sys_sendmsg+0xaaf/0xc90
[  419.687858][T10259]  ? copy_msghdr_from_user+0x10b/0x160
[  419.693311][T10259]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.698601][T10259]  ? __pfx___lock_acquire+0x10/0x10
[  419.703792][T10259]  ___sys_sendmsg+0x135/0x1e0
[  419.708464][T10259]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.713666][T10259]  ? lock_acquire+0x2f/0xb0
[  419.718162][T10259]  ? __fget_files+0x40/0x3f0
[  419.722757][T10259]  ? fdget+0x176/0x210
[  419.726826][T10259]  __sys_sendmsg+0x117/0x1f0
[  419.731416][T10259]  ? __pfx___sys_sendmsg+0x10/0x10
[  419.736526][T10259]  ? __fget_files+0x244/0x3f0
[  419.741230][T10259]  do_syscall_64+0xcd/0x250
[  419.745736][T10259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.751630][T10259] RIP: 0033:0x7f78f997e719
[  419.756038][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.775636][T10259] RSP: 002b:00007f78fa807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.784042][T10259] RAX: ffffffffffffffda RBX: 00007f78f9b35f80 RCX: 00007f78f997e719
[  419.792001][T10259] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000004
[  419.799962][T10259] RBP: 00007f78fa807090 R08: 0000000000000000 R09: 0000000000000000
[  419.807922][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.815885][T10259] R13: 0000000000000000 R14: 00007f78f9b35f80 R15: 00007ffccc4f09f8
[  419.823858][T10259]  </TASK>
[  419.845076][   T45] usb usb1-port1: attempt power cycle
[  419.899384][T10263] ALSA: seq fatal error: cannot create timer (-22)
[  419.906473][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.964226][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  419.984096][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.135712][ T5878] usb 6-1: config 0 has no interfaces?
[  420.151939][ T5878] usb 6-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.00
[  420.652460][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.660635][ T5878] usb 6-1: Product: syz
[  420.665520][ T5878] usb 6-1: Manufacturer: syz
[  420.670146][ T5878] usb 6-1: SerialNumber: syz
[  420.675463][ T5880] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  420.688896][ T5878] usb 6-1: config 0 descriptor??
[  420.859183][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.923552][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.944112][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.993128][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  421.297428][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.307367][   T29] audit: type=1400 audit(1731285759.410:1259): avc:  denied  { ioctl } for  pid=10278 comm="syz.2.1200" path="socket:[24120]" dev="sockfs" ino=24120 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  421.338532][ T5880] usb 4-1: config 0 descriptor??
[  421.498163][T10271] trusted_key: encrypted_key: insufficient parameters specified
[  421.574429][ T5914] usb 6-1: USB disconnect, device number 12
[  421.807012][T10284] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1201'.
[  422.020985][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.190179][T10285] 9pnet: Could not find request transport: fhRrfdno=0xffffffffffffffff
[  422.424430][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.529990][ T3599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.530925][ T5880] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  422.607680][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.637500][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.023644][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.436873][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.504883][ T3599] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  423.525559][ T5878] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  423.606515][T10302] trusted_key: encrypted_key: keylen parameter is missing
[  424.463229][T10309] ALSA: seq fatal error: cannot create timer (-22)
[  424.566744][ T5875] usb 4-1: USB disconnect, device number 48
[  424.856358][T10312] syzkaller0: entered promiscuous mode
[  424.862369][T10312] syzkaller0: entered allmulticast mode
[  425.053770][   T29] audit: type=1400 audit(1731285763.030:1260): avc:  denied  { getopt } for  pid=10313 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  425.456463][   T29] audit: type=1400 audit(1731285763.060:1261): avc:  denied  { bind } for  pid=10313 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  426.041134][T10327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=10327 comm=syz.4.1212
[  426.370828][T10328] ALSA: mixer_oss: invalid OSS volume 'ÿPL'
[  426.384792][T10328] binder: 10322:10328 ioctl c0306201 0 returned -14
[  426.463906][ T5879] net_ratelimit: 2 callbacks suppressed
[  426.463923][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.477625][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.598077][   T29] audit: type=1400 audit(1731285764.700:1262): avc:  denied  { mount } for  pid=10331 comm="syz.0.1214" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  426.639139][T10332] tracefs: Unknown parameter 'uuid'
[  426.644681][   T29] audit: type=1400 audit(1731285764.740:1263): avc:  denied  { remount } for  pid=10331 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  426.673908][   T29] audit: type=1400 audit(1731285764.760:1264): avc:  denied  { read } for  pid=10331 comm="syz.0.1214" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  426.695866][   T29] audit: type=1400 audit(1731285764.760:1265): avc:  denied  { open } for  pid=10331 comm="syz.0.1214" path="/227/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  426.731017][   T29] audit: type=1400 audit(1731285764.770:1266): avc:  denied  { unmount } for  pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  427.510418][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.817507][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.265929][  T740] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  429.513020][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.836105][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.119931][T10351] trusted_key: encrypted_key: keylen parameter is missing
[  430.869237][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.179567][T10340] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  431.504480][T10366] ALSA: seq fatal error: cannot create timer (-22)
[  431.853960][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.866996][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'.
[  431.984189][ T5875] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  432.026337][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.227851][ T5875] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  432.253573][ T5875] usb 4-1: config 0 has no interface number 0
[  432.267581][ T5875] usb 4-1: config 0 interface 2 has no altsetting 0
[  432.303990][ T5875] usb 4-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=81.4d
[  432.323339][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.343223][ T5875] usb 4-1: Product: syz
[  432.347533][ T5875] usb 4-1: Manufacturer: syz
[  432.352264][ T5875] usb 4-1: SerialNumber: syz
[  432.366823][ T5875] usb 4-1: config 0 descriptor??
[  432.376667][ T5875] snd-usb-caiaq 4-1:0.2: can't set alt interface.
[  432.391662][ T5875] usb 4-1: unable to init card! (ret=-5)
[  432.422319][ T5875] snd-usb-caiaq 4-1:0.2: probe with driver snd-usb-caiaq failed with error -5
[  432.556887][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.672075][ T5914] usb 4-1: USB disconnect, device number 49
[  432.823845][ T5875] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  432.983605][ T5875] usb 5-1: Using ep0 maxpacket: 16
[  432.992889][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  433.020398][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  433.062725][ T5875] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  433.079639][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.089237][ T5875] usb 5-1: Product: syz
[  433.093786][ T5875] usb 5-1: Manufacturer: syz
[  433.098520][ T5875] usb 5-1: SerialNumber: syz
[  433.103734][ T5879] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  433.103984][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.131287][ T5875] usb 5-1: config 0 descriptor??
[  433.442818][   T29] audit: type=1400 audit(1731285771.530:1267): avc:  denied  { ioctl } for  pid=10395 comm="syz.5.1235" path="socket:[24331]" dev="sockfs" ino=24331 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  433.863121][T10403] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  434.484504][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.515289][ T3599] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  435.283200][   T29] audit: type=1400 audit(1731285772.860:1268): avc:  denied  { write } for  pid=10410 comm="syz.3.1238" lport=52951 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  435.309039][   T29] audit: type=1400 audit(1731285772.870:1269): avc:  denied  { setopt } for  pid=10410 comm="syz.3.1238" lport=52951 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  435.332764][    C1] vkms_vblank_simulate: vblank timer overrun
[  435.487262][T10424] FAULT_INJECTION: forcing a failure.
