last executing test programs:

12m44.694724914s ago: executing program 1 (id=35):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='prev_state.function ==', 0x16)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x9, 0x2, "f018"}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x56c, &(0x7f0000000a80)={[{0xc8, 0x4e00, "cbbc3176e5dfb291d0ec1ae36dbf91ada50f7d5f1a9ef87144360007ba7a84271c3364df080905e949b706e19aa93a383fb7bcbfd08c180bdf146e5fd9dbb5c5c42fe0a83167f484ddcd0de77f49f10e98bb1cfb967e1ca5757917d1e70c767e2ccf4f396b75e6dca71585bef8ed5376e9b8881fec40f208973cd8a71ccdcffd3122fb5962a8c5563eb4962d6fcd978d7d1ab553ca2ee2c142bca7019e48b617679c96848b21cd77e617bb9639b5b218b8de3143966286f7ff81b358f680cb3fd1d1df7ef32d8603"}, {0x18c, 0x4e00, "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"}, {}, {0xc, 0x4e00, "004b87be7e77f78f371aed06"}, {0xd6, 0x4e00, "02fe0ba145095662ae6d417a4929a244f83c61daf7dd4b557fe772319740eb6feebd85f011f7a7ccfb35185d5169a89460fd25f8614793f3cd519a469a4ea2ba0493912f05c55a4db96d19e8f6983d7bda29e86b4d9e4e93614ba19041a95251c14b7065a0118ea3faa7bfa8e94cd57ebc22a6927bac42d1446057080183b25d1490a09a5aecba8b885ee49eea1157f064fdebc25504eb8f7b52507570d27bf88b418b1e88312ae333578d4efc5e47f6e7052b0339cf8032d683247024472278666399c638da243737f058c922a7564bc4d46beca256"}, {0x60, 0x4e00, "b523d83c2023728afa99e763c304da775010ee6993788d3e79a1f648ea83c96e8eaa64eaf187072200291877cab48dcdb163051ef7951b8895faec5e172ec2df819aad3383e1657aec140930d7280046aee2903787d6f4829d5d8a1d7d8e115c"}, {0xc6, 0x4e00, "64fb1e94254f96fe46dc10c9e42977597367be81665d503e494447bea48c904fd09fe0f51af0d4d1aab4aa1e6f2d1254782794bd873781cf1957f62d804af9267d5850a857d6641486ad07ccc3adf736e6bb852f745167080ff74f635d1b44a6668edff27ec5c424dac1ff27ca8f2fb5096e55783143e2bb7cfda2c627e4429ac6cf50e2bcd412d239ada298f5057e6d2ef9776bab9c0679564bc1a70f19f67d5d478efb2b2ddf9599ef88ddf91e843ca1defe88de03c19d594dd175c14b25ec7b7cc56e7c25"}, {0xeb, 0x4e00, "2d20b99ffa32f4065e67d668e6b041423ad7689d0c751c749c63bd3c78554a47640382bb23152aa6b0f1929f7c25869a1349dc6fd0dfce24f02af6b868172ff438752bcf202442ed1276892ac3675c964acd9a8e41dcb9ae73606dc157685c5cdf8e4d9d2052f9d2ca1ac9823a122d35aba191f574ef15848610687f2d76f406bf2a4e9df97c801283cec2f83cb8d3890ce8f59abf91fe917c800a27ea79e4f83714bdaab016885e8f5d271c6d59efad90285f4dbb2cdad0454a17a7caf28f52201d0e3169218b0143b01c256078f6b864b45ae56a3966d6762f7c29c8bf2ca713b1377b329777db1c4759"}]})
syz_usb_control_io(r0, 0x0, 0x0)

12m42.808112306s ago: executing program 1 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
listen(r2, 0x5)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
sendmsg$nl_route(r0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)

12m38.692626363s ago: executing program 1 (id=52):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4)
mmap(&(0x7f0000582000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x100010, 0xffffffffffffffff, 0xfffff000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x40780, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0)
mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x404c840)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

12m34.263961615s ago: executing program 1 (id=60):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x3, 0xffff, 0x1}, {0x1, 0x2, 0x2}, {0x5, 0x6, 0x2}, {0x8, 0x400000}, {0x3, 0x6, 0x1}, {0x0, 0x3, 0x2}, {0x1, 0xfffffffe}], 0x7, 0x10, 0x3, 0x7})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100))
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x2b, &(0x7f00000001c0)=@generic={0x5, 0x0, 0x23, "1b74227c", "d2a3df3444788ed449e146c028ea3ceae1e53396d1a9866e79a88871e56df326273d55"})
close_range(r0, r0, 0x0)
r2 = dup2(r0, r0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000004480), &(0x7f00000044c0)=0x4)

12m30.122562695s ago: executing program 1 (id=67):
socketpair(0x23, 0x2, 0x1, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = dup(r3)
r7 = fcntl$dupfd(r2, 0x406, r5)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

12m28.622820019s ago: executing program 1 (id=71):
prlimit64(0x0, 0x6, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x8, 0x3, 0x5})
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

12m12.829817558s ago: executing program 32 (id=71):
prlimit64(0x0, 0x6, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x8, 0x3, 0x5})
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

10m30.455896386s ago: executing program 5 (id=321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000001c0)=',\xb3(\r{\\)\x04\xab\x1d%\xe4\xf9\x1e1\x19\x9d<\\\xb2\x12\xa7l\xe3\x19\xb3\xad\x93\xd3dw\xb5\x86\x8a\xae\x99\xa8\x11\xa5X*\x82\x01\x9c\xc0(\xaeG\x9e\x0e\xb9\xd4\xe8\x88\xdd\x85\xfdQ\xd4\xfc\x02_\x89\x8f\x14\xdf\xf4\xf2\xc0\xc2\xf6\x1cT\x95\x9c\x1a\x8c2\xceq?s[\x1c\xd0\xb9\xf7\xe7\xfa7_u5\n\xcf\x98X\xfd,\x00\xda\xadY-I\x90eU\x83B\x8a\xa6\xe6\x81\x14:\xbb\x16\xf5j\'/Z$\a\xa2Z\x7fb.\xc9\x17\x1eI\xeb3\x89,J\xe8\xdd:o\xea\xc1\xe7\xf0\xd4S\x15\x83\xd2\xbe\x05\xe8\xa9\'\x84\n\x8cM\x96\x19\xcd\x17\x9a]5\xd5\x9a\x8b=E\x00\xbe\bO\x8c3\xab\xd5\xa2y\xdc6/\xba\x05\x8e\xb7\xc1\xc94\'\xc4y\xdcd{\xfe\xe5\xf1\xd5\xd3?\x93p\x9f\xf0\x96\xce\x88\x93\xd2loT\x14\x83\xb2\xfbu\n\x17\x01\x99A\xc5W\xa4')
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00'})
r5 = syz_io_uring_setup(0x96d, &(0x7f0000000540)={0x0, 0x2fe, 0x0, 0x3, 0x11}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}})
io_uring_enter(r5, 0x101, 0x11, 0x5, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x818, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}})
acct(0x0)
accept4$unix(r9, 0x0, 0x0, 0x80000)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b400000059080600010800"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

10m28.982618762s ago: executing program 5 (id=322):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x43cc, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)

10m28.214759324s ago: executing program 5 (id=325):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe9, 0x72, &(0x7f00000000c0)="e1908bb3d7cf11f819860ec277e1c9f7b8bd378ca47602512c2e483316d16039bb456a79f789f56ecfcfd4bc7a6c0934cbb79f98ec5ba0846cc43c4e28e6b98a89d9c32411d5a8bcb0839bb654aecd2b0844ad6209f8d5418ee3ef90a85be3b1b97919ef9c3dde9a7edde61883300d017daf65aecfe6940dfdbeef398559c5ffb30b0f42fb26c3c3fa51c16ceb05e925d366d9664b8c5da6d425f175a13fda568393a7a3c4c40981f6ef24054d85dec37a991140e0559f9603bcf8b73842767c1118e4c79c91b252181f32c6ef1773ca37ba20f10db8027ca37f6c908f30abae6114fbfa6f543a7804", &(0x7f00000001c0)=""/114, 0x2, 0x0, 0x37, 0x79, &(0x7f0000000240)="9db78ce7479b8ee12566bbcf2226bbb2695dad9e08b245753cf48ce6bf5a7354d15bd32c4661334b47af4afb4f0b083a0e5fed92b15428", &(0x7f0000000280)="a777bc9ab1dbc81590dcdd9c7a37a8a8d4586e2ccb27fcbc508070dacc4a66274ea50916d9ce72e1bdcada26200a554c969c30b62249beb69e8f41d5f64899b4a4c2bee315ecb83a014d52e671c3a3eff3d8c7a23985822f1529c5fbb8bdcf2375912026d1b4a4f6378fb791ddb4c3218cdf3cf68b80130fa5", 0x1, 0x0, 0x8}, 0x50)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000270001"], 0x50}}, 0x0)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
sendmsg(r1, &(0x7f0000000880)={&(0x7f0000000440)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="8697630f4ff2aee659be5c1a774b0129dee209", 0x13}, {&(0x7f0000000500)="e44135da8623a68b5e4b46c1ba4b7fea65f022f01a0272d6eb16387e777a895c42582c1431f73b4f9ee02450baad170cf752147b86bc08eb56b03d74ebf1819031a81cf0ed93ab69855c0764d79206fa95a1b5e9f9dfa2f60db46a067f9c432b301e066341a27e457432eaf8235a36dbb58551e29a301ad2b4256d5e159171b5a3e86f79", 0x84}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/632], 0x278}, 0x10)
bind$can_raw(r1, &(0x7f0000000080)={0x1d, r3}, 0x10)

10m27.87869238s ago: executing program 5 (id=331):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r5 = getpid()
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x8000)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r9, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r9, &(0x7f00000000c0)=r5, 0x12)
close(r9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
r10 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f00000007c0)=@hci={0x1f, 0x8ea8, 0x47}, 0x80, 0x0}, 0x8000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r11)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x40, r12, 0x101, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008001}, 0x80a0)

10m27.736211297s ago: executing program 5 (id=332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x60, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0x0, 0x0, 0x9, {[@generic={0x13, 0xb, "f38f0284d05d780284"}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "6947c2a126c96bf73cf1b1de8f7c9b09"}, @generic={0x8, 0x8, "bef5c7672ad3"}, @timestamp={0x8, 0xa, 0x8, 0x7}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x3, 0x8}]}}}}}}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
futex_waitv(&(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019440)=""/102400, 0x19000)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)="62fa0d2b7aad", 0x6)

10m26.735290459s ago: executing program 5 (id=333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000300)="509072e6c7f8fb3c4768995e6c6f2b2ff74c1cf54a0fdd9fd7697e44da7560c3d38b8ec62a2c7827eb5476e4455466e00d805c233f33ef21ca0e2656dc4475b5591c7410cd397359ad62d3647bb9da72514f0922ca203c2d05bc608ddc21274840dc73fef3ba4887444b00d568f96ed089b4dcb72b2df77c5b25c61cfa4a05f1dcd3be87b131a15898ccff30a33aba0663ce6fa785241c18232adbdab0199b82e61d365c8d1b634b72e3bab65a5170e4fd513615bf1b6a555373c214075bac50b7bf73af366e114af84be213e91ba49a87aa58f812e6b493554fd518390a80d56cf49efb92d0431111421dcfdae2a2f259", 0xf1, 0x40080, &(0x7f0000000440)={0x11, 0x1a, r4, 0x1, 0x3, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd80, 0x1, 0x1000}, {0x9a, 0xf, 0x8, 0x0, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x100000000001d, 0x0, 0x5e)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r10, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 t', 0x6d)
r11 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014)

10m11.690967485s ago: executing program 33 (id=333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000300)="509072e6c7f8fb3c4768995e6c6f2b2ff74c1cf54a0fdd9fd7697e44da7560c3d38b8ec62a2c7827eb5476e4455466e00d805c233f33ef21ca0e2656dc4475b5591c7410cd397359ad62d3647bb9da72514f0922ca203c2d05bc608ddc21274840dc73fef3ba4887444b00d568f96ed089b4dcb72b2df77c5b25c61cfa4a05f1dcd3be87b131a15898ccff30a33aba0663ce6fa785241c18232adbdab0199b82e61d365c8d1b634b72e3bab65a5170e4fd513615bf1b6a555373c214075bac50b7bf73af366e114af84be213e91ba49a87aa58f812e6b493554fd518390a80d56cf49efb92d0431111421dcfdae2a2f259", 0xf1, 0x40080, &(0x7f0000000440)={0x11, 0x1a, r4, 0x1, 0x3, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd80, 0x1, 0x1000}, {0x9a, 0xf, 0x8, 0x0, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x100000000001d, 0x0, 0x5e)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r10, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f00000000000000001100000000000000000000000000000000000000 t', 0x6d)
r11 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0xffffffffffffffff}}], 0x20})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014)

1m55.004112728s ago: executing program 3 (id=1720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x78, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x55, 0x2, 0x0, 0x0, @binary="81555deb70e322dba3c4afe1ae79032cc6c36fc4cb4a1350b9c3f8c13ae137b68f208281adeb8de1c7ad7ad6b43fc11d9c099de7629664655ef4572ee56ef1845ed045baa652898ac9ee3060e9fee8e475"}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
mount(&(0x7f0000000180)=@filename='./config/usb_gadget/g1\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000200)='v7\x00', 0x2020081, &(0x7f0000000240)='configfs\x00')
write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc.0\n', 0xc)

1m55.002265058s ago: executing program 3 (id=1722):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
pwrite64(r3, &(0x7f0000000140)="10", 0xda0443d9, 0xfff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m47.525727477s ago: executing program 3 (id=1728):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
futex(&(0x7f0000000280)=0x1, 0x18b, 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x2)
ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)=@other={0x3, &(0x7f0000000040)=0xffffffffffffd146})
pwrite64(r3, &(0x7f0000000140)="10", 0xda0443d9, 0xfff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0xb}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m47.512072829s ago: executing program 3 (id=1738):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00005e9000/0x1000)=nil, &(0x7f0000325000/0x3000)=nil, 0x1000, 0x1})

1m45.188065665s ago: executing program 3 (id=1747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

1m44.955774759s ago: executing program 3 (id=1749):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="070000ed49c2bfd86f0cd5cda0958b57b92c0000000800168ce24000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xa431, 0x2)
r4 = socket$netlink(0x10, 0x3, 0xa)
r5 = dup(r4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
ftruncate(r7, 0x200004)
sendfile(r5, r7, 0x0, 0x80001d00c0d1)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x3, 0x4})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x1, @win={{0x0, 0x0, 0x4}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x9}}})

1m44.621719421s ago: executing program 34 (id=1749):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="070000ed49c2bfd86f0cd5cda0958b57b92c0000000800168ce24000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xa431, 0x2)
r4 = socket$netlink(0x10, 0x3, 0xa)
r5 = dup(r4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
ftruncate(r7, 0x200004)
sendfile(r5, r7, 0x0, 0x80001d00c0d1)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x3, 0x4})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x1, @win={{0x0, 0x0, 0x4}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x9}}})

18.331867245s ago: executing program 7 (id=2007):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000804)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x40}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000000000000000000000b00030064756d6d79300000130012800a00020064756d6d79000000"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r9, @ANYBLOB="000000000000000008000f00", @ANYRES32=<r10=>r8], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32=r10, @ANYRESDEC, @ANYRESOCT], 0x58}}, 0x0)

17.114025033s ago: executing program 7 (id=2008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
futex_waitv(&(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r6, &(0x7f0000019440)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)="62fa0d2b7aad", 0x6)

14.628380113s ago: executing program 2 (id=2017):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r10, 0x40082102, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

13.316853043s ago: executing program 7 (id=2020):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x452003, 0x0)

12.191694882s ago: executing program 2 (id=2023):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x24004098)

9.453637181s ago: executing program 2 (id=2030):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='prev_state.function ==', 0x16)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x9, 0x2, "f018"}, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4a0, &(0x7f0000000a80)={[{0xc8, 0x4e00, "cbbc3176e5dfb291d0ec1ae36dbf91ada50f7d5f1a9ef87144360007ba7a84271c3364df080905e949b706e19aa93a383fb7bcbfd08c180bdf146e5fd9dbb5c5c42fe0a83167f484ddcd0de77f49f10e98bb1cfb967e1ca5757917d1e70c767e2ccf4f396b75e6dca71585bef8ed5376e9b8881fec40f208973cd8a71ccdcffd3122fb5962a8c5563eb4962d6fcd978d7d1ab553ca2ee2c142bca7019e48b617679c96848b21cd77e617bb9639b5b218b8de3143966286f7ff81b358f680cb3fd1d1df7ef32d8603"}, {0x18c, 0x4e00, "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"}, {}, {0xc, 0x4e00, "004b87be7e77f78f371aed06"}, {0xd6, 0x4e00, "02fe0ba145095662ae6d417a4929a244f83c61daf7dd4b557fe772319740eb6feebd85f011f7a7ccfb35185d5169a89460fd25f8614793f3cd519a469a4ea2ba0493912f05c55a4db96d19e8f6983d7bda29e86b4d9e4e93614ba19041a95251c14b7065a0118ea3faa7bfa8e94cd57ebc22a6927bac42d1446057080183b25d1490a09a5aecba8b885ee49eea1157f064fdebc25504eb8f7b52507570d27bf88b418b1e88312ae333578d4efc5e47f6e7052b0339cf8032d683247024472278666399c638da243737f058c922a7564bc4d46beca256"}, {0x60, 0x4e00, "b523d83c2023728afa99e763c304da775010ee6993788d3e79a1f648ea83c96e8eaa64eaf187072200291877cab48dcdb163051ef7951b8895faec5e172ec2df819aad3383e1657aec140930d7280046aee2903787d6f4829d5d8a1d7d8e115c"}, {0xeb, 0x4e00, "2d20b99ffa32f4065e67d668e6b041423ad7689d0c751c749c63bd3c78554a47640382bb23152aa6b0f1929f7c25869a1349dc6fd0dfce24f02af6b868172ff438752bcf202442ed1276892ac3675c964acd9a8e41dcb9ae73606dc157685c5cdf8e4d9d2052f9d2ca1ac9823a122d35aba191f574ef15848610687f2d76f406bf2a4e9df97c801283cec2f83cb8d3890ce8f59abf91fe917c800a27ea79e4f83714bdaab016885e8f5d271c6d59efad90285f4dbb2cdad0454a17a7caf28f52201d0e3169218b0143b01c256078f6b864b45ae56a3966d6762f7c29c8bf2ca713b1377b329777db1c4759"}]})
syz_usb_control_io(r0, 0x0, 0x0)

9.393456261s ago: executing program 6 (id=2031):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000804)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x40}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000000000000000000000b00030064756d6d79300000130012800a00020064756d6d79000000"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r9, @ANYBLOB="000000000000000008000f00", @ANYRES32=<r10=>r8], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32=r10, @ANYRESDEC, @ANYRESOCT], 0x58}}, 0x0)

