last executing test programs:

48.293638954s ago: executing program 2 (id=908):
r0 = syz_open_dev$usbmon(0x0, 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe5169)
syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffb4a, 0x44c81)
r1 = socket$inet6(0xa, 0x3, 0xff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x8000)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0)

47.266212323s ago: executing program 2 (id=912):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000001, 0x1010, r0, 0x5b056000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff)

46.933335302s ago: executing program 2 (id=914):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
fsetxattr$security_ima(r3, 0x0, &(0x7f0000001200)=@sha1={0x1, "133f9613e19d9ae35fcacf2bf3c557a71b10d14b"}, 0x15, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

44.685329405s ago: executing program 2 (id=915):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r2, 0x29, 0x4b, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getpid()
r5 = syz_pidfd_open(r1, 0x0)
setns(r5, 0x8020000)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001fc0)={'wpan0\x00'})
syz_genetlink_get_family_id$nfc(0x0, r6)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x8080)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'full', 0x20, 0x0, 0x20, 0xfffffffffffffffc}, 0xfffffffffffffe19)
pipe(&(0x7f0000000600)={<r7=>0xffffffffffffffff})
openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x5, 0x0, r5, 0x0, 0x0, 0x3}])
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x1, 0x1}}, 0x80, 0x0}, 0x4040)

42.58266233s ago: executing program 2 (id=918):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x80000081)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_ts_info})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x5021, 0x2, 0x1}, 0x18, 0x1)
landlock_restrict_self(r3, 0x700)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000ffdbdf250100000006001a004e2100000500cf3c06005e00000014001f002001000000000000000000000000000206001d000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x11, 0x40003, 'sh\x00', 0x19, 0x6, 0x10000071}, 0x2c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0xfffffffffffffffc, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0x9)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, 0x0)
r6 = getpgrp(0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3)

41.766629248s ago: executing program 2 (id=921):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
fchdir(r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x8000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="29a5f744620793237b3d50a0f1036a044ec1a4baf77cba2e45725a73bb518f5f8ca05c10600c6c27af4b2c92845a3a0e90f0a758760a90ac574b73813e5de40d65873840105571010e1b073386400101c9f671620a77b7dcf05756aacaf12fe5744721774bccc382d2d44f29a41476e3c5a1474fcde197b4cd40bbc1", @typed={0x6, 0xe8, 0x0, 0x0, @str=')\x00'}, @typed={0x79, 0xd4, 0x0, 0x0, @binary="a1c62f60bcc8ececdcee3d473731bd05b1a611c067a86478eae5526ebedfbc22426867c18ab88bd8ae3d6670ece97e1ffc4b1db049ca27ad3e62824c062836f3d036f92096daf440d0d218d8f9f5a3551aa5ae0b3680010b6383372e67f7437910b2e607c6e19a15d33d6aa2048a24336190ad65c0"}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0xdd243343601450bc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000c2440a56b19f29fe89c30c4c7b44256468300e8f3c3a0e34d3d48641a15fd7e6ccbede8342667814283fb9f4ef269cab11e3787bc9f4c4c428a35e1e31ff67c6dbe755412476809cd2ac41047f8852b654e02fec5549ffaad3772750b0dbe4aff222db73387c077a0438261f8b8fe81e22c5fb98615ce1df9cba85e7fb676f88b3e5708603816f92a6d297f6b481999ab138de85422b0560cf8c02c67bf3a4"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

26.591366216s ago: executing program 32 (id=921):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
fchdir(r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x8000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="29a5f744620793237b3d50a0f1036a044ec1a4baf77cba2e45725a73bb518f5f8ca05c10600c6c27af4b2c92845a3a0e90f0a758760a90ac574b73813e5de40d65873840105571010e1b073386400101c9f671620a77b7dcf05756aacaf12fe5744721774bccc382d2d44f29a41476e3c5a1474fcde197b4cd40bbc1", @typed={0x6, 0xe8, 0x0, 0x0, @str=')\x00'}, @typed={0x79, 0xd4, 0x0, 0x0, @binary="a1c62f60bcc8ececdcee3d473731bd05b1a611c067a86478eae5526ebedfbc22426867c18ab88bd8ae3d6670ece97e1ffc4b1db049ca27ad3e62824c062836f3d036f92096daf440d0d218d8f9f5a3551aa5ae0b3680010b6383372e67f7437910b2e607c6e19a15d33d6aa2048a24336190ad65c0"}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0xdd243343601450bc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000c2440a56b19f29fe89c30c4c7b44256468300e8f3c3a0e34d3d48641a15fd7e6ccbede8342667814283fb9f4ef269cab11e3787bc9f4c4c428a35e1e31ff67c6dbe755412476809cd2ac41047f8852b654e02fec5549ffaad3772750b0dbe4aff222db73387c077a0438261f8b8fe81e22c5fb98615ce1df9cba85e7fb676f88b3e5708603816f92a6d297f6b481999ab138de85422b0560cf8c02c67bf3a4"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

14.106498663s ago: executing program 1 (id=969):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x20, 0xf, 0x2e, "e8fbfb5a07e11ff6c5ba51038b7224a2fff141e0e1096cb824b0b03a2d0f35028369ebaf0e32c5d5ce249fd34640"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x16, {0x14, "e876ade2c9c87e94defd6cc540c82a859deb8514"}}, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x1}})
r1 = socket(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)={0x20, 0xf, 0x2e, "e8fbfb5a07e11ff6c5ba51038b7224a2fff141e0e1096cb824b0b03a2d0f35028369ebaf0e32c5d5ce249fd34640"}, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x16, {0x14, "e876ade2c9c87e94defd6cc540c82a859deb8514"}}, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x1}}) (async)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)