[  435.487262][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.501268][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.0.1239 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  435.512058][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  435.522136][T10424] Call Trace:
[  435.525423][T10424]  <TASK>
[  435.528358][T10424]  dump_stack_lvl+0x16c/0x1f0
[  435.533034][T10424]  should_fail_ex+0x497/0x5b0
[  435.537711][T10424]  _copy_to_user+0x32/0xd0
[  435.542126][T10424]  simple_read_from_buffer+0xd0/0x160
[  435.547498][T10424]  proc_fail_nth_read+0x198/0x270
[  435.552521][T10424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.558067][T10424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.563618][T10424]  vfs_read+0x1df/0xbe0
[  435.567781][T10424]  ? __fget_files+0x23a/0x3f0
[  435.572456][T10424]  ? fdget_pos+0x24c/0x360
[  435.576860][T10424]  ? __pfx_lock_release+0x10/0x10
[  435.581876][T10424]  ? trace_lock_acquire+0x14a/0x1d0
[  435.587073][T10424]  ? __pfx_vfs_read+0x10/0x10
[  435.591752][T10424]  ? __pfx___mutex_lock+0x10/0x10
[  435.596778][T10424]  ? __fget_files+0x244/0x3f0
[  435.601458][T10424]  ksys_read+0x12f/0x260
[  435.605698][T10424]  ? __pfx_ksys_read+0x10/0x10
[  435.610466][T10424]  do_syscall_64+0xcd/0x250
[  435.614977][T10424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.620875][T10424] RIP: 0033:0x7fb33137d15c
[  435.625284][T10424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  435.645061][T10424] RSP: 002b:00007fb332166030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  435.653480][T10424] RAX: ffffffffffffffda RBX: 00007fb331536130 RCX: 00007fb33137d15c
[  435.661445][T10424] RDX: 000000000000000f RSI: 00007fb3321660a0 RDI: 0000000000000008
[  435.669434][T10424] RBP: 00007fb332166090 R08: 0000000000000000 R09: 0000000000000000
[  435.677404][T10424] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001
[  435.685368][T10424] R13: 0000000000000000 R14: 00007fb331536130 R15: 00007ffce1334bd8
[  435.693347][T10424]  </TASK>
[  435.696438][    C1] vkms_vblank_simulate: vblank timer overrun
[  435.711826][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.727704][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.918083][ T5878] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  436.047521][T10431] FAULT_INJECTION: forcing a failure.
[  436.047521][T10431] name failslab, interval 1, probability 0, space 0, times 0
[  436.060306][T10431] CPU: 1 UID: 0 PID: 10431 Comm: syz.3.1242 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  436.071081][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  436.081150][T10431] Call Trace:
[  436.084434][T10431]  <TASK>
[  436.087370][T10431]  dump_stack_lvl+0x16c/0x1f0
[  436.092055][T10431]  should_fail_ex+0x497/0x5b0
[  436.096741][T10431]  ? fs_reclaim_acquire+0xae/0x150
[  436.101864][T10431]  should_failslab+0xc2/0x120
[  436.106558][T10431]  __kmalloc_noprof+0xcb/0x400
[  436.111328][T10431]  ? d_absolute_path+0x137/0x1b0
[  436.116284][T10431]  tomoyo_encode2+0x100/0x3e0
[  436.120974][T10431]  tomoyo_encode+0x29/0x50
[  436.125415][T10431]  tomoyo_realpath_from_path+0x19d/0x720
[  436.131080][T10431]  tomoyo_path_number_perm+0x245/0x590
[  436.136569][T10431]  ? tomoyo_path_number_perm+0x232/0x590
[  436.142215][T10431]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  436.148236][T10431]  ? trace_lock_acquire+0x14a/0x1d0
[  436.153452][T10431]  ? lock_acquire+0x2f/0xb0
[  436.157958][T10431]  ? __fget_files+0x40/0x3f0
[  436.162566][T10431]  ? __fget_files+0x244/0x3f0
[  436.167261][T10431]  security_file_ioctl+0x9b/0x240
[  436.172296][T10431]  __x64_sys_ioctl+0xbb/0x220
[  436.176987][T10431]  do_syscall_64+0xcd/0x250
[  436.181509][T10431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.187415][T10431] RIP: 0033:0x7f78f997e719
[  436.191843][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.211471][T10431] RSP: 002b:00007f78fa7e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  436.219911][T10431] RAX: ffffffffffffffda RBX: 00007f78f9b36058 RCX: 00007f78f997e719
[  436.227893][T10431] RDX: 0000000020000540 RSI: 00000000c1205531 RDI: 000000000000000a
[  436.235870][T10431] RBP: 00007f78fa7e6090 R08: 0000000000000000 R09: 0000000000000000
[  436.243847][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.251823][T10431] R13: 0000000000000000 R14: 00007f78f9b36058 R15: 00007ffccc4f09f8
[  436.259822][T10431]  </TASK>
[  436.262926][    C1] vkms_vblank_simulate: vblank timer overrun
[  436.270189][T10431] ERROR: Out of memory at tomoyo_realpath_from_path.
[  436.408309][ T5875] usb 5-1: USB disconnect, device number 16
[  436.684637][T10438] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  436.696324][ T5878] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping
[  436.705761][ T5878] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  436.795649][T10436] siw: device registration error -23
[  436.820834][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.849986][ T5878] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  436.983837][T10442] siw: device registration error -23
[  437.159899][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  438.260068][T10450] FAULT_INJECTION: forcing a failure.
[  438.260068][T10450] name failslab, interval 1, probability 0, space 0, times 0
[  438.272775][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.4.1248 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  438.283556][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  438.293629][T10450] Call Trace:
[  438.296914][T10450]  <TASK>
[  438.299846][T10450]  dump_stack_lvl+0x16c/0x1f0
[  438.304553][T10450]  should_fail_ex+0x497/0x5b0
[  438.309245][T10450]  ? fs_reclaim_acquire+0xae/0x150
[  438.314377][T10450]  should_failslab+0xc2/0x120
[  438.319070][T10450]  __kmalloc_noprof+0xcb/0x400
[  438.323846][T10450]  ? d_absolute_path+0x137/0x1b0
[  438.328798][T10450]  tomoyo_encode2+0x100/0x3e0
[  438.333485][T10450]  tomoyo_encode+0x29/0x50
[  438.337907][T10450]  tomoyo_realpath_from_path+0x19d/0x720
[  438.343554][T10450]  tomoyo_path_number_perm+0x245/0x590
[  438.349030][T10450]  ? tomoyo_path_number_perm+0x232/0x590
[  438.354673][T10450]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  438.360682][T10450]  ? trace_lock_acquire+0x14a/0x1d0
[  438.365898][T10450]  ? lock_acquire+0x2f/0xb0
[  438.370405][T10450]  ? __fget_files+0x40/0x3f0
[  438.375016][T10450]  ? __fget_files+0x244/0x3f0
[  438.379807][T10450]  security_file_ioctl+0x9b/0x240
[  438.384853][T10450]  __x64_sys_ioctl+0xbb/0x220
[  438.389547][T10450]  do_syscall_64+0xcd/0x250
[  438.394062][T10450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.399970][T10450] RIP: 0033:0x7f51add7e719
[  438.404392][T10450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.424011][T10450] RSP: 002b:00007f51aeb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  438.432445][T10450] RAX: ffffffffffffffda RBX: 00007f51adf36130 RCX: 00007f51add7e719
[  438.440429][T10450] RDX: 0000000020000440 RSI: 00000000c06864ce RDI: 0000000000000007
[  438.448405][T10450] RBP: 00007f51aeb42090 R08: 0000000000000000 R09: 0000000000000000
[  438.456384][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.464361][T10450] R13: 0000000000000000 R14: 00007f51adf36130 R15: 00007ffdb4508808
[  438.472353][T10450]  </TASK>
[  438.476684][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.517759][T10450] ERROR: Out of memory at tomoyo_realpath_from_path.
[  438.785827][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.899538][   T29] audit: type=1326 audit(1731285776.990:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  438.946028][   T29] audit: type=1326 audit(1731285776.990:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  438.963403][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  438.969503][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.070021][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.091305][ T5878] usb 3-1: Product: syz
[  439.122769][ T5878] usb 3-1: can't set config #1, error -71
[  439.148209][   T29] audit: type=1326 audit(1731285776.990:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.154101][ T5878] usb 3-1: USB disconnect, device number 38
[  439.201297][T10462] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  439.210213][T10462] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  439.458429][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'.
[  439.503787][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.584622][ T3543] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  439.604760][   T29] audit: type=1326 audit(1731285776.990:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.691102][   T29] audit: type=1326 audit(1731285776.990:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.714645][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.732979][   T29] audit: type=1326 audit(1731285776.990:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.762621][   T29] audit: type=1326 audit(1731285776.990:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.786107][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.795432][   T29] audit: type=1326 audit(1731285776.990:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.818893][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.830266][   T29] audit: type=1326 audit(1731285776.990:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  439.853727][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.864084][   T29] audit: type=1326 audit(1731285776.990:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.5.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e137e719 code=0x7ffc0000
[  440.146337][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.152652][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.366274][T10474] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  440.621032][ T5878] IPVS: starting estimator thread 0...