8.175840783s ago: executing program 6 (id=2033):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006)
write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[{0x18, 0x110, 0xe, 'H'}], 0x18}, 0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_CAP_MAX_VCPU_ID(r7, 0x4068aea3, &(0x7f0000000340)={0xdb})
write(r4, &(0x7f0000000280), 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f00000000c0)=""/9, &(0x7f0000000180)=0x9)
write(r4, &(0x7f00000002c0)='\n', 0x1)

7.72876022s ago: executing program 7 (id=2036):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_IOCTL(r5, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x1, 0x4, 0x17, 0x14d2aaac}}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000100007000000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000002b000000fc0000000000000000000000000000400000000000000000800000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000fc0000000000000000000020000000000007000000000000000000000000000000000000000000000000000a00024070000000000800004c0012006d6f727573313238302d7373653200"/234], 0x13c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0xc0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xb)

6.800808881s ago: executing program 6 (id=2039):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x0, 0x45, 0x0, 0x1}, 0x28)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r4 = getpgrp(r1)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)

6.708542623s ago: executing program 2 (id=2040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

6.680177744s ago: executing program 4 (id=2041):
syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a1009050300000400000009050000ebff09030509050402000000000009058102e0"], 0x0) (async)
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x0, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0xeeef0000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x1, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x0, 0x80a0000, 0x0, 0x82, 0x0, 0x0, 0x4, 0xe}, {0x6000}, {0x5000, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) (async)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x52fa, @remote, 0x7ff}, 0x1c) (async)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c710020000ffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r6 = fsmount(r0, 0x1, 0x90)
openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async)
r7 = syz_io_uring_setup(0x748e, &(0x7f0000000400)={0x0, 0x5962, 0x1000, 0x0, 0x55}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{0x0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, 0x4, 0x1})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r13) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$cgroup_subtree(r12, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) (async)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db2020030790500140003006e657464657673696d3000000000000014000000000001800c00050007000000c4000000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x804) (async)
io_uring_enter(r7, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

5.339245357s ago: executing program 6 (id=2042):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(0x0, 0x1, 0xc0400)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

5.16959923s ago: executing program 2 (id=2044):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r1, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
mount(&(0x7f0000000040)=@filename='devtmpfs/file0\x00', 0x0, &(0x7f0000000000)='dax\x00', 0x10, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

4.866649587s ago: executing program 0 (id=2045):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0x63}, 0x0, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r2, 0x1, 0x4, 0x7fff}, 0x10)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x3, 0x8e0, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x37, 0x63, 0xd2, 0x8, 0x58f, 0x6610, 0x70d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8ce, 0x4, 0x6, 0xcf, 0x0, 0x8, "", [{{0x9, 0x4, 0xde, 0xe, 0x5, 0x89, 0x10, 0xd0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x4a}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x1, 0xe, "d16a3e85cd"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x1, "618dabacc5bf"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x1, 0x5, [0x1, 0xe, 0x2, 0x6, 0x4], 0xd}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x81, 'r'}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x9, 0x1, 0xa], 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x6, 0x68}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x81, 0x7f, 0x81}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0xff, 0x3}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x2, 0x2, [@generic={0x85, 0x7, "750aff7ae239164a66ea73aa7482ddbef4d73e7b716ad9771fd029eab7bd92ac27247dda60ba297d81e20b33b3cc114215941961b423b124793eaa942add56584425c84d2db829ef188e0b957290a414f2528c74234ac05f013e1a54f8a56f4586d147a34096cba8ff86c18c03430b36c0b434da8da68543ba8289af87d408093bdeac"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x4, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x6}]}}]}}, {{0x9, 0x4, 0x30, 0x3d, 0xf, 0xe1, 0x99, 0x0, 0x7, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x9, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x30de}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x8, 0xe, [@generic={0x92, 0x24, "67c12f1b333b82bbfacb91c09841809edc582645f674597600f0d6f6952fbf92385e3d2c27e0740c06af17a2eb10b78939d73139103a955a8489c06749dfb46a724a7fb1aa5028630292f24fc618cbae2f18d1c5b29e6cde70237471e9c15cd71995362689070b079712d91f3e2d7c39473d469289343b651520d62b2b3b8107b757cd5c52e326bfd81f2f0983a3544d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xb1, 0x7f, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x1, 0x1, 0x8, [@generic={0xc, 0xa, "8308c4221ab129187021"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x0, 0x4, [@generic={0xa8, 0x21, "eadc1225d19aa63b03656d72b75d3ee8bdbe5afe9681a3c7d9808d29cc02190c294921475c1061a6668b0937e3056fe710d905b7f10021529e452acd152ed4599c6b298dbc0bdeb2e86b7c5ca70237d6985f6eeec6e479c4395ff9e2b32eab319ef63764c01b79e10b91ba8f6c1be25b1cda34c979a3c2f25e0f806dd34f9d7083d89be2f3ea121dea65453f949edc028108fe876912c34891ff0243c91c71ef534e211a70ca"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xeb, 0x9}, @generic={0x16, 0x7, "4857ee22dcc2351b1108ed9f0c64e1b9cba03d09"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0x0, 0x7, [@generic={0x22, 0x11, "04ba302a3c9ee4a4fa96af429794127e5b9d0944adde07cbc49c6e2d76e9ce6a"}, @generic={0x90, 0x21, "98b03c428cf2fd2524dd6b1946c38cbcfaf1fef14173f150d3eabdd83e1a35a46547ee679a7956363cc7150cdbee1eaf5fe9b8a9c3daf0312e95a1ed425a55179769a70e06f313a6130bfbb3b3fd88b8930a2d3b997c25ed4ae661a49563464e67d831e365f5ce2f3817592fc462b56f6f25b83a06334b2a67b650975394c262059c2f6ad77250624a4d8856a438"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6ebd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xed}, @generic={0x46, 0xc, "294d0f6509441e1a6f3d090163622b5e5e071f3ce5ebcace065e58cdab9b60da03eaa7d3d9a8f7161c768e1da8cc69a877d9714f3095eec12b500375a58464144180a316"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x8f, 0xff}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7ff}, @generic={0x66, 0xf, "e9d14873379af86532297893b64f2eb99879c5b6baa60535d051375d32030ef4d3a3411d9aa45c823456ca9abc7ccae4466440c2ed12339a8bec9a9215f8f73eeba0eebd5896f4e70458bcf767fadca5591b0a510138c33fc1eadc23f4026dff121dc110"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0xf8, 0x4}}, {{0x9, 0x5, 0x3, 0x1d, 0x8, 0x6, 0xb, 0xc, [@generic={0xa3, 0x22, "9a7a758685bb3838df2f5b8d22340a987775e310339103330bd7c012ad21980acc173e5dd6581830151425cf76bde69980bd05d89a61902677a349d1bbdb33bbc9804439672d217e45109031728d4034b0256caa4141012a7737995068d557e1b39ae99a58214fca5d0a4e69683b6c81a134a453713f212c97c2d34c7c3ccb806e90c81c0491d77e0dfcae35f7d2ab86742115e3401d4c144025bec6d9967b9d1c"}]}}]}}, {{0x9, 0x4, 0xd, 0xc, 0x2, 0xae, 0x3, 0x18, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ce7c15b3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x101, 0x400, 0xc}, {0x6, 0x24, 0x1a, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x57c}, @country_functional={0x10, 0x24, 0x7, 0x1, 0xa, [0xa, 0x80, 0x5, 0x0, 0x200]}]}, @hid_hid={0x9, 0x21, 0xffff, 0x5, 0x1, {0x22, 0xefe}}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x80, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x7f, 0x89, [@generic={0x57, 0x3, "e7492195d66974e65bad23936728f1d79c031177e0c41a740ac9b248830aab56223252acf920d49dfb9f6bfd50321fcd1165c04bdb1d24f8020f0e536b018a0bb4bffc04a102fe4f0f64e30a0e18da9a71be324e9e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xc}]}}]}}, {{0x9, 0x4, 0x5a, 0x4, 0x9, 0x89, 0xae, 0x47, 0xf6, [@hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xab4}}, @generic={0x6c, 0xb, "e70867c87e89e798ac091d87a88d88249ad896ba06ccd0ba362ed8ff54321a48a2307ea0ed57556affb2ec852aa4af12a67b4383b90c6205cea7e898075cadc31ec1f2ef4899893e4ff752ba6c10c3e7c084ef220e02ca27c51ee633e53be8c01b14421a2ab193feb513"}], [{{0x9, 0x5, 0x6, 0x1, 0x8, 0x2a, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x9, 0x20, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x9, 0x7f}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x8, 0xbf}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xb, 0xa, 0xf9, [@generic={0xbb, 0x21, "04c8a57cc24b69f0f5a2d9e9e42c9a84977ca7c311f19722b4c97b38e0cf51b2e482a5b34e7929958e48e1f7d2cc6b3aef6b5caaf34bbadb12603860387b8df87036497eb808b3f65beae5ad79da5f9e3dbfb737802b60ed3b6aca1ca148c8e4ec664ef54b06f3c5d3a46a24a5a5b56c32bab80405f7aa4d35c07a1483f2e8b945550d8a6014f29b1eaffdf9ceb9b32be2d3a1cb39472d3f2a40f1fc28e3e94f2441f47c14f46fc8f1c5e7df246d40a039251dcd1535b93c5f"}, @generic={0x6b, 0xe, "798cc2233b9419b4322c84b8e2044510b19f8c6e75eb78de52904e425d460d99d77d477b710625c9c8b35de676d4a375fc7fc692aa689ca4d0e165a8f0e157137659e74b6877009caca09b201b554cef07795b3b4556aa53cfc483ecdc205ef077b42a2b819962b75f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x3, 0x7, 0x86, [@generic={0x7d, 0x22, "b8d979fd58f50b4bc5ea979aff04034e5066337b03e56c5040387105394f2592af840fe73b4f8d4e12f461765f11c52f1a7b3df42806ac175d8698fbb6d723a1067021cc7b3ea32e1c64108b50340a7fcd67ed9ff6c511bcc105b6bfaa60ffba5a5953b2ce994efabeba15c0beae03f3a1e89883d6e7393207596f"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x38, 0x3, 0x2, [@generic={0x39, 0x10, "a8edb8c62aa02a88b1b62d962ce17715e6003172f86a1e6950a4010879e192d67c7220afeab5c5f681c6b1acdcee45b58eff6bbb105e52"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0xcc, 0x2b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x39, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x5, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x5, 0x1, 0x8, 0x0, 0x2}, 0x27, &(0x7f0000000f00)=ANY=[@ANYBLOB="0507000000000000df45000205f9f780030a3b6d66e5c5b86506cbba7c7a6a36d6010058c1f71e"], 0x4, [{0xb4, &(0x7f0000000f40)=@string={0xb4, 0x3, "da1e0ff379779d0dba9922174e0c1dff872e235ac8e4810bf1db280022b66ea2287778e83216e065de0872fd9792457b6cb0eac06c301df4a85fefc8735c4713cab97b70472712301fba5a52479b43988ac92d68e0a77c1bccdda22de3e82342614e6230e19222b5a1a6ebb66b2ad5a83c151fa28f4259787e9346215fbbdee58b2b4f3ea8329782d80ea411cc1411e57de981c34d05c91b1d20a2da5c1435c0051cda36aee5a3b7f7f7e349c20033638282"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x2801}}, {0xdb, &(0x7f0000001040)=@string={0xdb, 0x3, "c32f6a80ebfe6c3440b3f8e4e14eae20fcea1837e0a933e27fe7c659bfcb3b59fa39e99a1695da3b7a804518933949d06a7f761bb7c67b7ff168939ee4570247d733a81c702f4792b7590f81a27f7198164235e6a8b85eed3832b2ce7948250beff5b5825d165d8ccf3ef14867f9e146e591e187df2dcd6d4bda49aa7b306a1649d46783037bfd273100587c37f698b62b2271b3f4412d2674be3e1296cf4152790e3c02a9337d0de1b0f6fc5fb31f9f03970ef82745e4f7933efea3e65c79b6d6e5e6068e0b6446a498281905a95c5bd9ae1a1a8001702b0f"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1007}}]})
ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f00000004c0))
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x10000)
prlimit64(0x0, 0xc, &(0x7f0000000340)={0x2, 0xffffffffffffff01}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.865594548s ago: executing program 4 (id=2046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

3.938722456s ago: executing program 4 (id=2047):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000)
unshare(0x20060400)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

3.571583334s ago: executing program 0 (id=2048):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0xfa}, 0x8)
mkdir(&(0x7f0000000140)='./file0\x00', 0x63)
socket$inet6(0xa, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="66643d21da5f861b9a9d4dcbaea8d803777234a2cd6159f2360de082f447f48e886d3e7cb05d3dac6bc3868a24727d6f8ecac60061b59c1b607e3568353f52bc114c5f7b2682ea74231898e2070923", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYBLOB=',\x00'])
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000280)=0x10001, 0x4)
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x800001, 0x0, 0x4, 0x2000, 0x0, r4, r5, 0x440, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r9 = epoll_create(0x487)
r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x10000005})
r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r11, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0xd, 0x10, 0x3, 0x2, 0x0, 0x20, 0x5, 0x20, 0x5, &(0x7f0000000080)=[0x7], 0x1, 0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r12, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb9b0, 0x72}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x58}}, 0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r14}]}, 0x20}}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x7e59, 0x9, 0x9, 0x401, 0x3, 0x10, 0x2}, 0x20)

3.476303931s ago: executing program 7 (id=2049):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161a42, 0x118)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1000, @remote}, 0x1c)
listen(r0, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000090000000060a01240000000000000000020000000900010073797a00000000000000000073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000000e6ffffff00000000000000000000000200000000000000000000140000001100010000e801000000000000020000"], 0xd8}}, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00')
accept(r0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
listen(r3, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="e59944421bc81a000000020000000000000000a3b238110a000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})

3.43311538s ago: executing program 2 (id=2050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="57f0b1b8d93abe8afa0b9b21c71668282aed70811559", 0x16}, {&(0x7f0000001140)="a3b93a074c4e7eb1f66491142f7a1e5c3b914f1911d7c613a8b230b8307bac0689ae1cf9a67672b013132c7de267a57d931e720ac94282680098a42e11be9dc30808fe4c80a8082933e7be3d82a2e3880dbe7deb18923bd75e2e27673e48cf1940bd3dd53cd2427eda5713b5abef7a2f632a73373c05214757e2f6bca76cf275cdd6a28ae1558b6ccc353c904ed8fac8e66ee5a42ed62c84f5f043f7372a38405840df1e8d6596bf541fb6d2", 0xac}], 0x3)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
socket$l2tp(0x2, 0x2, 0x73)
syz_80211_inject_frame(0x0, 0x0, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20)

3.432784629s ago: executing program 4 (id=2051):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(0x0, 0x1, 0xc0400)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

3.368662576s ago: executing program 0 (id=2052):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41})
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0)
write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f400028100000000000000001000001010000010100000200"/54, 0x36)

2.603700811s ago: executing program 0 (id=2053):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2})
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0})
openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8200000000000000, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8000000000000000, 0x8, 0x8, 0x100000000, 0x0, 0x0, 0xcc, 0x0, 0x2, 0x0, 0x1, 0xb, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58a9, 0x4, 0x0, 0x400000003, 0x0, 0x0, 0x0, 0x0, 0x9295]})

2.272467527s ago: executing program 6 (id=2054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000001c0)=',\xb3(\r{\\)\x04\xab\x1d%\xe4\xf9\x1e1\x19\x9d<\\\xb2\x12\xa7l\xe3\x19\xb3\xad\x93\xd3dw\xb5\x86\x8a\xae\x99\xa8\x11\xa5X*\x82\x01\x9c\xc0(\xaeG\x9e\x0e\xb9\xd4\xe8\x88\xdd\x85\xfdQ\xd4\xfc\x02_\x89\x8f\x14\xdf\xf4\xf2\xc0\xc2\xf6\x1cT\x95\x9c\x1a\x8c2\xceq?s[\x1c\xd0\xb9\xf7\xe7\xfa7_u5\n\xcf\x98X\xfd,\x00\xda\xadY-I\x90eU\x83B\x8a\xa6\xe6\x81\x14:\xbb\x16\xf5j\'/Z$\a\xa2Z\x7fb.\xc9\x17\x1eI\xeb3\x89,J\xe8\xdd:o\xea\xc1\xe7\xf0\xd4S\x15\x83\xd2\xbe\x05\xe8\xa9\'\x84\n\x8cM\x96\x19\xcd\x17\x9a]5\xd5\x9a\x8b=E\x00\xbe\bO\x8c3\xab\xd5\xa2y\xdc6/\xba\x05\x8e\xb7\xc1\xc94\'\xc4y\xdcd{\xfe\xe5\xf1\xd5\xd3?\x93p\x9f\xf0\x96\xce\x88\x93\xd2loT\x14\x83\xb2\xfbu\n\x17\x01\x99A\xc5W\xa4')
socket(0x10, 0x803, 0x0)
r3 = syz_io_uring_setup(0x96d, &(0x7f0000000540)={0x0, 0x2fe, 0x0, 0x3, 0x11}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}})
io_uring_enter(r3, 0x101, 0x11, 0x5, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x818, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}})
acct(0x0)
accept4$unix(r7, 0x0, 0x0, 0x80000)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b400000059080600010800"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

2.270931785s ago: executing program 4 (id=2055):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd34}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setgroups(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff"], 0x34}}, 0x0)
r7 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\rW\xef\x10\xd6d#\xf2\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8\x1f\xb2C\xf8\'?]\x16C\x166\xc0\xbcJT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8', 0x2)
pwritev(r7, 0x0, 0x0, 0x7ffffd, 0x8)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r9 = accept$alg(r8, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r4, 0x210}, {r5, 0x85}, {r3}, {r9, 0x40}, {r4, 0x201}, {r4, 0x2048}, {r3}, {r3, 0x1010}], 0x8, &(0x7f0000000200), &(0x7f0000000280)={[0x40]}, 0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0)

2.256949101s ago: executing program 0 (id=2056):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r1 = fanotify_init(0x8, 0x40000)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
fanotify_mark(r1, 0x2, 0x100018, r2, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xf}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r3, &(0x7f0000000240)="71a9b23a166da873e791ac5a26dafb6a8088ee7edf149f4ec036afc074ba816e805c252515d484fa4765d82c13fcd7648bfcbd90ca819dfed0e8745850edb3f0d811205d785bac3d230d601d1502be79d75398729fa0e26b3527139bd07888b4f4f0df3c050d957cbec3585517ee572c6b464df37626e05e182358fd530c080421cf57c70032ffd9019f49f55fa90e7142d125acc67c3dd1aa3f50438f6114b45d30e29e343420b357b9f95b25eb1c3890e6f158ec88bbf7d3e542ce4a36", &(0x7f0000000340)=""/4096, 0x4}, 0x20)
sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}})
shutdown(r0, 0x1)

1.284837227s ago: executing program 4 (id=2057):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x808010, &(0x7f0000000680)={'trans=tcp,', {'port', 0x3d, 0x4e23}})

