last executing test programs:

13m50.064217693s ago: executing program 3 (id=1317):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
close(0x3)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)

13m49.803297798s ago: executing program 1 (id=1318):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0xfffffffffffffffd, 0x2000000000003, 0x3, 0xfffffff9, 0xa741, 0x405f, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/133)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x80)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180))
read$FUSE(r2, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000002300)="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", 0x2000, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

13m47.079907202s ago: executing program 1 (id=1326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000280)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x3, 0xb, 0x8, 0x6, 0x10}, @jmp={0x5, 0x1, 0x7, 0x5, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x49, &(0x7f00000003c0)=""/73, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0xfffffff4, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x5, 0x5}], 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@fallback=r1, 0x5, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="ed9100003c200800dd18bf", @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9619000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r8)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f2b9ae702650f01c866dfdb440f20c066350f000000440f22c026f20f5ebe19003e0f23a50f795b0e0f013e09000f01c53626663e660ff7cf", 0x3a}], 0x1, 0x19, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0xc, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0xfa, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x1000, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

13m46.870489356s ago: executing program 4 (id=1328):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r2)
setreuid(r2, r2)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbed3713953cc3eacbdacf9989ce49bb86dd6001044800203afffe80000000000000000000000000000000000000aa8800907800000000fe80000000001e000610"], 0x0)
r3 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r3, 0xee01, 0x0)
keyctl$setperm(0x5, r3, 0x15110231)
socket$key(0xf, 0x3, 0x2)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000380))

13m46.857267579s ago: executing program 0 (id=1329):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

13m46.022114549s ago: executing program 1 (id=1330):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x2000000000003, 0x3, 0xfffffffc, 0xa741, 0x405f, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/133)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180))
read$FUSE(r2, 0x0, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba701f71864ced67f1ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='sour[e', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0)
fchmodat(r6, 0x0, 0x82)
pselect6(0x40, &(0x7f0000006040)={0xe, 0x1, 0x4009, 0x5e, 0x7ff, 0x20000000005, 0x80000000, 0x7}, 0x0, 0x0, 0x0, 0x0)

13m45.385192937s ago: executing program 2 (id=1332):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x804)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
ioctl(r0, 0x8b2a, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r7 = socket(0x8000000010, 0x2, 0x0)
write(r7, &(0x7f00000002c0)="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", 0xfc)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
syz_80211_join_ibss(&(0x7f0000000340)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0xfb983c916afa8f36, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

13m45.323867577s ago: executing program 3 (id=1333):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
inotify_init1(0x800)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

13m45.002673369s ago: executing program 0 (id=1334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

13m44.981885785s ago: executing program 4 (id=1335):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1])

13m44.53210744s ago: executing program 0 (id=1336):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x148, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "7d51aef86ed0e240406414db0d52fc65d0a33133a1641678baea0a87f2148d334bfc188db1a14e68d0fdaf649a89f8d47c529325b630839666542fc5080392b1a3fd4e1e0f94eba8ac930003cf06646dc6b8dd5aae88d69a0bf8ea2027deb5ccab9cbf9ce71a4e8ece29def3f6a1b6ce80bcf22b5419975dcab4c146565377502e5f92acb9ca2519324a9f261e7d77f43a4b221165863b96280e5afa99bf9e88e982c9d6f1c60745d38988b7e9d078ec0ac07ddf74ef1e468c51cd611df3decc2385548a700b355ec014c6df618f64bcff61bd38fb34802d4e2b8616494c8f6607fe64c47bbe34ed0b5b6c77c6"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300))

13m44.444233889s ago: executing program 2 (id=1337):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000305000000000000000000000000000168515a8bb14a8f216b8180bec6dcd47bce4dc54d1779b2bc6df76a34591f84afa9ff69ed6f5f2d30f8f8d24beacd8198ceb7def99fb841fae413d07cd007129d9082eb043d462027e1699b61634743e55155d5bef5117c707319d9f4f24d2e998ccd06e73c41ac"], 0x14}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
r8 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x22900)
ioctl$VIDIOC_S_STD(r8, 0x80085665, &(0x7f0000000340)=0x200000)
r9 = syz_clone(0xa1008080, &(0x7f0000000240)="5064c239ad3a8f30de1ed667f61fcc0c86ad96a8c6cbdfa3c4b90324aaa3e508e474cd6d25950c9a8d3e5270f85328f55f5ffe77d0ba79ba5234d13b3906d52e2ee4d3859955c40b96169510242d7b234ee78e0247b1966d03acc3b508e46ba2c115a2936d77515fde0f82108e63de4729b1feab53826c110bc578ebfe39a172a762c7112726bf6796339c9f56cd16c1077f1954c53d8a861ae836151d70442f593493b6896c6633", 0xa8, &(0x7f0000000040), &(0x7f0000000380), &(0x7f00000003c0)="6c2f150a901659b7f6b980e69bad99b4")
prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x0, &(0x7f0000000400))
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@loopback, @empty, <r11=>0x0}, &(0x7f00000005c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r10, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}}, 0x4000000)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r13=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r13}, 0x20)

13m44.322882605s ago: executing program 4 (id=1338):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x800, 0xfffffff7)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x53b, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001e0001032abd8ef4fcb7d566532a0100000000000000000000000000000004d602002b000a010101000000001000000000000000000000000035000024000900"], 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000b2cd5b9f2141169b40000000000055b423afb6081c67bb6560ba8c6bda3e54f0afef129725f2a60420aacd6c69bfa8c6bdf4c99a7bd2dce97c64729f0079e8a8cd492d311ec70e692f30153b2570b2614fb4e7bec22b4603c7dd0a6d556e849c1716908181022aa547a1b594c4eefc54c0dd7b1af5e48d7bde631c3d5057770af44c05b8d72b09", @ANYRESDEC, @ANYBLOB="f9a600"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.stat\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b32, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
read$sequencer(r5, &(0x7f0000000300)=""/55, 0x37)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000ac7bff4c43aa939143c90d75329b1500080000054d564b"])
close_range(r2, 0xffffffffffffffff, 0x0)

13m43.85820935s ago: executing program 2 (id=1339):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
setresuid(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
r3 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r3, 0xee01, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000380))

13m43.747754235s ago: executing program 3 (id=1340):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
lseek(r6, 0x10000000005, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

13m43.084645125s ago: executing program 4 (id=1341):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
inotify_init1(0x800)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, 0x0})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

13m42.720148522s ago: executing program 3 (id=1342):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
inotify_init1(0x800)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}], 0x20}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

13m42.258658549s ago: executing program 2 (id=1343):
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
close(0x3)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000891)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socket$nl_netfilter(0x10, 0x3, 0xc)

13m42.19976046s ago: executing program 1 (id=1344):
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 32)
r3 = getpgrp(0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x4, 0xd, {0xffffffffffffffff}, {<r4=>0x0}, 0x5, 0x80000000}) (async)
getresgid(&(0x7f0000000140), &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000480))
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
sendmmsg$unix(r2, &(0x7f0000005180)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)="4005777c31780caeb08ade80ecd075d13ee62061d642e7350aa0865a6365b786c8dae4bf985c319613cdf7d11989013c29d7f262c2889029429452f9f0e23f3efd04e4bef034731279f93c78557ed8586aeb5fffed5964f02cf18a38c36930c1b1135749721459b15bc5a65d9791ba37c2a2a674fb7281a1dde040b0903846de92f02c62d91952fb64c5a0939889deaecdc3919b38d61c0d5cf69932ca0dd62930146800"/175, 0xaf}, {&(0x7f0000000680)="cf4586f8ec604467a047b6c3126606bfea228f930727f7bfc0f8673e0475bd9362854bb61dde656b0f8242cb332d98003372b9343a7674d11ddd71ce32e3969e0982d63045217feabdcf1558628d633fe4180fbafecf6be50e7e9eb5e309ede73dcdf336e25977bfbcebc7f54898a3ad26b4ffc2c37dc57304078a6e4cee302895178bced76fafc657f8d1e28a693c996cec43b9ec8a7729e690d4c25de0d456c0", 0xa1}, {&(0x7f0000000740)="77342bbf089144911a648fbee3aa5e798b6f91de9974f381067d197074f7bae95a191a1f2175a1a686daf88ada2125891bbd0a57c5ab8136c82d82bdc4eef4ae0a81edae74f880dbca6ca205f268dffd4ea10f786942072b34381dd9f98ba6031800ed4efbe444271ce9e24e330f7d9d72b6527ef6a634628721951787ad65b0fe357be80fa8912cfea1dc", 0x8b}, {&(0x7f0000000800)="f55aacc77658d3b528d2cd2072f03a169a4cadca448a9cd45ac359dbcb96607245fcf4325dd138bf95c80d61c6d749fe22a953b19aa7a93f9103cb9442033162b0f1e4ef099b4e2e4a0e71de5505310cfe04f6a6dbcc389040f98b9a7424f8a8ab7baade7d49fecf355d848225c0d431004f84945c5ef6f0f44d719ee64cd3f2c49c3a28bf0940f562b963594aaf1fbaed45ae960f1739fddaab07ce57fe300c54d8806ee611f13affa2e3afb2eaed9ca9b6b25e525c50b58dc075c631667cb52367c0847b2926ca76593434570105e0c243ed7b939ab02cab38ede58e841ad0dd5fb54e05ae03edf89c718ffe3bff", 0xef}, {&(0x7f0000000000)="fb0a470cb5b848dbd7839317b9658ea6618e6ec2c7a198be8fd7bb2e8ad0b595ed4551", 0x23}], 0x5, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000007b00140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40004}}, {{0x0, 0x0, &(0x7f0000004ec0), 0x0, &(0x7f0000005100)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x78, 0x4040890}}], 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 64)
mknod$loop(0x0, 0x2, 0x0) (rerun: 64)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) (async, rerun: 64)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) (rerun: 64)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYRES16=r5, @ANYRESOCT=r0, @ANYBLOB="0198000000000000200012800800010006997db7cca43425b8fa00000000000000090001008991e8ddffba9b9ed66b428cc20ca8f5a2cfb1be5dfce450969c32113073b7ebcd145a378a76ff"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64)
sendto$inet(r7, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) (rerun: 64)

13m42.008140864s ago: executing program 0 (id=1345):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r2)
setreuid(r2, r2)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbed3713953cc3eacbdacf9989ce49bb86dd6001044800203afffe80000000000000000000000000000000000000aa8800907800000000fe80000000001e000610"], 0x0)
r3 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r3, 0xee01, 0x0)
keyctl$setperm(0x5, r3, 0x15110231)
socket$key(0xf, 0x3, 0x2)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000380))

13m41.93544137s ago: executing program 1 (id=1346):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

13m41.892735539s ago: executing program 2 (id=1347):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400400008000000010000008000000034744de8958bfef6b7338fc6f3eabae14384cae4d5b3ad1b43bdd61ed14788b08bb3514c10c4f6fa033fdc6d333b81a473d4e4b7215139ace7ec79a0d5c127147fd14a72f5173150cd36d619313f3b4721e94790c10d0fb9dace24d1b6d994f4a7af644cbcd09531ec72aaccdd8d58bdf37a92510d745a9cd6854f0ded0c05d6591b5723427e318ff0a18405c5fdc7ab22ff0df878cd03df04f3c90bacc0f63b2dac2af87c28c518411fddcabc66dc07", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b30000001801000020756c2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname(r1, 0x0, &(0x7f0000000240))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x4004004)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x2046)

13m41.063333999s ago: executing program 1 (id=1348):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x148, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "7d51aef86ed0e240406414db0d52fc65d0a33133a1641678baea0a87f2148d334bfc188db1a14e68d0fdaf649a89f8d47c529325b630839666542fc5080392b1a3fd4e1e0f94eba8ac930003cf06646dc6b8dd5aae88d69a0bf8ea2027deb5ccab9cbf9ce71a4e8ece29def3f6a1b6ce80bcf22b5419975dcab4c146565377502e5f92acb9ca2519324a9f261e7d77f43a4b221165863b96280e5afa99bf9e88e982c9d6f1c60745d38988b7e9d078ec0ac07ddf74ef1e468c51cd611df3decc2385548a700b355ec014c6df618f64bcff61bd38fb34802d4e2b8616494c8f6607fe64c47bbe34ed0b5b6c77c6"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300))

13m40.770606065s ago: executing program 3 (id=1349):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
inotify_init1(0x800)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

13m40.765105585s ago: executing program 4 (id=1350):
r0 = syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000000)=ANY=[], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x1500)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0xfffffffffffffffe, 0xfffffffffffff800, 0x8, 0x4, 0x80000001, 0x1})

13m40.003860977s ago: executing program 0 (id=1351):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_io_uring_setup(0x363c, &(0x7f0000001380)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000007c0)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000140)=@un=@abs={0x3, 0x0, 0x8}, 0x0, 0x0, 0x0, {0x0, r7}})
io_uring_enter(r4, 0x4d10, 0x5b24, 0x2, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1000, 0x4, 0x8, 0x100, 0xd, 0x81110008})
connect$unix(r2, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
close(r10)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r11, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r14], 0x20}}, 0x0)
write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc)
splice(r8, 0x0, r10, 0x0, 0x714f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timerfd_create(0x0, 0x0)

13m39.932676954s ago: executing program 2 (id=1352):
syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51", 0xf1}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a", 0x46}], 0x3, &(0x7f0000000400)}, 0x4000042)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x7fffffffffffffff, 0xf, 0x7})
r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x2c020400)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
io_uring_enter(r7, 0x7277, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

13m39.411029112s ago: executing program 4 (id=1353):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r3)
setreuid(r3, r3)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r4, 0xee01, 0x0)
keyctl$setperm(0x5, r4, 0x15110231)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000380))