[  440.632834][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.733708][T10480] IPVS: using max 22 ests per chain, 52800 per kthread
[  441.664853][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.709989][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.824265][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.918693][T10502] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  441.927687][T10502] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  442.703825][ T5878] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  442.871126][T10511] tty tty31: ldisc open failed (-12), clearing slot 30
[  443.753789][ T5914] net_ratelimit: 1 callbacks suppressed
[  443.753807][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.771671][T10528] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  443.871477][ T5878] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  444.233976][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  444.233991][   T29] audit: type=1400 audit(1731285782.320:1316): avc:  denied  { connect } for  pid=10529 comm="syz.5.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  444.493585][ T5878] usb 4-1: Using ep0 maxpacket: 16
[  444.505171][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.515800][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  444.537554][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  444.557516][ T5878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  444.785189][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.863979][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.976052][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  445.024740][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  445.045664][ T5878] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  445.073630][ T5878] usb 4-1: Manufacturer: syz
[  445.089203][ T5878] usb 4-1: config 0 descriptor??
[  445.207186][T10538] FAULT_INJECTION: forcing a failure.
[  445.207186][T10538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.258882][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.0.1274 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  445.266111][   T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  445.269669][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  445.286669][T10538] Call Trace:
[  445.289966][T10538]  <TASK>
[  445.292901][T10538]  dump_stack_lvl+0x16c/0x1f0
[  445.297597][T10538]  should_fail_ex+0x497/0x5b0
[  445.302294][T10538]  _copy_to_user+0x32/0xd0
[  445.306736][T10538]  simple_read_from_buffer+0xd0/0x160
[  445.312133][T10538]  proc_fail_nth_read+0x198/0x270
[  445.317177][T10538]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  445.322745][T10538]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  445.328310][T10538]  vfs_read+0x1df/0xbe0
[  445.332492][T10538]  ? __fget_files+0x23a/0x3f0
[  445.337185][T10538]  ? fdget_pos+0x24c/0x360
[  445.341615][T10538]  ? __pfx_lock_release+0x10/0x10
[  445.346653][T10538]  ? trace_lock_acquire+0x14a/0x1d0
[  445.351878][T10538]  ? __pfx_vfs_read+0x10/0x10
[  445.356575][T10538]  ? __pfx___mutex_lock+0x10/0x10
[  445.361621][T10538]  ? __fget_files+0x244/0x3f0
[  445.366357][T10538]  ksys_read+0x12f/0x260
[  445.370621][T10538]  ? __pfx_ksys_read+0x10/0x10
[  445.375421][T10538]  do_syscall_64+0xcd/0x250
[  445.379946][T10538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.385869][T10538] RIP: 0033:0x7fb33137d15c
[  445.390294][T10538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  445.409930][T10538] RSP: 002b:00007fb3321a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  445.418379][T10538] RAX: ffffffffffffffda RBX: 00007fb331535f80 RCX: 00007fb33137d15c
[  445.426368][T10538] RDX: 000000000000000f RSI: 00007fb3321a80a0 RDI: 0000000000000004
[  445.434447][T10538] RBP: 00007fb3321a8090 R08: 0000000000000000 R09: 0000000000000000
[  445.442436][T10538] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  445.450424][T10538] R13: 0000000000000000 R14: 00007fb331535f80 R15: 00007ffce1334bd8
[  445.458430][T10538]  </TASK>
[  445.639647][T10543] FAULT_INJECTION: forcing a failure.
[  445.639647][T10543] name failslab, interval 1, probability 0, space 0, times 0
[  445.672503][T10543] CPU: 1 UID: 0 PID: 10543 Comm: syz.2.1276 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  445.683321][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  445.693388][T10543] Call Trace:
[  445.696673][T10543]  <TASK>
[  445.699613][T10543]  dump_stack_lvl+0x16c/0x1f0
[  445.704302][T10543]  should_fail_ex+0x497/0x5b0
[  445.708989][T10543]  ? fs_reclaim_acquire+0xae/0x150
[  445.714119][T10543]  should_failslab+0xc2/0x120
[  445.718813][T10543]  __kmalloc_noprof+0xcb/0x400
[  445.723594][T10543]  ? d_absolute_path+0x137/0x1b0
[  445.728546][T10543]  tomoyo_encode2+0x100/0x3e0
[  445.733257][T10543]  tomoyo_encode+0x29/0x50
[  445.737686][T10543]  tomoyo_realpath_from_path+0x19d/0x720
[  445.743334][T10543]  tomoyo_path_number_perm+0x245/0x590
[  445.748808][T10543]  ? tomoyo_path_number_perm+0x232/0x590
[  445.754466][T10543]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  445.760491][T10543]  ? trace_lock_acquire+0x14a/0x1d0
[  445.765712][T10543]  ? lock_acquire+0x2f/0xb0
[  445.770225][T10543]  ? __fget_files+0x40/0x3f0
[  445.774840][T10543]  ? __fget_files+0x244/0x3f0
[  445.779539][T10543]  security_file_ioctl+0x9b/0x240
[  445.784586][T10543]  __x64_sys_ioctl+0xbb/0x220
[  445.789282][T10543]  do_syscall_64+0xcd/0x250
[  445.793797][T10543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.799704][T10543] RIP: 0033:0x7ff510d7e719
[  445.804126][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.823754][T10543] RSP: 002b:00007ff511b4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.832191][T10543] RAX: ffffffffffffffda RBX: 00007ff510f36058 RCX: 00007ff510d7e719
[  445.840176][T10543] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000005
[  445.848172][T10543] RBP: 00007ff511b4d090 R08: 0000000000000000 R09: 0000000000000000
[  445.856164][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.864142][T10543] R13: 0000000000000000 R14: 00007ff510f36058 R15: 00007ffcf3062918
[  445.872132][T10543]  </TASK>
[  445.875227][    C1] vkms_vblank_simulate: vblank timer overrun
[  445.887602][T10545] binder: BINDER_SET_CONTEXT_MGR already set
[  445.893799][T10545] binder: 10544:10545 ioctl 4018620d 20000040 returned -16
[  445.909086][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.923506][T10543] ERROR: Out of memory at tomoyo_realpath_from_path.
[  446.164853][T10554] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  446.173865][T10554] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  446.183520][ T5878] rc_core: IR keymap rc-hauppauge not found
[  446.189522][ T5878] Registered IR keymap rc-empty
[  446.197848][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  446.223751][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  446.254045][ T5878] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  446.289100][ T5878] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28
[  446.323212][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  446.364878][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  446.539123][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.243733][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.273343][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.338204][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.383725][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.454104][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.463081][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.524300][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.563810][ T5878] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  447.744448][ T5878] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  447.753889][ T5878] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  448.720459][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.746160][ T5878] usb 4-1: USB disconnect, device number 50
[  448.771757][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1285'.
[  448.801595][T10578] openvswitch: netlink: Actions may not be safe on all matching packets
[  449.016527][T10573] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  449.045204][T10578] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  449.278540][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.323586][  T965] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  449.500262][  T965] usb 6-1: Using ep0 maxpacket: 32
[  449.507882][  T965] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  449.530182][  T965] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  449.569010][  T965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  449.626020][  T965] usb 6-1: config 1 has no interface number 0
[  449.649394][  T965] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  449.671693][  T965] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  449.699916][  T965] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  449.714469][  T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.743868][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.759213][  T965] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  449.889032][T10601] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  450.208372][T10605] xt_cgroup: xt_cgroup: no path or classid specified
[  450.224199][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.233634][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.752723][  T965] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  450.764770][ T3563] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  450.785295][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.020491][T10610] trusted_key: encrypted_key: insufficient parameters specified
[  451.325886][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.824086][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.825492][    T8] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  452.293651][   T29] audit: type=1326 audit(1731285790.390:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.664364][   T29] audit: type=1326 audit(1731285790.430:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.688164][   T29] audit: type=1326 audit(1731285790.470:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.711840][   T29] audit: type=1326 audit(1731285790.800:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.736086][   T29] audit: type=1326 audit(1731285790.800:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.766104][  T965] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  452.776731][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.853717][   T29] audit: type=1326 audit(1731285790.900:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.854229][T10621] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  452.886365][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.895694][T10621] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  452.913533][    T8] usb 6-1: USB disconnect, device number 13
[  452.974935][   T29] audit: type=1326 audit(1731285790.910:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  452.975236][    T8] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  453.213778][   T29] audit: type=1326 audit(1731285790.910:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  453.334692][   T29] audit: type=1326 audit(1731285790.910:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  453.402311][   T29] audit: type=1326 audit(1731285790.910:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f997e719 code=0x7ffc0000
[  453.437801][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'.