12.403306055s ago: executing program 4 (id=973):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000084c05cc090000000000010902240001000094c901000921edff2a0122070092f52a637d0edecab000000000000000000000000000000000404119f88d15df1f3cb20fc7654a3e91cf1d5d7fc8747365eb9bf51faf1e828525448a02ceb9401e8bfe1a3a8b01038ed6095a7d8e809db7674f1aa6c78c7599f7a5895f460821df0425f51944a1f40452e1aa6b54e40a057455069171f6ee6b8ecf67e588f062fc26b0dd239b30e717b1732dcd5022b332a943474e0e768bf7bb"], 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11.66139925s ago: executing program 0 (id=974):
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x10, 0x2, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x118d, &(0x7f0000000500)={0x0, 0x8d2dc, 0x0, 0x3, 0x4000c2, 0x0, r1}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
socket(0x21, 0x2, 0x2)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
epoll_create1(0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @remote, @empty}}}}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x77cf, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x28802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

11.581339573s ago: executing program 4 (id=975):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r3, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000", @ANYBLOB='\x00\x00\x00\x00\b\x00\t\x00'], 0x30}}, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x28000600)
sendto(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x20004891, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22ffe2)
ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180))

10.907913937s ago: executing program 1 (id=976):
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x42fe, 0x0, 0x0, 0x8}, 0x3b)

10.065371841s ago: executing program 1 (id=977):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x67, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = userfaultfd(0x80801)
mknod(0x0, 0x8001420, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d40)}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000bc0)={@empty, @private, <r7=>0x0}, &(0x7f0000000c00)=0xc)
sendmmsg$inet6(r6, &(0x7f0000000fc0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0xfff}, 0x1c, &(0x7f00000000c0)}}, {{&(0x7f0000000100)={0xa, 0x4e27, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000580)='q', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="2cb8f19d52154b80d211b9c416df39e35241db9e389d7c8224f1d7f2597ae66390e98a431d6cf9307694ad1e5a00b1e0033a144be67c7d971904e0d1adb895b5c9af5e1f8996fca7b6ff48130a2a068837906aaca1595dd5a342d48d7d5ffd8f6d0967ae86219ba4a9d7b6d7a89ca9f98e3ebeb5acc929118f8617ffac913b3472338590e2d3aa7d6149b93c51da9a7c66b5dc261adef8", 0x97}, {&(0x7f0000002580)="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", 0xff5}, {&(0x7f00000002c0)="75e682d8f565231c898bc43a8a37c90f3f5a83d4857a902d4a1f3426e23a903bb2e6ff0e3100f19f483d64df45588faef2582ee50513b892906f411e9ee0ded6f763ffa75c441f197e7f3e307e931a1221967b4614b48e428458c37191cae4dfc8e90d7864b0151597b62050fa20e5eee9f7fb9608a896e00f891571d9df6b9b17394dbadd3d624d632809a52a0cdba7c92a45135a535dfc869f87ea32ff6efd982fed0332d9e7b21c9e097a194be54926dbd46e3d7befa7fd9a6eeb12c3bdbd4e4c5a810a7767592cf7f4e73df7c7e49c2943d7e1bbcdf5a8aac3c4d9a472b10862a5328c733040f55c555e17e22cb0cef43eb86f6290d0", 0xf8}, {&(0x7f0000000140)='C', 0x1}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000000400)="219a2cb0cafc0becacae709c33d1cc", 0xf}, {&(0x7f0000000440)="fa0a96ff1f6578d365610c26d02e4bf45ea8c84c31065eb7912cae8af33a5a9d493c60951811d26eef9b7ba0e8a1f34c9f0316476b11e7cecf6e0b13", 0x3c}], 0x7, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x198}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0xfffffe00, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="24000000000000002900000032000000200100"/32, @ANYRES32=r7, @ANYBLOB="00000000480000000000000029000000430000003b06000000000000c910000000000000000000000000000000000710000000010208000009000000000000000104000000000401030401011400000000000000290000003e0000000400000000000000"], 0x88}}, {{&(0x7f0000000d00)={0xa, 0x4e21, 0x6cf6, @mcast1, 0x4}, 0x1c, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="280000000000000029000000040000002b0100000000000000010004010000010000000800000000"], 0x28}}], 0x5, 0x24008041)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r9, 0x2}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r11, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180", @ANYRES8=r3, @ANYRES32=r4, @ANYRESOCT=r8], 0x150}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

9.902168666s ago: executing program 4 (id=978):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
fchdir(r3)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r5, &(0x7f0000000440)=""/4085, 0x104a)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0)

9.321085512s ago: executing program 3 (id=980):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c")
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2})
socket(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)='N', 0x1}, {&(0x7f0000000100)="e6a2c4c4d8053e8b5b5b08b4da6afe41d1a69f00d3b8b8f186766168e05c72bd", 0x20}, {&(0x7f00000003c0)="b304ff972cde740627d654c8cd98b44847713b786abfde6bc8d7983a5ceb0acbd52282f131e7a5c673ebfb2e06b04aac5b069e2ee0a705947cb28d7169d270235841691fdd970d37217f", 0x4a}], 0x3, 0x0, 0x0, 0x804c040}, 0x1)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), &(0x7f00000002c0)=0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040))
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]})
sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)

8.599180581s ago: executing program 4 (id=981):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797a"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
socket$inet_sctp(0x2, 0x5, 0x84)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100))
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

7.501090694s ago: executing program 1 (id=982):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="ddff00"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000540)=""/55, 0x37)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4046014}, 0x400c0)

6.368818481s ago: executing program 1 (id=983):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0/file0\x00')
r1 = signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x0)
write$FUSE_INIT(r1, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f0000000040)='\x00\x00\x00', 0x3, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0)