13m39.305208946s ago: executing program 3 (id=1354):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/usb/hiddev#\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x881)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000002940)={0x84, &(0x7f00000004c0)={0x40, 0x15, 0x2d, "424e2e7b72b92070e0a2240ad3cf2f4f94de79f7fabd701fb59dd65af53ce2e13b4a7335482f1c66c3a0e3feac"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7f}, 0x0, &(0x7f0000002600)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x40, 0xb, 0x2, "162a"}, &(0x7f0000002740)={0x40, 0xf, 0x2, 0x8f}, &(0x7f0000002780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, &(0x7f0000002800)={0x40, 0x19, 0x2, '$q'}, &(0x7f0000002840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000002880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000028c0)={0x40, 0x1e, 0x1}, 0x0})
ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000ac0)={{0x3, 0xffffffff, 0x6f, 0x0, 0x8000, 0x1}, 0x326, [0x5, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x81, 0x3, 0xf, 0xc, 0x9, 0x1ff, 0xf, 0x3, 0xffffffff, 0xe9, 0x8, 0x3ade1a47, 0xb38c, 0x3, 0x81, 0x0, 0x8001, 0x5, 0x6ab0, 0x4, 0x3e74, 0x415, 0x7f, 0xffff, 0x4, 0x1, 0x2, 0x0, 0x5, 0x8, 0xfffffffe, 0xfffffffe, 0x6, 0x840, 0x2, 0x5, 0x2e43, 0xffffffff, 0x8, 0x9, 0x6, 0x3, 0x7fff, 0x5, 0x81, 0x9, 0x9, 0x8, 0x5, 0xc82, 0x92d, 0x7ff, 0x9, 0x82f, 0x5, 0x2, 0x5, 0x2b, 0x4, 0x6, 0x4, 0xec, 0x9242, 0xfffffffb, 0x9, 0x8000, 0x3, 0x4, 0x4, 0x5, 0xfff, 0xb, 0x2, 0x401, 0x9, 0x6, 0x0, 0x6, 0x8001, 0x7, 0x3, 0x6, 0x34cb, 0x80000001, 0x1, 0x3, 0x6, 0x2, 0xa, 0x3, 0x104, 0x60000, 0x0, 0x400c, 0x5, 0x3, 0x4, 0x5d6, 0x334, 0x1dcd, 0x2370, 0x7f, 0xf0, 0x3, 0x3, 0x1, 0x7fffffff, 0x7ff, 0x3, 0x1, 0x8, 0x81, 0x9, 0x1, 0x1, 0x401, 0x2, 0x7, 0x0, 0x80000000, 0x9, 0x4, 0x3, 0x1ff, 0x1, 0xb, 0x34f, 0xfffffffd, 0x6, 0x1000, 0x95, 0x6, 0xec, 0xc100000, 0x1, 0x6, 0xffffffff, 0x169e, 0xea68, 0xa5f, 0x80000001, 0x9, 0x8, 0x40, 0xcdd, 0x101, 0xb, 0x10, 0x0, 0x4, 0x8, 0x6, 0x1, 0x2, 0x3, 0xd7, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x7, 0x7fffffff, 0x4, 0x1, 0x3ff, 0xf, 0x840, 0x5, 0x4, 0x7, 0x9, 0x4, 0x81, 0xd379, 0xe00, 0x3, 0xf591, 0x0, 0x7f, 0xffffffff, 0x7ffffffd, 0xdf, 0x0, 0xffff, 0x6, 0xffffffff, 0x1ce5, 0x5, 0xfffffff1, 0xfffffff9, 0x2, 0x10000, 0x9, 0x100, 0x35, 0x4, 0xff000000, 0x101, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x6, 0x1, 0x5, 0xe, 0x9, 0x9, 0x66, 0x816, 0x5, 0x5, 0x4, 0x6, 0x15, 0x4, 0x40, 0x2, 0x40, 0x2, 0x6, 0xfffff0e8, 0x3, 0x9f0d, 0x3, 0xffffffff, 0x1, 0x1, 0x3, 0x31e, 0xfa0, 0x5b88, 0x7, 0x6, 0x4, 0x438, 0x6b4, 0x0, 0x2f5, 0x6ed4, 0x0, 0x385b0000, 0x3, 0x4, 0x3, 0x9, 0x0, 0x9, 0x7, 0x8, 0xffffffd1, 0x4, 0x2, 0x7, 0x47b0, 0xc6, 0xb7f, 0x8, 0xdc, 0xb, 0x8001, 0x8, 0x7f, 0xfffffffa, 0xffffffff, 0x6, 0x75e5, 0xf, 0x5, 0x2, 0x1, 0x7, 0x8001, 0x400, 0x81, 0x2, 0xb0, 0x80, 0x501, 0x3, 0x800, 0x8, 0x5, 0x9, 0xffffffff, 0x4e542f21, 0x3, 0x6, 0x0, 0xfffffffb, 0x5, 0x4, 0x5, 0x8, 0x97, 0x0, 0x7, 0x47c, 0x42b, 0x0, 0xcd0, 0x3, 0x8bf, 0x8, 0x8a38, 0x7ff, 0x9, 0x3, 0x0, 0x5, 0x81, 0x326, 0x2, 0xe4f, 0xa, 0x6, 0x9, 0x10000, 0x5, 0x1ff, 0x9, 0x8, 0x2, 0x1, 0xcd, 0xd515, 0x49ed, 0x10, 0x5, 0x3, 0x7f, 0x5, 0x80000000, 0x80000000, 0x3, 0x9, 0x3, 0x39, 0xfbf, 0x1000, 0x95c, 0x6, 0x5, 0x5b5, 0xfffffffe, 0x3, 0x4, 0xfffffffa, 0x1, 0x503, 0x1, 0x8, 0xc9, 0x7, 0xffffffff, 0x2, 0x8, 0x4, 0xcc5, 0xfffffff4, 0x6, 0x5, 0x0, 0xe, 0x80000001, 0xffffffff, 0x4, 0x5, 0x1, 0x5, 0x0, 0xd8, 0x8, 0x1, 0x2, 0x80000001, 0x5, 0x0, 0x8, 0x2203c5f4, 0x2a, 0xfffffffc, 0x80000000, 0x4fa1, 0x400, 0x6, 0x81, 0x6, 0x80000000, 0x8, 0x300, 0x0, 0x9, 0x6, 0x5, 0x5, 0x9, 0x8, 0x7, 0x1, 0x6, 0x64, 0x77, 0x7, 0x1ff, 0x8, 0x8, 0x5, 0x2, 0xa0000000, 0x7, 0xfffffff8, 0xba71, 0x7, 0xfffffffc, 0x1, 0x200, 0x5, 0x10001, 0x5, 0x1, 0x9, 0xfffffff1, 0x6, 0x1000, 0x1, 0x100000, 0x5, 0x3, 0xffff, 0xfd, 0xda64, 0x0, 0x4, 0xd, 0xffffffbe, 0x10000, 0x6, 0x5, 0x0, 0x8, 0x2, 0x7f, 0x8, 0x80, 0x0, 0x5, 0xc171, 0x971, 0x1ff, 0x7, 0x3, 0x2, 0x349f, 0x0, 0x0, 0x4, 0x9, 0xe47, 0x3047, 0x1, 0x7, 0x81, 0x7f, 0x3, 0x2, 0x6, 0x5, 0xffff4902, 0x4, 0xc, 0x9, 0x9, 0xfff, 0x28, 0x1, 0x7f, 0x8, 0x3, 0x3a, 0x4, 0xfe4c, 0x8001, 0x4, 0x4, 0x0, 0x5, 0xe37e, 0x6, 0x10000, 0x2, 0x400, 0x6, 0x2, 0x9, 0x3, 0xf, 0x7fffffff, 0xa9, 0x1, 0x5, 0xf28c, 0x3, 0x35abdfd5, 0xc0d8, 0x7eb, 0x7ff, 0x1, 0x4, 0x7, 0x3fff80, 0x10, 0x8, 0x401, 0x4, 0x7, 0x2, 0xd, 0x0, 0x3, 0xa2c5, 0x3, 0x0, 0x2, 0x8000, 0x10000, 0x9, 0x0, 0x1f3, 0x5, 0xb1e, 0x101, 0x200, 0x2, 0x3, 0x1e5, 0x9, 0xe1, 0x3, 0x8, 0x5, 0x8, 0x3, 0x8001, 0x7, 0x401, 0x2, 0x9, 0x1, 0x7f, 0x0, 0x8, 0x9, 0x401, 0x8, 0xfd4, 0x2, 0x2, 0x0, 0x8, 0xfbcd, 0xb, 0x5, 0x10000, 0x40, 0x7, 0x4, 0xe7d, 0x1888dd9e, 0x7, 0xbb30, 0x6, 0x200, 0xe3, 0x3, 0x1c000000, 0x81, 0x6, 0x1, 0xd6, 0x4, 0x9, 0x5, 0x9, 0x1ff, 0x7fffffff, 0x9, 0xf, 0x10001, 0x1, 0x4, 0x6, 0x330f, 0x5, 0x3, 0xa79, 0xf, 0x200000, 0x8, 0x6, 0x4, 0xafa, 0x5, 0xb03, 0x568, 0xffffffff, 0x4, 0x6, 0xbf, 0x4, 0x0, 0x7376, 0x0, 0x9, 0x3, 0x8f0, 0x8, 0x1, 0x2, 0x6, 0x2, 0xb76d, 0x1, 0xfffffff3, 0xfffffff7, 0x3, 0x0, 0x40, 0x9, 0x7f, 0x76, 0x6, 0x0, 0x5, 0x7, 0xa1, 0x0, 0x1, 0x4, 0x8, 0x5, 0x3, 0x4, 0x8000, 0x5, 0x11, 0x1ffc00, 0x21, 0x8, 0x8, 0x4, 0x5, 0x2, 0x5fdb, 0x7, 0x7, 0x7, 0x10000, 0x1, 0x6, 0x5, 0x1, 0x1, 0xfffffff8, 0xe39, 0x5, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0x7, 0x23, 0x3, 0x9, 0x5, 0x4, 0x81, 0xa1, 0xffffffff, 0x7, 0x6747, 0xc87, 0x4, 0x3, 0x7, 0x4, 0xfff, 0x9, 0x0, 0xffff0001, 0x1ff, 0xffff, 0x5, 0x3, 0x4, 0x9, 0xb, 0x852d, 0x1, 0x6, 0x8, 0x4, 0x4, 0x0, 0xfffffffd, 0x2, 0x7, 0x3, 0x9, 0x1, 0x11d0, 0x8, 0x7f, 0x800, 0x80000000, 0x8, 0x0, 0x8, 0x3, 0x3, 0xf, 0x4a58, 0xa3, 0x5000000, 0x6d, 0x5, 0x1, 0x9, 0x2b1, 0x6, 0x80000000, 0x5, 0x0, 0x9, 0x6, 0xffffffff, 0x9, 0x9, 0x7477, 0x7, 0x3e, 0x56ce, 0x3ff, 0x1, 0xe87d, 0x400, 0xf, 0x9, 0x0, 0x37f7, 0x2, 0x3, 0x3, 0x2, 0xf, 0x3, 0x5, 0x800, 0x7, 0x6, 0x8, 0xc, 0x8, 0xfcd37f1f, 0x2, 0x2, 0x6df98ed8, 0x3, 0x1, 0xb, 0x8, 0x8000, 0x10, 0x3, 0x3ff, 0x1, 0x1e87bca3, 0xff, 0x0, 0x7, 0xfb, 0x7, 0x1ed, 0xc, 0x6, 0x75eb, 0x6, 0x0, 0x3, 0x6, 0xa78d, 0xfffffffc, 0xb, 0x6, 0x3, 0xa, 0x6, 0x1c, 0x7, 0x4, 0x5, 0x4, 0x8001, 0x4, 0x800, 0x1, 0x1ff, 0x2, 0x1000, 0x0, 0x7, 0xe, 0x3, 0x1, 0x694, 0x40, 0x400, 0x401, 0x101, 0xd73, 0xc8, 0x400, 0x3ff, 0x5, 0x6, 0xfff, 0xca, 0x4, 0xffffffff, 0x10, 0x1, 0xd09, 0x1, 0x1, 0x0, 0x49e9, 0x6, 0x3d2, 0x8, 0x400, 0x3, 0x3, 0xb, 0xffff, 0xca19, 0x2, 0x5, 0x78, 0x2, 0x7, 0x10000, 0xfffffffe, 0x1000, 0x8, 0x41, 0x8, 0xa358, 0x9, 0x8, 0x800, 0x1, 0x1ff, 0x5, 0x3, 0x100, 0x3, 0xf3, 0x7ff, 0x9, 0xfffffff8, 0x92c, 0xe, 0xc, 0xd, 0x10, 0x0, 0x200, 0xfff, 0xff, 0x0, 0xf8, 0xe2a, 0x68f8, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3d41, 0x3aa, 0x9, 0x3, 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x8, 0x6, 0x0, 0xf, 0x9fda, 0x18000000, 0x1, 0x1, 0x7, 0xc5c3, 0x9, 0xbfc, 0x4c, 0x3ff, 0x8, 0x21, 0x4, 0x101, 0x2, 0xffffff01, 0x8, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x9, 0xc81, 0x800, 0x2, 0x7, 0x4, 0x6, 0xffffffd0, 0xf, 0x9, 0x80, 0xae, 0x2, 0x3, 0x80, 0x3, 0x2, 0x8, 0xb3, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6, 0xa, 0x80, 0x82, 0x7, 0x40, 0xfff, 0x3, 0x63, 0x7, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x3, 0xb00f, 0x9, 0x3, 0x8, 0x4, 0x3, 0xd, 0x80000000, 0x2, 0x1, 0xffff9c86, 0x10, 0xb, 0x6, 0x7, 0x8, 0x7, 0xfffffff8, 0x100, 0x9, 0x80, 0x1, 0x7ff, 0x3a0b, 0x80000001, 0x5, 0x60, 0x10001, 0x0, 0x10001, 0x9, 0x5, 0x1, 0x1ff, 0x3, 0x691, 0x10000, 0x2, 0x1c61ff54, 0x401, 0x3, 0x74c4, 0x5, 0x8, 0x4, 0x1bec8000]})

13m38.767657992s ago: executing program 0 (id=1355):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
close(0x3)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

12m48.291349347s ago: executing program 32 (id=1355):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
close(0x3)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

12m42.049176479s ago: executing program 33 (id=1348):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x148, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "7d51aef86ed0e240406414db0d52fc65d0a33133a1641678baea0a87f2148d334bfc188db1a14e68d0fdaf649a89f8d47c529325b630839666542fc5080392b1a3fd4e1e0f94eba8ac930003cf06646dc6b8dd5aae88d69a0bf8ea2027deb5ccab9cbf9ce71a4e8ece29def3f6a1b6ce80bcf22b5419975dcab4c146565377502e5f92acb9ca2519324a9f261e7d77f43a4b221165863b96280e5afa99bf9e88e982c9d6f1c60745d38988b7e9d078ec0ac07ddf74ef1e468c51cd611df3decc2385548a700b355ec014c6df618f64bcff61bd38fb34802d4e2b8616494c8f6607fe64c47bbe34ed0b5b6c77c6"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300))

12m41.577973767s ago: executing program 34 (id=1352):
syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51", 0xf1}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a", 0x46}], 0x3, &(0x7f0000000400)}, 0x4000042)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x7fffffffffffffff, 0xf, 0x7})
r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x2c020400)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
io_uring_enter(r7, 0x7277, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)

12m41.552739637s ago: executing program 35 (id=1354):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/usb/hiddev#\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x881)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000002940)={0x84, &(0x7f00000004c0)={0x40, 0x15, 0x2d, "424e2e7b72b92070e0a2240ad3cf2f4f94de79f7fabd701fb59dd65af53ce2e13b4a7335482f1c66c3a0e3feac"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7f}, 0x0, &(0x7f0000002600)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x40, 0xb, 0x2, "162a"}, &(0x7f0000002740)={0x40, 0xf, 0x2, 0x8f}, &(0x7f0000002780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x0, &(0x7f0000002800)={0x40, 0x19, 0x2, '$q'}, &(0x7f0000002840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000002880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000028c0)={0x40, 0x1e, 0x1}, 0x0})
ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000ac0)={{0x3, 0xffffffff, 0x6f, 0x0, 0x8000, 0x1}, 0x326, [0x5, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x81, 0x3, 0xf, 0xc, 0x9, 0x1ff, 0xf, 0x3, 0xffffffff, 0xe9, 0x8, 0x3ade1a47, 0xb38c, 0x3, 0x81, 0x0, 0x8001, 0x5, 0x6ab0, 0x4, 0x3e74, 0x415, 0x7f, 0xffff, 0x4, 0x1, 0x2, 0x0, 0x5, 0x8, 0xfffffffe, 0xfffffffe, 0x6, 0x840, 0x2, 0x5, 0x2e43, 0xffffffff, 0x8, 0x9, 0x6, 0x3, 0x7fff, 0x5, 0x81, 0x9, 0x9, 0x8, 0x5, 0xc82, 0x92d, 0x7ff, 0x9, 0x82f, 0x5, 0x2, 0x5, 0x2b, 0x4, 0x6, 0x4, 0xec, 0x9242, 0xfffffffb, 0x9, 0x8000, 0x3, 0x4, 0x4, 0x5, 0xfff, 0xb, 0x2, 0x401, 0x9, 0x6, 0x0, 0x6, 0x8001, 0x7, 0x3, 0x6, 0x34cb, 0x80000001, 0x1, 0x3, 0x6, 0x2, 0xa, 0x3, 0x104, 0x60000, 0x0, 0x400c, 0x5, 0x3, 0x4, 0x5d6, 0x334, 0x1dcd, 0x2370, 0x7f, 0xf0, 0x3, 0x3, 0x1, 0x7fffffff, 0x7ff, 0x3, 0x1, 0x8, 0x81, 0x9, 0x1, 0x1, 0x401, 0x2, 0x7, 0x0, 0x80000000, 0x9, 0x4, 0x3, 0x1ff, 0x1, 0xb, 0x34f, 0xfffffffd, 0x6, 0x1000, 0x95, 0x6, 0xec, 0xc100000, 0x1, 0x6, 0xffffffff, 0x169e, 0xea68, 0xa5f, 0x80000001, 0x9, 0x8, 0x40, 0xcdd, 0x101, 0xb, 0x10, 0x0, 0x4, 0x8, 0x6, 0x1, 0x2, 0x3, 0xd7, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x7, 0x7fffffff, 0x4, 0x1, 0x3ff, 0xf, 0x840, 0x5, 0x4, 0x7, 0x9, 0x4, 0x81, 0xd379, 0xe00, 0x3, 0xf591, 0x0, 0x7f, 0xffffffff, 0x7ffffffd, 0xdf, 0x0, 0xffff, 0x6, 0xffffffff, 0x1ce5, 0x5, 0xfffffff1, 0xfffffff9, 0x2, 0x10000, 0x9, 0x100, 0x35, 0x4, 0xff000000, 0x101, 0x5, 0xfff, 0x0, 0xff, 0x4, 0x6, 0x1, 0x5, 0xe, 0x9, 0x9, 0x66, 0x816, 0x5, 0x5, 0x4, 0x6, 0x15, 0x4, 0x40, 0x2, 0x40, 0x2, 0x6, 0xfffff0e8, 0x3, 0x9f0d, 0x3, 0xffffffff, 0x1, 0x1, 0x3, 0x31e, 0xfa0, 0x5b88, 0x7, 0x6, 0x4, 0x438, 0x6b4, 0x0, 0x2f5, 0x6ed4, 0x0, 0x385b0000, 0x3, 0x4, 0x3, 0x9, 0x0, 0x9, 0x7, 0x8, 0xffffffd1, 0x4, 0x2, 0x7, 0x47b0, 0xc6, 0xb7f, 0x8, 0xdc, 0xb, 0x8001, 0x8, 0x7f, 0xfffffffa, 0xffffffff, 0x6, 0x75e5, 0xf, 0x5, 0x2, 0x1, 0x7, 0x8001, 0x400, 0x81, 0x2, 0xb0, 0x80, 0x501, 0x3, 0x800, 0x8, 0x5, 0x9, 0xffffffff, 0x4e542f21, 0x3, 0x6, 0x0, 0xfffffffb, 0x5, 0x4, 0x5, 0x8, 0x97, 0x0, 0x7, 0x47c, 0x42b, 0x0, 0xcd0, 0x3, 0x8bf, 0x8, 0x8a38, 0x7ff, 0x9, 0x3, 0x0, 0x5, 0x81, 0x326, 0x2, 0xe4f, 0xa, 0x6, 0x9, 0x10000, 0x5, 0x1ff, 0x9, 0x8, 0x2, 0x1, 0xcd, 0xd515, 0x49ed, 0x10, 0x5, 0x3, 0x7f, 0x5, 0x80000000, 0x80000000, 0x3, 0x9, 0x3, 0x39, 0xfbf, 0x1000, 0x95c, 0x6, 0x5, 0x5b5, 0xfffffffe, 0x3, 0x4, 0xfffffffa, 0x1, 0x503, 0x1, 0x8, 0xc9, 0x7, 0xffffffff, 0x2, 0x8, 0x4, 0xcc5, 0xfffffff4, 0x6, 0x5, 0x0, 0xe, 0x80000001, 0xffffffff, 0x4, 0x5, 0x1, 0x5, 0x0, 0xd8, 0x8, 0x1, 0x2, 0x80000001, 0x5, 0x0, 0x8, 0x2203c5f4, 0x2a, 0xfffffffc, 0x80000000, 0x4fa1, 0x400, 0x6, 0x81, 0x6, 0x80000000, 0x8, 0x300, 0x0, 0x9, 0x6, 0x5, 0x5, 0x9, 0x8, 0x7, 0x1, 0x6, 0x64, 0x77, 0x7, 0x1ff, 0x8, 0x8, 0x5, 0x2, 0xa0000000, 0x7, 0xfffffff8, 0xba71, 0x7, 0xfffffffc, 0x1, 0x200, 0x5, 0x10001, 0x5, 0x1, 0x9, 0xfffffff1, 0x6, 0x1000, 0x1, 0x100000, 0x5, 0x3, 0xffff, 0xfd, 0xda64, 0x0, 0x4, 0xd, 0xffffffbe, 0x10000, 0x6, 0x5, 0x0, 0x8, 0x2, 0x7f, 0x8, 0x80, 0x0, 0x5, 0xc171, 0x971, 0x1ff, 0x7, 0x3, 0x2, 0x349f, 0x0, 0x0, 0x4, 0x9, 0xe47, 0x3047, 0x1, 0x7, 0x81, 0x7f, 0x3, 0x2, 0x6, 0x5, 0xffff4902, 0x4, 0xc, 0x9, 0x9, 0xfff, 0x28, 0x1, 0x7f, 0x8, 0x3, 0x3a, 0x4, 0xfe4c, 0x8001, 0x4, 0x4, 0x0, 0x5, 0xe37e, 0x6, 0x10000, 0x2, 0x400, 0x6, 0x2, 0x9, 0x3, 0xf, 0x7fffffff, 0xa9, 0x1, 0x5, 0xf28c, 0x3, 0x35abdfd5, 0xc0d8, 0x7eb, 0x7ff, 0x1, 0x4, 0x7, 0x3fff80, 0x10, 0x8, 0x401, 0x4, 0x7, 0x2, 0xd, 0x0, 0x3, 0xa2c5, 0x3, 0x0, 0x2, 0x8000, 0x10000, 0x9, 0x0, 0x1f3, 0x5, 0xb1e, 0x101, 0x200, 0x2, 0x3, 0x1e5, 0x9, 0xe1, 0x3, 0x8, 0x5, 0x8, 0x3, 0x8001, 0x7, 0x401, 0x2, 0x9, 0x1, 0x7f, 0x0, 0x8, 0x9, 0x401, 0x8, 0xfd4, 0x2, 0x2, 0x0, 0x8, 0xfbcd, 0xb, 0x5, 0x10000, 0x40, 0x7, 0x4, 0xe7d, 0x1888dd9e, 0x7, 0xbb30, 0x6, 0x200, 0xe3, 0x3, 0x1c000000, 0x81, 0x6, 0x1, 0xd6, 0x4, 0x9, 0x5, 0x9, 0x1ff, 0x7fffffff, 0x9, 0xf, 0x10001, 0x1, 0x4, 0x6, 0x330f, 0x5, 0x3, 0xa79, 0xf, 0x200000, 0x8, 0x6, 0x4, 0xafa, 0x5, 0xb03, 0x568, 0xffffffff, 0x4, 0x6, 0xbf, 0x4, 0x0, 0x7376, 0x0, 0x9, 0x3, 0x8f0, 0x8, 0x1, 0x2, 0x6, 0x2, 0xb76d, 0x1, 0xfffffff3, 0xfffffff7, 0x3, 0x0, 0x40, 0x9, 0x7f, 0x76, 0x6, 0x0, 0x5, 0x7, 0xa1, 0x0, 0x1, 0x4, 0x8, 0x5, 0x3, 0x4, 0x8000, 0x5, 0x11, 0x1ffc00, 0x21, 0x8, 0x8, 0x4, 0x5, 0x2, 0x5fdb, 0x7, 0x7, 0x7, 0x10000, 0x1, 0x6, 0x5, 0x1, 0x1, 0xfffffff8, 0xe39, 0x5, 0x100, 0xfff, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0x7, 0x23, 0x3, 0x9, 0x5, 0x4, 0x81, 0xa1, 0xffffffff, 0x7, 0x6747, 0xc87, 0x4, 0x3, 0x7, 0x4, 0xfff, 0x9, 0x0, 0xffff0001, 0x1ff, 0xffff, 0x5, 0x3, 0x4, 0x9, 0xb, 0x852d, 0x1, 0x6, 0x8, 0x4, 0x4, 0x0, 0xfffffffd, 0x2, 0x7, 0x3, 0x9, 0x1, 0x11d0, 0x8, 0x7f, 0x800, 0x80000000, 0x8, 0x0, 0x8, 0x3, 0x3, 0xf, 0x4a58, 0xa3, 0x5000000, 0x6d, 0x5, 0x1, 0x9, 0x2b1, 0x6, 0x80000000, 0x5, 0x0, 0x9, 0x6, 0xffffffff, 0x9, 0x9, 0x7477, 0x7, 0x3e, 0x56ce, 0x3ff, 0x1, 0xe87d, 0x400, 0xf, 0x9, 0x0, 0x37f7, 0x2, 0x3, 0x3, 0x2, 0xf, 0x3, 0x5, 0x800, 0x7, 0x6, 0x8, 0xc, 0x8, 0xfcd37f1f, 0x2, 0x2, 0x6df98ed8, 0x3, 0x1, 0xb, 0x8, 0x8000, 0x10, 0x3, 0x3ff, 0x1, 0x1e87bca3, 0xff, 0x0, 0x7, 0xfb, 0x7, 0x1ed, 0xc, 0x6, 0x75eb, 0x6, 0x0, 0x3, 0x6, 0xa78d, 0xfffffffc, 0xb, 0x6, 0x3, 0xa, 0x6, 0x1c, 0x7, 0x4, 0x5, 0x4, 0x8001, 0x4, 0x800, 0x1, 0x1ff, 0x2, 0x1000, 0x0, 0x7, 0xe, 0x3, 0x1, 0x694, 0x40, 0x400, 0x401, 0x101, 0xd73, 0xc8, 0x400, 0x3ff, 0x5, 0x6, 0xfff, 0xca, 0x4, 0xffffffff, 0x10, 0x1, 0xd09, 0x1, 0x1, 0x0, 0x49e9, 0x6, 0x3d2, 0x8, 0x400, 0x3, 0x3, 0xb, 0xffff, 0xca19, 0x2, 0x5, 0x78, 0x2, 0x7, 0x10000, 0xfffffffe, 0x1000, 0x8, 0x41, 0x8, 0xa358, 0x9, 0x8, 0x800, 0x1, 0x1ff, 0x5, 0x3, 0x100, 0x3, 0xf3, 0x7ff, 0x9, 0xfffffff8, 0x92c, 0xe, 0xc, 0xd, 0x10, 0x0, 0x200, 0xfff, 0xff, 0x0, 0xf8, 0xe2a, 0x68f8, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3d41, 0x3aa, 0x9, 0x3, 0x0, 0x6, 0x7, 0x3, 0x7fffffff, 0x8, 0x6, 0x0, 0xf, 0x9fda, 0x18000000, 0x1, 0x1, 0x7, 0xc5c3, 0x9, 0xbfc, 0x4c, 0x3ff, 0x8, 0x21, 0x4, 0x101, 0x2, 0xffffff01, 0x8, 0x5, 0x8, 0x1, 0x0, 0x1000, 0x9, 0xc81, 0x800, 0x2, 0x7, 0x4, 0x6, 0xffffffd0, 0xf, 0x9, 0x80, 0xae, 0x2, 0x3, 0x80, 0x3, 0x2, 0x8, 0xb3, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x6, 0xa, 0x80, 0x82, 0x7, 0x40, 0xfff, 0x3, 0x63, 0x7, 0x6, 0x0, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x3, 0xb00f, 0x9, 0x3, 0x8, 0x4, 0x3, 0xd, 0x80000000, 0x2, 0x1, 0xffff9c86, 0x10, 0xb, 0x6, 0x7, 0x8, 0x7, 0xfffffff8, 0x100, 0x9, 0x80, 0x1, 0x7ff, 0x3a0b, 0x80000001, 0x5, 0x60, 0x10001, 0x0, 0x10001, 0x9, 0x5, 0x1, 0x1ff, 0x3, 0x691, 0x10000, 0x2, 0x1c61ff54, 0x401, 0x3, 0x74c4, 0x5, 0x8, 0x4, 0x1bec8000]})