[  453.778557][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'.
[  453.793830][ T5875] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  453.963718][ T5875] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 96, changing to 10
[  453.983157][ T5875] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 49873, setting to 1024
[  453.998608][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.014150][ T5875] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  454.105154][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'.
[  454.127862][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  454.144793][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.153103][ T5875] usb 3-1: Product: syz
[  454.183615][ T5875] usb 3-1: Manufacturer: syz
[  454.193530][ T5875] usb 3-1: SerialNumber: syz
[  454.713967][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1298'.
[  454.753050][T10650] ALSA: seq fatal error: cannot create timer (-22)
[  454.894603][T10651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.427004][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.824307][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.145273][   T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  456.229337][T10669] FAULT_INJECTION: forcing a failure.
[  456.229337][T10669] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.254227][ T5875] cdc_ncm 3-1:1.0: bind() failure
[  456.260492][T10669] CPU: 0 UID: 0 PID: 10669 Comm: syz.5.1310 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  456.264185][ T5875] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  456.271269][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  456.271285][T10669] Call Trace:
[  456.292467][T10669]  <TASK>
[  456.295386][T10669]  dump_stack_lvl+0x16c/0x1f0
[  456.300057][T10669]  should_fail_ex+0x497/0x5b0
[  456.304728][T10669]  strncpy_from_user+0x3b/0x2c0
[  456.309569][T10669]  getname_flags.part.0+0x8f/0x550
[  456.314673][T10669]  getname_flags+0x93/0xf0
[  456.319079][T10669]  user_path_at+0x24/0x60
[  456.323409][T10669]  __x64_sys_chmod+0xe8/0x1c0
[  456.328081][T10669]  ? __pfx___x64_sys_chmod+0x10/0x10
[  456.333375][T10669]  do_syscall_64+0xcd/0x250
[  456.337904][T10669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.343560][ T5876] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  456.343780][T10669] RIP: 0033:0x7ff1e137e719
[  456.351519][   T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  456.355717][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.355742][T10669] RSP: 002b:00007ff1df7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a
[  456.355760][T10669] RAX: ffffffffffffffda RBX: 00007ff1e1535f80 RCX: 00007ff1e137e719
[  456.355771][T10669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000080
[  456.355782][T10669] RBP: 00007ff1df7f6090 R08: 0000000000000000 R09: 0000000000000000
[  456.355793][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.355803][T10669] R13: 0000000000000000 R14: 00007ff1e1535f80 R15: 00007ffc6b535ab8
[  456.355826][T10669]  </TASK>
[  456.446354][ T5875] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  456.467130][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.476285][ T5875] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  456.660783][ T5875] usb 3-1: USB disconnect, device number 39
[  456.767621][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1312'.
[  456.891001][ T5876] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  456.900778][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.007330][ T5876] usb 4-1: Product: syz
[  457.020864][   T45] usb 5-1: Using ep0 maxpacket: 8
[  457.040640][   T45] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  457.052699][ T5876] usb 4-1: Manufacturer: syz
[  457.094490][   T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  457.105970][ T5876] usb 4-1: SerialNumber: syz
[  457.164756][   T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  457.200696][ T5876] usb 4-1: config 0 descriptor??
[  457.222500][   T45] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  457.239733][   T45] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  457.250119][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.506733][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.653326][   T45] usb 5-1: GET_CAPABILITIES returned 0
[  457.659081][   T45] usbtmc 5-1:16.0: can't read capabilities
[  457.819386][T10692] ubi: mtd0 is already attached to ubi0
[  458.258409][T10694] trusted_key: encrypted_key: insufficient parameters specified
[  458.563418][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.604710][ T5876] usb 4-1: Firmware version (0.0) predates our first public release.
[  458.678682][ T5876] usb 4-1: Please update to version 0.2 or newer
[  458.843531][T10695] trusted_key: encrypted_key: insufficient parameters specified
[  458.893674][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.045770][ T5876] usb 4-1: USB disconnect, device number 51
[  459.249536][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  459.345900][ T5879] usb 5-1: USB disconnect, device number 17
[  459.583680][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.893809][ T5875] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  460.094703][ T5875] usb 6-1: Using ep0 maxpacket: 8
[  460.106790][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  460.165080][ T5875] usb 6-1: config 0 has no interface number 0
[  460.323675][ T5875] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92
[  460.353796][ T5876] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  460.501859][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.518413][ T5875] usb 6-1: Product: syz
[  460.525202][ T5875] usb 6-1: Manufacturer: syz
[  460.533233][ T5875] usb 6-1: SerialNumber: syz
[  460.546522][ T5876] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  460.564541][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.577408][ T5875] usb 6-1: config 0 descriptor??
[  460.589586][ T5875] usb 6-1: selecting invalid altsetting 2
[  460.621539][ T5875] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  460.631336][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.639861][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.643404][ T5876] usb 4-1: config 0 descriptor??
[  460.682936][ T5876] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  460.806165][T10716] FAULT_INJECTION: forcing a failure.
[  460.806165][T10716] name failslab, interval 1, probability 0, space 0, times 0
[  460.819303][T10716] CPU: 0 UID: 0 PID: 10716 Comm: syz.2.1324 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  460.830087][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  460.840143][T10716] Call Trace:
[  460.843426][T10716]  <TASK>
[  460.846363][T10716]  dump_stack_lvl+0x16c/0x1f0
[  460.851029][T10716]  should_fail_ex+0x497/0x5b0
[  460.855696][T10716]  ? fs_reclaim_acquire+0xae/0x150
[  460.860823][T10716]  should_failslab+0xc2/0x120
[  460.865510][T10716]  kmem_cache_alloc_node_noprof+0x71/0x310
[  460.871319][T10716]  ? __alloc_skb+0x2b1/0x380
[  460.875911][T10716]  __alloc_skb+0x2b1/0x380
[  460.880371][T10716]  ? __pfx___alloc_skb+0x10/0x10
[  460.885325][T10716]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  460.891320][T10716]  netlink_alloc_large_skb+0x69/0x130
[  460.896703][T10716]  netlink_sendmsg+0x689/0xd70
[  460.901482][T10716]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.906779][T10716]  ____sys_sendmsg+0xaaf/0xc90
[  460.911552][T10716]  ? copy_msghdr_from_user+0x10b/0x160
[  460.917015][T10716]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.922311][T10716]  ? __pfx___lock_acquire+0x10/0x10
[  460.927507][T10716]  ___sys_sendmsg+0x135/0x1e0
[  460.932212][T10716]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.937421][T10716]  ? lock_acquire+0x2f/0xb0
[  460.941940][T10716]  ? __fget_files+0x40/0x3f0
[  460.946567][T10716]  ? fdget+0x176/0x210
[  460.950662][T10716]  __sys_sendmsg+0x117/0x1f0
[  460.955249][T10716]  ? __pfx___sys_sendmsg+0x10/0x10
[  460.960362][T10716]  ? __fget_files+0x244/0x3f0
[  460.965082][T10716]  do_syscall_64+0xcd/0x250
[  460.969592][T10716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.975483][T10716] RIP: 0033:0x7ff510d7e719
[  460.979903][T10716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.999513][T10716] RSP: 002b:00007ff511b6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  461.007949][T10716] RAX: ffffffffffffffda RBX: 00007ff510f35f80 RCX: 00007ff510d7e719
[  461.015940][T10716] RDX: 0000000004000002 RSI: 0000000020000400 RDI: 0000000000000003
[  461.023923][T10716] RBP: 00007ff511b6e090 R08: 0000000000000000 R09: 0000000000000000
[  461.031901][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.039873][T10716] R13: 0000000000000000 R14: 00007ff510f35f80 R15: 00007ffcf3062918
[  461.047866][T10716]  </TASK>
[  461.238609][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.264885][ T2961] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  461.315750][T10719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.340561][T10723] fuse: Unknown parameter '	]'
[  461.367179][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.394936][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.635198][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'.