6.273629424s ago: executing program 3 (id=984):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "56aa310ad4411fc6", "373769b5150e7c3e2c08a8bcf3df540f9bbe498183c6b4e1dfa22f555d9d28c5", "3e893019", "e69b56b72c2536d1"}, 0x38)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c51c020000000051c8fc6edf972d", "e9be1eae", "bb10000000000001"}, 0xfffffffffffffd24)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x50, r4, 0x101, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x1, 0x0, {0x101, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x8, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x9, 0x6)

6.150898449s ago: executing program 3 (id=985):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
fsetxattr$security_ima(r3, &(0x7f0000000080), 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r4, 0xffffffffffffffff, 0x0)

5.030448928s ago: executing program 3 (id=986):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x0)

4.977695382s ago: executing program 4 (id=987):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x7})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91fdffffffffffb6020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/10, @ANYRES32], 0x48)
ftruncate(0xffffffffffffffff, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000043000701fefffffffcdbdf25017c0000166cbccfb1e38fb2f0a8cd4ff293b0e57914997751c75dedcbf99c6dd146aba30810fefdaf15ff3ab0a0b52271d287b9a6c9cc44f243f244df4f1bb37a777c5b45c703579269bc2b51be7858f81757cd192475c25e80bb87449f388d98772785b5a37326a94def8e0bc8e08eff049680fe75a132820b41aeb81ad4843e54c0d223aaf8eb3ffe283c4f"], 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

4.738085671s ago: executing program 0 (id=988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

3.999511666s ago: executing program 3 (id=989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x5c}}, 0x0)
r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x20000a}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x32315659})
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x20008851}, 0x50)

3.8810859s ago: executing program 0 (id=990):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x264, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x882}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_NAT_DST={0x9c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x264}, 0x1, 0x0, 0x0, 0x811}, 0x800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000a00", @ANYRES16=r6, @ANYBLOB="7961dffa4427000000007e00000008f239182c9dcc7ab8000300", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
io_submit(0x0, 0x0, 0x0)

3.328721615s ago: executing program 4 (id=991):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x800000000000327, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004d1000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000400)="c402d506d4b9a30a00000f32470f01c5260fe054d2023e4e0fc71f0f01c2b805000000b98692620b0f01d964f341f687590000000e66baf80cb810f18a8def66bafc0c66b8050066ef66440f01f8", 0x4e}], 0x1, 0x8, &(0x7f00000004c0), 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', <r6=>0x0, 0x8, 0x7800, 0xd, 0x6ce, {{0xd, 0x4, 0x3, 0x3d, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, {[@noop, @timestamp={0x44, 0x4, 0xa7, 0x0, 0xf}, @ssrr={0x89, 0xb, 0xab, [@broadcast, @loopback]}, @lsrr={0x83, 0x7, 0xba, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x7, 0x8, [@multicast1]}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x83d, 0x0, r5, 0x0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.525136084s ago: executing program 0 (id=992):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010})
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085000095785e34a4bc4500"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x4004040)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010037bd7000ffdbdf256b0000008a0001007770616e31000000"], 0x20}}, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000000)=0x6)

1.457649026s ago: executing program 3 (id=993):
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x10, 0x2, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x118d, &(0x7f0000000500)={0x0, 0x8d2dc, 0x0, 0x3, 0x4000c2, 0x0, r1}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
socket(0x21, 0x2, 0x2)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
epoll_create1(0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @remote, @empty}}}}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x77cf, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x28802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1.347566097s ago: executing program 5 (id=946):
r0 = eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f0000000400))
read$eventfd(r0, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe6}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086de6012259200083a0000000000000000000000ffffac1414aafe8000000000"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

1.297726139s ago: executing program 0 (id=994):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
alarm(0x1000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0x4, 0xfa11, 0xffffffff}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000844) (async)
shutdown(r1, 0x1) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
alarm(0x7000000000000000) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
ioctl$KDSETLED(r0, 0x4b32, 0x2c)

677.521858ms ago: executing program 0 (id=995):
syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100))
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)})
close_range(r3, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18)
r5 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x8001, 0x400000)
mmap$snddsp(&(0x7f000063f000/0x4000)=nil, 0x4000, 0x8, 0x40010, r6, 0x2000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0)
prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x11)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)