12m41.419374169s ago: executing program 36 (id=1353):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r3)
setreuid(r3, r3)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r4, 0xee01, 0x0)
keyctl$setperm(0x5, r4, 0x15110231)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000380))

11.701985214s ago: executing program 6 (id=3299):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, &(0x7f0000000100))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)='\t(', 0x2}, {&(0x7f00000002c0)="eb", 0x1}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5)
r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000400)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xff9a, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x40010)
ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000000a00))
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
close(r4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x1, 0x4000000}})
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)

9.594663852s ago: executing program 5 (id=3302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

9.59202434s ago: executing program 7 (id=3303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r1, &(0x7f0000001a40), 0x0, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000140)='A', 0x1, 0x50, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x59, 0x20, 0x8, 0x5, 0x7, 0x4, 0x1, 0x5, 0x2, 0xc, 0x47, 0x0, 0x9, 0xb}, 0xe)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x5}, 0xc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="05000000010000", 0x7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
socket$inet_mptcp(0x2, 0x1, 0x106)

9.587459052s ago: executing program 5 (id=3304):
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102400, 0x19000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="140000d76b1fb7000000000000000000a72d204bbccea617231f763c992d156cb9715adb3e0d64ab15c0e01ae68c89833f060000000000000098d672e3b9207f059abd518cd3b9bdfb19f58775fff63426cfa673d0aa000000000000000000000000000029d5ae1d3c0db04b6136daf22c2a2d966e5c2b0958d82c7bfc4bf2c195cacf", @ANYRES32=r2, @ANYRES32=r0], 0x18}, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)
mount_setattr(r3, &(0x7f00000003c0)='./file0\x00', 0xb00, &(0x7f0000000440)={0xf1, 0x84, 0x180000, {r4}}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xad92, 0x1000, 0x4}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000280))
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r8 = eventfd2(0x210d28e2, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100)=r8, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080), 0x0, 0x4)

9.586552563s ago: executing program 8 (id=3305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r6}, 0x18)
r7 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x2, 0x2, 0x279})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x34, 0x68, 0x1, 0x1, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x9}, {0x2, 0x9}, {0x1, 0xff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

8.725063928s ago: executing program 8 (id=3307):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0xc048aeca, &(0x7f0000000080))
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
ptrace$getregs(0xe, 0x0, 0x8000000000000000, &(0x7f0000000680)=""/132)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg$unix(r1, &(0x7f00000001c0), 0x0, 0x20, &(0x7f0000000340))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)

7.708733834s ago: executing program 5 (id=3309):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0xc048aeca, &(0x7f0000000080))
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
ptrace$getregs(0xe, 0x0, 0x8000000000000000, &(0x7f0000000680)=""/132)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1}}], 0x1, 0x20, &(0x7f0000000340))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)

6.748750722s ago: executing program 6 (id=3311):
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x18, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000"], 0x6c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

6.097680388s ago: executing program 7 (id=3312):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xd, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe8", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.949501688s ago: executing program 6 (id=3313):
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
r5 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1bb25059e55ae3f014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fe25e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc000000000000", 0xd8}], 0x1}, 0x44850)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff}, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x2}})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)

5.948867183s ago: executing program 7 (id=3314):
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03)
mount_setattr(r1, &(0x7f00000003c0)='./file0\x00', 0xb00, &(0x7f0000000440)={0xf1, 0x84, 0x180000}, 0x20)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)}}], 0x3, 0x400000a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

5.81094567s ago: executing program 8 (id=3315):
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x9, 0x34, @random="7e318352c2"}, @NL80211_ATTR_PMKID={0x14, 0x55, "54c38481a699b8d3828fc31183ac7e88"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40)

5.405967023s ago: executing program 9 (id=3316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r6}, 0x18)
r7 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x2, 0x2, 0x279})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x34, 0x68, 0x1, 0x1, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x9}, {0x2, 0x9}, {0x1, 0xff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

4.765046773s ago: executing program 7 (id=3317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

4.712314172s ago: executing program 8 (id=3318):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$hidraw(&(0x7f0000002300), 0xffffffffffffffff, 0x14a042)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
pipe2(&(0x7f0000000040), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
renameat2(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x4)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

4.670801641s ago: executing program 7 (id=3319):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={<r5=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}})
close(0x3)
recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x2e, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x10060)
r10 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f6272696467"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000)

4.604774586s ago: executing program 5 (id=3320):
r0 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
sendto$inet6(r5, &(0x7f00000000c0)="9d", 0x1, 0x20000854, &(0x7f0000000240)={0xa, 0x4e22, 0x65f, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x1c)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x38011, r6, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000002fc0))
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x143b02)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
syz_open_dev$ndb(0x0, 0x0, 0x101000)

4.482468444s ago: executing program 9 (id=3321):
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675"], 0x10}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x6, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040840)
socketpair(0x1d, 0x2, 0x2, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x20000001)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_clone(0x20080200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, r7, 0x358, 0x100000000000000)

3.440116629s ago: executing program 9 (id=3322):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400400008000000010000008000000034744de8958bfef6b7338fc6f3eabae14384cae4d5b3ad1b43bdd61ed14788b08bb3514c10c4f6fa033fdc6d333b81a473d4e4b7215139ace7ec79a0d5c127147fd14a72f5173150cd36d619313f3b4721e94790c10d0fb9dace24d1b6d994f4a7af644cbcd09531ec72aaccdd8d58bdf37a92510d745a9cd6854f0ded0c05d6591b5723427e318ff0a18405c5fdc7ab22ff0df878cd03df04f3c90bacc0f63b2dac2af87c28c518411fddcabc66dc07", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b30000001801000020756c2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001080)=ANY=[], 0x180}}, 0x4000040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname(r3, 0x0, &(0x7f0000000240))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4004004)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000))
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2046)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
gettid()

2.325350622s ago: executing program 7 (id=3323):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r1, &(0x7f0000001a40), 0x0, 0x40)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000140)='A', 0x1, 0x50, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x59, 0x20, 0x8, 0x5, 0x7, 0x4, 0x1, 0x5, 0x2, 0xc, 0x47, 0x0, 0x9, 0xb}, 0xe)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x5}, 0xc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="05000000010000", 0x7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
socket$inet_mptcp(0x2, 0x1, 0x106)

2.235857349s ago: executing program 8 (id=3324):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000000) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x100, 0x5, 0x8, 0x6]}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x7c86, 0x4)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\xf9'}], 0xa, "b3afc3156d0e8f1ed9af7683f15bd221093bc4f47d2789667c8bf70c66269e72b8af0f457ba45149a343279decd4356bdbde05000000000000008e5cffb663a923b70880c0cc5a540b305e7b70ca8a5e317ba302f8795202ab1ca09af0a97d3ee0a3fa73d5480c0afcb16d5ea0590cd9f60cd9f30a3845542447"}, 0x59)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

2.232939082s ago: executing program 9 (id=3325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000280)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x3, 0xb, 0x8, 0x6, 0x10}, @jmp={0x5, 0x1, 0x7, 0x5, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x49, &(0x7f00000003c0)=""/73, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0xfffffff4, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x5, 0x5}], 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@fallback=r1, 0x5, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="ed9100003c200800dd18bf", @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9619000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r8)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)
r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f2b9ae702650f01c866dfdb440f20c066350f000000440f22c026f20f5ebe19003e0f23a50f795b0e0f013e09000f01c53626663e660ff7cf", 0x3a}], 0x1, 0x19, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408b"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0xc, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0xfa, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x1000, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

2.031450564s ago: executing program 5 (id=3326):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000792000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216, 0xd8, 0x1, &(0x7f0000000200)=""/120, 0x78}, &(0x7f0000000380)=0x40)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r5, 0xe7d4c009da6c19a5}], 0x1, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x128, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xd4, 0x6, "7d51aef86ed0e240406414db0d52fc65d0a33133a1641678baea0a87f2148d334bfc188db1a14e68d0fdaf649a89f8d47c529325b630839666542fc5080392b1a3fd4e1e0f94eba8ac930003cf06646dc6b8dd5aae88d69a0bf8ea2027deb5ccab9cbf9ce71a4e8ece29def3f6a1b6ce80bcf22b5419975dcab4c146565377502e5f92acb9ca2519324a9f261e7d77f43a4b221165863b96280e5afa99bf9e88e982c9d6f1c60745d38988b7e9d078ec0ac07ddf74ef1e468c51cd611df3decc2385548a700b355ec014c6df618f64bc"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "ee362dbc6cf2195abf0298fb021b726a0c17ed1203a4cc80dc8b91f80b5335a0270b9a56f8763dc46ef4f86038a40e8f70a610b21bc710556846575c579cee66f0b4ec58e1f1b0a966"}, @NFTA_TABLE_USERDATA={0x91, 0x6, "dec32b754d7d74c8dd1283ac8d453f3a9b2f0e4c712329062ee31e7c1347aa2334b4d1c725d3abfdd10c5bee2be995fa0a3e7d4525011425f372832ec98f78381d361bf2098a1e1aa2194a4c09dd176c8c719b99d88e3a203c99f0b8f8c53c1e96609dc4f79c398c175a085c2f9573519dbfe60a488520d4f646d3f5a0271bd1d8d7cd1891213d19f0ac2d1080"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x31, 0x6, "141652d77f63006ee8e6fe6fd14a96551096b7a493c76ca1928d3f0a0ca27267de98966ae591113ccf14284796"}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000300))

1.660162517s ago: executing program 6 (id=3327):
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3a, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xae6, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38)
read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a00090002000000ffdbdf250200400008000800", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ptrace(0x4208, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

1.054801426s ago: executing program 6 (id=3328):
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03)
mount_setattr(r1, &(0x7f00000003c0)='./file0\x00', 0xb00, &(0x7f0000000440)={0xf1, 0x84, 0x180000}, 0x20)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)}}], 0x3, 0x400000a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.051868757s ago: executing program 9 (id=3329):
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x9, 0x34, @random="7e318352c2"}, @NL80211_ATTR_PMKID={0x14, 0x55, "54c38481a699b8d3828fc31183ac7e88"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40)

556.381308ms ago: executing program 6 (id=3330):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})
ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r7 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_e{cryption', &(0x7f0000000040)='vto_da_allos\x00\xe9\x82\xdb ', 0x0)

208.018471ms ago: executing program 5 (id=3331):
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102400, 0x19000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="140000d76b1fb7000000000000000000a72d204bbccea617231f763c992d156cb9715adb3e0d64ab15c0e01ae68c89833f060000000000000098d672e3b9207f059abd518cd3b9bdfb19f58775fff63426cfa673d0aa000000000000000000000000000029d5ae1d3c0db04b6136daf22c2a2d966e5c2b0958d82c7bfc4bf2c195cacf", @ANYRES32=r2, @ANYRES32=r0], 0x18}, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)
mount_setattr(r3, &(0x7f00000003c0)='./file0\x00', 0xb00, &(0x7f0000000440)={0xf1, 0x84, 0x180000, {r4}}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020)
syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xad92, 0x1000, 0x4}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000280))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
eventfd2(0x210d28e2, 0x800)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080), 0x0, 0x4)

82.321393ms ago: executing program 8 (id=3332):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)

0s ago: executing program 9 (id=3333):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000180)=0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258)
close(r2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000008000000000000008a94a6276177b74ea985e6853485045f15a3b51d1cbb873a2ec0de2d8a013d260c25f1c5ccf68f20ffd7e8f35467", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x20040840}, 0x80)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
r9 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r9, 0x4000410)
keyctl$read(0xb, r9, &(0x7f0000000000)=""/43, 0x2b)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (fail_nth: 2)

kernel console output (not intermixed with test programs):