1.162322597s ago: executing program 7 (id=2058):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161a42, 0x118)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1000, @remote}, 0x1c)
listen(r0, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000090000000060a01240000000000000000020000000900010073797a00000000000000000073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000000e6ffffff00000000000000000000000200000000000000000000140000001100010000e801000000000000020000"], 0xd8}}, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00')
accept(r0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
listen(r3, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="e59944421bc81a000000020000000000000000a3b238110a000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})

91.187221ms ago: executing program 6 (id=2059):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0x63}, 0x0, 0x7})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r2, 0x1, 0x4, 0x7fff}, 0x10)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x3, 0x8e0, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x37, 0x63, 0xd2, 0x8, 0x58f, 0x6610, 0x70d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8ce, 0x4, 0x6, 0xcf, 0x0, 0x8, "", [{{0x9, 0x4, 0xde, 0xe, 0x5, 0x89, 0x10, 0xd0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x4a}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x1, 0xe, "d16a3e85cd"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x1, "618dabacc5bf"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x1, 0x5, [0x1, 0xe, 0x2, 0x6, 0x4], 0xd}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x81, 'r'}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x9, 0x1, 0xa], 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x6, 0x68}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x81, 0x7f, 0x81}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0xff, 0x3}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x2, 0x2, [@generic={0x85, 0x7, "750aff7ae239164a66ea73aa7482ddbef4d73e7b716ad9771fd029eab7bd92ac27247dda60ba297d81e20b33b3cc114215941961b423b124793eaa942add56584425c84d2db829ef188e0b957290a414f2528c74234ac05f013e1a54f8a56f4586d147a34096cba8ff86c18c03430b36c0b434da8da68543ba8289af87d408093bdeac"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x4, 0x1, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x6}]}}]}}, {{0x9, 0x4, 0x30, 0x3d, 0xf, 0xe1, 0x99, 0x0, 0x7, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x9, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x30de}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x5, 0x8, 0xe, [@generic={0x92, 0x24, "67c12f1b333b82bbfacb91c09841809edc582645f674597600f0d6f6952fbf92385e3d2c27e0740c06af17a2eb10b78939d73139103a955a8489c06749dfb46a724a7fb1aa5028630292f24fc618cbae2f18d1c5b29e6cde70237471e9c15cd71995362689070b079712d91f3e2d7c39473d469289343b651520d62b2b3b8107b757cd5c52e326bfd81f2f0983a3544d"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xb1, 0x7f, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x1, 0x1, 0x8, [@generic={0xc, 0xa, "8308c4221ab129187021"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x0, 0x4, [@generic={0xa8, 0x21, "eadc1225d19aa63b03656d72b75d3ee8bdbe5afe9681a3c7d9808d29cc02190c294921475c1061a6668b0937e3056fe710d905b7f10021529e452acd152ed4599c6b298dbc0bdeb2e86b7c5ca70237d6985f6eeec6e479c4395ff9e2b32eab319ef63764c01b79e10b91ba8f6c1be25b1cda34c979a3c2f25e0f806dd34f9d7083d89be2f3ea121dea65453f949edc028108fe876912c34891ff0243c91c71ef534e211a70ca"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x3, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xeb, 0x9}, @generic={0x16, 0x7, "4857ee22dcc2351b1108ed9f0c64e1b9cba03d09"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0x0, 0x7, [@generic={0x22, 0x11, "04ba302a3c9ee4a4fa96af429794127e5b9d0944adde07cbc49c6e2d76e9ce6a"}, @generic={0x90, 0x21, "98b03c428cf2fd2524dd6b1946c38cbcfaf1fef14173f150d3eabdd83e1a35a46547ee679a7956363cc7150cdbee1eaf5fe9b8a9c3daf0312e95a1ed425a55179769a70e06f313a6130bfbb3b3fd88b8930a2d3b997c25ed4ae661a49563464e67d831e365f5ce2f3817592fc462b56f6f25b83a06334b2a67b650975394c262059c2f6ad77250624a4d8856a438"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6ebd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xed}, @generic={0x46, 0xc, "294d0f6509441e1a6f3d090163622b5e5e071f3ce5ebcace065e58cdab9b60da03eaa7d3d9a8f7161c768e1da8cc69a877d9714f3095eec12b500375a58464144180a316"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x8f, 0xff}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7ff}, @generic={0x66, 0xf, "e9d14873379af86532297893b64f2eb99879c5b6baa60535d051375d32030ef4d3a3411d9aa45c823456ca9abc7ccae4466440c2ed12339a8bec9a9215f8f73eeba0eebd5896f4e70458bcf767fadca5591b0a510138c33fc1eadc23f4026dff121dc110"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0xf8, 0x4}}, {{0x9, 0x5, 0x3, 0x1d, 0x8, 0x6, 0xb, 0xc, [@generic={0xa3, 0x22, "9a7a758685bb3838df2f5b8d22340a987775e310339103330bd7c012ad21980acc173e5dd6581830151425cf76bde69980bd05d89a61902677a349d1bbdb33bbc9804439672d217e45109031728d4034b0256caa4141012a7737995068d557e1b39ae99a58214fca5d0a4e69683b6c81a134a453713f212c97c2d34c7c3ccb806e90c81c0491d77e0dfcae35f7d2ab86742115e3401d4c144025bec6d9967b9d1c"}]}}]}}, {{0x9, 0x4, 0xd, 0xc, 0x2, 0xae, 0x3, 0x18, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ce7c15b3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x101, 0x400, 0xc}, {0x6, 0x24, 0x1a, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x57c}, @country_functional={0x10, 0x24, 0x7, 0x1, 0xa, [0xa, 0x80, 0x5, 0x0, 0x200]}]}, @hid_hid={0x9, 0x21, 0xffff, 0x5, 0x1, {0x22, 0xefe}}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x80, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x7f, 0x89, [@generic={0x57, 0x3, "e7492195d66974e65bad23936728f1d79c031177e0c41a740ac9b248830aab56223252acf920d49dfb9f6bfd50321fcd1165c04bdb1d24f8020f0e536b018a0bb4bffc04a102fe4f0f64e30a0e18da9a71be324e9e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xc}]}}]}}, {{0x9, 0x4, 0x5a, 0x4, 0x9, 0x89, 0xae, 0x47, 0xf6, [@hid_hid={0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xab4}}, @generic={0x6c, 0xb, "e70867c87e89e798ac091d87a88d88249ad896ba06ccd0ba362ed8ff54321a48a2307ea0ed57556affb2ec852aa4af12a67b4383b90c6205cea7e898075cadc31ec1f2ef4899893e4ff752ba6c10c3e7c084ef220e02ca27c51ee633e53be8c01b14421a2ab193feb513"}], [{{0x9, 0x5, 0x6, 0x1, 0x8, 0x2a, 0xff, 0x2}}, {{0x9, 0x5, 0x3, 0x9, 0x20, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x9, 0x7f}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x8, 0xbf}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xb, 0xa, 0xf9, [@generic={0xbb, 0x21, "04c8a57cc24b69f0f5a2d9e9e42c9a84977ca7c311f19722b4c97b38e0cf51b2e482a5b34e7929958e48e1f7d2cc6b3aef6b5caaf34bbadb12603860387b8df87036497eb808b3f65beae5ad79da5f9e3dbfb737802b60ed3b6aca1ca148c8e4ec664ef54b06f3c5d3a46a24a5a5b56c32bab80405f7aa4d35c07a1483f2e8b945550d8a6014f29b1eaffdf9ceb9b32be2d3a1cb39472d3f2a40f1fc28e3e94f2441f47c14f46fc8f1c5e7df246d40a039251dcd1535b93c5f"}, @generic={0x6b, 0xe, "798cc2233b9419b4322c84b8e2044510b19f8c6e75eb78de52904e425d460d99d77d477b710625c9c8b35de676d4a375fc7fc692aa689ca4d0e165a8f0e157137659e74b6877009caca09b201b554cef07795b3b4556aa53cfc483ecdc205ef077b42a2b819962b75f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x3, 0x7, 0x86, [@generic={0x7d, 0x22, "b8d979fd58f50b4bc5ea979aff04034e5066337b03e56c5040387105394f2592af840fe73b4f8d4e12f461765f11c52f1a7b3df42806ac175d8698fbb6d723a1067021cc7b3ea32e1c64108b50340a7fcd67ed9ff6c511bcc105b6bfaa60ffba5a5953b2ce994efabeba15c0beae03f3a1e89883d6e7393207596f"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x38, 0x3, 0x2, [@generic={0x39, 0x10, "a8edb8c62aa02a88b1b62d962ce17715e6003172f86a1e6950a4010879e192d67c7220afeab5c5f681c6b1acdcee45b58eff6bbb105e52"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0xcc, 0x2b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x39, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x5, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x5, 0x1, 0x8, 0x0, 0x2}, 0x27, &(0x7f0000000f00)=ANY=[@ANYBLOB="0507000000000000df45000205f9f780030a3b6d66e5c5b86506cbba7c7a6a36d6010058c1f71e"], 0x4, [{0xb4, &(0x7f0000000f40)=@string={0xb4, 0x3, "da1e0ff379779d0dba9922174e0c1dff872e235ac8e4810bf1db280022b66ea2287778e83216e065de0872fd9792457b6cb0eac06c301df4a85fefc8735c4713cab97b70472712301fba5a52479b43988ac92d68e0a77c1bccdda22de3e82342614e6230e19222b5a1a6ebb66b2ad5a83c151fa28f4259787e9346215fbbdee58b2b4f3ea8329782d80ea411cc1411e57de981c34d05c91b1d20a2da5c1435c0051cda36aee5a3b7f7f7e349c20033638282"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x2801}}, {0xdb, &(0x7f0000001040)=@string={0xdb, 0x3, "c32f6a80ebfe6c3440b3f8e4e14eae20fcea1837e0a933e27fe7c659bfcb3b59fa39e99a1695da3b7a804518933949d06a7f761bb7c67b7ff168939ee4570247d733a81c702f4792b7590f81a27f7198164235e6a8b85eed3832b2ce7948250beff5b5825d165d8ccf3ef14867f9e146e591e187df2dcd6d4bda49aa7b306a1649d46783037bfd273100587c37f698b62b2271b3f4412d2674be3e1296cf4152790e3c02a9337d0de1b0f6fc5fb31f9f03970ef82745e4f7933efea3e65c79b6d6e5e6068e0b6446a498281905a95c5bd9ae1a1a8001702b0f"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1007}}]})
ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f00000004c0))
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x10000)
prlimit64(0x0, 0xc, &(0x7f0000000340)={0x2, 0xffffffffffffff01}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 0 (id=2060):
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000240)=0x9)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a883, 0x40)
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x8, 0x1257a295])
bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa0028000})

kernel console output (not intermixed with test programs):

:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  705.180000][T12119] lowmem_reserve[]: 0 2472 2473 2473 2473
[  705.185872][T12119] Node 0 DMA32 free:1134720kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49648kB inactive_anon:6056kB active_file:18336kB inactive_file:248116kB unevictable:64kB writepending:1356kB zspages:8176kB present:3129332kB managed:2532248kB mlocked:64kB bounce:0kB free_pcp:71080kB local_pcp:46336kB free_cma:0kB
[  705.219792][T12119] lowmem_reserve[]: 0 0 0 0 0
[  705.224616][T12119] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  705.253982][T12119] lowmem_reserve[]: 0 0 0 0 0
[  705.258905][T12119] Node 1 Normal free:3950288kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  705.292217][T12119] lowmem_reserve[]: 0 0 0 0 0
[  705.297080][T12119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  705.310036][T12119] Node 0 DMA32: 1789*4kB (UM) 478*8kB (UME) 1491*16kB (UME) 1414*32kB (UM) 745*64kB (UME) 641*128kB (UME) 433*256kB (UME) 300*512kB (UME) 219*1024kB (UM) 17*2048kB (UM) 98*4096kB (UM) = 1134740kB
[  705.330476][T12119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  705.342317][T12119] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 7*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 0*256kB 4*512kB (UM) 2*1024kB (U) 0*2048kB 963*4096kB (M) = 3950288kB
[  705.358724][T12119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  705.368315][T12119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  705.377636][T12119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  705.388869][T12119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  705.398249][T12119] 71092 total pagecache pages
[  705.402944][T12119] 10 pages in swap cache
[  705.407217][T12119] Free swap  = 56792kB
[  705.411364][T12119] Total swap = 124996kB
[  705.415569][T12119] 2097051 pages RAM
[  705.419433][T12119] 0 pages HighMem/MovableOnly
[  705.424129][T12119] 432278 pages reserved
[  705.428389][T12119] 0 pages cma reserved
[  706.452310][ T5789] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  706.481416][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.516817][ T5789] usb 7-1: USB2VGA dongle found at address 40
[  706.533286][ T5789] usb 7-1: Allocated 8 output buffers
[  706.658298][T12131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  706.762583][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.820450][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.133121][ T5789] usb 7-1: Failed to early initialize device
[  707.444151][ T5789] usb 7-1: USB disconnect, device number 40
[  707.833512][T12138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  708.712550][T12148] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  709.506399][T12152] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  710.667463][   T30] audit: type=1400 audit(1786226554.799:1023): avc:  denied  { read append } for  pid=12155 comm="syz.3.1681" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  710.747448][   T30] audit: type=1400 audit(1786226554.799:1024): avc:  denied  { open } for  pid=12155 comm="syz.3.1681" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  710.808964][   T30] audit: type=1400 audit(1786226554.829:1025): avc:  denied  { ioctl } for  pid=12155 comm="syz.3.1681" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  710.926232][   T30] audit: type=1326 audit(1786226555.059:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12163 comm="syz.3.1683" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6dc79e0d9 code=0x0
[  711.164445][T12174] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  712.090514][T12183] 9p: Bad value for 'wfdno'
[  713.667159][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1688'.
[  713.872508][ T5696] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  713.930552][   T30] audit: type=1400 audit(1786226558.039:1027): avc:  denied  { create } for  pid=12187 comm="syz.2.1689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  714.059427][ T5696] usb 5-1: Using ep0 maxpacket: 16
[  714.080274][ T5696] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  714.099649][ T5696] usb 5-1: config 1 has no interface number 0
[  714.116729][ T5696] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  714.144571][ T5696] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  714.168602][ T5696] usb 5-1: config 1 interface 105 has no altsetting 0
[  714.178945][ T5696] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  714.206547][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  714.216962][ T5696] usb 5-1: Product: syz
[  714.222775][ T5696] usb 5-1: Manufacturer: syz
[  714.227417][ T5696] usb 5-1: SerialNumber: syz
[  714.379270][T12186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  714.387102][T12186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  714.526168][ T5709] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  714.584159][   T30] audit: type=1400 audit(1786226558.719:1028): avc:  denied  { name_bind } for  pid=12203 comm="syz.0.1693" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  714.614730][T12206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  714.634305][T12206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  714.668279][ T5709] usb 3-1: device descriptor read/64, error -71
[  714.918068][ T5709] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  715.068070][ T5709] usb 3-1: device descriptor read/64, error -71
[  715.237323][T12212] netlink: 'syz.3.1694': attribute type 4 has an invalid length.
[  715.248443][ T5709] usb usb3-port1: attempt power cycle
[  716.427479][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1696'.
[  716.511381][ T5709] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  716.711070][ T5709] usb 3-1: device descriptor read/8, error -71
[  716.717276][ T5696] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ca:05:ec:36:ff:4c
[  716.815557][ T5696] usb 5-1: USB disconnect, device number 51
[  716.857514][ T5696] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  716.949865][T12230] netlink: 'syz.4.1697': attribute type 2 has an invalid length.
[  716.974095][T12232] loop9: detected capacity change from 0 to 2640
[  717.005685][T12232] buffer_io_error: 323 callbacks suppressed
[  717.005702][T12232] Buffer I/O error on dev loop9, logical block 0, async page read
[  717.067388][T12237] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  717.087472][T12232]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  717.098253][T12232] loop9: partition table partially beyond EOD, truncated
[  717.109617][ T5696] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  717.132372][ T5696] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  717.149826][T12232] loop9: p1 size 1237888941 extends beyond EOD, truncated
[  717.165203][ T5696] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  717.174832][T12240] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  717.174876][T12240] Buffer I/O error on dev loop9, logical block 1, lost async page write
[  717.174910][T12240] Buffer I/O error on dev loop9, logical block 2, lost async page write
[  717.174931][T12240] Buffer I/O error on dev loop9, logical block 3, lost async page write
[  717.386103][T12240] Buffer I/O error on dev loop9, logical block 4, lost async page write
[  717.438454][T12240] Buffer I/O error on dev loop9, logical block 5, lost async page write
[  717.461778][T12240] Buffer I/O error on dev loop9, logical block 6, lost async page write
[  717.480181][T12240] Buffer I/O error on dev loop9, logical block 7, lost async page write
[  718.091914][   T30] audit: type=1400 audit(1786226562.229:1029): avc:  denied  { write } for  pid=12234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.272359][T12258] 9p: Bad value for 'rfdno'
[  718.366566][   T30] audit: type=1400 audit(1786226562.499:1030): avc:  denied  { write } for  pid=12259 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.477523][   T30] audit: type=1400 audit(1786226562.609:1031): avc:  denied  { ioctl } for  pid=12263 comm="syz.0.1705" path="socket:[37012]" dev="sockfs" ino=37012 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  718.479520][T12267] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1704'.
[  718.522179][T12266] x_tables: duplicate underflow at hook 1
[  718.613349][T12270] FAULT_INJECTION: forcing a failure.
[  718.613349][T12270] name failslab, interval 1, probability 0, space 0, times 0
[  718.618270][   T30] audit: type=1400 audit(1786226562.659:1032): avc:  denied  { getopt } for  pid=12263 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  718.646175][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.6.1706 Not tainted syzkaller #0 PREEMPT(full) 
[  718.646199][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  718.646208][T12270] Call Trace:
[  718.646214][T12270]  <TASK>
[  718.646221][T12270]  dump_stack_lvl+0x100/0x190
[  718.646248][T12270]  should_fail_ex.cold+0x5/0xa
[  718.646270][T12270]  should_failslab+0xc2/0x120
[  718.646294][T12270]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  718.646320][T12270]  ? __get_vm_area_node+0x101/0x330
[  718.646349][T12270]  __get_vm_area_node+0x101/0x330
[  718.646376][T12270]  __vmalloc_node_range_noprof+0x228/0x1630
[  718.646403][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  718.646426][T12270]  ? update_irq_load_avg+0xae/0xe30
[  718.646447][T12270]  ? find_held_lock+0x2b/0x80
[  718.646462][T12270]  ? __schedule+0x31d8/0x6730
[  718.646484][T12270]  ? __schedule+0x31d8/0x6730
[  718.646505][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  718.646537][T12270]  ? __schedule+0x126e/0x6730
[  718.646560][T12270]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  718.646598][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  718.646620][T12270]  __vmalloc_node_noprof+0xad/0xf0
[  718.646644][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  718.646667][T12270]  __vmalloc_noprof+0xa3/0x120
[  718.646689][T12270]  ? __pfx___vmalloc_noprof+0x10/0x10
[  718.646711][T12270]  ? irqentry_exit+0x24d/0xa00
[  718.646741][T12270]  bpf_prog_alloc_no_stats+0x59/0x630
[  718.646766][T12270]  bpf_prog_alloc+0x3b/0x200
[  718.646788][T12270]  ? __pfx_bpf_prog_alloc+0x10/0x10
[  718.646811][T12270]  bpf_prog_load+0x4a9/0x2fa0
[  718.646835][T12270]  ? __pfx_bpf_prog_load+0x10/0x10
[  718.646853][T12270]  ? avc_has_perm_noaudit+0x145/0x3b0
[  718.646897][T12270]  __sys_bpf+0x18dc/0x4e80
[  718.646923][T12270]  ? __pfx___sys_bpf+0x10/0x10
[  718.646940][T12270]  ? __rcu_read_unlock+0x26a/0x5e0
[  718.646962][T12270]  ? rcu_is_watching+0x12/0xc0
[  718.646988][T12270]  ? irqentry_exit+0x24d/0xa00
[  718.647008][T12270]  ? lockdep_hardirqs_on+0x78/0x100
[  718.647028][T12270]  ? irqentry_exit+0x24d/0xa00
[  718.647060][T12270]  ? rcu_is_watching+0x12/0xc0
[  718.647083][T12270]  ? trace_sched_exit_tp+0x120/0x160
[  718.647109][T12270]  ? __schedule+0x126e/0x6730
[  718.647139][T12270]  ? __pfx___schedule+0x10/0x10
[  718.647159][T12270]  ? fput+0x79/0x100
[  718.647183][T12270]  ? __x64_sys_bpf+0xce/0x140
[  718.647200][T12270]  __x64_sys_bpf+0xce/0x140
[  718.647219][T12270]  ? do_syscall_64+0x90/0x870
[  718.647242][T12270]  do_syscall_64+0x115/0x870
[  718.647262][T12270]  ? clear_bhb_loop+0x70/0xc0
[  718.647284][T12270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.647300][T12270] RIP: 0033:0x7fbff3f9e0d9
[  718.647316][T12270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.647331][T12270] RSP: 002b:00007fbff4ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  718.647349][T12270] RAX: ffffffffffffffda RBX: 00007fbff4226090 RCX: 00007fbff3f9e0d9
[  718.647360][T12270] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005
[  718.647369][T12270] RBP: 00007fbff4ebe090 R08: 0000000000000000 R09: 0000000000000000
[  718.647378][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.647387][T12270] R13: 00007fbff4226128 R14: 00007fbff4226090 R15: 00007ffe53ecc368
[  718.647408][T12270]  </TASK>
[  718.647598][T12270] syz.6.1706: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  718.648421][T12271] CIFS: Attempting to mount //127.0.0.1/share
[  718.728369][T12270] ,cpuset=/,mems_allowed=0-1
[  719.010978][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.6.1706 Not tainted syzkaller #0 PREEMPT(full) 
[  719.010999][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  719.011010][T12270] Call Trace:
[  719.011016][T12270]  <TASK>
[  719.011024][T12270]  dump_stack_lvl+0x100/0x190
[  719.011050][T12270]  warn_alloc.cold+0x94/0xa8
[  719.011063][T12270]  ? __pfx_warn_alloc+0x10/0x10
[  719.011074][T12270]  ? __kasan_kmalloc+0x8a/0xb0
[  719.011093][T12270]  ? __get_vm_area_node+0x208/0x330
[  719.011111][T12270]  __vmalloc_node_range_noprof+0xccd/0x1630
[  719.011127][T12270]  ? update_irq_load_avg+0xae/0xe30
[  719.011140][T12270]  ? find_held_lock+0x2b/0x80
[  719.011150][T12270]  ? __schedule+0x31d8/0x6730
[  719.011163][T12270]  ? __schedule+0x31d8/0x6730
[  719.011176][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  719.011193][T12270]  ? __schedule+0x126e/0x6730
[  719.011206][T12270]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  719.011229][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  719.011243][T12270]  __vmalloc_node_noprof+0xad/0xf0
[  719.011259][T12270]  ? bpf_prog_alloc_no_stats+0x59/0x630
[  719.011275][T12270]  __vmalloc_noprof+0xa3/0x120
[  719.011290][T12270]  ? __pfx___vmalloc_noprof+0x10/0x10
[  719.011306][T12270]  ? irqentry_exit+0x24d/0xa00
[  719.011324][T12270]  bpf_prog_alloc_no_stats+0x59/0x630
[  719.011340][T12270]  bpf_prog_alloc+0x3b/0x200
[  719.011353][T12270]  ? __pfx_bpf_prog_alloc+0x10/0x10
[  719.011368][T12270]  bpf_prog_load+0x4a9/0x2fa0
[  719.011382][T12270]  ? __pfx_bpf_prog_load+0x10/0x10
[  719.011393][T12270]  ? avc_has_perm_noaudit+0x145/0x3b0
[  719.011419][T12270]  __sys_bpf+0x18dc/0x4e80
[  719.011434][T12270]  ? __pfx___sys_bpf+0x10/0x10
[  719.011445][T12270]  ? __rcu_read_unlock+0x26a/0x5e0
[  719.011459][T12270]  ? rcu_is_watching+0x12/0xc0
[  719.011475][T12270]  ? irqentry_exit+0x24d/0xa00
[  719.011489][T12270]  ? lockdep_hardirqs_on+0x78/0x100
[  719.011503][T12270]  ? irqentry_exit+0x24d/0xa00
[  719.011529][T12270]  ? rcu_is_watching+0x12/0xc0
[  719.011545][T12270]  ? trace_sched_exit_tp+0x120/0x160
[  719.011563][T12270]  ? __schedule+0x126e/0x6730
[  719.011584][T12270]  ? __pfx___schedule+0x10/0x10
[  719.011604][T12270]  ? fput+0x79/0x100
[  719.011622][T12270]  ? __x64_sys_bpf+0xce/0x140
[  719.011633][T12270]  __x64_sys_bpf+0xce/0x140
[  719.011645][T12270]  ? do_syscall_64+0x90/0x870
[  719.011659][T12270]  do_syscall_64+0x115/0x870
[  719.011673][T12270]  ? clear_bhb_loop+0x70/0xc0
[  719.011686][T12270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.011697][T12270] RIP: 0033:0x7fbff3f9e0d9
[  719.011708][T12270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.011719][T12270] RSP: 002b:00007fbff4ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  719.011729][T12270] RAX: ffffffffffffffda RBX: 00007fbff4226090 RCX: 00007fbff3f9e0d9
[  719.011736][T12270] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005
[  719.011743][T12270] RBP: 00007fbff4ebe090 R08: 0000000000000000 R09: 0000000000000000
[  719.011749][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.011755][T12270] R13: 00007fbff4226128 R14: 00007fbff4226090 R15: 00007ffe53ecc368
[  719.011769][T12270]  </TASK>
[  719.011788][T12270] Mem-Info:
[  719.442568][T12270] active_anon:13519 inactive_anon:1517 isolated_anon:0
[  719.442568][T12270]  active_file:4584 inactive_file:62086 isolated_file:0
[  719.442568][T12270]  unevictable:0 dirty:336 writeback:0
[  719.442568][T12270]  slab_reclaimable:12607 slab_unreclaimable:99831
[  719.442568][T12270]  mapped:36609 shmem:4402 pagetables:3911
[  719.442568][T12270]  sec_pagetables:0 bounce:0
[  719.442568][T12270]  kernel_misc_reclaimable:0
[  719.442568][T12270]  free:1276242 free_pcp:15562 free_cma:0
[  719.658451][T12270] Node 0 active_anon:50128kB inactive_anon:6068kB active_file:18336kB inactive_file:248140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146436kB dirty:1344kB writeback:0kB shmem:15560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12688kB pagetables:15500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  719.719675][T12270] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  719.720575][T12271] CIFS: VFS: Error connecting to socket. Aborting operation.
[  719.760204][T12270] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  719.760343][T12271] CIFS: VFS: cifs_mount failed w/return code = -4
[  719.797246][T12270] lowmem_reserve[]: 0 2472 2473 2473 2473
[  719.807969][T12270] Node 0 DMA32 free:1139300kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50128kB inactive_anon:6068kB active_file:18336kB inactive_file:248140kB unevictable:0kB writepending:1344kB zspages:8176kB present:3129332kB managed:2532248kB mlocked:0kB bounce:0kB free_pcp:64464kB local_pcp:54020kB free_cma:0kB
[  719.928184][T12270] lowmem_reserve[]: 0 0 0 0 0
[  719.933336][T12270] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  719.965565][T12270] lowmem_reserve[]: 0 0 0 0 0
[  719.974005][T12270] Node 1 Normal free:3950288kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  720.007504][T12270] lowmem_reserve[]: 0 0 0 0 0
[  720.019754][T12270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  720.040715][T12270] Node 0 DMA32: 1569*4kB (UME) 1844*8kB (UM) 2110*16kB (UM) 1121*32kB (UM) 745*64kB (UME) 668*128kB (UME) 434*256kB (UME) 303*512kB (UME) 220*1024kB (UM) 13*2048kB (UM) 97*4096kB (UM) = 1139300kB
[  720.062005][T12270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  720.084480][T12270] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 7*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 0*256kB 4*512kB (UM) 2*1024kB (U) 0*2048kB 963*4096kB (M) = 3950288kB
[  720.110195][T12270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  720.120632][T12270] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  720.135451][T12270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  720.146504][T12270] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  720.156431][T12270] 70274 total pagecache pages
[  720.161272][T12270] 11 pages in swap cache
[  720.165655][T12270] Free swap  = 56792kB
[  720.169872][T12270] Total swap = 124996kB
[  720.174201][T12270] 2097051 pages RAM
[  720.178097][T12270] 0 pages HighMem/MovableOnly
[  720.182803][T12270] 432278 pages reserved
[  720.186984][T12270] 0 pages cma reserved
[  720.402373][T12288] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  720.429054][T12288] CIFS: Attempting to mount //127.0.0.1/share
[  720.566074][T12299] netlink: 'syz.2.1712': attribute type 2 has an invalid length.
[  720.574706][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'.
[  720.583914][ T5688] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  720.753991][ T5688] usb 5-1: Using ep0 maxpacket: 16
[  720.909347][ T5688] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  720.919462][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  720.928347][ T5688] usb 5-1: Product: syz
[  720.932656][ T5688] usb 5-1: Manufacturer: syz
[  720.937298][ T5688] usb 5-1: SerialNumber: syz
[  720.944591][   T30] audit: type=1400 audit(1786226565.069:1033): avc:  denied  { write } for  pid=12272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  720.990318][ T5688] usb 5-1: config 0 descriptor??
[  721.164921][T12288] CIFS: VFS: Error connecting to socket. Aborting operation.
[  721.172611][T12288] CIFS: VFS: cifs_mount failed w/return code = -4
[  721.201026][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.240535][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.265282][   T30] audit: type=1400 audit(1786226565.399:1034): avc:  denied  { write } for  pid=12307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  721.374969][ T5709] usb 5-1: USB disconnect, device number 52
[  721.483342][T12322] xt_hashlimit: size too large, truncated to 1048576
[  722.527610][T12319] netlink: 'syz.2.1716': attribute type 5 has an invalid length.
[  723.221675][T12335] netlink: 'syz.3.1720': attribute type 2 has an invalid length.
[  723.551291][T12337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12337 comm=syz.2.1716
[  724.120781][T12341] kvm: pic: single mode not supported
[  724.120862][T12341] kvm: pic: level sensitive irq not supported
[  724.153720][T12341] kvm: pic: single mode not supported
[  724.178886][T12341] kvm: pic: level sensitive irq not supported
[  724.198146][T12341] kvm: pic: single mode not supported
[  724.204254][T12341] kvm: pic: level sensitive irq not supported
[  731.647631][T12364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1727'.
[  731.725069][T12368] kvm: pic: single mode not supported
[  731.725087][T12368] kvm: pic: level sensitive irq not supported
[  732.888035][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  733.062439][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  733.080030][   T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  733.098253][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.118226][   T10] usb 3-1: Product: syz
[  733.122446][   T10] usb 3-1: Manufacturer: syz
[  733.132566][   T10] usb 3-1: SerialNumber: syz
[  733.144791][   T10] usb 3-1: config 0 descriptor??
[  733.158982][   T10] yurex 3-1:0.0: Could not find endpoints
[  733.390574][   T10] usb 3-1: USB disconnect, device number 46
[  739.071285][T12388] FAULT_INJECTION: forcing a failure.
[  739.071285][T12388] name failslab, interval 1, probability 0, space 0, times 0
[  739.084067][T12388] CPU: 1 UID: 0 PID: 12388 Comm: syz.6.1736 Not tainted syzkaller #0 PREEMPT(full) 
[  739.084090][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  739.084101][T12388] Call Trace:
[  739.084109][T12388]  <TASK>
[  739.084117][T12388]  dump_stack_lvl+0x100/0x190
[  739.084145][T12388]  should_fail_ex.cold+0x5/0xa
[  739.084168][T12388]  should_failslab+0xc2/0x120
[  739.084193][T12388]  __kmalloc_noprof+0xfc/0x820
[  739.084219][T12388]  ? rcu_is_watching+0x12/0xc0
[  739.084247][T12388]  ? tomoyo_realpath_from_path+0xb6/0x690
[  739.084269][T12388]  tomoyo_realpath_from_path+0xb6/0x690
[  739.084293][T12388]  tomoyo_path_number_perm+0x23c/0x580
[  739.084318][T12388]  ? tomoyo_path_number_perm+0x22e/0x580
[  739.084346][T12388]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  739.084396][T12388]  ? find_held_lock+0x2b/0x80
[  739.084413][T12388]  ? __fget_files+0x215/0x3d0
[  739.084431][T12388]  ? hook_file_ioctl_common+0x140/0x440
[  739.084451][T12388]  ? __fget_files+0x215/0x3d0
[  739.084473][T12388]  ? __fget_files+0x21f/0x3d0
[  739.084497][T12388]  security_file_ioctl+0xd3/0x230
[  739.084525][T12388]  __x64_sys_ioctl+0xb7/0x210
[  739.084554][T12388]  do_syscall_64+0x115/0x870
[  739.084577][T12388]  ? clear_bhb_loop+0x70/0xc0
[  739.084600][T12388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.084618][T12388] RIP: 0033:0x7fbff3f9e0d9
[  739.084634][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.084650][T12388] RSP: 002b:00007fbff4edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  739.084668][T12388] RAX: ffffffffffffffda RBX: 00007fbff4225fa0 RCX: 00007fbff3f9e0d9