[  461.745425][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.971853][  T965] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  461.985732][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.314472][  T965] usb 6-1: USB disconnect, device number 14
[  462.407342][T10734] trusted_key: encrypted_key: insufficient parameters specified
[  462.783939][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.795298][ T5876] gp8psk: usb in 128 operation failed.
[  462.839271][ T5876] gp8psk: usb in 137 operation failed.
[  462.903566][ T5876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  463.279149][ T5876] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  463.323960][ T5876] usb 4-1: USB disconnect, device number 52
[  463.347974][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'.
[  463.363870][  T965] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  463.579935][T10750] ALSA: seq fatal error: cannot create timer (-22)
[  463.594851][  T965] usb 6-1: Using ep0 maxpacket: 32
[  463.608706][  T965] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  464.273725][  T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.305275][  T965] usb 6-1: config 0 descriptor??
[  464.337412][  T965] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  464.352148][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.538358][T10761] FAULT_INJECTION: forcing a failure.
[  464.538358][T10761] name failslab, interval 1, probability 0, space 0, times 0
[  464.551233][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.4.1339 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  464.562019][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  464.572075][T10761] Call Trace:
[  464.575368][T10761]  <TASK>
[  464.578297][T10761]  dump_stack_lvl+0x16c/0x1f0
[  464.582993][T10761]  should_fail_ex+0x497/0x5b0
[  464.587679][T10761]  ? fs_reclaim_acquire+0xae/0x150
[  464.592830][T10761]  should_failslab+0xc2/0x120
[  464.597526][T10761]  kmem_cache_alloc_node_noprof+0x71/0x310
[  464.603349][T10761]  ? __alloc_skb+0x2b1/0x380
[  464.607955][T10761]  __alloc_skb+0x2b1/0x380
[  464.612391][T10761]  ? __pfx___alloc_skb+0x10/0x10
[  464.617345][T10761]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  464.623349][T10761]  netlink_alloc_large_skb+0x69/0x130
[  464.628759][T10761]  netlink_sendmsg+0x689/0xd70
[  464.633542][T10761]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.638846][T10761]  ____sys_sendmsg+0xaaf/0xc90
[  464.643617][T10761]  ? copy_msghdr_from_user+0x10b/0x160
[  464.649084][T10761]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.654395][T10761]  ? __pfx___lock_acquire+0x10/0x10
[  464.659598][T10761]  ___sys_sendmsg+0x135/0x1e0
[  464.664279][T10761]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.669492][T10761]  ? lock_acquire+0x2f/0xb0
[  464.673987][T10761]  ? __fget_files+0x40/0x3f0
[  464.678583][T10761]  ? fdget+0x176/0x210
[  464.682653][T10761]  __sys_sendmsg+0x117/0x1f0
[  464.687241][T10761]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.692353][T10761]  ? __fget_files+0x244/0x3f0
[  464.697047][T10761]  do_syscall_64+0xcd/0x250
[  464.701554][T10761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.707459][T10761] RIP: 0033:0x7f51add7e719
[  464.711956][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.731561][T10761] RSP: 002b:00007f51aeb84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.739971][T10761] RAX: ffffffffffffffda RBX: 00007f51adf35f80 RCX: 00007f51add7e719
[  464.747948][T10761] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  464.755913][T10761] RBP: 00007f51aeb84090 R08: 0000000000000000 R09: 0000000000000000
[  464.763879][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.771851][T10761] R13: 0000000000000000 R14: 00007f51adf35f80 R15: 00007ffdb4508808
[  464.779823][T10761]  </TASK>
[  464.861138][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  464.861155][   T29] audit: type=1400 audit(1731285802.960:1369): avc:  denied  { mount } for  pid=10735 comm="syz.5.1331" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  464.891104][T10767] devpts: called with bogus options
[  465.004601][ T5879] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  465.023818][   T29] audit: type=1400 audit(1731285802.990:1370): avc:  denied  { remount } for  pid=10735 comm="syz.5.1331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  465.046709][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.057094][  T965] gspca_vc032x: reg_w err -110
[  465.066707][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  465.072802][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  465.078473][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  465.083914][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  465.089409][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.075529][T10775] netlink: 'syz.3.1342': attribute type 2 has an invalid length.
[  466.083271][T10775] netlink: 'syz.3.1342': attribute type 8 has an invalid length.
[  466.091071][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1342'.
[  466.108638][   T29] audit: type=1400 audit(1731285804.180:1371): avc:  denied  { accept } for  pid=10765 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  466.128821][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  466.134854][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.264799][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.272888][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  466.272918][ T5879] usb 3-1: config 0 has no interface number 0
[  466.426900][   T29] audit: type=1400 audit(1731285804.530:1372): avc:  denied  { unmount } for  pid=7892 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  466.460484][ T5879] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  466.643780][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.662274][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.834302][ T5879] usb 3-1: Product: syz
[  466.838544][ T5879] usb 3-1: Manufacturer: syz
[  466.843158][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.848970][ T5879] usb 3-1: SerialNumber: syz
[  466.854332][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.860361][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.865871][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.871200][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.876615][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.881938][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.888460][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.895542][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.900851][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.906368][  T965] gspca_vc032x: I2c Bus Busy Wait 00
[  466.911769][  T965] gspca_vc032x: Unknown sensor...
[  466.915528][   T29] audit: type=1400 audit(1731285804.830:1373): avc:  denied  { map } for  pid=10776 comm="syz.4.1344" path="/proc/932/pagemap" dev="proc" ino=25093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  466.916996][  T965] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  466.939831][   T29] audit: type=1400 audit(1731285804.830:1374): avc:  denied  { execute } for  pid=10776 comm="syz.4.1344" path="/proc/932/pagemap" dev="proc" ino=25093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  467.054363][ T5879] usb 3-1: config 0 descriptor??
[  467.063113][   T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  467.343842][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.346806][ T5879] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  467.379333][T10785] trusted_key: encrypted_key: insufficient parameters specified
[  467.512918][  T965] usb 6-1: USB disconnect, device number 15
[  467.837551][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'.
[  468.024948][T10794] openvswitch: netlink: Actions may not be safe on all matching packets
[  468.091155][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.526889][T10793] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  468.527590][T10794] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  468.604743][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.611711][ T5879] gspca_spca1528: reg_w err -110
[  468.695579][ T5879] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  469.334817][ T5879] usb 3-1: USB disconnect, device number 40
[  469.455548][T10814] FAULT_INJECTION: forcing a failure.