0s ago: executing program 1 (id=996):
r0 = socket$inet6_sctp(0xa, 0x17908ae0b6cece5f, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, &(0x7f0000000300))
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r1, r1)
setpgid(0x0, r1)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)
setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x49)
r5 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r6, 0x8008af26, 0x0)
syz_usb_connect(0x6, 0x702, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x62, 0xf3, 0x83, 0x40, 0x1bc7, 0x1230, 0x9050, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f0, 0x3, 0x7, 0x2, 0x20, 0x8, [{{0x9, 0x4, 0x2, 0x0, 0xc, 0xd, 0x15, 0xbd, 0x8, [@generic={0xab, 0xc, "fc0aa79173ddf915be677751811d2453e3d4c3f0aba2944a9a3feddcd4486b5e5d6fa9d670ec59b088f83cf0aee47859cf345ba02eae7d8cdc9206432dec915bb419f71c39c51210d517db398debd4e579a87a5f93ddf35b8ae31e40a4398d19a5dca293499166eeca91281bd62ba60aca23bea3c73bca050dada68a23a1cf3aa3f62997dce25a01edb98349c32e65ac54109e626d677c654ba922adbc2711425cbd04fd4c439e6ec3"}], [{{0x9, 0x5, 0x4, 0x3, 0x600, 0x7, 0x0, 0x1d, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0xa04}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x3, 0xff, 0x7}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x4, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}, {{0x9, 0x5, 0x8, 0x5, 0x3ff, 0x5, 0x3, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xe, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xe3, 0xb6, 0x7b, [@generic={0xf1, 0x22, "e215e7ea35746c10f58977cb583fb6f303ad5e99abfa9abd56c84b06c5f0524456e2006b41fe308f812c59c3a72f92e75c33c1f42b419ca41deb25f2853c1c4508638a2dff16ab4e5549f7532fc4df278eabe923cb2c0bae788fd627899c9e84ce3e0d7e06c09f473a2540276eb0fae91cfa2140c566b18692fcfb9bdbda17709c94b47606570e51f7a92c6b44d0f8b5c510916a0d82c8c0a662ab0654722da82ec269e2771f32cad9e532025006b39ffa8ee5659f9162dfbdac667a985ad6110bf41962fa24543cf10341faf50850942ea61a99dc5763481f411d5c8cde3d7a04d2d509f930f698e162a77daf2b43"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xce}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x7, 0x40}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x8e, 0x7, 0xf9, [@generic={0xde, 0x10, "d15bbe201caefeabda2395ae4b957b6789b63afb7731d722db29ffaafc38a31c39d7ad451bad9be27fd7d856bc489d1414d981a45f94fa78ffd5dcede017cb6911d2e9311a263fd22d1db9831c1c6374bc78d734226bcf5bd67f8e49b03e4d8c15487b588084a1accd78c4e0778599c7bd5485816628751a250f6bb7f39f6cb9d400ada406d666057a8bf37aeb9782c5d811032512b61aeb2c923a5cb01eee947e8c7b8c06ed3436d54cb85aadbf60c95c8a352614fe68fcf0a61ebaf03c6978aaea1c046b34ec8bb1115cadd7b37571ea5a7ba7bdf4facc83311f36"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0xff, 0x9, 0xe6, [@generic={0xfe, 0xa, "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"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xea, 0x4, 0x5, [@generic={0x93, 0xc, "811148323ea5884f81eb153bb00736d3abdcac644e34a093512e617d86b6a3487bf94873971796b62e6ac4868c2a407da39eaed6fae9f83270827f45c37c48a2ccc1e1fa5c9e37770069105dc476167f594c1a7d1d8c71788d798a160cfa07868cbe3f6d04e93405fff6a7fc3e031f0ce93a8b8204b52ff01c9d231ae88d16d9a78006559190572a148917f90a797bd410"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x32, 0x0, 0xb}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0xb8, 0x81, [@generic={0x5b, 0xe, "35edb774eeb2ac0eb7e82326bd5b596ca0541346fa6a8e9745e66d1371e2ba9996406c90b3e47833795456aa9f1ac1d3bd89f15d403d06833839c771769508be79031b2339f2b140ed61394be0abdc00737fe6b02bcbda2205"}]}}]}}, {{0x9, 0x4, 0xa0, 0x86, 0x4, 0xde, 0x89, 0x5b, 0x3, [], [{{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x9, 0x1, 0x9, [@generic={0x6b, 0x6, "cd9b4332988909e319ed44c3e11f3844f70e17c1659560aef8be69b61ca47773cb5ebd4acbe79a4f8ea552e8fb7557434697a6819030aebc40018782a8fded9659827aa580506925642a7da3fd1b9b49396ce87804a993ff347fa198ce5e600fc38bd193ba1de23e0d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x78, 0x66, [@generic={0xc2, 0x23, "accb6aeb1e94ad6016a334b92cce51202f44fefd3ef5a8520aefc23eb3d064ac208269ea015827d0787bc7551b739a4c6b6d7069bda88fa3939dfd79d7358a381b15662f43a746618341abb2f5b6918e7028fd7d63c866104683f418f4d8acc8218a706138f1f5699a232e640d650044952d2392e7e942c6ceb3b417cecc6062901184c31a94e22e85172a75f324240e3dc202362194003cd64bc456fda649952cdfa73ae25c2d7b9ca578382decbf600d70bd3380f24c88739742a46b51b27a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xf, 0x2, 0x81}}]}}, {{0x9, 0x4, 0x80, 0x9, 0x0, 0xff, 0xff, 0xff, 0xc0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x3}}, @generic={0x6f, 0x1, "9735522fa3d0109e8a2eb33381d92d5f19118d3a6e0aba618d4acdbdc3cf1e766f1add522197b3cea756626a6df31813b65aacfcee7fc611f1976e5ef53f4e39bfb9c32ad5fd61c0478ed85a5ce1870faef1b045aaa9dbb203514e48a4f047b241a94017447291b1e53204ffaa"}]}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000001240)=ANY=[])

kernel console output (not intermixed with test programs):