[  739.084680][T12388] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  739.084691][T12388] RBP: 00007fbff4edf090 R08: 0000000000000000 R09: 0000000000000000
[  739.084701][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.084711][T12388] R13: 00007fbff4226038 R14: 00007fbff4225fa0 R15: 00007ffe53ecc368
[  739.084736][T12388]  </TASK>
[  739.084743][T12388] ERROR: Out of memory at tomoyo_realpath_from_path.
[  739.331655][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'.
[  739.343623][T12390] netlink: 'syz.4.1739': attribute type 4 has an invalid length.
[  739.352319][T12390] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1739'.
[  739.613240][T12407] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  739.798252][T12409] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  740.872285][T12414] loop9: detected capacity change from 0 to 2640
[  740.879515][T12414] buffer_io_error: 322 callbacks suppressed
[  740.879533][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.894021][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.902133][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.910606][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.919566][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.927547][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  740.936505][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  741.023665][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  741.075063][T12414] ldm_validate_partition_table(): Disk read failed.
[  741.090329][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  741.120835][T12414] Buffer I/O error on dev loop9, logical block 0, async page read
[  741.177158][T12414] Dev loop9: unable to read RDB block 0
[  741.195827][T12425] netlink: 1852 bytes leftover after parsing attributes in process `syz.6.1746'.
[  741.217620][T12414]  loop9: unable to read partition table
[  741.246044][T12414] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  741.498039][ T5789] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  741.650072][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  741.656554][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  741.662908][ T5789] usb 7-1: Using ep0 maxpacket: 16
[  741.689083][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  741.714572][  T982] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  741.732578][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  741.784036][ T5789] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  741.813863][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.841448][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.855427][ T5789] usb 7-1: Product: syz
[  741.861526][ T5789] usb 7-1: Manufacturer: syz
[  741.870700][ T5789] usb 7-1: SerialNumber: syz
[  741.888937][ T5789] usb 7-1: config 0 descriptor??
[  741.908629][  T982] usb 3-1: Using ep0 maxpacket: 8
[  741.921863][  T982] usb 3-1: config 6 has an invalid interface number: 222 but max is 3
[  741.937676][ T5789] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  741.951124][  T982] usb 3-1: config 6 has an invalid interface number: 48 but max is 3
[  741.961887][ T5789] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  741.981409][  T982] usb 3-1: config 6 has an invalid interface number: 13 but max is 3
[  742.007885][  T982] usb 3-1: config 6 has an invalid interface number: 90 but max is 3
[  742.016258][  T982] usb 3-1: config 6 has no interface number 0
[  742.024354][  T982] usb 3-1: config 6 has no interface number 1
[  742.045122][  T982] usb 3-1: config 6 has no interface number 2
[  742.054917][  T982] usb 3-1: config 6 has no interface number 3
[  742.062214][  T982] usb 3-1: config 6 interface 222 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 11
[  742.084915][  T982] usb 3-1: config 6 interface 222 altsetting 14 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  742.100738][  T982] usb 3-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  742.134004][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  742.148814][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  742.158432][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  742.170708][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  742.178729][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  742.188502][  T982] usb 3-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  742.203422][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.229037][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  742.246230][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x8, skipping
[  742.257246][  T982] usb 3-1: config 6 interface 48 altsetting 61 has an invalid descriptor for endpoint zero, skipping
[  742.269362][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  742.288349][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  742.313830][  T982] usb 3-1: config 6 interface 48 altsetting 61 endpoint 0xC has invalid maxpacket 512, setting to 64
[  742.326705][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.333603][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0xA, skipping
[  742.349145][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x2, skipping
[  742.361329][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x6, skipping
[  742.372761][  T982] usb 3-1: config 6 interface 48 altsetting 61 has a duplicate endpoint with address 0x3, skipping
[  742.385409][  T982] usb 3-1: config 6 interface 13 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[  742.418350][  T982] usb 3-1: config 6 interface 13 altsetting 12 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  742.433439][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.434590][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  742.475977][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  742.487279][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  742.498037][  T982] usb 3-1: config 6 interface 90 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  742.509120][  T982] usb 3-1: config 6 interface 90 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  742.534140][  T982] usb 3-1: config 6 interface 90 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  742.552221][ T5789] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  742.568325][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  742.586386][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[  742.610524][ T5789] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  742.618813][  T982] usb 3-1: config 6 interface 90 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[  742.640956][ T5789] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  742.648039][ T5789] em28xx 7-1:0.0: No AC97 audio processor
[  742.659374][ T5709] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  742.664307][  T982] usb 3-1: config 6 interface 222 has no altsetting 0
[  742.695382][  T982] usb 3-1: config 6 interface 48 has no altsetting 0
[  742.704916][ T5789] usb 7-1: USB disconnect, device number 41
[  742.719260][  T982] usb 3-1: config 6 interface 13 has no altsetting 0
[  742.731765][ T5789] em28xx 7-1:0.0: Disconnecting em28xx
[  742.741581][ T5789] em28xx 7-1:0.0: Freeing device
[  742.751641][  T982] usb 3-1: config 6 interface 90 has no altsetting 0
[  742.782287][  T982] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=70.d5
[  742.793894][  T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.814612][  T982] usb 3-1: Product: ⿃�ﻫ㑬�仡₮㜘ꧠ�姆쮿夻㧺髩锖㯚�ᡅ㦓�罪᭶욷罻棱麓埤䜂�Შ⽰鉇妷�羢顱䈖뢨㈸캲䡹ଥ芵���䣱不䛡釥蟡⷟�ꩉ�ᙪ푉�笃⟽1籘뚘∫�䇴☭빴ሾ쾖�๹ȼ㎩ൽ냡ﳶ�鼟霃䔧㺓�峦뙹ۦஎ䙤颤ᤨ꤅孜껙ᨚƀ⭰
[  742.848901][ T5709] usb 5-1: Using ep0 maxpacket: 8
[  742.867205][  T982] usb 3-1: Manufacturer: â �
[  742.870640][ T5709] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  742.875917][  T982] usb 3-1: SerialNumber: ဇ
[  742.898285][ T5709] usb 5-1: config 0 has no interface number 0
[  742.906298][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  742.942200][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  742.967903][ T5709] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  742.986406][   T36] veth0: left allmulticast mode
[  742.991757][ T5709] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  743.003146][   T36] veth0: left promiscuous mode
[  743.014784][   T36] bridge0: port 3(veth0) entered disabled state
[  743.021780][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  743.038545][   T36] bridge_slave_1: left allmulticast mode
[  743.044285][   T36] bridge_slave_1: left promiscuous mode
[  743.050396][ T5709] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  743.059949][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.068915][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.080766][   T36] bridge_slave_0: left allmulticast mode
[  743.090333][ T5709] usb 5-1: config 0 descriptor??
[  743.095758][   T36] bridge_slave_0: left promiscuous mode
[  743.111938][ T5709] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  743.121133][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.213621][   T30] audit: type=1400 audit(1786226587.349:1035): avc:  denied  { write } for  pid=12450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  743.279004][  T982] usb 3-1: USB disconnect, device number 47
[  743.417773][   T30] audit: type=1400 audit(1786226587.549:1036): avc:  denied  { write } for  pid=12464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  743.771178][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  743.796222][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  743.811292][   T36] bond0 (unregistering): Released all slaves
[  743.981855][T12478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  744.013156][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  744.288056][ T4913] Bluetooth: hci0: command tx timeout
[  744.353824][   T36] tipc: Left network mode
[  744.780125][T12482] loop9: detected capacity change from 0 to 2640
[  744.805626][T12482] ldm_validate_partition_table(): Disk read failed.
[  744.849576][T12482] Dev loop9: unable to read RDB block 0
[  744.985775][T12482]  loop9: unable to read partition table
[  745.046710][T12490] netlink: 'syz.0.1761': attribute type 4 has an invalid length.
[  745.079599][T12482] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  745.721251][   T36] hsr_slave_0: left promiscuous mode
[  745.774073][   T36] hsr_slave_1: left promiscuous mode
[  745.783175][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  745.801514][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  745.838935][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  745.848162][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  745.910291][   T36] veth1_macvtap: left promiscuous mode
[  746.044689][   T36] veth0_macvtap: left promiscuous mode
[  746.058073][   T36] veth1_vlan: left promiscuous mode
[  746.068032][   T36] veth0_vlan: left promiscuous mode
[  746.368109][ T4913] Bluetooth: hci0: command tx timeout
[  747.993188][   T30] audit: type=1400 audit(1786226592.129:1037): avc:  denied  { write } for  pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  748.187453][   T36] team0 (unregistering): Port device team_slave_1 removed
[  748.235283][   T36] team0 (unregistering): Port device team_slave_0 removed
[  748.314433][   T30] audit: type=1400 audit(1786226592.449:1038): avc:  denied  { write } for  pid=12527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  748.359514][ T5789] usb 5-1: USB disconnect, device number 53
[  748.369984][ T5789] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  748.435352][ T5709] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  748.458146][ T4913] Bluetooth: hci0: command tx timeout
[  748.618752][ T5709] usb 3-1: Using ep0 maxpacket: 8
[  748.679939][ T5709] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  748.696192][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  748.703645][ T5709] usb 3-1: config 0 has no interface number 0
[  748.714745][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  748.749777][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  748.780870][ T5709] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  748.808187][ T5789] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  748.811014][ T5709] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  749.501843][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  749.553898][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  749.574593][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  749.583114][ T5709] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  749.598329][ T5789] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  749.617021][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.640211][ T5789] usb 5-1: config 0 descriptor??
[  749.640874][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.704177][ T5709] usb 3-1: config 0 descriptor??
[  749.753870][ T5709] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  749.949517][T12432] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.951326][   T30] audit: type=1400 audit(1786226594.089:1039): avc:  denied  { write } for  pid=12542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.038475][T12432] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.045830][T12432] bridge_slave_0: entered allmulticast mode
[  750.066536][T12432] bridge_slave_0: entered promiscuous mode
[  750.092624][   T30] audit: type=1400 audit(1786226594.229:1040): avc:  denied  { write } for  pid=12560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  750.130000][T12432] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.144198][T12432] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.162712][T12432] bridge_slave_1: entered allmulticast mode
[  750.192151][T12432] bridge_slave_1: entered promiscuous mode
[  750.291347][   T36] IPVS: stop unused estimator thread 0...
[  750.351939][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11
[  750.385356][T12432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.409586][ T5717] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  750.450672][T12432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.528313][ T4913] Bluetooth: hci0: command tx timeout
[  750.588322][ T5717] usb 7-1: Using ep0 maxpacket: 8
[  750.637085][T12432] team0: Port device team_slave_0 added
[  750.653104][ T5717] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  750.681010][T12432] team0: Port device team_slave_1 added
[  750.694196][ T5717] usb 7-1: config 0 has no interface number 0
[  750.725236][ T5717] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  750.782813][ T5717] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  750.847004][ T5717] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  750.859506][T12432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  750.884565][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  750.929653][ T5717] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  750.973872][ T5717] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  751.024458][T12432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.035680][ T5717] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  751.064677][ T5789] usbhid 5-1:0.0: can't add hid device: -71
[  751.091821][ T5789] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  751.099806][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.128288][T12432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.153795][ T5717] usb 7-1: config 0 descriptor??
[  751.177758][ T5789] usb 5-1: USB disconnect, device number 54
[  751.192459][T12432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.234169][ T5717] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  751.320484][T12432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.393886][T12570] 9pnet: p9_errstr2errno: server reported unknown error 0x0
[  751.485312][T12432] hsr_slave_0: entered promiscuous mode
[  751.514576][T12432] hsr_slave_1: entered promiscuous mode
[  751.543468][T12432] debugfs: 'hsr0' already exists in 'hsr'
[  751.576462][T12432] Cannot create hsr debugfs directory
[  752.062989][   T30] audit: type=1400 audit(1786226596.199:1041): avc:  denied  { write } for  pid=12567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  753.293507][   T30] audit: type=1400 audit(1786226597.429:1042): avc:  denied  { write } for  pid=12588 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  754.565371][T12432] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  754.643337][ T5717] usb 3-1: USB disconnect, device number 48
[  754.651723][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  754.690886][ T5717] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  754.707893][T12432] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  754.801930][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  754.854128][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12
[  754.866825][T12432] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  754.941850][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  754.986410][T12432] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  755.091546][T12432] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  755.493590][T12432] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.603526][T12432] 8021q: adding VLAN 0 to HW filter on device team0
[  755.624737][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.631875][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.679482][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.686592][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.544335][T12656] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  758.273958][  T982] usb 7-1: USB disconnect, device number 42
[  758.319280][  T982] ldusb 7-1:0.55: LD USB Device #1 now disconnected
[  758.479234][T12663] loop9: detected capacity change from 0 to 2640
[  758.501528][T12663] buffer_io_error: 354 callbacks suppressed
[  758.501551][T12663] Buffer I/O error on dev loop9, logical block 0, async page read
[  758.538805][T12667] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  758.564742][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  758.576545][T12663]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  758.586566][T12663] loop9: partition table partially beyond EOD, truncated
[  758.641671][T12663] loop9: p1 size 1237888941 extends beyond EOD, truncated
[  758.675873][T12667] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  758.723910][T12667] Buffer I/O error on dev loop9, logical block 1, lost async page write
[  758.770746][T12667] Buffer I/O error on dev loop9, logical block 2, lost async page write
[  758.788060][T12667] Buffer I/O error on dev loop9, logical block 3, lost async page write
[  758.808102][T12667] Buffer I/O error on dev loop9, logical block 4, lost async page write
[  758.870432][T12667] Buffer I/O error on dev loop9, logical block 5, lost async page write
[  758.908360][T12667] Buffer I/O error on dev loop9, logical block 6, lost async page write
[  758.953249][T12667] Buffer I/O error on dev loop9, logical block 7, lost async page write
[  759.078620][T12688] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.908649][T12432] veth0_vlan: entered promiscuous mode
[  759.954647][T12694] netlink: 'syz.0.1790': attribute type 4 has an invalid length.
[  760.225716][ T4963] ldm_validate_partition_table(): Disk read failed.
[  760.234069][ T4963] Dev loop9: unable to read RDB block 0
[  760.244218][ T4963]  loop9: unable to read partition table
[  760.275166][T12432] veth1_vlan: entered promiscuous mode
[  760.365730][T12432] veth0_macvtap: entered promiscuous mode
[  760.387861][T12432] veth1_macvtap: entered promiscuous mode
[  760.425196][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  760.455493][T12697] veth0_macvtap: left promiscuous mode
[  760.503201][T12699] loop9: detected capacity change from 0 to 2640
[  760.515170][T12699] ldm_validate_partition_table(): Disk read failed.
[  760.523084][T12699] Dev loop9: unable to read RDB block 0
[  760.529008][T12699]  loop9: unable to read partition table
[  760.541200][   T30] audit: type=1400 audit(1786226604.679:1043): avc:  denied  { ioctl } for  pid=12696 comm="syz.4.1799" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  760.544219][T12699] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  760.619756][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  760.743319][ T8622] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  760.763513][ T8622] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  760.808521][ T8624] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  760.819291][ T8624] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  760.865895][ T8624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  760.874779][ T8624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  760.888862][  T982] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  761.602918][  T982] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  761.617673][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  761.640608][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.659658][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.719052][  T982] usb 5-1: Product: syz
[  761.745190][  T982] usb 5-1: Manufacturer: syz
[  761.769313][  T982] usb 5-1: SerialNumber: syz
[  761.800902][  T982] usb 5-1: config 0 descriptor??
[  761.869455][ T4963] ldm_validate_partition_table(): Disk read failed.
[  761.898469][ T4963] Dev loop9: unable to read RDB block 0
[  762.131350][ T4963]  loop9: unable to read partition table
[  762.273030][   T30] audit: type=1400 audit(1786226606.399:1044): avc:  denied  { write } for  pid=12704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  762.485170][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  762.512697][T12741] netlink: 'syz.6.1809': attribute type 150 has an invalid length.
[  762.527204][   T30] audit: type=1400 audit(1786226606.659:1045): avc:  denied  { write } for  pid=12735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  762.694129][ T5258] veth0_macvtap: entered promiscuous mode
[  762.722503][T12748] netlink: 'syz.2.1810': attribute type 4 has an invalid length.
[  762.848716][   T30] audit: type=1400 audit(1786226606.989:1046): avc:  denied  { ioctl } for  pid=12746 comm="syz.6.1811" path="socket:[39243]" dev="sockfs" ino=39243 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  762.889396][T12747] SELinux: failed to load policy
[  762.948610][   T30] audit: type=1400 audit(1786226607.089:1047): avc:  denied  { lock } for  pid=12746 comm="syz.6.1811" path="socket:[40397]" dev="sockfs" ino=40397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  762.952854][T12749] can0: slcan on ttyS3.
[  762.995882][  T982] usb 5-1: Firmware version (0.0) predates our first public release.
[  763.045618][  T982] usb 5-1: Please update to version 0.2 or newer
[  764.131061][  T982] usb 5-1: USB disconnect, device number 55
[  764.661281][T12782] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  765.350309][T12732] can0 (unregistered): slcan off ttyS3.
[  765.432062][T12790] FAULT_INJECTION: forcing a failure.
[  765.432062][T12790] name failslab, interval 1, probability 0, space 0, times 0
[  765.615755][T12790] CPU: 0 UID: 0 PID: 12790 Comm: syz.2.1819 Not tainted syzkaller #0 PREEMPT(full) 
[  765.615782][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  765.615793][T12790] Call Trace:
[  765.615800][T12790]  <TASK>
[  765.615808][T12790]  dump_stack_lvl+0x100/0x190
[  765.615838][T12790]  should_fail_ex.cold+0x5/0xa
[  765.615862][T12790]  should_failslab+0xc2/0x120
[  765.615888][T12790]  __kmalloc_noprof+0xfc/0x820
[  765.615910][T12790]  ? rcu_is_watching+0x12/0xc0
[  765.615940][T12790]  ? tomoyo_realpath_from_path+0xb6/0x690
[  765.615964][T12790]  tomoyo_realpath_from_path+0xb6/0x690
[  765.615995][T12790]  tomoyo_path_number_perm+0x23c/0x580
[  765.616020][T12790]  ? tomoyo_path_number_perm+0x22e/0x580
[  765.616047][T12790]  ? __print_lock_name+0x64/0x80
[  765.616066][T12790]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  765.616093][T12790]  ? rcu_is_watching+0x12/0xc0
[  765.616144][T12790]  ? find_held_lock+0x2b/0x80
[  765.616161][T12790]  ? __fget_files+0x215/0x3d0
[  765.616181][T12790]  ? hook_file_ioctl_common+0x140/0x440
[  765.616202][T12790]  ? __fget_files+0x215/0x3d0
[  765.616227][T12790]  ? __fget_files+0x21f/0x3d0
[  765.616252][T12790]  security_file_ioctl+0xd3/0x230
[  765.616282][T12790]  __x64_sys_ioctl+0xb7/0x210
[  765.616313][T12790]  do_syscall_64+0x115/0x870
[  765.616338][T12790]  ? clear_bhb_loop+0x70/0xc0
[  765.616361][T12790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.616380][T12790] RIP: 0033:0x7f551cb9e0d9
[  765.616397][T12790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  765.616415][T12790] RSP: 002b:00007f551da33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  765.616434][T12790] RAX: ffffffffffffffda RBX: 00007f551ce25fa0 RCX: 00007f551cb9e0d9
[  765.616447][T12790] RDX: 0000200000000180 RSI: 0000000080b06401 RDI: 0000000000000003
[  765.616458][T12790] RBP: 00007f551da33090 R08: 0000000000000000 R09: 0000000000000000
[  765.616469][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  765.616480][T12790] R13: 00007f551ce26038 R14: 00007f551ce25fa0 R15: 00007ffe120b2298
[  765.616506][T12790]  </TASK>
[  765.888956][T12790] ERROR: Out of memory at tomoyo_realpath_from_path.
[  766.871112][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'.
[  767.327028][T12803] comedi comedi3: rti800: I/O port conflict (0x140,16)
[  767.371685][T12807] loop9: detected capacity change from 0 to 2640
[  768.386225][T12808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1824'.
[  768.418124][   T30] audit: type=1400 audit(1786226612.549:1048): avc:  denied  { write } for  pid=12769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  768.447232][T12807] buffer_io_error: 706 callbacks suppressed
[  768.447250][T12807] Buffer I/O error on dev loop9, logical block 0, async page read
[  768.505114][T12814] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  768.539566][T12807]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  768.602213][T12807] loop9: partition table partially beyond EOD, truncated
[  768.644185][T12807] loop9: p1 size 1237888941 extends beyond EOD, truncated
[  768.681309][T12819] syz_tun: entered allmulticast mode
[  768.690599][T12816] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  768.695987][T12819] syz_tun: left allmulticast mode
[  768.708856][T12821] FAULT_INJECTION: forcing a failure.
[  768.708856][T12821] name failslab, interval 1, probability 0, space 0, times 0
[  768.737670][   T30] audit: type=1400 audit(1786226612.859:1049): avc:  denied  { write } for  pid=12817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  768.774329][T12816] Buffer I/O error on dev loop9, logical block 1, lost async page write
[  768.792280][T12821] CPU: 0 UID: 0 PID: 12821 Comm: syz.7.1829 Not tainted syzkaller #0 PREEMPT(full) 
[  768.792306][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  768.792317][T12821] Call Trace:
[  768.792323][T12821]  <TASK>
[  768.792331][T12821]  dump_stack_lvl+0x100/0x190
[  768.792361][T12821]  should_fail_ex.cold+0x5/0xa
[  768.792385][T12821]  should_failslab+0xc2/0x120
[  768.792412][T12821]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  768.792435][T12821]  ? __alloc_skb+0x5b7/0x710
[  768.792457][T12821]  ? __alloc_skb+0x140/0x710
[  768.792481][T12821]  __alloc_skb+0x140/0x710
[  768.792501][T12821]  ? __alloc_skb+0x5b7/0x710
[  768.792520][T12821]  ? __pfx___alloc_skb+0x10/0x10
[  768.792548][T12821]  netlink_alloc_large_skb+0x69/0x150
[  768.792571][T12821]  netlink_sendmsg+0x680/0xda0
[  768.792593][T12821]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.792615][T12821]  ? selinux_socket_sendmsg+0x198/0x2f0
[  768.792645][T12821]  sock_write_iter+0x53a/0x5b0
[  768.792671][T12821]  ? __pfx_netlink_sendmsg+0x10/0x10
[  768.792690][T12821]  ? __pfx_sock_write_iter+0x10/0x10
[  768.792723][T12821]  ? bpf_lsm_file_permission+0x9/0x10
[  768.792751][T12821]  ? security_file_permission+0x76/0x210
[  768.792780][T12821]  ? rw_verify_area+0xce/0x6d0
[  768.792808][T12821]  vfs_write+0x6ac/0x1050
[  768.792826][T12821]  ? __pfx_sock_write_iter+0x10/0x10
[  768.792856][T12821]  ? __pfx_vfs_write+0x10/0x10
[  768.792871][T12821]  ? find_held_lock+0x2b/0x80
[  768.792904][T12821]  ksys_write+0x1f8/0x250
[  768.792921][T12821]  ? __pfx_ksys_write+0x10/0x10
[  768.792945][T12821]  do_syscall_64+0x115/0x870
[  768.792969][T12821]  ? clear_bhb_loop+0x70/0xc0
[  768.792991][T12821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.793013][T12821] RIP: 0033:0x7f3bf7d9e0d9
[  768.793029][T12821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.793046][T12821] RSP: 002b:00007f3bf8bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  768.793064][T12821] RAX: ffffffffffffffda RBX: 00007f3bf8025fa0 RCX: 00007f3bf7d9e0d9
[  768.793075][T12821] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003
[  768.793086][T12821] RBP: 00007f3bf8bb2090 R08: 0000000000000000 R09: 0000000000000000
[  768.793096][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.793106][T12821] R13: 00007f3bf8026038 R14: 00007f3bf8025fa0 R15: 00007ffe7aea6188
[  768.793131][T12821]  </TASK>
[  769.082698][T12816] Buffer I/O error on dev loop9, logical block 2, lost async page write
[  769.091501][T12816] Buffer I/O error on dev loop9, logical block 3, lost async page write
[  769.100070][T12816] Buffer I/O error on dev loop9, logical block 4, lost async page write
[  769.108503][T12816] Buffer I/O error on dev loop9, logical block 5, lost async page write
[  769.116887][T12816] Buffer I/O error on dev loop9, logical block 6, lost async page write
[  769.125285][T12816] Buffer I/O error on dev loop9, logical block 7, lost async page write
[  770.360562][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1831'.
[  771.009594][T12843] Bluetooth: MGMT ver 1.23
[  771.122817][T12845] xt_hashlimit: size too large, truncated to 1048576
[  772.166694][T12862] netlink: 'syz.4.1841': attribute type 1 has an invalid length.
[  772.206542][T12862] 8021q: adding VLAN 0 to HW filter on device bond2
[  772.231545][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'.
[  772.241095][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1841'.
[  772.569591][   T30] audit: type=1400 audit(1786226616.709:1050): avc:  denied  { ioctl } for  pid=12878 comm="syz.0.1846" path="socket:[40627]" dev="sockfs" ino=40627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  772.598276][ T5329] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  772.794022][T12893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  773.243706][ T5329] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  774.255800][ T5329] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  774.265953][ T5329] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  774.275103][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.287822][T12877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  774.301144][ T5329] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  775.604224][   T30] audit: type=1400 audit(1786226619.739:1051): avc:  denied  { write } for  pid=12895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  776.106176][   T30] audit: type=1400 audit(1786226620.239:1052): avc:  denied  { write } for  pid=12953 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  776.135610][T12955] 9p: Bad value for 'wfdno'
[  777.661403][ T5329] usb 5-1: USB disconnect, device number 56
[  778.555355][   T30] audit: type=1400 audit(1786226622.689:1053): avc:  denied  { write } for  pid=12961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  778.813267][   T30] audit: type=1400 audit(1786226622.929:1054): avc:  denied  { write } for  pid=12991 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  779.920933][T12998] FAULT_INJECTION: forcing a failure.
[  779.920933][T12998] name failslab, interval 1, probability 0, space 0, times 0
[  779.990002][T12998] CPU: 1 UID: 0 PID: 12998 Comm: syz.6.1858 Not tainted syzkaller #0 PREEMPT(full) 
[  779.990027][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  779.990037][T12998] Call Trace:
[  779.990043][T12998]  <TASK>
[  779.990050][T12998]  dump_stack_lvl+0x100/0x190
[  779.990076][T12998]  should_fail_ex.cold+0x5/0xa
[  779.990097][T12998]  should_failslab+0xc2/0x120
[  779.990119][T12998]  __kmalloc_noprof+0xfc/0x820
[  779.990140][T12998]  ? iovec_from_user+0x8d/0x140
[  779.990166][T12998]  iovec_from_user+0x8d/0x140
[  779.990190][T12998]  __import_iovec+0x81/0x640
[  779.990211][T12998]  ? pti_set_user_pgtbl+0x40/0x50
[  779.990227][T12998]  ? __might_fault+0xc5/0x140
[  779.990247][T12998]  import_iovec+0x101/0x130
[  779.990273][T12998]  copy_msghdr_from_user+0x2c6/0x4c0
[  779.990291][T12998]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  779.990312][T12998]  ? __pfx__kstrtoull+0x10/0x10
[  779.990334][T12998]  ___sys_sendmsg+0x106/0x1e0
[  779.990351][T12998]  ? __pfx____sys_sendmsg+0x10/0x10
[  779.990378][T12998]  ? find_held_lock+0x2b/0x80
[  779.990408][T12998]  __sys_sendmmsg+0x20c/0x440
[  779.990432][T12998]  ? __pfx___sys_sendmmsg+0x10/0x10
[  779.990453][T12998]  ? ksys_write+0x190/0x250
[  779.990485][T12998]  ? fput+0x79/0x100
[  779.990503][T12998]  ? ksys_write+0x1ac/0x250
[  779.990518][T12998]  ? __pfx_ksys_write+0x10/0x10
[  779.990538][T12998]  __x64_sys_sendmmsg+0x9c/0x100
[  779.990558][T12998]  ? lockdep_hardirqs_on+0x78/0x100
[  779.990579][T12998]  do_syscall_64+0x115/0x870
[  779.990599][T12998]  ? clear_bhb_loop+0x70/0xc0
[  779.990619][T12998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.990636][T12998] RIP: 0033:0x7fbff3f9e0d9
[  779.990650][T12998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  779.990666][T12998] RSP: 002b:00007fbff4ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  779.990683][T12998] RAX: ffffffffffffffda RBX: 00007fbff4226090 RCX: 00007fbff3f9e0d9
[  779.990694][T12998] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004
[  779.990704][T12998] RBP: 00007fbff4ebe090 R08: 0000000000000000 R09: 0000000000000000
[  779.990714][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  779.990724][T12998] R13: 00007fbff4226128 R14: 00007fbff4226090 R15: 00007ffe53ecc368
[  779.990746][T12998]  </TASK>
[  779.997259][T12990] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1861'.
[  780.741100][   T30] audit: type=1400 audit(1786226624.869:1055): avc:  denied  { write } for  pid=13000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  780.831496][T13018] FAULT_INJECTION: forcing a failure.
[  780.831496][T13018] name failslab, interval 1, probability 0, space 0, times 0
[  780.846111][   T30] audit: type=1400 audit(1786226624.969:1056): avc:  denied  { bind } for  pid=13016 comm="syz.7.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  780.887814][T13018] CPU: 0 UID: 0 PID: 13018 Comm: syz.7.1866 Not tainted syzkaller #0 PREEMPT(full) 
[  780.887840][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  780.887851][T13018] Call Trace:
[  780.887858][T13018]  <TASK>
[  780.887865][T13018]  dump_stack_lvl+0x100/0x190
[  780.887895][T13018]  should_fail_ex.cold+0x5/0xa
[  780.887922][T13018]  should_failslab+0xc2/0x120
[  780.887946][T13018]  __kmalloc_cache_noprof+0x91/0x6c0
[  780.887963][T13018]  ? sctp_has_association+0xdd/0x270
[  780.887988][T13018]  ? sctp_association_new+0xbb/0x2990
[  780.888012][T13018]  sctp_association_new+0xbb/0x2990
[  780.888032][T13018]  ? sctp_v4_scope+0x183/0x1a0
[  780.888059][T13018]  sctp_connect_new_asoc+0x1a8/0x770
[  780.888083][T13018]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  780.888102][T13018]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  780.888132][T13018]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[  780.888169][T13018]  __sctp_connect+0x3e7/0xc70
[  780.888195][T13018]  ? __pfx___sctp_connect+0x10/0x10
[  780.888218][T13018]  ? __pfx_sctp_inet_connect+0x10/0x10
[  780.888240][T13018]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  780.888265][T13018]  ? __pfx_sctp_inet_connect+0x10/0x10
[  780.888284][T13018]  sctp_inet_connect+0x15f/0x220
[  780.888307][T13018]  __sys_connect_file+0x141/0x1a0
[  780.888332][T13018]  __sys_connect+0x141/0x170
[  780.888352][T13018]  ? __pfx___sys_connect+0x10/0x10
[  780.888371][T13018]  ? __fget_files+0x21f/0x3d0
[  780.888400][T13018]  ? __pfx_ksys_write+0x10/0x10
[  780.888423][T13018]  __x64_sys_connect+0x72/0xb0
[  780.888443][T13018]  ? lockdep_hardirqs_on+0x78/0x100
[  780.888467][T13018]  do_syscall_64+0x115/0x870
[  780.888497][T13018]  ? clear_bhb_loop+0x70/0xc0
[  780.888520][T13018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.888539][T13018] RIP: 0033:0x7f3bf7d9e0d9
[  780.888554][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.888572][T13018] RSP: 002b:00007f3bf8bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  780.888590][T13018] RAX: ffffffffffffffda RBX: 00007f3bf8025fa0 RCX: 00007f3bf7d9e0d9
[  780.888601][T13018] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  780.888612][T13018] RBP: 00007f3bf8bb2090 R08: 0000000000000000 R09: 0000000000000000
[  780.888623][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.888633][T13018] R13: 00007f3bf8026038 R14: 00007f3bf8025fa0 R15: 00007ffe7aea6188
[  780.888658][T13018]  </TASK>
[  781.136172][T13019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  781.591734][   T30] audit: type=1400 audit(1786226625.729:1057): avc:  denied  { write } for  pid=13020 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  783.287187][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'.
[  783.363489][T13034] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1868'.
[  783.818782][T10343] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  783.957036][   T30] audit: type=1400 audit(1786226628.089:1058): avc:  denied  { write } for  pid=13044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  784.009580][T10343] usb 7-1: Using ep0 maxpacket: 8
[  784.016255][T10343] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  784.025708][T10343] usb 7-1: config 0 has no interface number 0
[  784.034119][T10343] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  784.061012][T10343] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  784.087294][T10343] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  784.119858][T10343] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  784.142860][T13060] ubi: mtd0 is already attached to ubi0
[  784.157996][T10343] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  784.194562][   T30] audit: type=1400 audit(1786226628.329:1059): avc:  denied  { write } for  pid=13062 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  784.220759][T10343] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  784.248702][T10343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.271926][T10343] usb 7-1: config 0 descriptor??
[  784.293130][T10343] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  784.999976][T10343] IPVS: starting estimator thread 0...
[  785.010487][T13075] syz_tun: entered allmulticast mode
[  785.019332][  T982] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  785.128113][T13076] IPVS: using max 46 ests per chain, 110400 per kthread
[  785.188027][  T982] usb 3-1: Using ep0 maxpacket: 8
[  785.204497][  T982] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  785.225766][  T982] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  785.252374][  T982] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  785.280912][  T982] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  785.508157][  T982] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  785.699735][  T982] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  785.732762][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.847638][T13084] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  785.983642][  T982] usb 3-1: usb_control_msg returned -32
[  786.013102][  T982] usbtmc 3-1:16.0: can't read capabilities
[  786.240490][T13092] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1880'.
[  786.256417][T13092] CIFS: Attempting to mount //127.0.0.1/share
[  786.265936][T13092] CIFS: VFS: Error connecting to socket. Aborting operation.
[  786.277530][T13092] CIFS: VFS: cifs_mount failed w/return code = -111
[  786.677212][ T5696] usb 7-1: USB disconnect, device number 43
[  786.706196][ T5696] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  786.740932][   T30] audit: type=1400 audit(1786226630.879:1060): avc:  denied  { nlmsg_read } for  pid=13072 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  786.911625][T13114] FAULT_INJECTION: forcing a failure.
[  786.911625][T13114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.935200][T13114] CPU: 1 UID: 0 PID: 13114 Comm: syz.7.1883 Not tainted syzkaller #0 PREEMPT(full) 
[  786.935225][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  786.935235][T13114] Call Trace:
[  786.935242][T13114]  <TASK>
[  786.935248][T13114]  dump_stack_lvl+0x100/0x190
[  786.935275][T13114]  should_fail_ex.cold+0x5/0xa
[  786.935296][T13114]  _copy_from_user+0x2e/0xd0
[  786.935321][T13114]  sctp_setsockopt+0x8cc/0xb370
[  786.935345][T13114]  ? __pfx_sctp_setsockopt+0x10/0x10
[  786.935364][T13114]  ? __fget_files+0x215/0x3d0
[  786.935385][T13114]  ? selinux_socket_setsockopt+0x6a/0x80
[  786.935406][T13114]  ? sock_common_setsockopt+0x2e/0xf0
[  786.935430][T13114]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  786.935456][T13114]  do_sock_setsockopt+0xf3/0x1d0
[  786.935486][T13114]  __sys_setsockopt+0x195/0x220
[  786.935515][T13114]  __x64_sys_setsockopt+0xbd/0x160
[  786.935536][T13114]  ? do_syscall_64+0x90/0x870
[  786.935560][T13114]  ? lockdep_hardirqs_on+0x78/0x100
[  786.935583][T13114]  do_syscall_64+0x115/0x870
[  786.935605][T13114]  ? clear_bhb_loop+0x70/0xc0
[  786.935628][T13114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.935647][T13114] RIP: 0033:0x7f3bf7d9e0d9
[  786.935663][T13114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.935679][T13114] RSP: 002b:00007f3bf8bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  786.935697][T13114] RAX: ffffffffffffffda RBX: 00007f3bf8025fa0 RCX: 00007f3bf7d9e0d9
[  786.935709][T13114] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[  786.935720][T13114] RBP: 00007f3bf8bb2090 R08: 0000000000000008 R09: 0000000000000000
[  786.935731][T13114] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  786.935741][T13114] R13: 00007f3bf8026038 R14: 00007f3bf8025fa0 R15: 00007ffe7aea6188
[  786.935774][T13114]  </TASK>
[  787.192797][T13118] xt_hashlimit: size too large, truncated to 1048576
[  788.426621][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1885'.
[  788.572115][T13128] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1886'.
[  788.740139][ T5329] usb 3-1: USB disconnect, device number 49
[  789.413177][T13137] loop9: detected capacity change from 0 to 2640
[  789.436638][T13137] buffer_io_error: 322 callbacks suppressed
[  789.436655][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  789.505248][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  789.599736][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  789.791757][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.011872][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.112232][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.138112][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.161239][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.169031][   T30] audit: type=1400 audit(1786226634.299:1061): avc:  denied  { write } for  pid=13130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  790.192054][T13137] ldm_validate_partition_table(): Disk read failed.
[  790.233262][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.258047][T13137] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.267757][T13137] Dev loop9: unable to read RDB block 0
[  790.306416][T13137]  loop9: unable to read partition table
[  790.318504][T13137] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  790.379905][   T30] audit: type=1400 audit(1786226634.519:1062): avc:  denied  { write } for  pid=13153 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  790.554621][T13154] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1890'.
[  791.424812][T13166] netlink: 'syz.4.1893': attribute type 2 has an invalid length.
[  791.540650][T13167] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  791.785713][T13170] FAULT_INJECTION: forcing a failure.
[  791.785713][T13170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  791.841004][T13170] CPU: 1 UID: 0 PID: 13170 Comm: syz.4.1894 Not tainted syzkaller #0 PREEMPT(full) 
[  791.841029][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  791.841040][T13170] Call Trace:
[  791.841047][T13170]  <TASK>
[  791.841055][T13170]  dump_stack_lvl+0x100/0x190
[  791.841084][T13170]  should_fail_ex.cold+0x5/0xa
[  791.841108][T13170]  _copy_to_user+0x32/0xd0
[  791.841135][T13170]  simple_read_from_buffer+0xcb/0x170
[  791.841158][T13170]  proc_fail_nth_read+0x1af/0x230
[  791.841188][T13170]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  791.841219][T13170]  ? rw_verify_area+0xce/0x6d0
[  791.841244][T13170]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  791.841274][T13170]  vfs_read+0x1e4/0xb40
[  791.841305][T13170]  ? __pfx_vfs_read+0x10/0x10
[  791.841332][T13170]  ? __fget_files+0x215/0x3d0
[  791.841357][T13170]  ? __fget_files+0x21f/0x3d0
[  791.841383][T13170]  ksys_read+0x12a/0x250
[  791.841400][T13170]  ? __pfx_ksys_read+0x10/0x10
[  791.841424][T13170]  do_syscall_64+0x115/0x870
[  791.841448][T13170]  ? clear_bhb_loop+0x70/0xc0
[  791.841471][T13170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.841490][T13170] RIP: 0033:0x7fa74b95e90e
[  791.841504][T13170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  791.841520][T13170] RSP: 002b:00007fa74c85cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  791.841536][T13170] RAX: ffffffffffffffda RBX: 00007fa74c85d6c0 RCX: 00007fa74b95e90e
[  791.841548][T13170] RDX: 000000000000000f RSI: 00007fa74c85d0a0 RDI: 0000000000000004
[  791.841559][T13170] RBP: 00007fa74c85d090 R08: 0000000000000000 R09: 0000000000000000
[  791.841569][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.841580][T13170] R13: 00007fa74bc26038 R14: 00007fa74bc25fa0 R15: 00007ffe5019a6c8
[  791.841605][T13170]  </TASK>