[ 1138.464252][   T30] audit: type=1400 audit(1756131699.967:632): avc:  denied  { create } for  pid=17615 comm="syz.8.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1138.464577][ T5965] usb 7-1: Product: syz
[ 1138.490211][T17614] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.573363][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2696'.
[ 1138.589915][   T30] audit: type=1400 audit(1756131700.167:633): avc:  denied  { ioctl } for  pid=17615 comm="syz.8.2697" path="socket:[93890]" dev="sockfs" ino=93890 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1138.591759][ T5965] usb 7-1: Manufacturer: syz
[ 1138.648724][ T5965] usb 7-1: SerialNumber: syz
[ 1138.703611][ T5965] usb 7-1: config 0 descriptor??
[ 1138.723012][T17614] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.787308][T17626] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1138.844244][T17614] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.990332][ T5965] usb 7-1: Firmware version (0.0) predates our first public release.
[ 1139.019998][ T5965] usb 7-1: Please update to version 0.2 or newer
[ 1139.113866][ T5965] usb 7-1: USB disconnect, device number 39
[ 1140.104892][T11181] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.435729][ T3468] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.478853][ T3468] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.526754][ T3468] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.684002][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2707'.
[ 1141.873291][T11456] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1142.081465][T11456] usb 6-1: Using ep0 maxpacket: 16
[ 1142.139872][T11456] usb 6-1: config 0 has no interfaces?
[ 1142.147581][T11456] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1142.158019][T11456] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1142.186034][T11456] usb 6-1: Manufacturer: syz
[ 1142.196097][T11456] usb 6-1: config 0 descriptor??
[ 1142.425653][T17678] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2709'.
[ 1142.847221][T17673] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1142.899763][T17684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1143.200019][T11456] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1143.330030][T11456] usb 7-1: device descriptor read/64, error -71
[ 1143.330291][    T9] usb 10-1: new full-speed USB device number 56 using dummy_hcd
[ 1143.495246][    T9] usb 10-1: config 0 has an invalid interface number: 128 but max is 0
[ 1143.515298][    T9] usb 10-1: config 0 has no interface number 0
[ 1143.530335][    T9] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1143.540954][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.550080][    T9] usb 10-1: Product: syz
[ 1143.560174][    T9] usb 10-1: Manufacturer: syz
[ 1143.567846][    T9] usb 10-1: SerialNumber: syz
[ 1143.580198][T11456] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1143.592703][    T9] usb 10-1: config 0 descriptor??
[ 1143.710126][T11456] usb 7-1: device descriptor read/64, error -71
[ 1143.759887][T17698] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2714'.
[ 1143.784341][ T5965] usb 6-1: USB disconnect, device number 51
[ 1143.820645][T11456] usb usb7-port1: attempt power cycle
[ 1143.860812][    T9] usb 10-1: Firmware version (0.0) predates our first public release.
[ 1143.883654][    T9] usb 10-1: Please update to version 0.2 or newer
[ 1143.943859][    T9] usb 10-1: USB disconnect, device number 56
[ 1144.200116][T11456] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1144.631003][T11456] usb 7-1: device descriptor read/8, error -71
[ 1144.930264][T11456] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1144.952142][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2717'.
[ 1144.971027][T11456] usb 7-1: device descriptor read/8, error -71
[ 1145.091644][T11456] usb usb7-port1: unable to enumerate USB device
[ 1146.752444][T17724] mkiss: ax0: crc mode is auto.
[ 1147.165445][T17729] FAULT_INJECTION: forcing a failure.
[ 1147.165445][T17729] name failslab, interval 1, probability 0, space 0, times 0
[ 1147.526176][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.6.2722 Not tainted syzkaller #0 PREEMPT(full) 
[ 1147.526205][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1147.526216][T17729] Call Trace:
[ 1147.526226][T17729]  <TASK>
[ 1147.526234][T17729]  dump_stack_lvl+0x16c/0x1f0
[ 1147.526261][T17729]  should_fail_ex+0x512/0x640
[ 1147.526281][T17729]  ? __kmalloc_noprof+0xbf/0x510
[ 1147.526303][T17729]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[ 1147.526329][T17729]  should_failslab+0xc2/0x120
[ 1147.526351][T17729]  __kmalloc_noprof+0xd2/0x510
[ 1147.526374][T17729]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[ 1147.526410][T17729]  genl_family_rcv_msg_doit+0xbf/0x2f0
[ 1147.526437][T17729]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1147.526471][T17729]  ? bpf_lsm_capable+0x9/0x10
[ 1147.526497][T17729]  ? security_capable+0x7e/0x260
[ 1147.526520][T17729]  ? ns_capable+0xd7/0x110
[ 1147.526546][T17729]  genl_rcv_msg+0x55c/0x800
[ 1147.526573][T17729]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1147.526595][T17729]  ? __pfx___schedule+0x10/0x10
[ 1147.526613][T17729]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1147.526639][T17729]  ? __pfx_nl80211_del_interface+0x10/0x10
[ 1147.526659][T17729]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1147.526684][T17729]  ? mark_held_locks+0x49/0x80
[ 1147.526716][T17729]  netlink_rcv_skb+0x158/0x420
[ 1147.526737][T17729]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1147.526763][T17729]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1147.526782][T17729]  ? preempt_schedule_thunk+0x16/0x30
[ 1147.526826][T17729]  genl_rcv+0x28/0x40
[ 1147.526847][T17729]  netlink_unicast+0x5a7/0x870
[ 1147.526873][T17729]  ? __pfx_netlink_unicast+0x10/0x10
[ 1147.526894][T17729]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1147.526924][T17729]  netlink_sendmsg+0x8d1/0xdd0
[ 1147.526951][T17729]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1147.526982][T17729]  ____sys_sendmsg+0xa95/0xc70
[ 1147.527008][T17729]  ? copy_msghdr_from_user+0x10a/0x160
[ 1147.527029][T17729]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1147.527065][T17729]  ___sys_sendmsg+0x134/0x1d0
[ 1147.527088][T17729]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1147.527142][T17729]  __sys_sendmsg+0x16d/0x220
[ 1147.527161][T17729]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1147.527179][T17729]  ? __pfx___schedule+0x10/0x10
[ 1147.527213][T17729]  do_syscall_64+0xcd/0x4c0
[ 1147.527237][T17729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1147.527255][T17729] RIP: 0033:0x7fb69958ebe9
[ 1147.527272][T17729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1147.527289][T17729] RSP: 002b:00007fb69a442038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1147.527308][T17729] RAX: ffffffffffffffda RBX: 00007fb6997b5fa0 RCX: 00007fb69958ebe9
[ 1147.527320][T17729] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1147.527331][T17729] RBP: 00007fb69a442090 R08: 0000000000000000 R09: 0000000000000000
[ 1147.527342][T17729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1147.527353][T17729] R13: 00007fb6997b6038 R14: 00007fb6997b5fa0 R15: 00007ffe7b8673f8
[ 1147.527377][T17729]  </TASK>
[ 1148.200212][T17741] netlink: 5872 bytes leftover after parsing attributes in process `syz.8.2723'.
[ 1148.209553][T11456] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1148.235279][T17741] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2723'.
[ 1148.244589][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2723'.
[ 1148.390301][T11456] usb 10-1: device descriptor read/64, error -71
[ 1149.199199][T11456] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1149.422750][T11456] usb 10-1: device descriptor read/64, error -71
[ 1149.540530][T11456] usb usb10-port1: attempt power cycle
[ 1149.626496][T17763] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2725'.
[ 1149.810036][ T5965] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1149.950289][ T5965] usb 8-1: device descriptor read/64, error -71
[ 1149.990162][T11456] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1150.021497][T11456] usb 10-1: device descriptor read/8, error -71
[ 1150.031236][   T30] audit: type=1400 audit(1756131711.697:634): avc:  denied  { getopt } for  pid=17766 comm="syz.8.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1150.150224][T11423] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[ 1150.235761][T17772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2733'.
[ 1150.247146][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2733'.
[ 1150.261150][ T5965] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 1150.384480][T11456] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1150.436253][T11456] usb 10-1: device descriptor read/8, error -71
[ 1150.442815][ T5965] usb 8-1: device descriptor read/64, error -71
[ 1150.572569][T11456] usb usb10-port1: unable to enumerate USB device
[ 1150.584717][ T5965] usb usb8-port1: attempt power cycle
[ 1150.699789][T11423] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1150.708434][T11423] usb 6-1: config 0 has no interface number 0
[ 1150.729229][T11423] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1150.739108][T11423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.747988][T11423] usb 6-1: Product: syz
[ 1150.752284][T11423] usb 6-1: Manufacturer: syz
[ 1150.756881][T11423] usb 6-1: SerialNumber: syz
[ 1150.764085][T11423] usb 6-1: config 0 descriptor??
[ 1150.986140][ T5965] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 1151.028595][ T5965] usb 8-1: device descriptor read/8, error -71
[ 1151.039153][T11423] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1151.090504][T11423] usb 6-1: Please update to version 0.2 or newer
[ 1151.254316][T17787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1151.305573][T11423] usb 6-1: USB disconnect, device number 52
[ 1151.322363][ T5965] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[ 1151.341720][T11456] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1151.422301][ T5965] usb 8-1: device descriptor read/8, error -71
[ 1151.540596][T11456] usb 9-1: Using ep0 maxpacket: 16
[ 1151.546220][ T5965] usb usb8-port1: unable to enumerate USB device
[ 1151.613330][T11456] usb 9-1: config 0 has no interfaces?
[ 1151.626362][T11456] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1151.636665][T11456] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1151.647404][T11456] usb 9-1: Manufacturer: syz
[ 1151.767087][T11456] usb 9-1: config 0 descriptor??
[ 1152.707804][T17803] tipc: Started in network mode
[ 1152.712786][T17803] tipc: Node identity 1e2e801c1941, cluster identity 4711
[ 1152.724549][T17803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1152.790636][T17803] syzkaller0: entered promiscuous mode
[ 1152.796361][T17803] syzkaller0: entered allmulticast mode
[ 1152.870628][T17803] tipc: Resetting bearer <eth:syzkaller0>
[ 1152.948797][T17802] tipc: Resetting bearer <eth:syzkaller0>
[ 1152.980513][T17802] tipc: Disabling bearer <eth:syzkaller0>
[ 1153.135496][T17812] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2738'.
[ 1153.713942][T17820] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.758463][T17821] netlink: 5872 bytes leftover after parsing attributes in process `syz.7.2741'.
[ 1153.813692][T17818] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2741'.
[ 1153.826380][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2741'.
[ 1153.933758][T17820] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.978052][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'.
[ 1154.074395][T17820] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.342315][T17830] netlink: 'syz.6.2743': attribute type 6 has an invalid length.
[ 1154.376057][T17830] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2743'.
[ 1154.664035][T17820] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.723657][    T9] usb 9-1: USB disconnect, device number 39
[ 1155.786663][T17834] mkiss: ax0: crc mode is auto.
[ 1156.077416][T17844] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1156.124357][T11423] usb 8-1: new full-speed USB device number 54 using dummy_hcd
[ 1156.855606][T15311] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.905469][T11423] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 1156.918273][T11423] usb 8-1: config 0 has no interface number 0
[ 1156.950093][ T9366] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.952851][T11423] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1156.958558][ T9366] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.070065][T11423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.078176][   T30] audit: type=1400 audit(1756131718.697:635): avc:  denied  { ioctl } for  pid=17849 comm="syz.5.2748" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1157.107313][ T9366] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.122675][T11423] usb 8-1: Product: syz
[ 1157.130368][T11423] usb 8-1: Manufacturer: syz
[ 1157.150062][T11423] usb 8-1: SerialNumber: syz
[ 1157.179461][T11423] usb 8-1: config 0 descriptor??
[ 1157.189275][   T30] audit: type=1400 audit(1756131718.707:636): avc:  denied  { ioctl } for  pid=17849 comm="syz.5.2748" path="socket:[95700]" dev="sockfs" ino=95700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1157.332222][   T30] audit: type=1400 audit(1756131718.727:637): avc:  denied  { bind } for  pid=17849 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1157.447318][T11423] usb 8-1: Firmware version (0.0) predates our first public release.
[ 1157.486902][T11423] usb 8-1: Please update to version 0.2 or newer
[ 1157.892874][T17865] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2749'.
[ 1157.931379][T11423] usb 8-1: USB disconnect, device number 54
[ 1158.112198][T17865] 1�X��D: renamed from 
30�X��D (while UP)
[ 1158.114223][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2751'.
[ 1158.185146][T17865] A link change request failed with some changes committed already. Interface 
31�X��D may have been left with an inconsistent configuration, please check.
[ 1160.450006][T11456] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1160.710043][T11456] usb 9-1: Using ep0 maxpacket: 16
[ 1160.734446][T11456] usb 9-1: config 0 has no interfaces?
[ 1160.764475][T11456] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1160.783971][T11456] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1160.808543][T11456] usb 9-1: Manufacturer: syz
[ 1160.818537][T11456] usb 9-1: config 0 descriptor??
[ 1160.902660][T17902] mkiss: ax0: crc mode is auto.
[ 1162.178954][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2758'.
[ 1162.650730][T17914] fuse: Bad value for 'fd'
[ 1162.657604][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2760'.
[ 1162.685249][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2760'.
[ 1162.809031][   T30] audit: type=1400 audit(1756131724.467:638): avc:  denied  { create } for  pid=17916 comm="syz.6.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1163.754680][T11440] usb 9-1: USB disconnect, device number 40
[ 1164.394703][T17936] mkiss: ax0: crc mode is auto.
[ 1165.398900][T17932] netlink: 'syz.8.2766': attribute type 6 has an invalid length.
[ 1165.473066][T17932] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2766'.
[ 1165.932717][T11456] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1166.142792][T11456] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1166.163249][T11456] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1166.178450][T11456] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1166.201973][T11456] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1166.300138][ T5916] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1166.328912][T11456] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1166.593329][T11456] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1166.603411][T11456] usb 9-1: Product: syz
[ 1166.623225][T11456] usb 9-1: Manufacturer: syz
[ 1166.683935][T11456] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1166.948941][ T5916] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.979579][T11456] usb 9-1: USB disconnect, device number 41
[ 1167.041855][ T5916] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1167.073165][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.103140][ T5916] usb 8-1: config 0 descriptor??
[ 1167.119851][ T5916] pwc: Askey VC010 type 2 USB webcam detected.
[ 1167.523532][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1167.534597][ T5916] pwc: recv_control_msg error -32 req 02 val 2700
[ 1167.542801][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1167.553983][ T5916] pwc: recv_control_msg error -32 req 04 val 1000
[ 1168.071890][T17978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1168.082505][T17978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.452036][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2778'.
[ 1168.462393][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2778'.
[ 1169.221228][T17988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17988 comm=syz.8.2779
[ 1169.492894][ T5916] pwc: recv_control_msg error -71 req 04 val 1400
[ 1169.504667][ T5916] pwc: recv_control_msg error -71 req 02 val 2000
[ 1169.512908][ T5916] pwc: recv_control_msg error -71 req 02 val 2100
[ 1169.528899][ T5916] pwc: recv_control_msg error -71 req 04 val 1500
[ 1169.545558][ T5916] pwc: recv_control_msg error -71 req 02 val 2500
[ 1169.618064][T17994] overlayfs: failed to resolve './file1': -2
[ 1169.979746][ T5916] pwc: recv_control_msg error -71 req 02 val 2400
[ 1169.987915][ T5916] pwc: recv_control_msg error -71 req 02 val 2600
[ 1170.015325][ T5916] pwc: recv_control_msg error -71 req 02 val 2900
[ 1170.030999][ T5916] pwc: recv_control_msg error -71 req 02 val 2800
[ 1170.045541][ T5916] pwc: recv_control_msg error -71 req 04 val 1100
[ 1170.058436][ T5916] pwc: recv_control_msg error -71 req 04 val 1200
[ 1170.146340][ T5916] pwc: Registered as video103.
[ 1170.181718][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input19
[ 1170.290824][ T5916] usb 8-1: USB disconnect, device number 55
[ 1170.751529][T18010] netlink: 'syz.9.2785': attribute type 6 has an invalid length.
[ 1170.760894][   T30] audit: type=1400 audit(1756131732.087:639): avc:  denied  { connect } for  pid=18003 comm="syz.7.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1170.791126][   T30] audit: type=1400 audit(1756131732.087:640): avc:  denied  { bind } for  pid=18003 comm="syz.7.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1170.812090][   T30] audit: type=1400 audit(1756131732.087:641): avc:  denied  { write } for  pid=18003 comm="syz.7.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1170.863523][T18010] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2785'.
[ 1171.146761][T18016] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2786'.
[ 1171.156260][T18016] 0�X��D: renamed from 
31�X��D (while UP)
[ 1171.242039][T18016] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[ 1171.388825][T18016] hub 1-0:1.0: USB hub found
[ 1171.394157][T18016] hub 1-0:1.0: 1 port detected
[ 1171.530088][T11184] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1171.910496][T11184] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1171.923921][T11184] usb 8-1: config 1 descriptor has 1 excess byte, ignoring
[ 1171.936230][T11184] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1171.970397][T11184] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1171.996441][T11184] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1172.119411][T11184] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1172.132613][T11184] usb 8-1: Product: syz
[ 1172.145334][T11184] usb 8-1: Manufacturer: syz
[ 1172.285390][T11184] cdc_wdm 8-1:1.0: skipping garbage
[ 1172.295967][T11184] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1172.633238][T11184] usb 8-1: USB disconnect, device number 56
[ 1173.420363][ T5965] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1173.967926][T18049] overlayfs: failed to resolve './file1': -2
[ 1174.371811][ T5965] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1174.387062][ T5965] usb 10-1: config 2 has an invalid interface number: 73 but max is 0
[ 1174.473152][ T5965] usb 10-1: config 2 has no interface number 0
[ 1174.494016][ T5965] usb 10-1: config 2 interface 73 has no altsetting 0
[ 1174.524597][ T5965] usb 10-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1174.539833][ T5965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.622357][ T5965] usb 10-1: Product: syz
[ 1174.626644][ T5965] usb 10-1: Manufacturer: syz
[ 1174.670333][ T5965] usb 10-1: SerialNumber: syz
[ 1174.973053][T18040] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1175.126633][   T30] audit: type=1400 audit(1756131736.787:642): avc:  denied  { setattr } for  pid=18064 comm="syz.7.2798" name="SCTPv6" dev="sockfs" ino=96030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1175.300268][ T5965] qmi_wwan 10-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1175.375610][ T5965] usb 10-1: USB disconnect, device number 61
[ 1175.678013][   T30] audit: type=1400 audit(1756131737.317:643): avc:  denied  { block_suspend } for  pid=18068 comm="syz.7.2799" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1177.057711][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.066332][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.023681][T17988] syz.8.2779 (17988): drop_caches: 1
[ 1178.040024][T11456] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1178.110534][T11184] usb 10-1: new full-speed USB device number 62 using dummy_hcd
[ 1178.268612][T11456] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1178.327200][T11456] usb 8-1: config 1 descriptor has 1 excess byte, ignoring
[ 1178.347601][T11456] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1178.370085][T11184] usb 10-1: device descriptor read/64, error -71
[ 1178.425013][T18100] overlayfs: failed to resolve './file1': -2
[ 1178.610237][T11184] usb 10-1: new full-speed USB device number 63 using dummy_hcd
[ 1178.755378][T11456] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1178.835485][T11456] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1178.871198][T11456] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1178.882478][T11456] usb 8-1: Product: syz
[ 1178.886714][T11456] usb 8-1: Manufacturer: syz
[ 1178.960516][T11456] cdc_wdm 8-1:1.0: skipping garbage
[ 1179.089432][T11184] usb 10-1: device descriptor read/64, error -71
[ 1179.139750][T11456] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1179.593486][T11184] usb usb10-port1: attempt power cycle
[ 1179.708942][T11456] usb 8-1: USB disconnect, device number 57
[ 1180.013777][T11184] usb 10-1: new full-speed USB device number 64 using dummy_hcd
[ 1180.133306][T11184] usb 10-1: device descriptor read/8, error -71
[ 1180.535635][T18121] netlink: 5872 bytes leftover after parsing attributes in process `syz.5.2811'.
[ 1180.550425][T11184] usb 10-1: new full-speed USB device number 65 using dummy_hcd
[ 1180.595183][T11184] usb 10-1: device descriptor read/8, error -71
[ 1180.616622][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2811'.
[ 1180.628906][T18119] netlink: 'syz.5.2811': attribute type 4 has an invalid length.
[ 1180.703081][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2811'.
[ 1180.735371][T11184] usb usb10-port1: unable to enumerate USB device
[ 1181.034015][T18130] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2815'.
[ 1181.120528][T11423] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1181.580147][T11423] usb 7-1: Using ep0 maxpacket: 16
[ 1181.612981][T11423] usb 7-1: config 0 has no interfaces?
[ 1182.094309][T11423] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1182.125893][T11423] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1182.144918][T11423] usb 7-1: Manufacturer: syz
[ 1182.179236][T11423] usb 7-1: config 0 descriptor??
[ 1182.565747][T18145] overlayfs: failed to resolve './file0': -2
[ 1183.996835][T11184] usb 7-1: USB disconnect, device number 44
[ 1184.434649][T11440] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[ 1184.691717][T11440] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[ 1184.700282][T11440] usb 9-1: config 0 has no interface number 0
[ 1184.708112][T11440] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1184.717405][T11440] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.729783][T11440] usb 9-1: Product: syz