0.0: Error: mce write submit urb error = -90
[  204.027247][ T5813] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  204.050372][ T5813] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  204.104230][ T5813] usb 1-1: USB disconnect, device number 8
[  204.345623][ T7633] SELinux: failed to load policy
[  204.387816][ T7631] mmap: syz.1.412 (7631): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  205.046723][ T5813] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  205.593146][ T7656] netlink: 'syz.1.418': attribute type 12 has an invalid length.
[  205.601418][ T7656] netlink: 'syz.1.418': attribute type 29 has an invalid length.
[  205.609290][ T7656] netlink: 148 bytes leftover after parsing attributes in process `syz.1.418'.
[  205.618749][ T7656] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[  205.627278][ T7656] netlink: 31 bytes leftover after parsing attributes in process `syz.1.418'.
[  205.680856][ T5813] usb 1-1: Using ep0 maxpacket: 32
[  205.869169][ T5813] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  205.897484][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.926586][ T5813] usb 1-1: Product: syz
[  205.942064][ T5813] usb 1-1: Manufacturer: syz
[  205.955264][ T5813] usb 1-1: SerialNumber: syz
[  205.991744][ T5813] usb 1-1: config 0 descriptor??
[  206.032394][ T5813] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  206.287786][   T30] audit: type=1400 audit(1767322998.001:504): avc:  denied  { setopt } for  pid=7643 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  206.448800][ T7669] sch_fq: defrate 0 ignored.
[  206.726851][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.771532][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.035639][ T5813] gspca_stk1135: reg_w 0x3 err -110
[  207.365336][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  207.849952][ T5813] gspca_stk1135: Sensor write failed
[  207.860685][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  208.052406][ T5813] gspca_stk1135: Sensor write failed
[  208.073196][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  208.111204][ T5813] gspca_stk1135: Sensor read failed
[  208.126147][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  208.155427][ T5813] gspca_stk1135: Sensor read failed
[  208.278781][ T7683] gfs2: error -5 reading superblock
[  208.280608][ T5813] gspca_stk1135: Detected sensor type unknown (0x0)
[  208.530382][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  208.676907][ T7689] xt_CT: You must specify a L4 protocol and not use inversions on it
[  208.720001][ T5813] gspca_stk1135: Sensor read failed
[  208.945032][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  208.970671][ T5813] gspca_stk1135: Sensor read failed
[  209.090976][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  209.118805][ T5813] gspca_stk1135: Sensor write failed
[  209.539037][ T5813] gspca_stk1135: serial bus timeout: status=0x00
[  209.566095][ T5813] gspca_stk1135: Sensor write failed
[  209.586437][ T5813] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110
[  209.625655][ T5813] usb 1-1: USB disconnect, device number 9
[  210.009250][   T30] audit: type=1326 audit(1767323001.711:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.1.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x0
[  210.071789][ T7704] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  210.518095][ T7698] SELinux: failed to load policy
[  210.522583][   T30] audit: type=1400 audit(1767323002.241:506): avc:  denied  { create } for  pid=7708 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  210.628650][   T30] audit: type=1400 audit(1767323002.341:507): avc:  denied  { write } for  pid=7708 comm="syz.2.433" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  210.726455][   T30] audit: type=1400 audit(1767323002.441:508): avc:  denied  { module_request } for  pid=7717 comm="syz.3.436" kmod="nfct-helper-snmp_trap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  210.773797][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  210.869790][ T7718] xt_CT: No such helper "snmp_trap"
[  211.207896][ T5813] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  211.570694][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  211.616923][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'.
[  211.635600][ T5813] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  211.645506][ T5813] usb 5-1: config 0 has no interface number 0
[  211.722461][ T5813] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  211.736036][ T5813] usb 5-1: config 0 interface 196 has no altsetting 0
[  211.747155][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  211.768222][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.787232][ T5813] usb 5-1: Product: syz
[  211.794850][   T30] audit: type=1400 audit(1767323003.511:509): avc:  denied  { listen } for  pid=7738 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  211.796174][ T5813] usb 5-1: Manufacturer: syz
[  211.858724][ T5813] usb 5-1: SerialNumber: syz
[  211.870741][ T5813] usb 5-1: config 0 descriptor??
[  211.880559][ T7723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  212.112167][ T7756] sch_fq: defrate 0 ignored.
[  212.537698][ T5813] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  212.570177][ T5813] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  212.614452][   T30] audit: type=1400 audit(1767323004.331:510): avc:  denied  { call } for  pid=7763 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  213.002567][   T30] audit: type=1400 audit(1767323004.701:511): avc:  denied  { ioctl } for  pid=7722 comm="syz.4.437" path="socket:[16974]" dev="sockfs" ino=16974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  213.050632][   T30] audit: type=1400 audit(1767323004.701:512): avc:  denied  { bind } for  pid=7722 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  213.101021][   T30] audit: type=1326 audit(1767323004.721:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x0
[  213.250154][   T30] audit: type=1400 audit(1767323004.791:514): avc:  denied  { accept } for  pid=7722 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  213.881628][ T5813] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  214.050776][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  214.057816][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.072218][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  214.106572][ T6020] usb 5-1: USB disconnect, device number 11
[  214.140606][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  214.168878][ T5813] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  214.179296][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.207050][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  214.227198][ T5813] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  214.244830][ T5813] usb 2-1: Manufacturer: syz
[  214.253674][ T5813] usb 2-1: config 0 descriptor??