[  792.207009][   T30] audit: type=1400 audit(1786226636.339:1063): avc:  denied  { lock } for  pid=13175 comm="syz.6.1887" path="socket:[39653]" dev="sockfs" ino=39653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  792.708107][ T5696] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  792.832817][   T30] audit: type=1400 audit(1786226636.969:1064): avc:  denied  { write } for  pid=13162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  793.906986][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'.
[  793.951205][ T5329] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  793.964606][ T5696] usb 7-1: unable to get BOS descriptor or descriptor too short
[  794.001293][ T5696] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 155, changing to 7
[  794.078266][ T5696] usb 7-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40
[  794.116569][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.130788][ T5329] usb 3-1: Using ep0 maxpacket: 16
[  794.150254][   T30] audit: type=1400 audit(1786226638.269:1065): avc:  denied  { write } for  pid=13204 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  794.173733][ T5696] usb 7-1: Product: syz
[  794.180085][ T5696] usb 7-1: Manufacturer: syz
[  794.184807][ T5329] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  794.188336][T13215] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  794.206117][ T5696] usb 7-1: SerialNumber: syz
[  794.229371][ T5329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  794.253095][T13215] SELinux: failed to load policy
[  794.260066][ T5696] usb 7-1: BAAD HEADPHONE p_chmask mismatch
[  794.267946][ T5329] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  794.291619][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.315656][ T5329] usb 3-1: Product: syz
[  794.497187][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  794.653459][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  794.838788][ T5329] usb 3-1: Manufacturer: syz
[  794.853167][ T5329] usb 3-1: SerialNumber: syz
[  794.864977][ T5329] usb 3-1: config 0 descriptor??
[  794.878619][ T5329] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  794.888865][ T5696] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  794.898012][ T5329] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  794.915041][ T5696] usb 7-1: USB disconnect, device number 44
[  795.165047][T13226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  795.649509][ T5329] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  795.770557][ T5329] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  795.805541][ T5329] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  795.834123][ T5329] em28xx 3-1:0.0: No AC97 audio processor
[  795.896311][ T5329] usb 3-1: USB disconnect, device number 50
[  795.938355][ T5329] em28xx 3-1:0.0: Disconnecting em28xx
[  795.989039][   T30] audit: type=1400 audit(1786226640.129:1066): avc:  denied  { append } for  pid=13235 comm="syz.7.1912" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  796.062284][ T5329] em28xx 3-1:0.0: Freeing device
[  797.864868][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1915'.
[  799.957392][T13280] 9p: Bad value for 'rfdno'
[  800.055163][T13287] netlink: 'syz.0.1926': attribute type 4 has an invalid length.
[  800.063091][T13284] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1924'.
[  800.258012][  T982] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  800.278169][ T5709] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  800.420650][  T982] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  800.437342][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.446979][   T30] audit: type=1400 audit(1786226644.579:1067): avc:  denied  { shutdown } for  pid=13292 comm="syz.2.1930" laddr=fe80::e lport=46717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  800.505803][ T5709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  800.563777][ T5709] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  800.578795][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.592208][  T982] usb 5-1: config 0 descriptor??
[  800.603501][  T982] cp210x 5-1:0.0: cp210x converter detected
[  800.644879][ T5709] usb 8-1: config 0 descriptor??
[  801.142798][ T5709] usbhid 8-1:0.0: can't add hid device: -71
[  801.167289][ T5709] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  801.193550][ T5709] usb 8-1: USB disconnect, device number 2
[  801.242238][T13298] mmap: syz.0.1931 (13298) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  801.310375][  T982] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71
[  801.381965][  T982] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[  801.425876][  T982] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  801.451653][  T982] usb 5-1: cp210x converter now attached to ttyUSB0
[  801.475544][  T982] usb 5-1: USB disconnect, device number 57
[  801.503897][  T982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  801.522514][  T982] cp210x 5-1:0.0: device disconnected
[  801.628839][T13303] SELinux: failed to load policy
[  802.775162][T13312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1937'.
[  802.784716][ T5709] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  802.989554][ T5709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.006319][ T5709] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  803.018959][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.057204][ T5709] usb 8-1: config 0 descriptor??
[  803.092507][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  803.099038][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  803.300265][ T5709] usb 8-1: can't set config #0, error -71
[  803.350710][ T5709] usb 8-1: USB disconnect, device number 3
[  803.648603][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bf3fc00: rx timeout, send abort
[  803.671594][   T30] audit: type=1400 audit(1786226647.809:1068): avc:  denied  { read } for  pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  803.721687][   T30] audit: type=1400 audit(1786226647.809:1069): avc:  denied  { search } for  pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  803.757273][   T30] audit: type=1400 audit(1786226647.809:1070): avc:  denied  { write search } for  pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  803.780653][   T30] audit: type=1400 audit(1786226647.809:1071): avc:  denied  { add_name } for  pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  803.802847][ T5781] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  803.802871][   T30] audit: type=1400 audit(1786226647.809:1072): avc:  denied  { create } for  pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  803.879850][   T30] audit: type=1400 audit(1786226647.809:1073): avc:  denied  { append open } for  pid=4945 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  803.911274][T13329] 9p: Bad value for 'rfdno'
[  803.918831][   T30] audit: type=1400 audit(1786226647.809:1074): avc:  denied  { getattr } for  pid=4945 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  804.018178][ T5781] usb 5-1: Using ep0 maxpacket: 8
[  804.024597][ T5781] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  804.043504][ T5781] usb 5-1: config 0 has no interface number 0
[  804.068228][ T5781] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  804.105714][ T5781] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  804.147086][ T5781] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  804.148883][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bf3d000: rx timeout, send abort
[  804.166547][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bf3fc00: abort rx timeout. Force session deactivation
[  804.182595][T13325] FAULT_INJECTION: forcing a failure.
[  804.182595][T13325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.213165][ T5781] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  804.232016][T13325] CPU: 0 UID: 0 PID: 13325 Comm: syz.7.1941 Not tainted syzkaller #0 PREEMPT(full) 
[  804.232041][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  804.232052][T13325] Call Trace:
[  804.232059][T13325]  <TASK>
[  804.232067][T13325]  dump_stack_lvl+0x100/0x190
[  804.232096][T13325]  should_fail_ex.cold+0x5/0xa
[  804.232119][T13325]  _copy_to_user+0x32/0xd0
[  804.232147][T13325]  simple_read_from_buffer+0xcb/0x170
[  804.232175][T13325]  proc_fail_nth_read+0x1af/0x230
[  804.232205][T13325]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.232236][T13325]  ? rw_verify_area+0xce/0x6d0
[  804.232261][T13325]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  804.232289][T13325]  vfs_read+0x1e4/0xb40
[  804.232319][T13325]  ? __pfx_vfs_read+0x10/0x10
[  804.232345][T13325]  ? __fget_files+0x215/0x3d0
[  804.232369][T13325]  ? __fget_files+0x21f/0x3d0
[  804.232395][T13325]  ksys_read+0x12a/0x250
[  804.232411][T13325]  ? __pfx_ksys_read+0x10/0x10
[  804.232436][T13325]  do_syscall_64+0x115/0x870
[  804.232461][T13325]  ? clear_bhb_loop+0x70/0xc0
[  804.232484][T13325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.232503][T13325] RIP: 0033:0x7f3bf7d5e90e
[  804.232519][T13325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  804.232536][T13325] RSP: 002b:00007f3bf8bb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  804.232555][T13325] RAX: ffffffffffffffda RBX: 00007f3bf8bb26c0 RCX: 00007f3bf7d5e90e
[  804.232567][T13325] RDX: 000000000000000f RSI: 00007f3bf8bb20a0 RDI: 0000000000000005
[  804.232577][T13325] RBP: 00007f3bf8bb2090 R08: 0000000000000000 R09: 0000000000000000
[  804.232588][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.232598][T13325] R13: 00007f3bf8026038 R14: 00007f3bf8025fa0 R15: 00007ffe7aea6188
[  804.232623][T13325]  </TASK>
[  804.248230][ T5781] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  804.456991][ T5781] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  804.466130][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.495852][ T5781] usb 5-1: config 0 descriptor??
[  804.639567][ T5781] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  804.666476][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bf3d000: abort rx timeout. Force session deactivation
[  804.671549][T13336] loop9: detected capacity change from 0 to 2640
[  804.687415][T12461] buffer_io_error: 11 callbacks suppressed
[  804.687430][T12461] Buffer I/O error on dev loop9, logical block 0, async page read
[  804.708429][T12461] Buffer I/O error on dev loop9, logical block 0, async page read
[  804.717391][T12461] Buffer I/O error on dev loop9, logical block 0, async page read
[  804.726962][T13336] Buffer I/O error on dev loop9, logical block 0, async page read
[  804.736760][T12461] Buffer I/O error on dev loop9, logical block 3, async page read
[  804.747142][T13338] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  804.789226][T13336] Buffer I/O error on dev loop9, logical block 1, async page read
[  804.804538][T13339] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  804.815838][T13339] Buffer I/O error on dev loop9, logical block 1, lost async page write
[  805.325358][T13339] Buffer I/O error on dev loop9, logical block 2, lost async page write
[  806.438055][ T5688] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  806.608106][ T5688] usb 3-1: Using ep0 maxpacket: 8
[  806.628424][ T5688] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  806.651947][ T5688] usb 3-1: config 0 has no interface number 0
[  806.684905][ T5688] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  806.738252][ T5688] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  806.775808][ T5688] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  806.804056][ T5688] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  806.833364][ T5688] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  806.899405][ T5688] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  806.930338][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.965842][ T5688] usb 3-1: config 0 descriptor??
[  807.002286][ T5688] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  807.016133][ T5781] usb 5-1: USB disconnect, device number 58
[  807.038427][ T5781] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  807.488243][ T5781] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  807.548033][ T5688] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[  807.648612][ T5781] usb 5-1: Using ep0 maxpacket: 16
[  807.669848][ T5781] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  807.713124][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  807.726805][ T5781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  807.760262][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.783037][ T5781] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  807.813314][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.823066][ T5688] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  807.838336][ T5781] usb 5-1: Product: syz
[  807.848418][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.865633][ T5781] usb 5-1: Manufacturer: syz
[  807.877808][ T5781] usb 5-1: SerialNumber: syz
[  807.893244][ T5688] usb 7-1: config 0 descriptor??
[  807.905457][ T5781] usb 5-1: config 0 descriptor??
[  807.921919][ T5781] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  807.961993][ T5781] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  808.098081][ T5329] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  808.278298][ T5329] usb 8-1: Using ep0 maxpacket: 16
[  808.299051][ T5329] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  808.333089][ T5329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  808.356516][ T5329] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  808.367032][ T5329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.376897][ T5329] usb 8-1: Product: syz
[  808.383136][ T5329] usb 8-1: Manufacturer: syz
[  808.388274][ T5329] usb 8-1: SerialNumber: syz
[  808.410709][ T5329] usb 8-1: config 0 descriptor??
[  808.428291][ T5329] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  808.438419][ T5329] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  808.519289][ T5688] usbhid 7-1:0.0: can't add hid device: -71
[  808.531547][ T5781] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  808.541151][ T5688] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  808.559929][ T5688] usb 7-1: USB disconnect, device number 45
[  808.580047][ T5781] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  808.597776][ T5781] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  808.599949][   T30] audit: type=1400 audit(1786226652.729:1075): avc:  denied  { setopt } for  pid=13367 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  808.615080][ T5781] em28xx 5-1:0.0: No AC97 audio processor
[  808.643694][ T5709] usb 3-1: USB disconnect, device number 51
[  808.656229][ T5781] usb 5-1: USB disconnect, device number 59
[  808.664663][ T5781] em28xx 5-1:0.0: Disconnecting em28xx
[  808.669475][ T5709] ldusb 3-1:0.55: LD USB Device #1 now disconnected
[  808.677710][ T5781] em28xx 5-1:0.0: Freeing device
[  809.044537][ T5329] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  809.068474][ T5329] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  809.085118][ T5329] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  809.101366][ T5329] em28xx 8-1:0.0: No AC97 audio processor
[  809.139875][ T5329] usb 8-1: USB disconnect, device number 4
[  809.166854][ T5329] em28xx 8-1:0.0: Disconnecting em28xx
[  809.197273][ T5329] em28xx 8-1:0.0: Freeing device
[  809.343843][T13377] loop9: detected capacity change from 0 to 2640
[  809.376384][T13377] ldm_validate_partition_table(): Disk read failed.
[  809.414228][T13377] Dev loop9: unable to read RDB block 0
[  809.416468][T13381] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1958'.
[  809.441727][T13377]  loop9: unable to read partition table
[  809.448349][T13381] CIFS: Attempting to mount //127.0.0.1/share
[  809.463232][T13381] CIFS: VFS: Error connecting to socket. Aborting operation.
[  809.473853][T13377] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  809.500191][T13381] CIFS: VFS: cifs_mount failed w/return code = -111
[  810.200560][T13389] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1959'.
[  810.219872][T13389] CIFS: Attempting to mount //127.0.0.1/share
[  810.229526][T13389] CIFS: VFS: Error connecting to socket. Aborting operation.
[  810.248151][T13389] CIFS: VFS: cifs_mount failed w/return code = -111
[  810.491794][T13398] autofs: Bad value for 'fd'
[  810.974340][T13403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  812.560882][T13409] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1966'.
[  813.092222][T13422] loop9: detected capacity change from 0 to 2640
[  813.100865][T13422] buffer_io_error: 670 callbacks suppressed
[  813.100882][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.116143][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.128389][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.171588][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.219893][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.278610][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.328706][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.348227][  T982] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  813.390991][T13422] Buffer I/O error on dev loop9, logical block 0, async page read
[  813.451712][T13424] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  813.464254][T13425] Buffer I/O error on dev loop9, logical block 1, lost async page write
[  813.474306][T13422]  loop9: unable to read partition table
[  813.483330][T13422] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  813.508002][  T982] usb 5-1: Using ep0 maxpacket: 16
[  813.523333][  T982] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  813.552628][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  813.592345][  T982] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  813.609891][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.634587][  T982] usb 5-1: Product: syz
[  813.649085][  T982] usb 5-1: Manufacturer: syz
[  813.670687][  T982] usb 5-1: SerialNumber: syz
[  813.695988][  T982] usb 5-1: config 0 descriptor??
[  813.722122][  T982] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  813.824422][  T982] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  814.017629][T13436] 9p: Bad value for 'wfdno'
[  815.323653][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1973'.
[  815.356070][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1973'.
[  815.393723][T13442] ip6gre1: entered promiscuous mode
[  815.408711][T13442] ip6gre1: entered allmulticast mode
[  815.431704][T13447] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1977'.
[  815.453699][T13447] CIFS: Attempting to mount //127.0.0.1/share
[  815.465624][T13442] netlink: 'syz.6.1973': attribute type 6 has an invalid length.
[  815.479933][T13442] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1973'.
[  815.569351][  T982] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  815.720989][  T982] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  816.262588][T13447] CIFS: VFS: Error connecting to socket. Aborting operation.
[  816.282019][  T982] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  816.298811][  T982] em28xx 5-1:0.0: No AC97 audio processor
[  816.319289][T13447] CIFS: VFS: cifs_mount failed w/return code = -4
[  816.337209][  T982] usb 5-1: USB disconnect, device number 60
[  816.360600][  T982] em28xx 5-1:0.0: Disconnecting em28xx
[  816.399385][  T982] em28xx 5-1:0.0: Freeing device
[  817.298284][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1979'.
[  818.088418][ T5709] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  818.268115][ T5709] usb 7-1: Using ep0 maxpacket: 8
[  818.283377][ T5709] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  818.306651][ T5709] usb 7-1: config 0 has no interface number 0
[  818.322851][ T5709] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  818.354252][ T5709] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  818.380267][ T5709] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  818.416657][ T5709] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  818.464662][ T5709] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  818.527570][ T5709] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  818.560210][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.594330][ T5709] usb 7-1: config 0 descriptor??
[  818.620891][ T5709] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  818.744064][T10343] usb 7-1: USB disconnect, device number 46
[  818.780602][T10343] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  819.704623][T13484] 9p: Bad value for 'wfdno'
[  821.365694][T13503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  821.907857][  T982] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  822.281053][T13507] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1992'.
[  822.311195][T13507] CIFS: Attempting to mount //127.0.0.1/share
[  823.153560][T13507] CIFS: VFS: Error connecting to socket. Aborting operation.
[  823.178113][T13507] CIFS: VFS: cifs_mount failed w/return code = -4
[  823.201019][  T982] usb 3-1: Using ep0 maxpacket: 16
[  823.222686][  T982] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  823.265526][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  823.279414][  T982] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  823.289178][  T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.297222][  T982] usb 3-1: Product: syz
[  823.301442][  T982] usb 3-1: Manufacturer: syz
[  823.306053][  T982] usb 3-1: SerialNumber: syz
[  823.319055][  T982] usb 3-1: config 0 descriptor??
[  823.327276][  T982] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  823.336751][  T982] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  823.372719][T13517] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  823.413447][   T30] audit: type=1400 audit(1786226667.549:1076): avc:  denied  { associate } for  pid=13516 comm="syz.4.1994" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  824.333013][T13527] 9pnet_fd: Insufficient options for proto=fd
[  824.488017][ T5709] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  824.495652][T10343] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  824.506265][  T982] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  824.519223][T13527] netlink: 'syz.0.1997': attribute type 4 has an invalid length.
[  824.520184][  T982] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  824.540508][  T982] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  824.549240][  T982] em28xx 3-1:0.0: No AC97 audio processor
[  824.568339][  T982] usb 3-1: USB disconnect, device number 52
[  824.580101][  T982] em28xx 3-1:0.0: Disconnecting em28xx
[  824.589655][  T982] em28xx 3-1:0.0: Freeing device
[  824.651977][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  824.668170][T10343] usb 8-1: Using ep0 maxpacket: 8
[  824.677604][T10343] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  824.686776][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  824.702431][T10343] usb 8-1: config 0 has no interface number 0
[  824.710363][ T5709] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  824.720962][T10343] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  824.734927][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.750388][T10343] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  824.764639][ T5709] usb 5-1: config 0 descriptor??