[ 1184.735564][T11440] usb 9-1: Manufacturer: syz
[ 1184.820652][T11440] usb 9-1: SerialNumber: syz
[ 1184.841720][T11440] usb 9-1: config 0 descriptor??
[ 1185.577646][T11440] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1185.587454][T11440] usb 9-1: Please update to version 0.2 or newer
[ 1185.710204][T11440] usb 9-1: USB disconnect, device number 42
[ 1187.463465][T18190] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2832'.
[ 1188.186190][T18208] netlink: 'syz.7.2837': attribute type 6 has an invalid length.
[ 1188.425624][T18204] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2837'.
[ 1188.822811][T18219] overlayfs: failed to resolve './file0': -2
[ 1189.632748][T18218] netlink: 5872 bytes leftover after parsing attributes in process `syz.8.2838'.
[ 1189.982111][   T30] audit: type=1400 audit(1756131751.647:644): avc:  denied  { getopt } for  pid=18229 comm="syz.5.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1190.032611][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2838'.
[ 1190.087111][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2838'.
[ 1190.107088][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2843'.
[ 1190.119623][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2843'.
[ 1190.469268][T18245] usb usb8: usbfs: process 18245 (syz.9.2845) did not claim interface 0 before use
[ 1190.529744][T18246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1190.820517][T11184] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1190.980523][T11184] usb 7-1: Using ep0 maxpacket: 16
[ 1190.992594][T11184] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1191.001397][T11184] usb 7-1: config 0 has no interface number 0
[ 1191.007608][T11184] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1191.020316][T11184] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1191.031678][T11184] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1191.043205][T11184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1191.054706][T11184] usb 7-1: config 0 descriptor??
[ 1191.886731][   T30] audit: type=1400 audit(1756131753.507:645): avc:  denied  { read } for  pid=18242 comm="syz.6.2846" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1192.053179][T18257] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1192.059327][T18257] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1192.068285][T11440] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1192.268624][T18257] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1192.275026][T18257] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1192.285086][T11440] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1192.295616][T11440] usb 6-1: config 2 has an invalid interface number: 73 but max is 0
[ 1192.340997][T11440] usb 6-1: config 2 has no interface number 0
[ 1192.350462][T11440] usb 6-1: config 2 interface 73 has no altsetting 0
[ 1192.613073][T18257] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1192.621508][T18257] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1192.648965][T18257] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1192.656912][T18257] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1192.684327][T11440] usb 6-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1192.695708][T11440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.705213][T11440] usb 6-1: Product: syz
[ 1192.709538][T11440] usb 6-1: Manufacturer: syz
[ 1192.714685][T11440] usb 6-1: SerialNumber: syz
[ 1192.958479][T18259] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1194.105297][T18288] FAULT_INJECTION: forcing a failure.
[ 1194.105297][T18288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1194.118687][T18288] CPU: 1 UID: 0 PID: 18288 Comm: syz.8.2856 Not tainted syzkaller #0 PREEMPT(full) 
[ 1194.118714][T18288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1194.118724][T18288] Call Trace:
[ 1194.118730][T18288]  <TASK>
[ 1194.118737][T18288]  dump_stack_lvl+0x16c/0x1f0
[ 1194.118762][T18288]  should_fail_ex+0x512/0x640
[ 1194.118787][T18288]  _copy_from_user+0x2e/0xd0
[ 1194.118812][T18288]  copy_msghdr_from_user+0x98/0x160
[ 1194.118832][T18288]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1194.118857][T18288]  ? kfree+0x24f/0x4d0
[ 1194.118879][T18288]  ? __pfx__kstrtoull+0x10/0x10
[ 1194.118901][T18288]  ___sys_sendmsg+0xfe/0x1d0
[ 1194.118922][T18288]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1194.118966][T18288]  ? __pfx___might_resched+0x10/0x10
[ 1194.118994][T18288]  __sys_sendmmsg+0x200/0x420
[ 1194.119015][T18288]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1194.119055][T18288]  ? fput+0x9b/0xd0
[ 1194.119079][T18288]  ? ksys_write+0x1ac/0x250
[ 1194.119105][T18288]  __x64_sys_sendmmsg+0x9c/0x100
[ 1194.119124][T18288]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1194.119143][T18288]  do_syscall_64+0xcd/0x4c0
[ 1194.119163][T18288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.119182][T18288] RIP: 0033:0x7f93c958ebe9
[ 1194.119197][T18288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1194.119214][T18288] RSP: 002b:00007f93c77d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1194.119238][T18288] RAX: ffffffffffffffda RBX: 00007f93c97b6180 RCX: 00007f93c958ebe9
[ 1194.119250][T18288] RDX: 040000000000017a RSI: 0000200000001c00 RDI: 0000000000000003
[ 1194.119262][T18288] RBP: 00007f93c77d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1194.119272][T18288] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001
[ 1194.119282][T18288] R13: 00007f93c97b6218 R14: 00007f93c97b6180 R15: 00007ffe7586cc88
[ 1194.119308][T18288]  </TASK>
[ 1194.310960][T12988] Bluetooth: hci5: command 0x0406 tx timeout
[ 1194.320080][T12988] Bluetooth: hci3: command 0x0406 tx timeout
[ 1194.640187][T12988] Bluetooth: hci6: command 0x0406 tx timeout
[ 1194.720167][T12988] Bluetooth: hci1: command 0x0406 tx timeout
[ 1195.168865][ T5916] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1195.680424][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1196.300446][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1196.321968][T12988] Bluetooth: hci5: command 0x0406 tx timeout
[ 1196.330457][T11440] qmi_wwan 6-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1196.388934][ T5916] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1196.400116][T12988] Bluetooth: hci3: command 0x0406 tx timeout
[ 1196.408928][T11184] usbhid 7-1:0.1: can't add hid device: -71
[ 1196.419665][T11440] usb 6-1: USB disconnect, device number 53
[ 1196.481047][T11184] usbhid 7-1:0.1: probe with driver usbhid failed with error -71
[ 1196.501839][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.537580][T11184] usb 7-1: USB disconnect, device number 45
[ 1196.548205][ T5916] usb 10-1: config 0 descriptor??
[ 1196.712349][T18307] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2861'.
[ 1196.721800][T18307] 1�X��D: renamed from 
30�X��D (while UP)
[ 1196.727705][T12988] Bluetooth: hci6: command 0x0406 tx timeout
[ 1196.754139][T18307] A link change request failed with some changes committed already. Interface 
31�X��D may have been left with an inconsistent configuration, please check.
[ 1196.850096][T12988] Bluetooth: hci1: command 0x0406 tx timeout
[ 1196.991046][T17245] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1197.029746][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1197.041102][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1197.081298][T18307] hub 1-0:1.0: USB hub found
[ 1197.086305][T18307] hub 1-0:1.0: 1 port detected
[ 1197.230080][T17245] usb 9-1: Using ep0 maxpacket: 16
[ 1197.296132][T17245] usb 9-1: config 0 has no interfaces?
[ 1197.316419][T17245] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1197.356043][T11184] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1197.396575][T17245] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1197.425435][T17245] usb 9-1: Manufacturer: syz
[ 1197.665890][T17245] usb 9-1: config 0 descriptor??
[ 1197.718961][T11184] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1197.744103][T11184] usb 6-1: config 2 has an invalid interface number: 73 but max is 0
[ 1197.761231][T11184] usb 6-1: config 2 has no interface number 0
[ 1197.779507][T11184] usb 6-1: config 2 interface 73 has no altsetting 0
[ 1197.878868][T11184] usb 6-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1197.903109][T11184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.936420][T11184] usb 6-1: Product: syz
[ 1197.949723][T11184] usb 6-1: Manufacturer: syz
[ 1197.991028][T11184] usb 6-1: SerialNumber: syz
[ 1198.732750][T18296] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1198.952946][T11184] qmi_wwan 6-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1199.171618][T11184] usb 6-1: USB disconnect, device number 54
[ 1200.188469][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1200.392708][ T5916] usbhid 10-1:0.0: can't add hid device: -71
[ 1200.429681][ T5916] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1200.453320][ T5916] usb 10-1: USB disconnect, device number 66
[ 1200.591180][   T30] audit: type=1400 audit(1756131762.237:646): avc:  denied  { create } for  pid=18332 comm="syz.5.2867" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1200.656312][T17245] usb 9-1: USB disconnect, device number 43
[ 1200.701358][T11456] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1200.802645][T18315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1200.870668][T11456] usb 8-1: Using ep0 maxpacket: 32
[ 1200.877566][T11456] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1200.886519][T11456] usb 8-1: config 2 has an invalid interface number: 172 but max is 0
[ 1200.899230][T11456] usb 8-1: config 2 has no interface number 0
[ 1200.924714][T11456] usb 8-1: config 2 interface 172 has no altsetting 0
[ 1201.062691][T11456] usb 8-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice= 3.8a
[ 1201.072057][T11456] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.082018][T11456] usb 8-1: Product: syz
[ 1201.100068][T11456] usb 8-1: Manufacturer: syz
[ 1201.109392][T11456] usb 8-1: SerialNumber: syz
[ 1201.683280][T18345] mkiss: ax0: crc mode is auto.
[ 1201.782524][   T30] audit: type=1400 audit(1756131763.357:647): avc:  denied  { bind } for  pid=18338 comm="syz.9.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1201.854946][   T30] audit: type=1400 audit(1756131763.357:648): avc:  denied  { listen } for  pid=18338 comm="syz.9.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1201.903795][   T30] audit: type=1400 audit(1756131763.357:649): avc:  denied  { accept } for  pid=18338 comm="syz.9.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1202.461665][T18359] netlink: 'syz.8.2871': attribute type 6 has an invalid length.
[ 1202.481823][T18359] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2871'.
[ 1202.660627][   T30] audit: type=1400 audit(1756131763.367:650): avc:  denied  { connect } for  pid=18338 comm="syz.9.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1203.850423][T18351] Bluetooth: hci1: command 0x0406 tx timeout
[ 1204.263313][T18376] netlink: 'syz.6.2875': attribute type 6 has an invalid length.
[ 1204.284095][T18376] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2875'.
[ 1204.710805][T11456] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610
[ 1204.717993][T11456] gspca_sn9c20x: Write register 1000 failed -71
[ 1204.729996][T11456] gspca_sn9c20x: Device initialization failed
[ 1204.736204][T11456] gspca_sn9c20x 8-1:2.172: probe with driver gspca_sn9c20x failed with error -71
[ 1204.760247][T11456] usb 8-1: USB disconnect, device number 58
[ 1204.944532][T18380] SELinux: failed to load policy
[ 1205.440080][T17245] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1205.710739][T17245] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1205.826269][T17245] usb 10-1: config 2 has an invalid interface number: 73 but max is 0
[ 1205.923260][T17245] usb 10-1: config 2 has no interface number 0
[ 1205.943485][T11456] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1205.966105][T17245] usb 10-1: config 2 interface 73 has no altsetting 0
[ 1205.994420][T17245] usb 10-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1206.004137][T17245] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.012575][T17245] usb 10-1: Product: syz
[ 1206.030371][T18394] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2880'.
[ 1206.042678][T17245] usb 10-1: Manufacturer: syz
[ 1206.052384][T17245] usb 10-1: SerialNumber: syz
[ 1206.120065][T11456] usb 7-1: Using ep0 maxpacket: 32
[ 1206.140951][T11456] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1206.228436][T11456] usb 7-1: config 0 has no interface number 0
[ 1206.314953][T11456] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1206.412076][T18383] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1206.636416][T17245] qmi_wwan 10-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1206.672333][T17245] usb 10-1: USB disconnect, device number 67
[ 1206.701505][T11456] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1206.711446][T11456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.719515][T11456] usb 7-1: Product: syz
[ 1206.747871][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2884'.
[ 1206.758674][T11456] usb 7-1: Manufacturer: syz
[ 1206.822852][T11456] usb 7-1: SerialNumber: syz
[ 1207.239651][T11456] usb 7-1: config 0 descriptor??
[ 1207.358560][T11456] smsc75xx v1.0.0
[ 1207.363217][T11456] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1207.447098][T11456] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22
[ 1207.772101][T18391] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1207.820929][T18391] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1208.086924][T18391] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1208.100095][T18391] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1208.126332][T18391] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1208.142683][T18391] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1208.308342][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1208.346308][T18418] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1208.478333][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1208.495189][T18418] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1208.498169][T18426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.515286][T18426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.737189][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2888'.
[ 1208.864178][T18391] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1208.870331][T18391] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1209.084029][T18418] bridge0: port 3(batadv0) entered disabled state
[ 1209.668995][T18447] mkiss: ax0: crc mode is auto.
[ 1209.736808][   T30] audit: type=1400 audit(1756131771.397:651): avc:  denied  { append } for  pid=18444 comm="syz.7.2891" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1209.875510][T18452] lo: entered allmulticast mode
[ 1210.054005][T11184] usb 7-1: USB disconnect, device number 46
[ 1213.512210][T18444] lo: left allmulticast mode
[ 1213.956082][ T5916] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1214.269473][T18474] netlink: 'syz.6.2897': attribute type 6 has an invalid length.
[ 1214.395435][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1214.474420][ T5916] usb 6-1: config 2 has an invalid interface number: 73 but max is 0
[ 1214.496193][ T5916] usb 6-1: config 2 has no interface number 0
[ 1214.525817][ T5916] usb 6-1: config 2 interface 73 has no altsetting 0
[ 1214.586620][ T5916] usb 6-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1214.628567][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.667378][ T5916] usb 6-1: Product: syz
[ 1214.683663][ T5916] usb 6-1: Manufacturer: syz
[ 1214.690635][ T5916] usb 6-1: SerialNumber: syz
[ 1215.234375][T18470] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1215.445018][T18481] netlink: 'syz.6.2899': attribute type 6 has an invalid length.
[ 1215.504494][T18481] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2899'.
[ 1215.523270][ T5916] qmi_wwan 6-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1215.594176][T18487] netlink: 5872 bytes leftover after parsing attributes in process `syz.8.2900'.
[ 1215.631259][T18487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2900'.
[ 1215.640476][T18487] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2900'.
[ 1215.698719][ T5916] usb 6-1: USB disconnect, device number 55
[ 1215.967444][T18495] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.064083][T18495] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.150240][ T5916] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 1216.282671][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2902'.
[ 1216.352065][ T5916] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1216.364015][ T5916] usb 8-1: config 2 has an invalid interface number: 73 but max is 0
[ 1216.375003][ T5916] usb 8-1: config 2 has no interface number 0
[ 1216.382360][ T5916] usb 8-1: config 2 interface 73 has no altsetting 0
[ 1216.412255][ T5916] usb 8-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1216.424534][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.450869][ T5916] usb 8-1: Product: syz
[ 1216.465842][ T5916] usb 8-1: Manufacturer: syz
[ 1216.476339][ T5916] usb 8-1: SerialNumber: syz
[ 1216.635843][T18495] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.302596][   T30] audit: type=1400 audit(1756131778.917:652): avc:  denied  { create } for  pid=18506 comm="syz.8.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1217.342188][T18494] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1217.357289][T18495] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.461213][   T30] audit: type=1400 audit(1756131778.917:653): avc:  denied  { bind } for  pid=18506 comm="syz.8.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1217.582389][   T30] audit: type=1400 audit(1756131778.947:654): avc:  denied  { listen } for  pid=18506 comm="syz.8.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1217.662454][   T30] audit: type=1400 audit(1756131779.247:655): avc:  denied  { mount } for  pid=18512 comm="syz.9.2905" name="/" dev="autofs" ino=98148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 1217.716587][ T3468] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1217.733257][T18509] netlink: 'syz.8.2904': attribute type 1 has an invalid length.
[ 1217.742437][T18509] netlink: 'syz.8.2904': attribute type 2 has an invalid length.
[ 1217.751599][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2904'.
[ 1217.766408][T18509] netlink: 'syz.8.2904': attribute type 4 has an invalid length.
[ 1217.915859][ T5916] qmi_wwan 8-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1217.946879][ T5916] usb 8-1: USB disconnect, device number 59
[ 1217.956817][ T3468] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1217.972076][T18509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=18509 comm=syz.8.2904
[ 1218.063316][T18519] block nbd0: Attempted send on invalid socket
[ 1218.072078][T18519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1218.187304][T15311] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1218.199829][ T3468] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.280454][T18538] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2907'.
[ 1220.748340][T18540] netlink: 5872 bytes leftover after parsing attributes in process `syz.8.2911'.
[ 1220.799507][T18540] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2911'.
[ 1220.809224][T18540] netlink: 'syz.8.2911': attribute type 4 has an invalid length.
[ 1220.845077][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2911'.
[ 1221.234191][T18547] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2912'.
[ 1221.456914][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2915'.
[ 1221.467063][T18551] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2915'.
[ 1222.009702][T18555] netlink: 5872 bytes leftover after parsing attributes in process `syz.6.2914'.
[ 1222.451241][T18555] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2914'.
[ 1222.999988][T18555] netlink: 'syz.6.2914': attribute type 4 has an invalid length.
[ 1223.101938][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'.
[ 1223.853849][T18583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1223.946025][T18583] tipc: Resetting bearer <eth:syzkaller0>
[ 1224.028555][T18582] tipc: Disabling bearer <eth:syzkaller0>
[ 1224.130734][T18597] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1225.224563][T18614] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2926'.
[ 1225.591328][T11456] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1225.835254][T18620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1225.850015][T18620] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2929'.
[ 1226.034402][T11456] usb 10-1: Using ep0 maxpacket: 32
[ 1226.056065][T11456] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1226.069962][T11456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.133819][T11456] usb 10-1: config 0 descriptor??
[ 1226.156623][T11456] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1226.560280][T17245] usb 8-1: new full-speed USB device number 60 using dummy_hcd
[ 1226.721665][T17245] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 1226.730188][T17245] usb 8-1: config 0 has no interface number 0
[ 1227.256544][T11456] gspca_sq930x: ucbus_write failed -110
[ 1227.263295][T11456] sq930x 10-1:0.0: probe with driver sq930x failed with error -110
[ 1227.318471][T17245] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1227.466904][T17245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.504064][T17245] usb 8-1: Product: syz
[ 1227.521367][T18646] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1227.528346][T17245] usb 8-1: Manufacturer: syz
[ 1227.541256][T17245] usb 8-1: SerialNumber: syz
[ 1227.559356][T17245] usb 8-1: config 0 descriptor??
[ 1227.789392][T17245] usb 8-1: Firmware version (0.0) predates our first public release.
[ 1227.807369][T17245] usb 8-1: Please update to version 0.2 or newer
[ 1228.394967][T11456] usb 10-1: USB disconnect, device number 68
[ 1228.425173][T17245] usb 8-1: USB disconnect, device number 60
[ 1228.688114][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2939'.
[ 1228.712030][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2939'.
[ 1229.620025][T11317] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1229.847028][T11317] usb 7-1: Using ep0 maxpacket: 8
[ 1229.853762][T11317] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1229.933098][T18685] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1230.058259][T11317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1230.085199][T11317] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1230.094836][T11317] pvrusb2: **********
[ 1230.099338][T11317] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1230.112560][T11317] pvrusb2: Important functionality might not be entirely working.
[ 1230.112883][T18679] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2936'.
[ 1230.129745][T11317] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1230.150009][T11317] pvrusb2: **********
[ 1230.326099][ T2336] pvrusb2: Invalid write control endpoint
[ 1230.585789][T18664] pvrusb2: Invalid write control endpoint
[ 1230.609075][T11456] usb 7-1: USB disconnect, device number 47
[ 1230.762842][ T2336] pvrusb2: Invalid write control endpoint
[ 1230.810794][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1230.874129][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1230.903472][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1230.939173][ T2336] pvrusb2: Device being rendered inoperable
[ 1230.960863][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1230.979972][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1231.008754][ T2336] pvrusb2: Attached sub-driver cx25840
[ 1231.028958][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1231.059966][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1231.080029][T11317] usb 9-1: new full-speed USB device number 44 using dummy_hcd
[ 1231.214600][T18693] FAULT_INJECTION: forcing a failure.
[ 1231.214600][T18693] name failslab, interval 1, probability 0, space 0, times 0
[ 1231.253394][T11317] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[ 1231.254272][T18695] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1231.280029][T11317] usb 9-1: config 0 has no interface number 0