[  214.299008][ T6020] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  214.570673][ T5813] rc_core: IR keymap rc-hauppauge not found
[  214.609506][ T5813] Registered IR keymap rc-empty
[  214.630930][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  214.741401][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  214.775272][ T5813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  214.816951][ T5813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22
[  214.879258][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  214.906912][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'.
[  214.916328][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'.
[  214.935863][ T7805] netlink: 'syz.3.455': attribute type 12 has an invalid length.
[  214.956072][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  214.961791][ T7805] netlink: 'syz.3.455': attribute type 11 has an invalid length.
[  215.000706][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.019001][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  215.019017][   T30] audit: type=1400 audit(1767323006.731:517): avc:  denied  { write } for  pid=7819 comm="syz.2.459" path="socket:[17817]" dev="sockfs" ino=17817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  215.035355][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.074235][ T7820] loop8: detected capacity change from 0 to 7
[  215.090710][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.103744][ T7820]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  215.112575][ T7823] FAULT_INJECTION: forcing a failure.
[  215.112575][ T7823] name failslab, interval 1, probability 0, space 0, times 0
[  215.133369][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.136338][ T7820] loop8: partition table partially beyond EOD, truncated
[  215.153509][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.0.460 Not tainted syzkaller #0 PREEMPT(full) 
[  215.153543][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  215.153553][ T7823] Call Trace:
[  215.153558][ T7823]  <TASK>
[  215.153564][ T7823]  dump_stack_lvl+0x16c/0x1f0
[  215.153591][ T7823]  should_fail_ex+0x512/0x640
[  215.153614][ T7823]  ? __kmalloc_noprof+0xca/0x910
[  215.153640][ T7823]  should_failslab+0xc2/0x120
[  215.153662][ T7823]  __kmalloc_noprof+0xeb/0x910
[  215.153685][ T7823]  ? lsm_blob_alloc+0x68/0x90
[  215.153705][ T7823]  ? lsm_blob_alloc+0x68/0x90
[  215.153718][ T7823]  lsm_blob_alloc+0x68/0x90
[  215.153734][ T7823]  security_prepare_creds+0x2f/0x270
[  215.153760][ T7823]  prepare_creds+0x5d6/0x940
[  215.153783][ T7823]  lookup_user_key+0x399/0x1300
[  215.153809][ T7823]  ? __pfx_lookup_user_key+0x10/0x10
[  215.153835][ T7823]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  215.153868][ T7823]  __do_sys_add_key+0x25b/0x470
[  215.153885][ T7823]  ? __pfx___do_sys_add_key+0x10/0x10
[  215.153899][ T7823]  ? ksys_write+0x1ac/0x250
[  215.153930][ T7823]  do_syscall_64+0xcd/0xf80
[  215.153953][ T7823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.153970][ T7823] RIP: 0033:0x7fa49ff8f749
[  215.153983][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.153999][ T7823] RSP: 002b:00007fa4a0eda038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  215.154015][ T7823] RAX: ffffffffffffffda RBX: 00007fa4a01e5fa0 RCX: 00007fa49ff8f749
[  215.154026][ T7823] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280
[  215.154036][ T7823] RBP: 00007fa4a0eda090 R08: ffffffffffffffff R09: 0000000000000000
[  215.154045][ T7823] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  215.154054][ T7823] R13: 00007fa4a01e6038 R14: 00007fa4a01e5fa0 R15: 00007ffc1f0b8608
[  215.154077][ T7823]  </TASK>
[  215.154582][ T7820] loop8: p1 size 3651402975 extends beyond EOD, 
[  215.166622][   T30] audit: type=1400 audit(1767323006.791:518): avc:  denied  { setopt } for  pid=7819 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  215.379347][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.386763][ T7820] truncated
[  215.392891][ T7820] loop8: p2 start 956478 is beyond EOD, truncated
[  215.400698][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.530688][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.595023][ T5813] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  215.632370][ T5813] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  215.669529][ T5813] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  215.715021][ T5813] usb 2-1: USB disconnect, device number 12
[  215.772961][   T30] audit: type=1400 audit(1767323007.481:519): avc:  denied  { write } for  pid=7836 comm="syz.2.463" name="ip_tables_matches" dev="proc" ino=4026532894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  216.032600][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  216.063067][ T7841] syz.0.465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  216.244303][   T30] audit: type=1400 audit(1767323007.631:520): avc:  denied  { append } for  pid=7839 comm="syz.0.465" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  216.360404][   T30] audit: type=1326 audit(1767323007.971:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49ff8f749 code=0x7fc00000
[  216.750451][ T7859] befs: (nullb0): invalid magic header
[  216.997414][   T30] audit: type=1326 audit(1767323008.661:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa49ff8f749 code=0x7fc00000
[  217.191377][   T30] audit: type=1326 audit(1767323008.901:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.0.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa49ff8f749 code=0x0
[  217.261811][ T7863] netlink: 'syz.0.469': attribute type 2 has an invalid length.
[  217.272670][ T7865] FAULT_INJECTION: forcing a failure.
[  217.272670][ T7865] name failslab, interval 1, probability 0, space 0, times 0
[  217.285534][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT(full) 
[  217.285560][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  217.285571][ T7865] Call Trace:
[  217.285577][ T7865]  <TASK>
[  217.285584][ T7865]  dump_stack_lvl+0x16c/0x1f0
[  217.285610][ T7865]  should_fail_ex+0x512/0x640
[  217.285636][ T7865]  ? __kmalloc_noprof+0xca/0x910
[  217.285664][ T7865]  should_failslab+0xc2/0x120
[  217.285687][ T7865]  __kmalloc_noprof+0xeb/0x910
[  217.285712][ T7865]  ? lsm_blob_alloc+0x68/0x90
[  217.285732][ T7865]  ? lsm_blob_alloc+0x68/0x90
[  217.285747][ T7865]  lsm_blob_alloc+0x68/0x90
[  217.285768][ T7865]  security_prepare_creds+0x2f/0x270
[  217.285794][ T7865]  prepare_creds+0x5d6/0x940
[  217.285819][ T7865]  lookup_user_key+0x399/0x1300
[  217.285844][ T7865]  ? __pfx_lookup_user_key+0x10/0x10
[  217.285871][ T7865]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  217.285904][ T7865]  __do_sys_add_key+0x25b/0x470
[  217.285921][ T7865]  ? __pfx___do_sys_add_key+0x10/0x10
[  217.285937][ T7865]  ? ksys_write+0x1ac/0x250
[  217.285967][ T7865]  do_syscall_64+0xcd/0xf80
[  217.285991][ T7865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.286008][ T7865] RIP: 0033:0x7f8a0218f749