[  469.455548][T10814] name failslab, interval 1, probability 0, space 0, times 0
[  469.472913][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.5.1355 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  469.483727][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  469.493795][T10814] Call Trace:
[  469.496085][T10812] ALSA: seq fatal error: cannot create timer (-22)
[  469.497068][T10814]  <TASK>
[  469.497080][T10814]  dump_stack_lvl+0x16c/0x1f0
[  469.511195][T10814]  should_fail_ex+0x497/0x5b0
[  469.515900][T10814]  ? fs_reclaim_acquire+0xae/0x150
[  469.521024][T10814]  should_failslab+0xc2/0x120
[  469.525725][T10814]  kmem_cache_alloc_node_noprof+0x71/0x310
[  469.531547][T10814]  ? __alloc_skb+0x2b1/0x380
[  469.536130][T10814]  __alloc_skb+0x2b1/0x380
[  469.540535][T10814]  ? __pfx___alloc_skb+0x10/0x10
[  469.545468][T10814]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  469.551486][T10814]  netlink_alloc_large_skb+0x69/0x130
[  469.556851][T10814]  netlink_sendmsg+0x689/0xd70
[  469.561605][T10814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.566901][T10814]  ____sys_sendmsg+0xaaf/0xc90
[  469.571681][T10814]  ? copy_msghdr_from_user+0x10b/0x160
[  469.577130][T10814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  469.582406][T10814]  ? __pfx___lock_acquire+0x10/0x10
[  469.587610][T10814]  ___sys_sendmsg+0x135/0x1e0
[  469.592311][T10814]  ? __pfx____sys_sendmsg+0x10/0x10
[  469.597525][T10814]  ? lock_acquire+0x2f/0xb0
[  469.602039][T10814]  ? __fget_files+0x40/0x3f0
[  469.606646][T10814]  ? fdget+0x176/0x210
[  469.610719][T10814]  __sys_sendmsg+0x117/0x1f0
[  469.615313][T10814]  ? __pfx___sys_sendmsg+0x10/0x10
[  469.620491][T10814]  ? __fget_files+0x244/0x3f0
[  469.625207][T10814]  do_syscall_64+0xcd/0x250
[  469.629713][T10814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.635609][T10814] RIP: 0033:0x7ff1e137e719
[  469.640026][T10814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.659635][T10814] RSP: 002b:00007ff1df7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  469.668057][T10814] RAX: ffffffffffffffda RBX: 00007ff1e1535f80 RCX: 00007ff1e137e719
[  469.676024][T10814] RDX: 0000000000001014 RSI: 00000000200001c0 RDI: 0000000000000003
[  469.683999][T10814] RBP: 00007ff1df7f6090 R08: 0000000000000000 R09: 0000000000000000
[  469.691974][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.699936][T10814] R13: 0000000000000000 R14: 00007ff1e1535f80 R15: 00007ffc6b535ab8
[  469.707907][T10814]  </TASK>
[  469.833731][   T29] audit: type=1400 audit(1731285807.930:1375): avc:  denied  { bind } for  pid=10815 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  469.853755][ T5878] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  469.871291][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.992549][ T5879] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  470.092061][ T5878] usb 4-1: Using ep0 maxpacket: 16
[  470.169174][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  470.221778][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.230911][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.239723][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.248165][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.256679][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.265004][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.274749][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.282975][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.291408][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.299891][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.878061][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  473.373464][    C0] sched: DL replenish lagged too much
[  475.269938][T10826] net_ratelimit: 197 callbacks suppressed
[  475.269958][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.348709][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.509031][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.574060][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.638291][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.704322][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.770666][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.835944][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.852504][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.916349][T10826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.067645][T10836] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  476.068338][T10840] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  479.441330][T10848] trusted_key: encrypted_key: insufficient parameters specified
[  479.499382][T10856] netlink: 'syz.4.1364': attribute type 1 has an invalid length.
[  480.495885][T10856] netlink: 9336 bytes leftover after parsing attributes in process `syz.4.1364'.
[  481.300337][T10856] netlink: 'syz.4.1364': attribute type 1 has an invalid length.
[  481.643549][ T5876] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  481.676163][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1367'.
[  481.803990][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  482.091020][ T5876] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  482.156608][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.188497][ T5876] usb 5-1: config 0 descriptor??
[  482.209971][ T5876] gspca_main: etoms-2.14.0 probing 102c:6151
[  483.182443][ T5876] usb 5-1: USB disconnect, device number 18
[  484.304986][ T3543] net_ratelimit: 163 callbacks suppressed
[  484.305007][ T3543] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  484.944310][ T3599] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  485.473694][ T5875] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  485.658184][ T5875] usb 5-1: Using ep0 maxpacket: 8
[  485.678670][ T5875] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  485.688983][ T5875] usb 5-1: config 0 has no interface number 0
[  485.707904][ T5875] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92
[  485.722379][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.744600][ T5875] usb 5-1: Product: syz
[  485.751774][ T5875] usb 5-1: Manufacturer: syz
[  485.765973][ T5875] usb 5-1: SerialNumber: syz
[  485.784627][ T5875] usb 5-1: config 0 descriptor??
[  485.807092][ T5875] usb 5-1: selecting invalid altsetting 2
[  485.821775][ T5875] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  486.610256][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'.
[  486.761364][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.857454][ T5875] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  487.878756][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.877570][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.941798][  T740] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  491.899397][ T5875] usb 1-1: device not accepting address 34, error -71
[  491.909554][ T3543] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  492.899799][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.094531][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.749981][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.728479][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.005957][T10905] openvswitch: netlink: Actions may not be safe on all matching packets
[  495.730351][T10896] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  495.742547][T10897] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  495.749782][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.300962][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.533228][T10904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  496.610154][T10905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  497.157363][T10919] FAULT_INJECTION: forcing a failure.
[  497.157363][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.395313][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.906112][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.944757][ T3563] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  497.986765][ T3563] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  498.194186][ T5876] usb 5-1: USB disconnect, device number 19
[  498.223786][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.5.1381 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  498.234606][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  498.244686][T10919] Call Trace:
[  498.247974][T10919]  <TASK>
[  498.250913][T10919]  dump_stack_lvl+0x16c/0x1f0
[  498.255617][T10919]  should_fail_ex+0x497/0x5b0
[  498.260314][T10919]  _copy_from_user+0x2e/0xd0
[  498.264922][T10919]  copy_clone_args_from_user+0x158/0x7c0
[  498.270571][T10919]  ? ksys_write+0x12f/0x260
[  498.275083][T10919]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  498.281260][T10919]  ? vfs_write+0x306/0x1150
[  498.285786][T10919]  __do_sys_clone3+0xac/0x270
[  498.290482][T10919]  ? __pfx___do_sys_clone3+0x10/0x10
[  498.295784][T10919]  ? __mutex_unlock_slowpath+0x164/0x650
[  498.301468][T10919]  do_syscall_64+0xcd/0x250
[  498.305990][T10919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.311904][T10919] RIP: 0033:0x7ff1e137e719
[  498.316328][T10919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.335955][T10919] RSP: 002b:00007ff1df7f5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  498.344385][T10919] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff1e137e719
[  498.352369][T10919] RDX: 00007ff1df7f5f20 RSI: 0000000000000058 RDI: 00007ff1df7f5f20
[  498.360355][T10919] RBP: 00007ff1df7f6090 R08: 0000000000000000 R09: 0000000000000058
[  498.368338][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.376322][T10919] R13: 0000000000000000 R14: 00007ff1e1535f80 R15: 00007ffc6b535ab8
[  498.384321][T10919]  </TASK>
[  498.387439][    C1] vkms_vblank_simulate: vblank timer overrun
[  498.869939][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'.
[  499.085124][T10916] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  499.092919][T10916] netlink: 'syz.0.1379': attribute type 2 has an invalid length.
[  499.924115][T10935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.965367][T10935] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  500.463661][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.815913][T10944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  500.834146][T10944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  500.847555][T10944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  500.858196][T10944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  500.866178][T10944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  500.873612][T10944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  500.960104][T10943] vcan0 speed is unknown, defaulting to 1000
[  501.182162][ T3543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.220014][ T3543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.311213][T10943] lo speed is unknown, defaulting to 1000
[  501.640536][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.650531][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  502.943739][T10944] Bluetooth: hci2: command tx timeout
[  503.456045][T10956] openvswitch: netlink: Actions may not be safe on all matching packets
[  504.318806][   T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  504.328200][ T2961] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  504.549851][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  505.023610][T10944] Bluetooth: hci2: command tx timeout
[  505.424216][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.466475][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.476903][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.947894][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.285251][T10944] Bluetooth: hci2: command tx timeout
[  509.343694][T10944] Bluetooth: hci2: command tx timeout
[  509.904134][   T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  509.913892][ T3501] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  509.991053][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.664015][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.672598][ T3501] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  515.680161][   T61] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  517.583702][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.748448][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  517.760671][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  517.769090][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  517.776951][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  517.784980][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  517.792899][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  518.623747][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.633694][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.697501][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.068662][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.229123][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.229458][T10944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  519.248418][T10944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  519.259945][T10944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  519.269096][T10944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  519.278762][T10944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  519.286186][T10944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  520.143874][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.297557][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.708937][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.248324][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.484380][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.696321][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.374494][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.469627][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.483714][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.795635][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.756866][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.135616][ T5879] usb 3-1: device not accepting address 41, error -71
[  540.899733][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.170679][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.706639][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.907459][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.864223][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.396610][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.406483][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.500386][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.844229][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.886335][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.149570][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  553.174009][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.816771][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.155908][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.283568][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.733762][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.205339][T10944] Bluetooth: hci0: command tx timeout
[  563.212053][T10944] Bluetooth: hci1: command tx timeout
[  563.504495][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.596900][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.628465][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.745010][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.549014][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.379055][   T54] Bluetooth: hci1: command tx timeout
[  574.393228][   T54] Bluetooth: hci0: command tx timeout
[  575.933931][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.093561][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.517565][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.757266][T10944] Bluetooth: hci0: command tx timeout
[  579.762746][T10944] Bluetooth: hci1: command tx timeout
[  583.505068][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.198140][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.550312][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.630581][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.747177][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.309553][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.645745][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.776146][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.986488][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.984570][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.980192][   T54] Bluetooth: hci1: command tx timeout
[  599.993905][   T54] Bluetooth: hci0: command tx timeout
[  606.594152][  T965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.246855][ T5878] usb 4-1: config 0 descriptor??