[ 1231.286357][T18693] CPU: 1 UID: 0 PID: 18693 Comm: syz.7.2944 Not tainted syzkaller #0 PREEMPT(full) 
[ 1231.286383][T18693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1231.286393][T18693] Call Trace:
[ 1231.286400][T18693]  <TASK>
[ 1231.286408][T18693]  dump_stack_lvl+0x16c/0x1f0
[ 1231.286434][T18693]  should_fail_ex+0x512/0x640
[ 1231.286455][T18693]  ? fs_reclaim_acquire+0xae/0x150
[ 1231.286480][T18693]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1231.286507][T18693]  should_failslab+0xc2/0x120
[ 1231.286528][T18693]  __kmalloc_noprof+0xd2/0x510
[ 1231.286553][T18693]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1231.286581][T18693]  ? tomoyo_profile+0x47/0x60
[ 1231.286601][T18693]  tomoyo_path_number_perm+0x245/0x580
[ 1231.286621][T18693]  ? tomoyo_path_number_perm+0x237/0x580
[ 1231.286647][T18693]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1231.286670][T18693]  ? find_held_lock+0x2b/0x80
[ 1231.286724][T18693]  ? find_held_lock+0x2b/0x80
[ 1231.286744][T18693]  ? hook_file_ioctl_common+0x145/0x410
[ 1231.286767][T18693]  ? __fget_files+0x20e/0x3c0
[ 1231.286791][T18693]  security_file_ioctl+0x9b/0x240
[ 1231.286818][T18693]  __x64_sys_ioctl+0xb7/0x210
[ 1231.286847][T18693]  do_syscall_64+0xcd/0x4c0
[ 1231.286869][T18693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.286886][T18693] RIP: 0033:0x7fd4df18ebe9
[ 1231.286900][T18693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1231.286916][T18693] RSP: 002b:00007fd4dd3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1231.286931][T18693] RAX: ffffffffffffffda RBX: 00007fd4df3b5fa0 RCX: 00007fd4df18ebe9
[ 1231.286943][T18693] RDX: 0000200000002640 RSI: 000000004020565a RDI: 0000000000000003
[ 1231.286954][T18693] RBP: 00007fd4dd3f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1231.286965][T18693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1231.286975][T18693] R13: 00007fd4df3b6038 R14: 00007fd4df3b5fa0 R15: 00007ffc5a2b23a8
[ 1231.287000][T18693]  </TASK>
[ 1231.287007][T18693] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1231.435244][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1231.510261][T11317] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1231.520281][T11317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.685671][T11317] usb 9-1: Product: syz
[ 1231.689893][T11317] usb 9-1: Manufacturer: syz
[ 1231.695319][T11317] usb 9-1: SerialNumber: syz
[ 1231.712111][T11317] usb 9-1: config 0 descriptor??
[ 1231.937751][T11317] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1232.463519][T11317] usb 9-1: Please update to version 0.2 or newer
[ 1232.562396][T18711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2949'.
[ 1232.583470][T18711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2949'.
[ 1232.674230][T11317] usb 9-1: USB disconnect, device number 44
[ 1233.820514][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2953'.
[ 1234.320797][T18729] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2954'.
[ 1234.330153][T18729] 0�X��D: renamed from 
31�X��D (while UP)
[ 1234.428138][T18729] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[ 1234.460694][   T30] audit: type=1400 audit(1756131796.117:656): avc:  denied  { ioctl } for  pid=18731 comm="syz.5.2955" path="socket:[100681]" dev="sockfs" ino=100681 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1234.674596][T18706] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2947'.
[ 1235.178018][T18735] hub 1-0:1.0: USB hub found
[ 1235.351077][T18735] hub 1-0:1.0: 1 port detected
[ 1237.134260][T18763] FAULT_INJECTION: forcing a failure.
[ 1237.134260][T18763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1237.157112][T18763] CPU: 0 UID: 0 PID: 18763 Comm: syz.8.2959 Not tainted syzkaller #0 PREEMPT(full) 
[ 1237.157140][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1237.157147][T18763] Call Trace:
[ 1237.157151][T18763]  <TASK>
[ 1237.157156][T18763]  dump_stack_lvl+0x16c/0x1f0
[ 1237.157173][T18763]  should_fail_ex+0x512/0x640
[ 1237.157189][T18763]  _copy_from_user+0x2e/0xd0
[ 1237.157206][T18763]  copy_msghdr_from_user+0x98/0x160
[ 1237.157220][T18763]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1237.157239][T18763]  ___sys_sendmsg+0xfe/0x1d0
[ 1237.157252][T18763]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1237.157270][T18763]  ? find_held_lock+0x2b/0x80
[ 1237.157294][T18763]  __sys_sendmmsg+0x200/0x420
[ 1237.157308][T18763]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1237.157324][T18763]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1237.157336][T18763]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1237.157359][T18763]  ? fput+0x9b/0xd0
[ 1237.157377][T18763]  ? xfd_validate_state+0x61/0x180
[ 1237.157395][T18763]  ? __pfx_ksys_write+0x10/0x10
[ 1237.157409][T18763]  __x64_sys_sendmmsg+0x9c/0x100
[ 1237.157422][T18763]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1237.157433][T18763]  do_syscall_64+0xcd/0x4c0
[ 1237.157447][T18763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.157459][T18763] RIP: 0033:0x7f93c958ebe9
[ 1237.157469][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1237.157481][T18763] RSP: 002b:00007f93c77f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1237.157492][T18763] RAX: ffffffffffffffda RBX: 00007f93c97b6090 RCX: 00007f93c958ebe9
[ 1237.157499][T18763] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005
[ 1237.157506][T18763] RBP: 00007f93c77f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1237.157513][T18763] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[ 1237.157519][T18763] R13: 00007f93c97b6128 R14: 00007f93c97b6090 R15: 00007ffe7586cc88
[ 1237.157534][T18763]  </TASK>
[ 1238.211662][ T5916] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1238.233006][T18773] SELinux: failed to load policy
[ 1238.370299][ T5916] usb 7-1: Using ep0 maxpacket: 16
[ 1238.557044][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.567095][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.601376][ T5916] usb 7-1: config 0 has no interfaces?
[ 1238.628419][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1238.650117][ T5916] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1238.658821][ T5916] usb 7-1: Manufacturer: syz
[ 1238.670794][ T5916] usb 7-1: config 0 descriptor??
[ 1239.750798][T18791] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2968'.
[ 1239.760047][T18791] 0�X��D: renamed from macvtap0 (while UP)
[ 1239.921034][T11456] usb 7-1: USB disconnect, device number 48
[ 1239.934642][T18791] 0�X��D: entered allmulticast mode
[ 1239.940238][T18791] veth0_macvtap: entered allmulticast mode
[ 1239.947659][T18791] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[ 1240.216791][T18791] hub 1-0:1.0: USB hub found
[ 1240.228733][T18791] hub 1-0:1.0: 1 port detected
[ 1240.519376][T18788] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2967'.
[ 1240.730184][ T1207] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[ 1240.929406][ T1207] usb 7-1: config 0 has an invalid interface number: 128 but max is 0
[ 1240.948336][ T1207] usb 7-1: config 0 has no interface number 0
[ 1240.960308][ T1207] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1240.986231][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.000186][ T5965] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[ 1241.038198][ T1207] usb 7-1: Product: syz
[ 1241.050883][ T1207] usb 7-1: Manufacturer: syz
[ 1241.085975][ T1207] usb 7-1: SerialNumber: syz
[ 1241.104113][ T1207] usb 7-1: config 0 descriptor??
[ 1241.161676][ T5965] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1241.184543][ T5965] usb 6-1: config 0 has no interface number 0
[ 1241.216894][ T5965] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1241.260663][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.296913][ T5965] usb 6-1: Product: syz
[ 1241.313103][ T5965] usb 6-1: Manufacturer: syz
[ 1241.317750][ T5965] usb 6-1: SerialNumber: syz
[ 1241.317908][T18805] kvm: pic: non byte read
[ 1241.337361][ T1207] usb 7-1: Firmware version (0.0) predates our first public release.
[ 1241.355909][ T1207] usb 7-1: Please update to version 0.2 or newer
[ 1241.377974][ T5965] usb 6-1: config 0 descriptor??
[ 1241.458712][ T1207] usb 7-1: USB disconnect, device number 49
[ 1241.735598][ T5965] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1241.744834][ T5965] usb 6-1: Please update to version 0.2 or newer
[ 1242.421877][ T5965] usb 6-1: USB disconnect, device number 56
[ 1242.773041][   T30] audit: type=1400 audit(1756131804.407:657): avc:  denied  { accept } for  pid=18825 comm="syz.6.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1242.817843][T18832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2979'.
[ 1243.366764][T18824] netlink: 'syz.8.2976': attribute type 6 has an invalid length.
[ 1244.261121][T18853] kvm: pic: non byte read
[ 1245.400458][T11456] usb 10-1: new full-speed USB device number 69 using dummy_hcd
[ 1245.561449][T18868] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2987'.
[ 1246.189806][T11456] usb 10-1: config 0 has an invalid interface number: 128 but max is 0
[ 1246.214783][T11456] usb 10-1: config 0 has no interface number 0
[ 1246.225042][T11456] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1246.236597][T11456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.246190][T11456] usb 10-1: Product: syz
[ 1246.250611][T11456] usb 10-1: Manufacturer: syz
[ 1246.255794][T11456] usb 10-1: SerialNumber: syz
[ 1246.287719][T11456] usb 10-1: config 0 descriptor??
[ 1246.507692][T11456] usb 10-1: Firmware version (0.0) predates our first public release.
[ 1246.570908][T11456] usb 10-1: Please update to version 0.2 or newer
[ 1246.615112][T11456] usb 10-1: USB disconnect, device number 69
[ 1246.956662][   T30] audit: type=1400 audit(1756131808.617:658): avc:  denied  { ioctl } for  pid=18874 comm="syz.5.2990" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1248.209179][T18891] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1250.554814][T18936] mkiss: ax0: crc mode is auto.
[ 1252.257755][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'.
[ 1253.075847][T18954] netlink: 'syz.6.3005': attribute type 6 has an invalid length.
[ 1253.479109][T18957] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1253.599354][T18963] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3004'.
[ 1253.784025][T18957] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1253.915788][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'.
[ 1254.102201][T18957] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.467192][T18957] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.679958][T18978] netlink: 'syz.9.3010': attribute type 6 has an invalid length.
[ 1255.297251][T15311] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1255.588634][   T78] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1255.619536][   T78] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1255.652853][   T78] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1255.684625][T18987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1256.820459][T11440] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1257.784039][T11440] usb 6-1: Using ep0 maxpacket: 16
[ 1257.812354][T11440] usb 6-1: config 0 has no interfaces?
[ 1257.821788][T11440] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1257.831080][T11440] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1257.839067][T11440] usb 6-1: Manufacturer: syz
[ 1258.275451][T11440] usb 6-1: config 0 descriptor??
[ 1258.306583][T19015] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3018'.
[ 1259.636126][T19014] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3017'.
[ 1259.893904][   T30] audit: type=1400 audit(1756131821.557:659): avc:  denied  { ioctl } for  pid=19029 comm="syz.7.3022" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1260.743371][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'.
[ 1261.017012][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3026'.
[ 1261.117924][T19046] fuse: Bad value for 'fd'
[ 1261.172139][T17245] usb 6-1: USB disconnect, device number 57
[ 1261.886176][T19065] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.180692][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3030'.
[ 1262.207341][T19065] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.156266][T19065] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.250172][T19083] FAULT_INJECTION: forcing a failure.
[ 1263.250172][T19083] name failslab, interval 1, probability 0, space 0, times 0
[ 1263.294750][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.9.3035 Not tainted syzkaller #0 PREEMPT(full) 
[ 1263.294778][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1263.294789][T19083] Call Trace:
[ 1263.294796][T19083]  <TASK>
[ 1263.294804][T19083]  dump_stack_lvl+0x16c/0x1f0
[ 1263.294830][T19083]  should_fail_ex+0x512/0x640
[ 1263.294851][T19083]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[ 1263.294874][T19083]  should_failslab+0xc2/0x120
[ 1263.294894][T19083]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[ 1263.294913][T19083]  ? __d_alloc+0x32/0xae0
[ 1263.294940][T19083]  __d_alloc+0x32/0xae0
[ 1263.294965][T19083]  d_alloc_parallel+0x111/0x1480
[ 1263.295000][T19083]  ? find_held_lock+0x2b/0x80
[ 1263.295025][T19083]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1263.295056][T19083]  ? __d_lookup+0x266/0x4a0
[ 1263.295090][T19083]  fuse_readdir_uncached+0xd83/0x1be0
[ 1263.295124][T19083]  ? __kernel_text_address+0xd/0x40
[ 1263.295144][T19083]  ? unwind_get_return_address+0x59/0xa0
[ 1263.295166][T19083]  ? __pfx_fuse_readdir_uncached+0x10/0x10
[ 1263.295198][T19083]  ? counter_sysfs_add+0xa99/0x1240
[ 1263.295229][T19083]  ? look_up_lock_class+0x59/0x150
[ 1263.295250][T19083]  ? register_lock_class+0x41/0x4c0
[ 1263.295279][T19083]  ? __lock_acquire+0x62e/0x1ce0
[ 1263.295308][T19083]  ? look_up_lock_class+0x6b/0x150
[ 1263.295327][T19083]  ? register_lock_class+0x41/0x4c0
[ 1263.295396][T19083]  fuse_readdir+0x9f5/0x1d90
[ 1263.295418][T19083]  ? down_read_killable+0x220/0x4b0
[ 1263.295440][T19083]  ? find_held_lock+0x2b/0x80
[ 1263.295460][T19083]  ? __pfx_down_read_killable+0x10/0x10
[ 1263.295482][T19083]  ? avc_policy_seqno+0x9/0x20
[ 1263.295500][T19083]  ? selinux_file_permission+0x126/0x660
[ 1263.295533][T19083]  iterate_dir+0x296/0xaf0
[ 1263.295565][T19083]  __x64_sys_getdents+0x13c/0x2b0
[ 1263.295583][T19083]  ? __pfx___x64_sys_getdents+0x10/0x10
[ 1263.295606][T19083]  ? __pfx_filldir+0x10/0x10
[ 1263.295643][T19083]  do_syscall_64+0xcd/0x4c0
[ 1263.295666][T19083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.295684][T19083] RIP: 0033:0x7f8a4f98ebe9
[ 1263.295701][T19083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1263.295718][T19083] RSP: 002b:00007f8a50820038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 1263.295736][T19083] RAX: ffffffffffffffda RBX: 00007f8a4fbb5fa0 RCX: 00007f8a4f98ebe9
[ 1263.295748][T19083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1263.295758][T19083] RBP: 00007f8a50820090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.295769][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.295779][T19083] R13: 00007f8a4fbb6038 R14: 00007f8a4fbb5fa0 R15: 00007ffeb0c22f28
[ 1263.295804][T19083]  </TASK>
[ 1263.595672][T19089] kvm: pic: single mode not supported
[ 1263.595747][T19089] kvm: pic: level sensitive irq not supported
[ 1263.716433][T19091] SELinux: failed to load policy
[ 1263.901657][T19065] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1264.401855][   T78] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.432811][   T78] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.560760][   T78] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.576263][   T78] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.779550][T19104] kvm: pic: single mode not supported
[ 1264.780610][T19104] kvm: pic: single mode not supported
[ 1264.786407][T19104] kvm: pic: single mode not supported
[ 1264.870368][T11440] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1264.941658][T11184] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1265.040131][T11440] usb 9-1: Using ep0 maxpacket: 16
[ 1265.046737][T11440] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1265.057368][T11440] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1265.092478][T11440] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1265.101747][T11184] usb 7-1: Using ep0 maxpacket: 16
[ 1265.232924][T11184] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1265.245151][T11440] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1265.317045][T11440] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.326662][T11184] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1265.339728][T11440] usb 9-1: Product: syz
[ 1265.344715][T11440] usb 9-1: Manufacturer: syz
[ 1265.366134][T11184] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1265.375926][T11440] usb 9-1: SerialNumber: syz
[ 1265.391662][T11184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.423563][T19112] mkiss: ax0: crc mode is auto.
[ 1266.469823][T11184] usb 7-1: config 0 descriptor??
[ 1266.704971][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3044'.
[ 1266.720278][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3044'.
[ 1266.796700][T11440] usb 9-1: 0:2 : does not exist
[ 1266.902368][T11184] HID 045e:07da: Invalid code 65791 type 1
[ 1266.937009][T11184] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000F/input/input20
[ 1267.050377][T11184] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 1267.157535][T19125] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3045'.
[ 1267.722602][T19120] netlink: 5872 bytes leftover after parsing attributes in process `syz.9.3043'.
[ 1267.916612][T11317] usb 7-1: USB disconnect, device number 50
[ 1268.391934][T19129] fido_id[19129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[ 1268.463831][T11440] usb 9-1: 1:0: failed to get current value for ch 0 (-22)
[ 1268.495513][T11440] usb 9-1: USB disconnect, device number 45
[ 1268.540625][T11441] udevd[11441]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1268.976321][T19139] netlink: 5872 bytes leftover after parsing attributes in process `syz.7.3047'.
[ 1269.014446][T19139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3047'.
[ 1269.027010][T19139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3047'.
[ 1271.180348][T11440] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1271.904821][T11440] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1271.933950][T11440] usb 7-1: config 2 has an invalid interface number: 73 but max is 0
[ 1271.948491][T11440] usb 7-1: config 2 has no interface number 0
[ 1271.980668][T11440] usb 7-1: config 2 interface 73 has no altsetting 0
[ 1272.116365][T11440] usb 7-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1272.138547][T11440] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1272.587329][T11440] usb 7-1: Product: syz
[ 1272.592795][T11440] usb 7-1: Manufacturer: syz
[ 1272.597506][T11440] usb 7-1: SerialNumber: syz
[ 1272.614058][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3059'.
[ 1272.636556][T19178] fuse: Unknown parameter '0x0000000000000003'
[ 1273.217121][T19186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1275.134700][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3062'.
[ 1275.474265][T11440] qmi_wwan 7-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1275.520452][T11440] usb 7-1: USB disconnect, device number 51
[ 1275.842785][T19215] netlink: 5872 bytes leftover after parsing attributes in process `syz.7.3067'.
[ 1275.881621][T19215] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3067'.
[ 1275.891109][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3067'.
[ 1276.199757][T19219] kvm: pic: single mode not supported
[ 1276.200446][T19219] kvm: pic: single mode not supported
[ 1276.206385][T19219] kvm: pic: single mode not supported
[ 1276.971184][T19227] fuse: Unknown parameter '0x0000000000000003'
[ 1277.096453][T19225] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3069'.
[ 1277.777154][T19238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1278.818051][T19245] tipc: Started in network mode
[ 1278.826245][T19245] tipc: Node identity f6b2786d229b, cluster identity 4711
[ 1278.860931][T19245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1279.289086][T19245] syzkaller0: entered promiscuous mode
[ 1279.301337][T19245] syzkaller0: entered allmulticast mode
[ 1279.365153][T19245] tipc: Resetting bearer <eth:syzkaller0>
[ 1279.471173][T19244] tipc: Resetting bearer <eth:syzkaller0>
[ 1279.664292][T19244] tipc: Disabling bearer <eth:syzkaller0>
[ 1279.748181][T19255] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3078'.
[ 1280.424051][T19266] syz.9.3081 uses obsolete (PF_INET,SOCK_PACKET)
[ 1281.291225][T19264] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3080'.
[ 1283.567990][T19300] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.726834][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3089'.
[ 1283.891273][T19300] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.983187][T19300] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.077078][T19310] SELinux: failed to load policy
[ 1284.660057][ T1207] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1284.733873][T19300] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.814877][ T9366] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.860175][ T1207] usb 8-1: Using ep0 maxpacket: 16
[ 1284.871816][ T1207] usb 8-1: config 0 has no interfaces?
[ 1284.901225][ T1207] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1284.913162][ T9366] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.938127][ T9366] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.948968][ T1207] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1284.963749][ T1207] usb 8-1: Manufacturer: syz
[ 1284.968454][ T9366] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.982701][ T1207] usb 8-1: config 0 descriptor??
[ 1286.334139][T11317] usb 8-1: USB disconnect, device number 61
[ 1286.556599][T19336] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.587545][T19338] netlink: 5872 bytes leftover after parsing attributes in process `syz.7.3097'.
[ 1286.633103][T19338] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3097'.
[ 1286.705890][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3099'.
[ 1286.857973][T19345] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3098'.
[ 1287.006674][T19336] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.154357][T19336] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.673095][T19336] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.695633][T19348] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1288.029568][T19351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1288.089607][T19356] syzkaller0: entered promiscuous mode
[ 1288.096223][T19358] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1288.162969][T19356] syzkaller0: entered allmulticast mode
[ 1288.209012][T19351] tipc: Resetting bearer <eth:syzkaller0>
[ 1288.356950][T19349] tipc: Resetting bearer <eth:syzkaller0>
[ 1288.394520][T19361] netlink: 5872 bytes leftover after parsing attributes in process `syz.9.3103'.
[ 1288.436297][T19349] tipc: Disabling bearer <eth:syzkaller0>
[ 1288.515938][T19366] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3103'.
[ 1288.667337][T19366] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3103'.
[ 1289.850835][T19375] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3106'.
[ 1290.060450][ T5923] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1290.286647][ T5923] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1290.294800][T11317] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1290.316437][ T5923] usb 9-1: config 2 has an invalid interface number: 73 but max is 0
[ 1290.325648][ T5923] usb 9-1: config 2 has no interface number 0
[ 1290.337137][ T5923] usb 9-1: config 2 interface 73 has no altsetting 0
[ 1290.364764][ T5923] usb 9-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1290.384314][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.397104][ T5923] usb 9-1: Product: syz
[ 1290.402750][ T5923] usb 9-1: Manufacturer: syz
[ 1290.430860][ T5923] usb 9-1: SerialNumber: syz
[ 1290.455940][ T3468] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1290.481838][T11317] usb 6-1: Using ep0 maxpacket: 16
[ 1290.503582][T11317] usb 6-1: config 0 has no interfaces?