[  217.286022][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.286038][ T7865] RSP: 002b:00007f8a02f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  217.286055][ T7865] RAX: ffffffffffffffda RBX: 00007f8a023e5fa0 RCX: 00007f8a0218f749
[  217.286066][ T7865] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280
[  217.286076][ T7865] RBP: 00007f8a02f67090 R08: ffffffffffffffff R09: 0000000000000000
[  217.286086][ T7865] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  217.286096][ T7865] R13: 00007f8a023e6038 R14: 00007f8a023e5fa0 R15: 00007ffdc4177228
[  217.286119][ T7865]  </TASK>
[  217.871241][ T7480] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  218.030737][ T7480] usb 1-1: Using ep0 maxpacket: 16
[  218.038237][ T7480] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.073120][   T30] audit: type=1400 audit(1767323009.751:524): avc:  denied  { setopt } for  pid=7866 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  218.130565][ T7877] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  218.131631][   T30] audit: type=1400 audit(1767323009.771:525): avc:  denied  { wake_alarm } for  pid=7866 comm="syz.3.472" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  218.161952][ T7480] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.173906][ T7480] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.199114][ T7480] usb 1-1: config 0 interface 0 has no altsetting 0
[  218.206307][   T30] audit: type=1400 audit(1767323009.841:526): avc:  denied  { read } for  pid=7876 comm="syz.1.474" path="socket:[17238]" dev="sockfs" ino=17238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  218.253200][ T7480] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  218.263117][ T7480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.283254][ T7480] usb 1-1: config 0 descriptor??
[  218.360830][ T5813] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  218.385914][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'.
[  218.394995][ T7892] netlink: 'syz.3.479': attribute type 30 has an invalid length.
[  218.403421][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'.
[  218.506079][ T5813] usb 5-1: device descriptor read/64, error -71
[  218.692558][ T6267] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  218.849133][ T7902] o2cb: This node has not been configured.
[  218.855161][ T7902] o2cb: Cluster check failed. Fix errors before retrying.
[  218.862397][ T7902] (syz.3.482,7902,1):user_dlm_register:674 ERROR: status = -22
[  218.869983][ T7902] (syz.3.482,7902,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[  218.909452][ T5813] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  218.927358][ T6267] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.133470][ T6267] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  219.206601][ T6267] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.228499][ T6267] usb 2-1: New USB device found, idVendor=0525, idProduct=a2a1, bcdDevice= 0.40
[  219.238134][ T6267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.248253][ T6267] usb 2-1: Product: syz
[  219.252889][ T6267] usb 2-1: Manufacturer: syz
[  219.257519][ T6267] usb 2-1: SerialNumber: syz
[  219.262280][ T5813] usb 5-1: device descriptor read/64, error -71
[  219.274616][ T6267] cdc_mbim 2-1:1.0: MBIM functional descriptor missing
[  219.284487][ T6267] cdc_mbim 2-1:1.0: bind() failure
[  219.403171][ T5813] usb usb5-port1: attempt power cycle
[  219.485548][  T790] usb 2-1: USB disconnect, device number 13
[  219.636106][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'.
[  219.646787][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'.
[  219.671856][ T1128] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.684365][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'.
[  219.694037][ T1128] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.704995][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'.
[  219.715656][ T1128] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.732424][ T1128] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.750700][ T5813] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  219.771166][ T5813] usb 5-1: device descriptor read/8, error -71
[  220.071266][ T5813] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  220.141850][ T5813] usb 5-1: device descriptor read/8, error -71
[  220.167914][ T7917] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.249152][ T7480] usbhid 1-1:0.0: can't add hid device: -71
[  220.297612][ T5813] usb usb5-port1: unable to enumerate USB device
[  220.323913][ T7922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.407846][ T7480] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  220.602063][ T7480] usb 1-1: USB disconnect, device number 10
[  222.096419][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  222.096435][   T30] audit: type=1400 audit(1767323013.731:536): avc:  denied  { ioctl } for  pid=7939 comm="syz.4.494" path="socket:[17350]" dev="sockfs" ino=17350 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  224.124284][ T7957] geneve2: entered promiscuous mode
[  224.133941][ T3536] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48411 - 0
[  224.238952][ T3536] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48411 - 0
[  224.256981][ T3536] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48411 - 0
[  224.281964][ T3536] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48411 - 0
[  224.319432][   T30] audit: type=1326 audit(1767323016.031:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  224.393663][   T30] audit: type=1326 audit(1767323016.071:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  224.466666][   T30] audit: type=1326 audit(1767323016.071:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  224.518305][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[  224.569356][   T30] audit: type=1326 audit(1767323016.071:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  224.741552][   T30] audit: type=1326 audit(1767323016.071:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  225.210768][   T30] audit: type=1326 audit(1767323016.071:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  225.798807][   T30] audit: type=1326 audit(1767323016.071:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  226.022051][   T30] audit: type=1326 audit(1767323016.071:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  226.058342][   T30] audit: type=1326 audit(1767323016.071:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x7ffc0000
[  226.701069][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  227.433477][ T7986] syz.1.502 (7986) used greatest stack depth: 19144 bytes left
[  227.600996][  T790] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  227.971124][  T790] usb 5-1: Using ep0 maxpacket: 32
[  227.978072][  T790] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  227.991248][  T790] usb 5-1: config 0 has no interface number 0