[  824.773109][T10343] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  824.789072][T10343] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  824.800417][T10343] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  824.815240][T10343] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  824.824366][T10343] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.836305][T10343] usb 8-1: config 0 descriptor??
[  824.849244][T10343] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  826.775710][ T5709] usbhid 5-1:0.0: can't add hid device: -71
[  826.782091][ T5709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  826.811118][ T5709] usb 5-1: USB disconnect, device number 61
[  827.668425][   T30] audit: type=1400 audit(1786226671.799:1077): avc:  denied  { ioctl } for  pid=13542 comm="syz.2.2002" path="/448/config/usb_gadget/g1/idVendor" dev="configfs" ino=42654 ioctlcmd=0x7511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  827.715506][   T30] audit: type=1400 audit(1786226671.829:1078): avc:  denied  { write } for  pid=13542 comm="syz.2.2002" name="functions" dev="configfs" ino=9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  827.740909][   T30] audit: type=1400 audit(1786226671.849:1079): avc:  denied  { write } for  pid=13542 comm="syz.2.2002" name="c.1" dev="configfs" ino=9406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  827.765400][   T30] audit: type=1400 audit(1786226671.849:1080): avc:  denied  { create } for  pid=13542 comm="syz.2.2002" name="printer.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  827.869984][   T30] audit: type=1400 audit(1786226671.849:1081): avc:  denied  { write } for  pid=13542 comm="syz.2.2002" name="c.1" dev="configfs" ino=9406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  828.019651][ T5709] hid-generic 0000:0002:0000.0003: unknown main item tag 0x0
[  828.031145][   T30] audit: type=1400 audit(1786226672.139:1082): avc:  denied  { read write } for  pid=13559 comm="syz.4.2006" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  828.072052][ T5709] hid-generic 0000:0002:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  828.098750][  T982] usb 8-1: USB disconnect, device number 5
[  828.104661][   T30] audit: type=1400 audit(1786226672.139:1083): avc:  denied  { open } for  pid=13559 comm="syz.4.2006" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  828.201385][  T982] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  829.220044][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2007'.
[  829.368118][ T5709] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  829.601989][ T5709] usb 5-1: Using ep0 maxpacket: 8
[  829.619852][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  829.648797][ T5709] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  829.671366][ T5709] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  829.702503][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.724936][ T5709] usb 5-1: Product: syz
[  829.741625][ T5709] usb 5-1: Manufacturer: syz
[  829.756420][ T5709] usb 5-1: SerialNumber: syz
[  829.822264][T13572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  829.983696][   T30] audit: type=1400 audit(1786226674.119:1084): avc:  denied  { ioctl } for  pid=13559 comm="syz.4.2006" path="/dev/uhid" dev="devtmpfs" ino=1270 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  830.027180][ T5709] usb 5-1: unit 4 not found!
[  830.710693][ T5709] usb 5-1: USB disconnect, device number 62
[  831.336872][   T30] audit: type=1400 audit(1786226675.469:1085): avc:  denied  { accept } for  pid=13583 comm="syz.2.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  831.442770][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  831.451744][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  833.215807][T13596] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  834.453001][   T30] audit: type=1400 audit(1786226678.589:1086): avc:  denied  { audit_write } for  pid=13613 comm="syz.4.2022" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  834.698069][ T5781] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  834.958069][ T5781] usb 3-1: Using ep0 maxpacket: 8
[  835.470861][ T5781] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  835.504870][ T5781] usb 3-1: config 0 has no interface number 0
[  835.521339][ T5781] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  835.547121][ T5781] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  835.559387][ T5781] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  835.573321][ T5781] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  835.673968][ T5781] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  835.702721][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.719920][ T5781] usb 3-1: config 0 descriptor??
[  835.740157][ T5781] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  835.861562][T10343] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  836.373705][ T5781] usb 3-1: USB disconnect, device number 53
[  836.387509][ T5781] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  836.408006][T10343] usb 8-1: Using ep0 maxpacket: 8
[  836.414995][T10343] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  836.423601][T10343] usb 8-1: config 0 has no interface number 0
[  836.430636][T10343] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  836.447077][T10343] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  836.471802][T10343] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  837.103621][T10343] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  837.114234][T10343] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  837.129573][T10343] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  837.139519][T10343] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.154192][T10343] usb 8-1: config 0 descriptor??
[  837.169458][T10343] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  838.157162][T13653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2031'.
[  838.237008][ T5781] usb 8-1: USB disconnect, device number 6
[  838.309516][ T5781] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  838.458274][ T5695] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  838.612577][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.643743][ T5695] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  838.664798][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.681106][ T5695] usb 3-1: config 0 descriptor??
[  838.694615][ T5695] pwc: Askey VC010 type 2 USB webcam detected.
[  838.726239][T13668] loop9: detected capacity change from 0 to 2640
[  838.775080][T13668] buffer_io_error: 328 callbacks suppressed
[  838.775097][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.802057][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.820757][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.838099][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.856278][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.886251][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.915191][T13668] Buffer I/O error on dev loop9, logical block 0, async page read
[  838.935200][T13669] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  838.935229][T13668] Buffer I/O error on dev loop9, logical block 1, async page read
[  838.994111][T13668] Dev loop9: unable to read RDB block 8
[  839.011839][T13668] Buffer I/O error on dev loop9, logical block 3, async page read
[  839.038104][T13668]  loop9: unable to read partition table
[  839.071495][T13668] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  839.122474][T13650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.135752][T13675] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2036'.
[  839.145483][T13650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.204651][ T5695] pwc: recv_control_msg error -32 req 02 val 2b00
[  839.222238][ T5695] pwc: recv_control_msg error -71 req 02 val 2700
[  839.239725][ T5695] pwc: recv_control_msg error -71 req 02 val 2c00
[  839.241044][ T4963] ldm_validate_partition_table(): Disk read failed.
[  839.255932][ T5695] pwc: recv_control_msg error -71 req 04 val 1000
[  839.260159][ T4963] Dev loop9: unable to read RDB block 0
[  839.268326][ T4963]  loop9: unable to read partition table
[  839.276647][ T5695] pwc: recv_control_msg error -71 req 04 val 1300
[  839.296497][ T5695] pwc: recv_control_msg error -71 req 04 val 1400
[  839.323806][ T5695] pwc: recv_control_msg error -71 req 02 val 2000
[  839.356723][ T5695] pwc: recv_control_msg error -71 req 02 val 2100
[  839.387335][ T5695] pwc: recv_control_msg error -71 req 04 val 1500
[  839.622218][ T4963] ldm_validate_partition_table(): Disk read failed.
[  839.719500][ T5695] pwc: recv_control_msg error -71 req 02 val 2500
[  839.720798][ T4963] Dev loop9: unable to read RDB block 0
[  839.733463][ T4963]  loop9: unable to read partition table
[  839.822344][ T5695] pwc: recv_control_msg error -71 req 02 val 2400
[  839.843611][ T5695] pwc: recv_control_msg error -71 req 02 val 2600
[  839.886431][ T5695] pwc: recv_control_msg error -71 req 02 val 2900
[  839.910837][ T5695] pwc: recv_control_msg error -71 req 02 val 2800
[  841.156776][ T5695] pwc: recv_control_msg error -71 req 04 val 1100
[  841.164992][ T5695] pwc: recv_control_msg error -71 req 04 val 1200
[  841.185338][ T5695] pwc: Registered as video103.
[  841.424571][ T5695] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32
[  841.486018][ T5695] usb 3-1: USB disconnect, device number 54
[  841.628522][ T5781] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  842.690922][T13714] FAULT_INJECTION: forcing a failure.
[  842.690922][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.747232][T13714] CPU: 1 UID: 0 PID: 13714 Comm: syz.4.2047 Not tainted syzkaller #0 PREEMPT(full) 
[  842.747250][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  842.747257][T13714] Call Trace:
[  842.747262][T13714]  <TASK>
[  842.747267][T13714]  dump_stack_lvl+0x100/0x190
[  842.747285][T13714]  should_fail_ex.cold+0x5/0xa
[  842.747300][T13714]  _copy_from_user+0x2e/0xd0
[  842.747325][T13714]  core_sys_select+0x2d0/0xbb0
[  842.747350][T13714]  ? __pfx_core_sys_select+0x10/0x10
[  842.747367][T13714]  ? find_held_lock+0x2b/0x80
[  842.747384][T13714]  ? get_pid_task+0xfc/0x250
[  842.747425][T13714]  ? __pfx_set_user_sigmask+0x10/0x10
[  842.747451][T13714]  ? __pfx_vfs_write+0x10/0x10
[  842.747469][T13714]  ? do_sys_openat2+0x159/0x1e0
[  842.747496][T13714]  do_pselect.constprop.0+0x238/0x270
[  842.747518][T13714]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  842.747542][T13714]  ? ksys_write+0x1ac/0x250
[  842.747562][T13714]  __x64_sys_pselect6+0x149/0x1c0
[  842.747585][T13714]  do_syscall_64+0x115/0x870
[  842.747609][T13714]  ? clear_bhb_loop+0x70/0xc0
[  842.747631][T13714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.747650][T13714] RIP: 0033:0x7fa74b99e0d9
[  842.747665][T13714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.747682][T13714] RSP: 002b:00007fa74c85d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  842.747703][T13714] RAX: ffffffffffffffda RBX: 00007fa74bc25fa0 RCX: 00007fa74b99e0d9
[  842.747715][T13714] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040
[  842.747726][T13714] RBP: 00007fa74c85d090 R08: 0000000000000000 R09: 0000000000000000
[  842.747737][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  842.747747][T13714] R13: 00007fa74bc26038 R14: 00007fa74bc25fa0 R15: 00007ffe5019a6c8
[  842.747771][T13714]  </TASK>
[  843.188899][T13723] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2049'.
[  843.322125][T13723] CIFS: Attempting to mount //127.0.0.1/share
[  843.482506][T13723] CIFS: VFS: Error connecting to socket. Aborting operation.
[  843.533708][T13723] CIFS: VFS: cifs_mount failed w/return code = -111
[  843.560035][ T5709] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  843.748678][ T5709] usb 3-1: Using ep0 maxpacket: 8
[  843.773534][ T5709] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  843.806882][ T5709] usb 3-1: config 0 has no interface number 0
[  843.883980][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  844.203602][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  844.255801][ T5709] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 18, changing to 8
[  844.302271][ T5709] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 49784, setting to 1024
[  844.338258][ T5709] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  844.371809][ T5709] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  844.824272][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2055'.
[  845.275939][   T30] audit: type=1400 audit(1786226688.509:1087): avc:  denied  { watch_with_perm } for  pid=13741 comm="syz.0.2056" path="/418/bus" dev="tmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  845.439390][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.450044][ T5709] usb 3-1: config 0 descriptor??
[  845.455266][   T30] audit: type=1400 audit(1786226688.509:1088): avc:  denied  { name_connect } for  pid=13741 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  845.497338][T13753] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2058'.
[  845.518492][ T5709] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  845.629260][T13754] 9p: Bad value for 'wfdno'
[  846.473572][T13756] CIFS: Attempting to mount //127.0.0.1/share
[  846.521087][T13756] CIFS: VFS: Error connecting to socket. Aborting operation.
[  846.559895][T13756] CIFS: VFS: cifs_mount failed w/return code = -111
[  846.722594][T13761] ==================================================================
[  846.730688][T13761] BUG: KASAN: slab-use-after-free in xsk_bind+0x1582/0x16c0
[  846.737983][T13761] Read of size 4 at addr ffff8880355f018c by task syz.0.2060/13761
[  846.745907][T13761] 
[  846.748233][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) 
[  846.748259][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  846.748271][T13761] Call Trace:
[  846.748278][T13761]  <TASK>
[  846.748286][T13761]  dump_stack_lvl+0x100/0x190
[  846.748313][T13761]  print_report+0x13d/0x4b0
[  846.748342][T13761]  ? __virt_addr_valid+0x239/0x430
[  846.748369][T13761]  ? xsk_bind+0x1582/0x16c0
[  846.748387][T13761]  kasan_report+0xdf/0x1c0
[  846.748414][T13761]  ? xsk_bind+0x1582/0x16c0
[  846.748435][T13761]  xsk_bind+0x1582/0x16c0
[  846.748455][T13761]  ? __pfx_xsk_bind+0x10/0x10
[  846.748476][T13761]  __sys_bind+0x1a9/0x260
[  846.748496][T13761]  ? __pfx___sys_bind+0x10/0x10
[  846.748523][T13761]  __x64_sys_bind+0x72/0xb0
[  846.748541][T13761]  ? lockdep_hardirqs_on+0x78/0x100
[  846.748566][T13761]  do_syscall_64+0x115/0x870
[  846.748591][T13761]  ? clear_bhb_loop+0x70/0xc0
[  846.748614][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.748634][T13761] RIP: 0033:0x7f187419e0d9
[  846.748651][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.748670][T13761] RSP: 002b:00007f1875132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  846.748689][T13761] RAX: ffffffffffffffda RBX: 00007f1874425fa0 RCX: 00007f187419e0d9
[  846.748703][T13761] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000004
[  846.748715][T13761] RBP: 00007f1874235024 R08: 0000000000000000 R09: 0000000000000000
[  846.748727][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  846.748738][T13761] R13: 00007f1874426038 R14: 00007f1874425fa0 R15: 00007ffc41ac1ed8
[  846.748757][T13761]  </TASK>
[  846.748764][T13761] 
[  846.922018][T13761] Allocated by task 5594:
[  846.926326][T13761]  kasan_save_stack+0x30/0x50
[  846.931012][T13761]  kasan_save_track+0x14/0x30
[  846.935681][T13761]  __kasan_kmalloc+0xaa/0xb0
[  846.940254][T13761]  __kvmalloc_node_noprof+0x34f/0x970
[  846.945621][T13761]  xt_alloc_table_info+0x44/0xa0
[  846.950540][T13761]  do_ipt_set_ctl+0x611/0xcf0
[  846.955213][T13761]  nf_setsockopt+0x8d/0xf0
[  846.959611][T13761]  ip_setsockopt+0xcb/0xf0
[  846.964016][T13761]  tcp_setsockopt+0xa7/0x100
[  846.968596][T13761]  do_sock_setsockopt+0xf3/0x1d0
[  846.973529][T13761]  __sys_setsockopt+0x195/0x220
[  846.978373][T13761]  __x64_sys_setsockopt+0xbd/0x160
[  846.983480][T13761]  do_syscall_64+0x115/0x870
[  846.988054][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.993926][T13761] 
[  846.996227][T13761] Freed by task 5594:
[  847.000183][T13761]  kasan_save_stack+0x30/0x50
[  847.004843][T13761]  kasan_save_track+0x14/0x30
[  847.009504][T13761]  kasan_save_free_info+0x3b/0x70
[  847.014507][T13761]  __kasan_slab_free+0x5f/0x80
[  847.019253][T13761]  kfree+0x22b/0x6c0
[  847.023128][T13761]  __do_replace+0x71f/0x980
[  847.027620][T13761]  do_ipt_set_ctl+0xa53/0xcf0
[  847.032282][T13761]  nf_setsockopt+0x8d/0xf0
[  847.036693][T13761]  ip_setsockopt+0xcb/0xf0
[  847.041094][T13761]  tcp_setsockopt+0xa7/0x100
[  847.045662][T13761]  do_sock_setsockopt+0xf3/0x1d0
[  847.050583][T13761]  __sys_setsockopt+0x195/0x220
[  847.055415][T13761]  __x64_sys_setsockopt+0xbd/0x160
[  847.060509][T13761]  do_syscall_64+0x115/0x870
[  847.065082][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.070971][T13761] 
[  847.073273][T13761] The buggy address belongs to the object at ffff8880355f0000
[  847.073273][T13761]  which belongs to the cache kmalloc-cg-1k of size 1024
[  847.087663][T13761] The buggy address is located 396 bytes inside of
[  847.087663][T13761]  freed 1024-byte region [ffff8880355f0000, ffff8880355f0400)
[  847.101528][T13761] 
[  847.103846][T13761] The buggy address belongs to the physical page:
[  847.110231][T13761] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x355f0
[  847.118983][T13761] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  847.127455][T13761] memcg:ffff88803673e301
[  847.131685][T13761] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  847.139208][T13761] page_type: f5(slab)
[  847.143168][T13761] raw: 00fff00000000040 ffff88813fe2b280 dead000000000100 dead000000000122
[  847.151743][T13761] raw: 0000000000000000 0000000800100010 00000000f5000000 ffff88803673e301
[  847.160306][T13761] head: 00fff00000000040 ffff88813fe2b280 dead000000000100 dead000000000122
[  847.168955][T13761] head: 0000000000000000 0000000800100010 00000000f5000000 ffff88803673e301
[  847.177605][T13761] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  847.186256][T13761] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  847.194912][T13761] page dumped because: kasan: bad access detected
[  847.201300][T13761] page_owner tracks the page as allocated
[  847.206990][T13761] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5597, tgid 5597 (syz-executor), ts 65135389381, free_ts 48398114698
[  847.228330][T13761]  post_alloc_hook+0xfd/0x120
[  847.232990][T13761]  get_page_from_freelist+0xf48/0x3530
[  847.238426][T13761]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  847.244299][T13761]  new_slab+0xa2/0x640
[  847.248347][T13761]  refill_objects+0xe3/0x410
[  847.252915][T13761]  __pcs_replace_empty_main+0x376/0x680
[  847.258438][T13761]  __kmalloc_noprof+0x66d/0x820
[  847.263270][T13761]  __register_sysctl_table+0xac/0x1650
[  847.268713][T13761]  neigh_sysctl_register+0x326/0x660
[  847.273983][T13761]  addrconf_sysctl_register+0xb9/0x200
[  847.279421][T13761]  ipv6_add_dev+0xaf2/0x1520
[  847.283993][T13761]  addrconf_notify+0x5db/0x1ba0
[  847.288827][T13761]  notifier_call_chain+0x99/0x3f0
[  847.293831][T13761]  call_netdevice_notifiers_info+0xbe/0x110
[  847.299709][T13761]  register_netdevice+0x1998/0x25a0
[  847.304890][T13761]  nsim_create+0xc93/0x1420
[  847.309376][T13761] page last free pid 5425 tgid 5425 stack trace:
[  847.315677][T13761]  __free_frozen_pages+0x79f/0x1090
[  847.320862][T13761]  qlist_free_all+0x47/0xf0
[  847.325361][T13761]  kasan_quarantine_reduce+0x1a0/0x1f0
[  847.330813][T13761]  __kasan_slab_alloc+0x69/0x90
[  847.335646][T13761]  __kmalloc_cache_noprof+0x265/0x6c0
[  847.340995][T13761]  bpf_int_jit_compile+0x126f/0x1790
[  847.346256][T13761]  __bpf_prog_select_runtime+0x8ac/0xc50
[  847.351880][T13761]  bpf_prepare_filter+0xd3f/0x11e0
[  847.356980][T13761]  bpf_prog_create_from_user+0x1e8/0x2f0
[  847.362598][T13761]  do_seccomp+0x870/0x27d0
[  847.367001][T13761]  prctl_set_seccomp+0x4b/0x70
[  847.371751][T13761]  __do_sys_prctl+0xe7b/0x2270
[  847.376496][T13761]  do_syscall_64+0x115/0x870
[  847.381070][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.386942][T13761] 
[  847.389245][T13761] Memory state around the buggy address:
[  847.394854][T13761]  ffff8880355f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  847.402897][T13761]  ffff8880355f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  847.410938][T13761] >ffff8880355f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  847.418977][T13761]                       ^
[  847.423283][T13761]  ffff8880355f0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  847.431320][T13761]  ffff8880355f0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  847.439356][T13761] ==================================================================
[  847.460781][ T5709] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  847.492002][T13761] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  847.499236][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) 
[  847.508610][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  847.518668][T13761] Call Trace:
[  847.521944][T13761]  <TASK>
[  847.524869][T13761]  dump_stack_lvl+0x100/0x190
[  847.529556][T13761]  vpanic+0x552/0x970
[  847.533531][T13761]  ? __pfx_vpanic+0x10/0x10
[  847.538036][T13761]  ? xsk_bind+0x1582/0x16c0
[  847.542531][T13761]  panic+0xd1/0xe0
[  847.546248][T13761]  ? __pfx_panic+0x10/0x10
[  847.550657][T13761]  ? xsk_bind+0x1582/0x16c0
[  847.555154][T13761]  ? preempt_schedule_common+0x42/0xc0
[  847.560622][T13761]  check_panic_on_warn.cold+0x19/0x34
[  847.565999][T13761]  end_report.part.0+0x3a/0x90
[  847.570781][T13761]  kasan_report.cold+0xe/0x18
[  847.575467][T13761]  ? xsk_bind+0x1582/0x16c0
[  847.579957][T13761]  xsk_bind+0x1582/0x16c0
[  847.584284][T13761]  ? __pfx_xsk_bind+0x10/0x10
[  847.588950][T13761]  __sys_bind+0x1a9/0x260
[  847.593264][T13761]  ? __pfx___sys_bind+0x10/0x10
[  847.598103][T13761]  __x64_sys_bind+0x72/0xb0
[  847.602593][T13761]  ? lockdep_hardirqs_on+0x78/0x100
[  847.607774][T13761]  do_syscall_64+0x115/0x870
[  847.612350][T13761]  ? clear_bhb_loop+0x70/0xc0
[  847.617011][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.622887][T13761] RIP: 0033:0x7f187419e0d9
[  847.627306][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  847.646899][T13761] RSP: 002b:00007f1875132028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  847.655294][T13761] RAX: ffffffffffffffda RBX: 00007f1874425fa0 RCX: 00007f187419e0d9
[  847.663246][T13761] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000004
[  847.671211][T13761] RBP: 00007f1874235024 R08: 0000000000000000 R09: 0000000000000000
[  847.679163][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.687115][T13761] R13: 00007f1874426038 R14: 00007f1874425fa0 R15: 00007ffc41ac1ed8
[  847.695073][T13761]  </TASK>
[  847.698283][T13761] Kernel Offset: disabled
[  847.702591][T13761] Rebooting in 86400 seconds..