[ 1290.521418][T11317] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1290.561461][T11181] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1290.569855][T11317] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1290.579845][T11317] usb 6-1: Manufacturer: syz
[ 1290.600979][T11317] usb 6-1: config 0 descriptor??
[ 1290.612398][T11181] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1290.744356][ T3468] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1290.777639][T19380] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1290.796940][T19389] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3111'.
[ 1291.342955][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3111'.
[ 1291.460598][ T5923] qmi_wwan 9-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1291.540094][ T5923] usb 9-1: USB disconnect, device number 46
[ 1292.016089][T19396] serio: Serial port ptm0
[ 1292.187736][T19393] 9pnet_fd: Insufficient options for proto=fd
[ 1292.734562][T11184] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1292.921979][T11184] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 1293.072954][T11184] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1293.084039][T11184] usb 7-1: config 220 has no interface number 2
[ 1293.117155][T11184] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1293.150797][T11184] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1293.577752][T11184] usb 7-1: config 220 interface 76 has no altsetting 0
[ 1293.586074][T11184] usb 7-1: config 220 interface 1 has no altsetting 0
[ 1293.614769][T11184] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1293.635867][ T1207] usb 6-1: USB disconnect, device number 58
[ 1293.645345][T11184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1293.665851][T11184] usb 7-1: Product: syz
[ 1293.677021][T11184] usb 7-1: Manufacturer: syz
[ 1293.695756][T11184] usb 7-1: SerialNumber: syz
[ 1293.969537][T11184] usb 7-1: selecting invalid altsetting 0
[ 1293.983915][T11184] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[ 1294.054420][T11184] usb 7-1: No valid video chain found.
[ 1294.138259][T11184] usb 7-1: selecting invalid altsetting 0
[ 1294.171681][T11184] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 1294.174266][T19418] netlink: 5872 bytes leftover after parsing attributes in process `syz.9.3118'.
[ 1294.221049][T11184] usb 7-1: USB disconnect, device number 52
[ 1294.299401][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3118'.
[ 1294.377574][T19419] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3118'.
[ 1294.504409][T19422] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3117'.
[ 1295.519871][T19439] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3121'.
[ 1295.628788][T19443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1295.639085][T19443] syzkaller0: entered promiscuous mode
[ 1295.645094][T19443] syzkaller0: entered allmulticast mode
[ 1295.693868][T19443] tipc: Resetting bearer <eth:syzkaller0>
[ 1295.821759][T19442] tipc: Resetting bearer <eth:syzkaller0>
[ 1295.840769][   T30] audit: type=1400 audit(1756131857.457:660): avc:  denied  { append } for  pid=19440 comm="syz.8.3124" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[ 1295.877456][T19442] tipc: Disabling bearer <eth:syzkaller0>
[ 1298.093962][T19465] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3127'.
[ 1299.166097][T19495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1299.218082][T19498] netlink: 5872 bytes leftover after parsing attributes in process `syz.5.3135'.
[ 1299.230701][T19495] syzkaller0: entered promiscuous mode
[ 1299.236612][T19495] syzkaller0: entered allmulticast mode
[ 1299.254348][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3135'.
[ 1299.263405][T19496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3135'.
[ 1299.373771][T17245] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1299.448184][T19501] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.506732][T19495] tipc: Resetting bearer <eth:syzkaller0>
[ 1299.517435][T19492] tipc: Resetting bearer <eth:syzkaller0>
[ 1299.553474][T19492] tipc: Disabling bearer <eth:syzkaller0>
[ 1299.576664][T19501] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.587286][T17245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1299.601155][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3139'.
[ 1299.642287][T17245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1299.671305][T17245] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1299.720517][T17245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.731252][T19501] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.774445][T17245] usb 7-1: config 0 descriptor??
[ 1299.839983][T19501] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.923677][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.930768][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.144855][   T37] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.239987][T15311] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.260207][T19518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.276837][T19518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.313778][T15311] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.419795][T19520] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3142'.
[ 1300.490484][ T3487] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1302.050030][ T5965] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1302.200067][ T5965] usb 9-1: device descriptor read/64, error -71
[ 1302.440919][ T5965] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1302.589988][ T5965] usb 9-1: device descriptor read/64, error -71
[ 1302.891481][ T5965] usb usb9-port1: attempt power cycle
[ 1303.113421][T19552] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3148'.
[ 1303.190506][T17245] usbhid 7-1:0.0: can't add hid device: -71
[ 1303.250812][T17245] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1303.274902][T17245] usb 7-1: USB disconnect, device number 53
[ 1303.378528][ T5965] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1303.410701][ T5965] usb 9-1: device descriptor read/8, error -71
[ 1303.669969][ T5965] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1303.931916][ T5965] usb 9-1: device descriptor read/8, error -71
[ 1304.056593][T19561] netlink: 5872 bytes leftover after parsing attributes in process `syz.9.3152'.
[ 1304.127213][ T5965] usb usb9-port1: unable to enumerate USB device
[ 1304.137697][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3152'.
[ 1304.147211][T19561] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3152'.
[ 1304.688877][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3158'.
[ 1305.372601][T19583] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3156'.
[ 1305.758683][T19589] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1305.863282][T19589] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1305.866113][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3161'.
[ 1305.964400][T19589] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1306.073497][T19589] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1306.315221][   T37] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.351148][T11184] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1306.437589][   T37] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.615746][T11184] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1306.710117][T11184] usb 10-1: config 2 has an invalid interface number: 73 but max is 0
[ 1306.713149][ T3468] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.718757][T11184] usb 10-1: config 2 has no interface number 0
[ 1306.743096][T11184] usb 10-1: config 2 interface 73 has no altsetting 0
[ 1306.756670][T11184] usb 10-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1306.780049][ T3468] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.810867][T11184] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.819071][T11184] usb 10-1: Product: syz
[ 1306.838716][T11184] usb 10-1: Manufacturer: syz
[ 1306.878530][T11184] usb 10-1: SerialNumber: syz
[ 1306.940233][ T5923] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1306.957759][T19605] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3164'.
[ 1307.351779][T19594] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1307.500020][ T5923] usb 6-1: Using ep0 maxpacket: 16
[ 1307.523912][ T5923] usb 6-1: config 0 has no interfaces?
[ 1307.531036][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1307.540451][ T5923] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1307.540848][T11184] qmi_wwan 10-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1307.568592][ T5923] usb 6-1: Manufacturer: syz
[ 1307.628914][T11184] usb 10-1: USB disconnect, device number 70
[ 1307.629317][ T5923] usb 6-1: config 0 descriptor??
[ 1307.694116][T19610] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3166'.
[ 1308.450831][T19616] netlink: 5872 bytes leftover after parsing attributes in process `syz.8.3167'.
[ 1308.472835][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3167'.
[ 1308.481936][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3167'.
[ 1309.229114][T19630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1309.568552][T11440] usb 6-1: USB disconnect, device number 59
[ 1311.080018][T11440] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1311.199024][T19656] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3180'.
[ 1311.260411][ T5923] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[ 1311.287655][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'.
[ 1311.300658][T11440] usb 9-1: Using ep0 maxpacket: 16
[ 1311.355730][T11440] usb 9-1: config 0 has no interfaces?
[ 1311.382972][T11440] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1311.413277][T11440] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1311.455446][T11440] usb 9-1: Manufacturer: syz
[ 1311.470323][ T5923] usb 6-1: device descriptor read/64, error -71
[ 1311.486031][T11440] usb 9-1: config 0 descriptor??
[ 1312.275533][ T5923] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 1312.610391][ T5923] usb 6-1: device descriptor read/64, error -71
[ 1312.730883][ T5923] usb usb6-port1: attempt power cycle
[ 1312.883828][T19674] SELinux: failed to load policy
[ 1313.140189][ T5923] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[ 1313.954140][ T5923] usb 6-1: device descriptor read/8, error -71
[ 1314.343518][T19686] netlink: 5872 bytes leftover after parsing attributes in process `syz.7.3186'.
[ 1314.369649][T19686] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3186'.
[ 1314.378725][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3186'.
[ 1314.988800][T11317] usb 9-1: USB disconnect, device number 51
[ 1315.333883][T19701] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3191'.
[ 1315.373884][T19703] FAULT_INJECTION: forcing a failure.
[ 1315.373884][T19703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1315.420074][T19703] CPU: 1 UID: 0 PID: 19703 Comm: syz.8.3192 Not tainted syzkaller #0 PREEMPT(full) 
[ 1315.420102][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1315.420112][T19703] Call Trace:
[ 1315.420119][T19703]  <TASK>
[ 1315.420126][T19703]  dump_stack_lvl+0x16c/0x1f0
[ 1315.420151][T19703]  should_fail_ex+0x512/0x640
[ 1315.420175][T19703]  _copy_from_user+0x2e/0xd0
[ 1315.420198][T19703]  move_addr_to_kernel+0x65/0x170
[ 1315.420231][T19703]  __copy_msghdr+0x386/0x470
[ 1315.420250][T19703]  copy_msghdr_from_user+0xc1/0x160
[ 1315.420269][T19703]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1315.420287][T19703]  ? counter_sysfs_add+0xa99/0x1240
[ 1315.420309][T19703]  ? __pfx__kstrtoull+0x10/0x10
[ 1315.420330][T19703]  ___sys_sendmsg+0xfe/0x1d0
[ 1315.420351][T19703]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1315.420380][T19703]  ? find_held_lock+0x2b/0x80
[ 1315.420415][T19703]  __sys_sendmmsg+0x200/0x420
[ 1315.420430][T19703]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1315.420447][T19703]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1315.420466][T19703]  ? fput+0x9b/0xd0
[ 1315.420482][T19703]  ? ksys_write+0x1ac/0x250
[ 1315.420494][T19703]  ? __pfx_ksys_write+0x10/0x10
[ 1315.420508][T19703]  __x64_sys_sendmmsg+0x9c/0x100
[ 1315.420520][T19703]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1315.420532][T19703]  do_syscall_64+0xcd/0x4c0
[ 1315.420546][T19703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1315.420558][T19703] RIP: 0033:0x7f93c958ebe9
[ 1315.420568][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1315.420580][T19703] RSP: 002b:00007f93ca328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1315.420591][T19703] RAX: ffffffffffffffda RBX: 00007f93c97b5fa0 RCX: 00007f93c958ebe9
[ 1315.420598][T19703] RDX: 0000000000000001 RSI: 0000200000003b00 RDI: 0000000000000004
[ 1315.420605][T19703] RBP: 00007f93ca328090 R08: 0000000000000000 R09: 0000000000000000
[ 1315.420612][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1315.420618][T19703] R13: 00007f93c97b6038 R14: 00007f93c97b5fa0 R15: 00007ffe7586cc88
[ 1315.420632][T19703]  </TASK>
[ 1316.100696][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3195'.
[ 1316.166783][T19715] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3194'.
[ 1316.786643][T19728] tmpfs: Unknown parameter 'foE��p������S�2�p�*�����	W~��x���VAg�������]�X��C�4�M3����!�'
[ 1317.105826][   T30] audit: type=1400 audit(1756131878.447:661): avc:  denied  { mounton } for  pid=19726 comm="syz.6.3199" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1317.232283][   T30] audit: type=1400 audit(1756131878.547:662): avc:  denied  { name_bind } for  pid=19717 comm="syz.7.3196" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[ 1317.529825][   T30] audit: type=1400 audit(1756131879.097:663): avc:  denied  { setattr } for  pid=19735 comm="syz.6.3201" name="file0" dev="tmpfs" ino=1936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1317.870111][T11317] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1318.210014][T11317] usb 9-1: Using ep0 maxpacket: 16
[ 1318.232499][T11317] usb 9-1: config 0 has no interfaces?
[ 1318.240289][T11317] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1318.249977][T11317] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1318.258426][T11317] usb 9-1: Manufacturer: syz
[ 1318.286695][T11317] usb 9-1: config 0 descriptor??
[ 1318.647962][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3203'.
[ 1319.040545][T19752] SELinux: failed to load policy
[ 1319.846957][T19759] netlink: 5872 bytes leftover after parsing attributes in process `syz.5.3206'.
[ 1319.877480][T19759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3206'.
[ 1319.887331][T19759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3206'.
[ 1320.088578][T19764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1320.135672][T19764] syzkaller0: entered promiscuous mode
[ 1320.193299][T19764] syzkaller0: entered allmulticast mode
[ 1320.309602][T19764] tipc: Resetting bearer <eth:syzkaller0>
[ 1320.333873][T19763] tipc: Resetting bearer <eth:syzkaller0>
[ 1320.422227][T19763] tipc: Disabling bearer <eth:syzkaller0>
[ 1320.536483][T11184] usb 9-1: USB disconnect, device number 52
[ 1320.601202][T19758] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3205'.
[ 1320.724389][T11317] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1321.361291][T11317] usb 7-1: Using ep0 maxpacket: 16
[ 1321.380330][T11317] usb 7-1: config 0 has no interfaces?
[ 1321.387672][T11317] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1321.408906][T11317] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1321.417194][T11317] usb 7-1: Manufacturer: syz
[ 1321.505886][T19777] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3210'.
[ 1321.567320][T11317] usb 7-1: config 0 descriptor??
[ 1321.835511][T11184] usb 7-1: USB disconnect, device number 54
[ 1322.321804][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3213'.
[ 1322.513673][T19790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1322.564458][T19790] syzkaller0: entered promiscuous mode
[ 1322.571881][T19790] syzkaller0: entered allmulticast mode
[ 1322.591465][T19784] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3212'.
[ 1322.677450][T19790] tipc: Resetting bearer <eth:syzkaller0>
[ 1322.860896][T19788] tipc: Resetting bearer <eth:syzkaller0>
[ 1322.945670][T19795] SELinux: failed to load policy
[ 1323.648257][T11440] tipc: Node number set to 3559487597
[ 1323.751495][T19788] tipc: Disabling bearer <eth:syzkaller0>
[ 1323.865960][   T30] audit: type=1400 audit(1756131885.527:664): avc:  denied  { ioctl } for  pid=19808 comm="syz.6.3218" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1324.126597][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3220'.
[ 1324.136363][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3220'.
[ 1324.512362][T19830] mkiss: ax0: crc mode is auto.
[ 1324.610250][T11184] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1326.551524][T11184] usb 9-1: Using ep0 maxpacket: 16
[ 1326.561181][T19837] netlink: 5872 bytes leftover after parsing attributes in process `syz.5.3221'.
[ 1326.590440][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3221'.
[ 1326.599489][T19837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3221'.
[ 1326.631902][T11184] usb 9-1: config 0 has no interfaces?
[ 1326.652781][T11184] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1326.667529][T11184] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1326.715583][T11184] usb 9-1: Manufacturer: syz
[ 1326.812580][T11184] usb 9-1: config 0 descriptor??
[ 1327.993293][T19855] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3228'.
[ 1328.381147][T19864] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1328.487071][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3230'.
[ 1328.516051][T11440] usb 9-1: USB disconnect, device number 53
[ 1328.552966][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3233'.
[ 1328.646084][T19872] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3231'.
[ 1328.732811][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3232'.
[ 1328.840511][T19864] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.174129][T19864] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.234657][T19864] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.540011][T11440] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1329.719065][T11440] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1329.733528][T11440] usb 8-1: config 2 has an invalid interface number: 73 but max is 0
[ 1329.742089][T11440] usb 8-1: config 2 has no interface number 0
[ 1329.748164][T11440] usb 8-1: config 2 interface 73 has no altsetting 0
[ 1330.446498][T11440] usb 8-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1330.455947][T11440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.532852][T11440] usb 8-1: Product: syz
[ 1330.537203][T11440] usb 8-1: Manufacturer: syz
[ 1330.543346][T11440] usb 8-1: SerialNumber: syz
[ 1330.666669][T19898] mkiss: ax0: crc mode is auto.
[ 1330.881248][T19900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1332.000266][T11440] qmi_wwan 8-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1332.032506][T11440] usb 8-1: USB disconnect, device number 62
[ 1332.161095][T11181] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.233977][ T3487] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.252804][T11181] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.282619][T11181] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.590497][T19909] __nla_validate_parse: 1 callbacks suppressed
[ 1332.590526][T19909] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3241'.
[ 1333.210682][T11317] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1333.260480][T19916] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3242'.
[ 1333.393424][T11317] usb 7-1: Using ep0 maxpacket: 16
[ 1333.404856][T11317] usb 7-1: config 0 has no interfaces?
[ 1333.416769][T11317] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1333.434525][T19927] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3244'.
[ 1333.483609][T11440] usb 8-1: new full-speed USB device number 63 using dummy_hcd
[ 1333.570069][T11317] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1333.616850][T11317] usb 7-1: Manufacturer: syz
[ 1333.642402][T11317] usb 7-1: config 0 descriptor??
[ 1333.662187][T11440] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[ 1333.717831][T11440] usb 8-1: config 0 has no interface number 0
[ 1333.760330][T11440] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1334.010008][T11440] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1334.022919][T11440] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1334.032853][T11440] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1334.041181][T11440] usb 8-1: Product: syz
[ 1334.130315][T11440] usb 8-1: SerialNumber: syz
[ 1334.314059][T11440] usb 8-1: config 0 descriptor??
[ 1334.321102][T19926] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1334.362531][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3247'.
[ 1334.373341][T11440] cm109 8-1:0.8: invalid payload size 64, expected 4
[ 1334.381488][T11440] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input21
[ 1334.626560][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.635513][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.642749][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.650210][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.657387][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.664781][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.671929][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.679023][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.686040][T11440] usb 8-1: USB disconnect, device number 63
[ 1334.692146][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1334.692160][    C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1334.979823][T11440] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1336.049942][T19956] mkiss: ax0: crc mode is auto.
[ 1336.300033][T11440] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1337.177310][T11440] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1337.197864][T11440] usb 8-1: config 2 has an invalid interface number: 73 but max is 0
[ 1337.249787][T11440] usb 8-1: config 2 has no interface number 0
[ 1337.292363][T11440] usb 8-1: config 2 interface 73 has no altsetting 0
[ 1337.488286][T19963] netlink: 5872 bytes leftover after parsing attributes in process `syz.9.3254'.
[ 1337.515529][T19963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3254'.
[ 1337.538641][T11440] usb 8-1: New USB device found, idVendor=12d1, idProduct=999e, bcdDevice=b7.b0
[ 1337.554353][T11184] usb 7-1: USB disconnect, device number 55
[ 1337.561227][T19963] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3254'.
[ 1337.570482][T11440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1337.600121][T11440] usb 8-1: Product: syz
[ 1337.604405][T11440] usb 8-1: Manufacturer: syz
[ 1337.609004][T11440] usb 8-1: SerialNumber: syz
[ 1338.250694][T19979] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1338.290256][T19953] nvme_fabrics: unknown parameter or missing value '�3`@����*���@�=�+��LB���ف���ٕ1���B5��N�^�aA�~P�䶘(�t�Z[��x' in ctrl creation request
[ 1338.599065][T11440] qmi_wwan 8-1:2.73: probe with driver qmi_wwan failed with error -22
[ 1338.647949][T11440] usb 8-1: USB disconnect, device number 64
[ 1340.201777][T19998] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.354747][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3263'.
[ 1341.052718][   T30] audit: type=1400 audit(1756131902.397:665): avc:  denied  { write } for  pid=20001 comm="syz.6.3264" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1341.105123][T19998] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.248641][T19998] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.799373][T20020] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3268'.
[ 1342.153432][ T5923] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1342.193103][T19998] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.380340][ T5923] usb 9-1: Using ep0 maxpacket: 16
[ 1342.393861][ T5923] usb 9-1: config 0 has no interfaces?
[ 1342.415528][ T5923] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1342.430411][ T3487] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.462246][ T3487] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.472076][ T5923] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1342.493152][ T3487] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.514138][ T5923] usb 9-1: Manufacturer: syz