[  622.124726][ T5878] usb 4-1: can't set config #0, error -71
[  627.488192][ T5878] usb 4-1: USB disconnect, device number 53
[  629.753290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  629.764707][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  629.772688][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  629.883557][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  638.014657][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  648.661988][ T1099] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  648.669572][ T1099] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  649.443736][ T3543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.464385][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.473411][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.604796][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.623535][ T3543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.745393][   T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.756785][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.781676][  T740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.186556][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.276713][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.174369][   T30] INFO: task syz-executor:10943 blocked for more than 149 seconds.
[  651.182325][   T30]       Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  651.367323][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  652.063504][   T30] task:syz-executor    state:D stack:24768 pid:10943 tgid:10943 ppid:10931  flags:0x00004000
[  652.113588][   T30] Call Trace:
[  652.116920][   T30]  <TASK>
[  652.119867][   T30]  __schedule+0xe55/0x5740
[  652.163544][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  652.168813][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  652.223556][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  652.228810][   T30]  ? __pfx___schedule+0x10/0x10
[  652.273527][   T30]  ? schedule+0x298/0x350
[  652.277926][   T30]  ? __pfx_lock_release+0x10/0x10
[  652.282962][   T30]  ? trace_lock_acquire+0x14a/0x1d0
[  652.353507][   T30]  ? lock_acquire+0x2f/0xb0
[  652.358074][   T30]  ? schedule+0x1fd/0x350
[  652.362474][   T30]  schedule+0xe7/0x350
[  652.413533][   T30]  schedule_preempt_disabled+0x13/0x30
[  652.419064][   T30]  __mutex_lock+0x5b8/0x9c0
[  652.463556][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  652.468725][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  652.513511][   T30]  ? rtnetlink_rcv_msg+0x372/0xea0
[  652.518677][   T30]  rtnetlink_rcv_msg+0x372/0xea0
[  652.573512][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  652.579058][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  652.633541][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  652.639993][   T30]  ? __pfx_avc_has_perm+0x10/0x10
[  652.653515][   T30]  netlink_rcv_skb+0x16b/0x440
[  652.658343][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  652.693557][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  652.698922][   T30]  ? netlink_deliver_tap+0x1ae/0xd90
[  652.743529][   T30]  netlink_unicast+0x53c/0x7f0
[  652.748368][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  652.793541][   T30]  netlink_sendmsg+0x8b8/0xd70
[  652.798449][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  652.833509][   T30]  __sys_sendto+0x479/0x4d0
[  652.838088][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  652.843167][   T30]  ? __fput+0x684/0xb60
[  652.883541][   T30]  __x64_sys_sendto+0xe0/0x1c0
[  652.888392][   T30]  ? do_syscall_64+0x91/0x250
[  652.893105][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  652.943563][   T30]  do_syscall_64+0xcd/0x250
[  652.948131][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.983529][   T30] RIP: 0033:0x7f0fe91805ac
[  652.988000][   T30] RSP: 002b:00007ffc498e58b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  653.040360][   T30] RAX: ffffffffffffffda RBX: 00007f0fe9e64620 RCX: 00007f0fe91805ac
[  653.063508][   T30] RDX: 0000000000000028 RSI: 00007f0fe9e64670 RDI: 0000000000000003
[  653.071538][   T30] RBP: 0000000000000000 R08: 00007ffc498e5904 R09: 000000000000000c
[  653.113514][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  653.121550][   T30] R13: 0000000000000000 R14: 00007f0fe9e64670 R15: 0000000000000000
[  653.163534][   T30]  </TASK>
[  653.166652][   T30] 
[  653.166652][   T30] Showing all locks held in the system:
[  653.193660][   T30] 5 locks held by kworker/u8:0/11:
[  653.198823][   T30] 1 lock held by khungtaskd/30:
[  653.280506][   T30]  #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390
[  653.466722][   T30] 2 locks held by kworker/u8:3/52:
[  653.505593][   T30] 3 locks held by kworker/u9:0/54:
[  653.510769][   T30]  #0: ffff88804b440148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  653.603550][   T30]  #1: ffffc90000bf7d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  653.681674][   T30]  #2: ffff88806e5dcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410
[  653.742088][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  653.903747][   T30] 3 locks held by kworker/R-ipv6_/3157:
[  653.909390][   T30]  #0: ffff888030717948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  653.923808][   T11] net_ratelimit: 4 callbacks suppressed
[  653.923823][   T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available
[  654.013500][   T30]  #1: ffffc9000bd6fd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  654.053521][   T30]  #2: ffffffff8fee33e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30
[  654.063123][   T30] 6 locks held by kworker/u8:10/3543:
[  654.103553][   T30]  #0: ffff88801bee3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  654.163520][   T30]  #1: ffffc9000d0bfd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  654.203535][   T30]  #2: ffffffff8fecd9d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40
[  654.212935][   T30]  #3: ffff88805f1a10e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0
[  654.283568][   T30]  #4: ffff88805f1a2250 (&devlink->lock_key#4){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x137/0x2b0
[  654.333543][   T30]  #5: ffffffff8e1c3b00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x700
[  654.373538][   T30] 1 lock held by syslogd/5186:
[  654.378354][   T30] 3 locks held by udevd/5204:
[  654.383053][   T30] 2 locks held by getty/5608:
[  654.423517][   T30]  #0: ffff8880326680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  654.433365][   T30]  #1: ffffc900032332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480
[  654.493498][   T30] 1 lock held by syz-executor/5816:
[  654.498751][   T30] 1 lock held by syz-executor/5827:
[  654.523529][   T30]  #0: ffffffff8fee33e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230
[  654.532580][   T30] 5 locks held by kworker/u9:2/5832:
[  654.553829][   T30]  #0: ffff88804879a148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0
[  654.573537][   T30]  #1: ffffc900037efd80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  654.593553][   T30]  #2: ffff88805a6bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410
[  654.613516][   T30]  #3: ffff88805a6bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x150/0xb50
[  654.623258][   T30]  #4: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0
[  654.644137][   T30] 1 lock held by syz-executor/7892:
[  654.650456][   T30] 1 lock held by syz-executor/10943:
[  654.655854][   T30] 1 lock held by syz.0.1389/10948:
[  654.660972][   T30]  #0: ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0
[  654.671093][   T30] 2 locks held by syz.2.1391/10963:
[  654.676386][   T30] 2 locks held by syz.3.1392/10966:
[  654.681591][   T30]  #0: ffff8880595076c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x970
[  654.692092][   T30]  #1: ffffffff8fee33e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0
[  654.701145][   T30] 1 lock held by syz-executor/10976:
[  654.706724][   T30]  #0: ffffffff8fee33e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[  654.716283][   T30] 1 lock held by syz-executor/10980:
[  654.721584][   T30]  #0: ffffffff8fee33e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0
[  654.731087][   T30] 2 locks held by syz-executor/10983:
[  654.736558][   T30] 
[  654.738885][   T30] =============================================
[  654.738885][   T30] 
[  654.747365][   T30] NMI backtrace for cpu 0
[  654.751705][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  654.762221][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  654.772294][   T30] Call Trace:
[  654.775581][   T30]  <TASK>
[  654.778519][   T30]  dump_stack_lvl+0x116/0x1f0
[  654.783217][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  654.788186][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  654.794206][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  654.800218][   T30]  watchdog+0xf0c/0x1240
[  654.804483][   T30]  ? __pfx_watchdog+0x10/0x10
[  654.809167][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  654.814404][   T30]  ? __kthread_parkme+0x148/0x220
[  654.819450][   T30]  ? __pfx_watchdog+0x10/0x10
[  654.824134][   T30]  kthread+0x2c1/0x3a0
[  654.828220][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  654.833433][   T30]  ? __pfx_kthread+0x10/0x10
[  654.838037][   T30]  ret_from_fork+0x45/0x80
[  654.842464][   T30]  ? __pfx_kthread+0x10/0x10
[  654.847076][   T30]  ret_from_fork_asm+0x1a/0x30
[  654.851870][   T30]  </TASK>
[  654.855718][   T30] Sending NMI from CPU 0 to CPUs 1:
[  654.860959][    C1] NMI backtrace for cpu 1
[  654.860973][    C1] CPU: 1 UID: 0 PID: 5186 Comm: syslogd Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  654.860996][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  654.861008][    C1] RIP: 0010:kasan_check_range+0x111/0x1a0
[  654.861043][    C1] Code: 44 89 c2 e8 81 ea ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0
[  654.861061][    C1] RSP: 0018:ffffc9000345f760 EFLAGS: 00000046
[  654.861077][    C1] RAX: fffffbfff20beb31 RBX: fffffbfff20beb32 RCX: ffffffff81952726
[  654.861090][    C1] RDX: fffffbfff20beb32 RSI: 0000000000000008 RDI: ffffffff905f5988
[  654.861103][    C1] RBP: fffffbfff20beb31 R08: 0000000000000000 R09: fffffbfff20beb31
[  654.861116][    C1] R10: ffffffff905f598f R11: 0000000000000000 R12: 000000000003dbcc
[  654.861129][    C1] R13: 0000000000000005 R14: 0000000000000005 R15: ffff8882067e0000
[  654.861142][    C1] FS:  00007f6ddb4d9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  654.861161][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  654.861173][    C1] CR2: 00007ffc78da82a8 CR3: 0000000034bf2000 CR4: 00000000003526f0
[  654.861187][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  654.861199][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  654.861211][    C1] Call Trace:
[  654.861217][    C1]  <NMI>
[  654.861224][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[  654.861252][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  654.861281][    C1]  ? nmi_handle+0x1a9/0x5c0
[  654.861302][    C1]  ? kasan_check_range+0x111/0x1a0
[  654.861328][    C1]  ? default_do_nmi+0x6a/0x160
[  654.861352][    C1]  ? exc_nmi+0x170/0x1e0
[  654.861375][    C1]  ? end_repeat_nmi+0xf/0x53
[  654.861395][    C1]  ? trace_irq_enable.constprop.0+0x36/0x130
[  654.861426][    C1]  ? kasan_check_range+0x111/0x1a0
[  654.861453][    C1]  ? kasan_check_range+0x111/0x1a0
[  654.861481][    C1]  ? kasan_check_range+0x111/0x1a0
[  654.861508][    C1]  </NMI>
[  654.861514][    C1]  <TASK>
[  654.861520][    C1]  trace_irq_enable.constprop.0+0x36/0x130
[  654.861551][    C1]  trace_hardirqs_on+0x26/0x40
[  654.861578][    C1]  _raw_spin_unlock_irqrestore+0x52/0x80
[  654.861606][    C1]  debug_check_no_obj_freed+0x328/0x600
[  654.861638][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  654.861669][    C1]  ? page_ext_put+0x48/0xd0
[  654.861691][    C1]  free_unref_page+0x21a/0xdc0
[  654.861715][    C1]  qlist_free_all+0x4e/0x120
[  654.861736][    C1]  kasan_quarantine_reduce+0x192/0x1e0
[  654.861758][    C1]  __kasan_slab_alloc+0x69/0x90
[  654.861780][    C1]  kmem_cache_alloc_noprof+0x121/0x2f0
[  654.861803][    C1]  ? security_file_alloc+0x34/0x2b0
[  654.861827][    C1]  ? rcu_is_watching+0x12/0xc0
[  654.861851][    C1]  security_file_alloc+0x34/0x2b0
[  654.861875][    C1]  init_file+0x93/0x230
[  654.861897][    C1]  alloc_empty_file+0x91/0x1e0
[  654.861925][    C1]  path_openat+0xe1/0x2d60
[  654.861942][    C1]  ? hlock_class+0x4e/0x130
[  654.861966][    C1]  ? __lock_acquire+0x163e/0x3ce0
[  654.861986][    C1]  ? __pfx_path_openat+0x10/0x10
[  654.862005][    C1]  ? __pfx___lock_acquire+0x10/0x10
[  654.862025][    C1]  do_filp_open+0x1dc/0x430
[  654.862043][    C1]  ? __pfx_do_filp_open+0x10/0x10
[  654.862060][    C1]  ? find_held_lock+0x2d/0x110
[  654.862091][    C1]  ? _raw_spin_unlock+0x28/0x50
[  654.862116][    C1]  ? alloc_fd+0x2d7/0x6c0
[  654.862145][    C1]  do_sys_openat2+0x17a/0x1e0
[  654.862168][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  654.862193][    C1]  ? kmem_cache_free+0x31d/0x4b0
[  654.862215][    C1]  __x64_sys_openat+0x175/0x210
[  654.862239][    C1]  ? __pfx___x64_sys_openat+0x10/0x10
[  654.862267][    C1]  do_syscall_64+0xcd/0x250
[  654.862286][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.862313][    C1] RIP: 0033:0x7f6ddb62d9a4
[  654.862329][    C1] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  654.862346][    C1] RSP: 002b:00007ffdf29266c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  654.862362][    C1] RAX: ffffffffffffffda RBX: 0000565519c382c0 RCX: 00007f6ddb62d9a4
[  654.862375][    C1] RDX: 0000000000000d41 RSI: 00007f6ddb7cc443 RDI: 00000000ffffff9c
[  654.862387][    C1] RBP: 00007f6ddb7cc443 R08: 0000000000000001 R09: 0000000000000000
[  654.862399][    C1] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000d41
[  654.862411][    C1] R13: 00000000673153e6 R14: 0000000000000003 R15: 0000565519c38410
[  654.862429][    C1]  </TASK>
[  654.863023][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  655.310431][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0
[  655.320945][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  655.331009][   T30] Call Trace:
[  655.334292][   T30]  <TASK>
[  655.337213][   T30]  dump_stack_lvl+0x3d/0x1f0
[  655.341800][   T30]  panic+0x71d/0x800
[  655.345694][   T30]  ? __pfx_panic+0x10/0x10
[  655.350107][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  655.355473][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  655.361451][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  655.366823][   T30]  ? watchdog+0xd76/0x1240
[  655.371255][   T30]  ? watchdog+0xd69/0x1240
[  655.375664][   T30]  watchdog+0xd87/0x1240
[  655.379902][   T30]  ? __pfx_watchdog+0x10/0x10
[  655.384569][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  655.389769][   T30]  ? __kthread_parkme+0x148/0x220
[  655.394791][   T30]  ? __pfx_watchdog+0x10/0x10
[  655.399457][   T30]  kthread+0x2c1/0x3a0
[  655.403518][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  655.408761][   T30]  ? __pfx_kthread+0x10/0x10
[  655.413356][   T30]  ret_from_fork+0x45/0x80
[  655.417771][   T30]  ? __pfx_kthread+0x10/0x10
[  655.422358][   T30]  ret_from_fork_asm+0x1a/0x30
[  655.427128][   T30]  </TASK>
[  655.430393][   T30] Kernel Offset: disabled
[  655.434700][   T30] Rebooting in 86400 seconds..