[ 1342.526372][   T30] audit: type=1400 audit(1756131904.147:666): avc:  denied  { setopt } for  pid=20030 comm="syz.6.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1342.597462][ T5923] usb 9-1: config 0 descriptor??
[ 1342.776960][ T3487] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.836126][   T30] audit: type=1400 audit(1756131904.497:667): avc:  denied  { read } for  pid=20032 comm="syz.9.3272" path="socket:[108752]" dev="sockfs" ino=108752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1343.037637][T20027] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3270'.
[ 1343.400267][ T5923] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1343.490458][T11184] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1344.104010][T11184] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1344.110132][ T5923] usb 10-1: Using ep0 maxpacket: 8
[ 1344.113285][T11184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.120361][ T5923] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1344.136349][ T5923] usb 10-1: config 0 has no interface number 0
[ 1344.158260][ T5923] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1344.161623][T11184] usb 6-1: config 0 descriptor??
[ 1344.195344][ T5923] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1344.226363][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.420285][ T5923] usb 10-1: config 0 descriptor??
[ 1344.427076][T11184] ath6kl: Failed to submit usb control message: -71
[ 1344.445704][T11184] ath6kl: unable to send the bmi data to the device: -71
[ 1344.471027][T11184] ath6kl: Unable to send get target info: -71
[ 1344.472751][ T5923] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1344.499759][T11184] ath6kl: Failed to init ath6kl core: -71
[ 1344.561171][T11184] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1344.631260][T11184] usb 6-1: USB disconnect, device number 64
[ 1344.664332][ T5923] usb 9-1: USB disconnect, device number 54
[ 1345.221387][ T5923] usb 10-1: USB disconnect, device number 71
[ 1346.050246][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'.
[ 1346.111256][   T30] audit: type=1400 audit(1756131907.767:668): avc:  denied  { mount } for  pid=20070 comm="syz.5.3282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1346.194708][   T30] audit: type=1400 audit(1756131907.777:669): avc:  denied  { search } for  pid=20070 comm="syz.5.3282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1346.256299][T20082] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3281'.
[ 1346.462689][   T30] audit: type=1400 audit(1756131907.887:670): avc:  denied  { add_name } for  pid=20070 comm="syz.5.3282" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1346.635016][   T30] audit: type=1400 audit(1756131907.897:671): avc:  denied  { create } for  pid=20070 comm="syz.5.3282" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1
[ 1347.548096][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3286'.
[ 1347.876951][T20098] kvm: pic: single mode not supported
[ 1347.876965][T20098] kvm: pic: level sensitive irq not supported
[ 1348.929944][    T9] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[ 1349.140573][    T9] usb 8-1: Using ep0 maxpacket: 16
[ 1349.169953][    T9] usb 8-1: config 0 has no interfaces?
[ 1349.186632][    T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1349.196883][    T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1349.205782][    T9] usb 8-1: Manufacturer: syz
[ 1349.225985][    T9] usb 8-1: config 0 descriptor??
[ 1349.248280][T20111] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1349.434856][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3291'.
[ 1350.127562][T20125] SELinux: failed to load policy
[ 1350.920601][T20111] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1350.958107][T20126] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3290'.
[ 1351.045014][   T30] audit: type=1400 audit(1756131912.707:672): avc:  denied  { connect } for  pid=20128 comm="syz.8.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1351.097556][T20111] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1351.165321][   T30] audit: type=1400 audit(1756131912.737:673): avc:  denied  { bind } for  pid=20128 comm="syz.8.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1351.197129][   T30] audit: type=1400 audit(1756131912.797:674): avc:  denied  { shutdown } for  pid=20128 comm="syz.8.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1351.235565][   T30] audit: type=1400 audit(1756131912.807:675): avc:  denied  { write } for  pid=20128 comm="syz.8.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1351.336316][T20111] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1352.240996][   T78] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.251869][T11181] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.331596][T11181] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.394944][    T9] usb 8-1: USB disconnect, device number 65
[ 1352.396916][T11181] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.413150][T20141] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3297'.
[ 1352.466190][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.476512][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3297'.
[ 1352.486423][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.499461][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.513484][T20144] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1352.529395][T20144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1352.656516][   T30] audit: type=1400 audit(1756131914.297:676): avc:  denied  { view } for  pid=20139 comm="syz.9.3298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[ 1352.705436][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.727013][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.814974][T17245] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1352.884509][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.924938][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1352.977695][T20144] wlan1 speed is unknown, defaulting to 1000
[ 1353.554784][T17245] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1353.618051][T17245] usb 7-1: config 0 has no interface number 0
[ 1353.693938][T17245] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1354.106090][T17245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.120288][T17245] usb 7-1: Product: syz
[ 1354.163812][T17245] usb 7-1: Manufacturer: syz
[ 1354.169741][T17245] usb 7-1: SerialNumber: syz
[ 1354.190583][T17245] usb 7-1: config 0 descriptor??
[ 1355.066080][T17245] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1355.083976][T17245] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1355.095596][T17245] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1355.104187][T17245] usb 7-1: media controller created
[ 1355.128790][T17245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1355.374999][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3299'.
[ 1355.554478][T20177] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.175666][T20177] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.185696][   T30] audit: type=1400 audit(1756131917.827:677): avc:  denied  { write } for  pid=20143 comm="syz.6.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1356.244917][T17245] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 1356.274648][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3307'.
[ 1356.284157][T20180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3304'.
[ 1356.316696][T17245] usb 7-1: USB disconnect, device number 56
[ 1356.620278][T20177] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1356.921405][T20188] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.024747][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'.
[ 1357.218928][T20177] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.636681][T20188] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.796710][T20188] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.883115][T20199] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3310'.
[ 1357.934852][T20200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3311'.
[ 1357.953674][T20188] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.976998][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3311'.
[ 1358.052075][T11181] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.091668][ T9366] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.161359][ T3468] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.223743][ T3468] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.622847][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3313'.
[ 1358.632856][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3313'.
[ 1358.838961][T20209] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3314'.
[ 1358.858988][T20211] netlink: 'syz.6.3313': attribute type 21 has an invalid length.
[ 1359.299686][ T3468] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.341867][   T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.378107][   T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.425205][ T3468] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.459455][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3319'.
[ 1359.666311][   T30] audit: type=1400 audit(1756131921.317:678): avc:  denied  { write } for  pid=20232 comm="syz.9.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1361.261110][T20250] SELinux: failed to load policy
[ 1361.678913][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.686119][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.330182][T11317] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1362.531219][T11317] usb 9-1: Using ep0 maxpacket: 32
[ 1362.541758][T11317] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1362.650988][T11317] usb 9-1: config 0 has no interface number 0
[ 1362.883778][T11317] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1362.911055][T11317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.945148][T11317] usb 9-1: Product: syz
[ 1362.949653][T11317] usb 9-1: Manufacturer: syz
[ 1362.955953][T11317] usb 9-1: SerialNumber: syz
[ 1363.038109][T11317] usb 9-1: config 0 descriptor??
[ 1363.045873][T11317] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1363.193575][T20272] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3328'.
[ 1363.209651][T20266] netlink: 5872 bytes leftover after parsing attributes in process `syz.5.3326'.
[ 1363.233207][T20266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3326'.
[ 1363.242298][T20266] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3326'.
[ 1363.344188][T11317] usb 9-1: qt2_attach - failed to power on unit: -71
[ 1363.354659][T11317] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71
[ 1363.487916][T11317] usb 9-1: USB disconnect, device number 55
[ 1364.240284][T11184] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1364.313739][T20289] FAULT_INJECTION: forcing a failure.
[ 1364.313739][T20289] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.326530][T20289] CPU: 0 UID: 0 PID: 20289 Comm: syz.9.3333 Not tainted syzkaller #0 PREEMPT(full) 
[ 1364.326555][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1364.326566][T20289] Call Trace:
[ 1364.326573][T20289]  <TASK>
[ 1364.326580][T20289]  dump_stack_lvl+0x16c/0x1f0
[ 1364.326606][T20289]  should_fail_ex+0x512/0x640
[ 1364.326630][T20289]  ? fs_reclaim_acquire+0xae/0x150
[ 1364.326656][T20289]  ? tomoyo_encode2+0x100/0x3e0
[ 1364.326681][T20289]  should_failslab+0xc2/0x120
[ 1364.326702][T20289]  __kmalloc_noprof+0xd2/0x510
[ 1364.326728][T20289]  tomoyo_encode2+0x100/0x3e0
[ 1364.326758][T20289]  tomoyo_encode+0x29/0x50
[ 1364.326782][T20289]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1364.326817][T20289]  tomoyo_path_number_perm+0x245/0x580
[ 1364.326839][T20289]  ? tomoyo_path_number_perm+0x237/0x580
[ 1364.326864][T20289]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1364.326889][T20289]  ? find_held_lock+0x2b/0x80
[ 1364.326940][T20289]  ? find_held_lock+0x2b/0x80
[ 1364.326961][T20289]  ? hook_file_ioctl_common+0x145/0x410
[ 1364.326987][T20289]  ? __fget_files+0x20e/0x3c0
[ 1364.327013][T20289]  security_file_ioctl+0x9b/0x240
[ 1364.327041][T20289]  __x64_sys_ioctl+0xb7/0x210
[ 1364.327072][T20289]  do_syscall_64+0xcd/0x4c0
[ 1364.327095][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.327113][T20289] RIP: 0033:0x7f8a4f98ebe9
[ 1364.327128][T20289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1364.327146][T20289] RSP: 002b:00007f8a507de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1364.327165][T20289] RAX: ffffffffffffffda RBX: 00007f8a4fbb6180 RCX: 00007f8a4f98ebe9
[ 1364.327177][T20289] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008
[ 1364.327189][T20289] RBP: 00007f8a507de090 R08: 0000000000000000 R09: 0000000000000000
[ 1364.327200][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1364.327211][T20289] R13: 00007f8a4fbb6218 R14: 00007f8a4fbb6180 R15: 00007ffeb0c22f28
[ 1364.327237][T20289]  </TASK>
[ 1364.327328][T20289] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1364.540762][T20289] ==================================================================
[ 1364.548812][T20289] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[ 1364.556863][T20289] Read of size 8 at addr ffff88807ec91030 by task syz.9.3333/20289
[ 1364.564740][T20289] 
[ 1364.567045][T20289] CPU: 0 UID: 0 PID: 20289 Comm: syz.9.3333 Not tainted syzkaller #0 PREEMPT(full) 
[ 1364.567061][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1364.567068][T20289] Call Trace:
[ 1364.567074][T20289]  <TASK>
[ 1364.567079][T20289]  dump_stack_lvl+0x116/0x1f0
[ 1364.567094][T20289]  print_report+0xcd/0x630
[ 1364.567107][T20289]  ? __virt_addr_valid+0x81/0x610
[ 1364.567122][T20289]  ? __phys_addr+0xe8/0x180
[ 1364.567137][T20289]  ? sysfs_remove_file_ns+0x63/0x70
[ 1364.567150][T20289]  kasan_report+0xe0/0x110
[ 1364.567162][T20289]  ? sysfs_remove_file_ns+0x63/0x70
[ 1364.567176][T20289]  sysfs_remove_file_ns+0x63/0x70
[ 1364.567188][T20289]  driver_remove_file+0x4a/0x60
[ 1364.567203][T20289]  bus_remove_driver+0x224/0x2c0
[ 1364.567214][T20289]  driver_unregister+0x76/0xb0
[ 1364.567228][T20289]  comedi_device_detach_locked+0x12c/0xa50
[ 1364.567243][T20289]  do_devconfig_ioctl+0x555/0x710
[ 1364.567258][T20289]  ? __mutex_lock+0x1c5/0x1060
[ 1364.567271][T20289]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1364.567290][T20289]  ? find_held_lock+0x2b/0x80
[ 1364.567306][T20289]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1364.567326][T20289]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1364.567344][T20289]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1364.567358][T20289]  ? do_vfs_ioctl+0x128/0x14f0
[ 1364.567375][T20289]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1364.567391][T20289]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1364.567411][T20289]  ? hook_file_ioctl_common+0x145/0x410
[ 1364.567424][T20289]  ? selinux_file_ioctl+0x180/0x270
[ 1364.567440][T20289]  ? selinux_file_ioctl+0xb4/0x270
[ 1364.567456][T20289]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1364.567474][T20289]  __x64_sys_ioctl+0x18b/0x210
[ 1364.567491][T20289]  do_syscall_64+0xcd/0x4c0
[ 1364.567504][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.567516][T20289] RIP: 0033:0x7f8a4f98ebe9
[ 1364.567530][T20289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1364.567541][T20289] RSP: 002b:00007f8a507de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1364.567559][T20289] RAX: ffffffffffffffda RBX: 00007f8a4fbb6180 RCX: 00007f8a4f98ebe9
[ 1364.567571][T20289] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008
[ 1364.567582][T20289] RBP: 00007f8a507de090 R08: 0000000000000000 R09: 0000000000000000
[ 1364.567594][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1364.567602][T20289] R13: 00007f8a4fbb6218 R14: 00007f8a4fbb6180 R15: 00007ffeb0c22f28
[ 1364.567613][T20289]  </TASK>
[ 1364.567617][T20289] 
[ 1364.819609][T20289] Allocated by task 20027:
[ 1364.823995][T20289]  kasan_save_stack+0x33/0x60
[ 1364.828647][T20289]  kasan_save_track+0x14/0x30
[ 1364.833296][T20289]  __kasan_kmalloc+0xaa/0xb0
[ 1364.837856][T20289]  __kmalloc_noprof+0x223/0x510
[ 1364.842682][T20289]  iter_file_splice_write+0x1cc/0x12e0
[ 1364.848141][T20289]  direct_splice_actor+0x18f/0x6c0
[ 1364.853234][T20289]  splice_direct_to_actor+0x345/0xa30
[ 1364.858585][T20289]  do_splice_direct+0x174/0x240
[ 1364.863410][T20289]  do_sendfile+0xb06/0xe50
[ 1364.867801][T20289]  __x64_sys_sendfile64+0x154/0x220
[ 1364.872977][T20289]  do_syscall_64+0xcd/0x4c0
[ 1364.877484][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.883441][T20289] 
[ 1364.885743][T20289] Freed by task 20027:
[ 1364.889789][T20289]  kasan_save_stack+0x33/0x60
[ 1364.894455][T20289]  kasan_save_track+0x14/0x30
[ 1364.899103][T20289]  kasan_save_free_info+0x3b/0x60
[ 1364.904109][T20289]  __kasan_slab_free+0x60/0x70
[ 1364.908843][T20289]  kfree+0x2b4/0x4d0
[ 1364.912724][T20289]  iter_file_splice_write+0x67a/0x12e0
[ 1364.918162][T20289]  direct_splice_actor+0x18f/0x6c0
[ 1364.923254][T20289]  splice_direct_to_actor+0x345/0xa30
[ 1364.928708][T20289]  do_splice_direct+0x174/0x240
[ 1364.933552][T20289]  do_sendfile+0xb06/0xe50
[ 1364.937960][T20289]  __x64_sys_sendfile64+0x154/0x220
[ 1364.943147][T20289]  do_syscall_64+0xcd/0x4c0
[ 1364.947650][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.953556][T20289] 
[ 1364.955854][T20289] The buggy address belongs to the object at ffff88807ec91000
[ 1364.955854][T20289]  which belongs to the cache kmalloc-256 of size 256
[ 1364.969882][T20289] The buggy address is located 48 bytes inside of
[ 1364.969882][T20289]  freed 256-byte region [ffff88807ec91000, ffff88807ec91100)
[ 1364.983564][T20289] 
[ 1364.985863][T20289] The buggy address belongs to the physical page:
[ 1364.992261][T20289] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ec91e00 pfn:0x7ec90
[ 1365.002313][T20289] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1365.010798][T20289] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1365.019337][T20289] page_type: f5(slab)
[ 1365.023306][T20289] raw: 00fff00000000240 ffff88801b841b40 ffffea00019fbb10 ffffea00018d5310
[ 1365.031909][T20289] raw: ffff88807ec91e00 0000000000100006 00000000f5000000 0000000000000000
[ 1365.040477][T20289] head: 00fff00000000240 ffff88801b841b40 ffffea00019fbb10 ffffea00018d5310
[ 1365.049153][T20289] head: ffff88807ec91e00 0000000000100006 00000000f5000000 0000000000000000
[ 1365.057823][T20289] head: 00fff00000000001 ffffea0001fb2401 00000000ffffffff 00000000ffffffff
[ 1365.066476][T20289] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1365.075575][T20289] page dumped because: kasan: bad access detected
[ 1365.081995][T20289] page_owner tracks the page as allocated
[ 1365.087703][T20289] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11196, tgid 11196 (syz-executor), ts 609168921652, free_ts 482038039029
[ 1365.109376][T20289]  post_alloc_hook+0x1c0/0x230
[ 1365.114127][T20289]  get_page_from_freelist+0x132b/0x38e0
[ 1365.119728][T20289]  __alloc_frozen_pages_noprof+0x261/0x23f0
[ 1365.125592][T20289]  alloc_pages_mpol+0x1fb/0x550
[ 1365.130430][T20289]  new_slab+0x247/0x330
[ 1365.134561][T20289]  ___slab_alloc+0xcf2/0x1740
[ 1365.139221][T20289]  __slab_alloc.constprop.0+0x56/0xb0
[ 1365.144587][T20289]  __kmalloc_noprof+0x2f2/0x510
[ 1365.149417][T20289]  fib_create_info+0x53f/0x46b0
[ 1365.154256][T20289]  fib_table_insert+0x177/0x1c40
[ 1365.159170][T20289]  fib_magic+0x4d4/0x5c0
[ 1365.163392][T20289]  fib_add_ifaddr+0x16d/0x580
[ 1365.168047][T20289]  fib_inetaddr_event+0x147/0x270
[ 1365.173047][T20289]  notifier_call_chain+0xbc/0x410
[ 1365.178055][T20289]  blocking_notifier_call_chain+0x69/0xa0
[ 1365.183754][T20289]  __inet_insert_ifa+0x925/0xcd0
[ 1365.188668][T20289] page last free pid 1145 tgid 1145 stack trace:
[ 1365.194961][T20289]  __free_frozen_pages+0x7d5/0x10f0
[ 1365.200139][T20289]  __put_partials+0x165/0x1c0
[ 1365.204801][T20289]  qlist_free_all+0x4d/0x120
[ 1365.209362][T20289]  kasan_quarantine_reduce+0x195/0x1e0
[ 1365.214803][T20289]  __kasan_slab_alloc+0x69/0x90
[ 1365.219628][T20289]  kmem_cache_alloc_lru_noprof+0x1d0/0x3b0
[ 1365.225414][T20289]  sock_alloc_inode+0x25/0x1c0
[ 1365.230154][T20289]  alloc_inode+0x64/0x240
[ 1365.234539][T20289]  sock_alloc+0x40/0x280
[ 1365.238786][T20289]  __sock_create+0xc1/0x8d0
[ 1365.243278][T20289]  rds_tcp_conn_path_connect+0x2d0/0x7f0
[ 1365.248909][T20289]  rds_connect_worker+0x1ac/0x2c0
[ 1365.253928][T20289]  process_one_work+0x9cf/0x1b70
[ 1365.258867][T20289]  worker_thread+0x6c8/0xf10
[ 1365.263454][T20289]  kthread+0x3c5/0x780
[ 1365.267518][T20289]  ret_from_fork+0x5d7/0x6f0
[ 1365.272092][T20289] 
[ 1365.274402][T20289] Memory state around the buggy address:
[ 1365.280006][T20289]  ffff88807ec90f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1365.288052][T20289]  ffff88807ec90f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1365.296087][T20289] >ffff88807ec91000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1365.304215][T20289]                                      ^
[ 1365.309819][T20289]  ffff88807ec91080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1365.317851][T20289]  ffff88807ec91100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1365.325888][T20289] ==================================================================
[ 1365.339445][T20289] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1365.346672][T20289] CPU: 1 UID: 0 PID: 20289 Comm: syz.9.3333 Not tainted syzkaller #0 PREEMPT(full) 
[ 1365.356047][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1365.366138][T20289] Call Trace:
[ 1365.369408][T20289]  <TASK>
[ 1365.372319][T20289]  dump_stack_lvl+0x3d/0x1f0
[ 1365.376897][T20289]  vpanic+0x6e8/0x7a0
[ 1365.380882][T20289]  ? __pfx_vpanic+0x10/0x10
[ 1365.385394][T20289]  ? __pfx_vprintk_emit+0x10/0x10
[ 1365.390411][T20289]  ? sysfs_remove_file_ns+0x63/0x70
[ 1365.395600][T20289]  panic+0xca/0xd0
[ 1365.399313][T20289]  ? __pfx_panic+0x10/0x10
[ 1365.403767][T20289]  ? sysfs_remove_file_ns+0x63/0x70
[ 1365.408966][T20289]  ? preempt_schedule_common+0x44/0xc0
[ 1365.414429][T20289]  ? preempt_schedule_thunk+0x16/0x30
[ 1365.419807][T20289]  ? check_panic_on_warn+0x1f/0xb0
[ 1365.424902][T20289]  check_panic_on_warn+0xab/0xb0
[ 1365.429856][T20289]  end_report+0x107/0x170
[ 1365.434192][T20289]  kasan_report+0xee/0x110
[ 1365.438593][T20289]  ? sysfs_remove_file_ns+0x63/0x70
[ 1365.443796][T20289]  sysfs_remove_file_ns+0x63/0x70
[ 1365.448832][T20289]  driver_remove_file+0x4a/0x60
[ 1365.453689][T20289]  bus_remove_driver+0x224/0x2c0
[ 1365.458636][T20289]  driver_unregister+0x76/0xb0
[ 1365.463411][T20289]  comedi_device_detach_locked+0x12c/0xa50
[ 1365.469210][T20289]  do_devconfig_ioctl+0x555/0x710
[ 1365.474223][T20289]  ? __mutex_lock+0x1c5/0x1060
[ 1365.479235][T20289]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1365.484780][T20289]  ? find_held_lock+0x2b/0x80
[ 1365.489453][T20289]  comedi_unlocked_ioctl+0x165d/0x2f00
[ 1365.494933][T20289]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1365.500732][T20289]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1365.506626][T20289]  ? do_vfs_ioctl+0x128/0x14f0
[ 1365.511408][T20289]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1365.516547][T20289]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1365.523410][T20289]  ? hook_file_ioctl_common+0x145/0x410
[ 1365.528944][T20289]  ? selinux_file_ioctl+0x180/0x270
[ 1365.534132][T20289]  ? selinux_file_ioctl+0xb4/0x270
[ 1365.539931][T20289]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1365.545736][T20289]  __x64_sys_ioctl+0x18b/0x210
[ 1365.550514][T20289]  do_syscall_64+0xcd/0x4c0
[ 1365.555014][T20289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.560983][T20289] RIP: 0033:0x7f8a4f98ebe9
[ 1365.565381][T20289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1365.585065][T20289] RSP: 002b:00007f8a507de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1365.593471][T20289] RAX: ffffffffffffffda RBX: 00007f8a4fbb6180 RCX: 00007f8a4f98ebe9
[ 1365.601448][T20289] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008
[ 1365.609404][T20289] RBP: 00007f8a507de090 R08: 0000000000000000 R09: 0000000000000000
[ 1365.617356][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1365.625309][T20289] R13: 00007f8a4fbb6218 R14: 00007f8a4fbb6180 R15: 00007ffeb0c22f28
[ 1365.633281][T20289]  </TASK>
[ 1365.636501][T20289] Kernel Offset: disabled
[ 1365.640971][T20289] Rebooting in 86400 seconds..