[  227.997452][  T790] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  228.257180][  T790] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  228.276373][  T790] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  228.381110][  T790] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  228.401119][  T790] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  228.638096][ T7998] syzkaller0: entered promiscuous mode
[  228.648815][  T790] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  228.694320][  T790] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  228.695963][ T7998] syzkaller0: entered allmulticast mode
[  228.708071][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.745398][  T790] usb 5-1: Product: syz
[  228.759422][  T790] usb 5-1: Manufacturer: syz
[  228.806790][  T790] usb 5-1: SerialNumber: syz
[  228.830191][  T790] usb 5-1: config 0 descriptor??
[  228.846919][ T7972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  228.856862][ T7972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  229.010672][ T6020] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  229.203419][  T790] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  229.340703][ T6020] usb 1-1: Using ep0 maxpacket: 8
[  229.356517][ T6020] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  229.389194][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.420880][ T6020] usb 1-1: Product: syz
[  229.425158][ T6020] usb 1-1: Manufacturer: syz
[  229.429742][ T6020] usb 1-1: SerialNumber: syz
[  229.481738][  T790] etas_es58x 5-1:0.219: could not parse product info: 'ëµ›'
[  229.483310][ T6020] usb 1-1: config 0 descriptor??
[  229.514183][ T6020] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  229.573265][ T8014] can0: slcan on ttyS3.
[  229.950330][  T790] usb 5-1: USB disconnect, device number 16
[  229.968509][  T790] etas_es58x 5-1:0.219: Disconnecting syz syz
[  230.411353][ T8009] can0 (unregistered): slcan off ttyS3.
[  231.186059][ T8038] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  231.240768][ T6265] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  231.501740][ T6265] usb 5-1: Using ep0 maxpacket: 32
[  231.660712][ T6267] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  231.700144][ T6265] usb 5-1: config 2 has an invalid interface number: 145 but max is 0
[  231.729234][ T6265] usb 5-1: config 2 has no interface number 0
[  231.740542][ T6265] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a2, bcdDevice= c.9b
[  231.770469][ T6265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.803545][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  231.803560][   T30] audit: type=1400 audit(1767323023.528:554): avc:  denied  { read } for  pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  231.890987][ T6020] gspca_sonixj: reg_r err -110
[  231.903425][ T6267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.931288][ T6020] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  231.982645][ T8054] veth1_macvtap: left promiscuous mode
[  231.988293][ T8054] macsec0: entered promiscuous mode
[  232.111637][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.120374][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.130328][ T6267] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25
[  232.167002][ T6267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.259532][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.289496][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.311144][ T6267] usb 3-1: Product: syz
[  232.315330][ T6267] usb 3-1: Manufacturer: syz
[  232.332233][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.350352][ T6267] usb 3-1: SerialNumber: syz
[  232.368677][ T6267] usb 3-1: config 0 descriptor??
[  232.379024][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.393215][ T6267] gspca_main: spca501-2.14.0 probing 0000:0000
[  232.425193][ T8055] veth1_macvtap: entered promiscuous mode
[  232.435876][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.468003][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.480896][ T8055] macsec0: left promiscuous mode
[  232.502535][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.533943][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.582438][ T6265] usb 5-1: string descriptor 0 read error: -71
[  232.611264][ T6265] em28xx 5-1:2.145: New device   @ 480 Mbps (0ccd:10a2, interface 145, class 145)
[  232.651359][ T6265] em28xx 5-1:2.145: Video interface 145 found:
[  232.671039][ T8060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.726268][ T8061] tipc: Disabling bearer <eth:syzkaller0>
[  232.737954][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'.
[  232.748482][ T6265] em28xx 5-1:2.145: unknown em28xx chip ID (0)
[  232.749010][   T30] audit: type=1400 audit(1767323024.468:555): avc:  denied  { read } for  pid=8059 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  232.781545][ T6020] usb 1-1: USB disconnect, device number 11
[  232.827369][ T6265] em28xx 5-1:2.145: reading from i2c device at 0xa0 failed (error=-5)
[  232.865750][ T6265] em28xx 5-1:2.145: board has no eeprom
[  232.910744][ T6267] gspca_spca501: reg write: error -110
[  232.925032][ T6267] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  232.953568][ T6267] spca501 3-1:0.0: probe with driver spca501 failed with error -22
[  232.973007][ T6265] em28xx 5-1:2.145: Identified as Terratec Cinergy H5 (card=79)
[  232.978293][ T6267] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  233.014963][ T6265] em28xx 5-1:2.145: Currently, V4L2 is not supported on this model
[  233.039580][ T5934] em28xx 5-1:2.145: Binding DVB extension
[  233.048755][ T5934] em28xx 5-1:2.145: no endpoint for DVB mode and transfer type 0
[  233.181317][ T6265] usb 5-1: USB disconnect, device number 17
[  233.653497][ T5934] em28xx 5-1:2.145: failed to pre-allocate USB transfer buffers for DVB.
[  233.665452][ T6265] em28xx 5-1:2.145: Disconnecting em28xx
[  233.674455][ T5934] em28xx 5-1:2.145: Remote control support is not available for this card.
[  233.699947][ T6265] em28xx 5-1:2.145: Closing input extension
[  233.826478][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'.
[  233.899306][ T6265] em28xx 5-1:2.145: Freeing device
[  234.464972][ T8089] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  234.687481][ T8086] FAULT_INJECTION: forcing a failure.
[  234.687481][ T8086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.915475][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.1.524 Not tainted syzkaller #0 PREEMPT(full) 
[  234.915499][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  234.915509][ T8086] Call Trace:
[  234.915514][ T8086]  <TASK>
[  234.915521][ T8086]  dump_stack_lvl+0x16c/0x1f0
[  234.915547][ T8086]  should_fail_ex+0x512/0x640
[  234.915574][ T8086]  _copy_from_user+0x2e/0xd0
[  234.915599][ T8086]  memdup_user+0x6b/0xe0
[  234.915618][ T8086]  strndup_user+0x78/0xe0
[  234.915635][ T8086]  __keyctl_dh_compute+0x287/0x10e0
[  234.915661][ T8086]  ? get_pid_task+0xfc/0x250
[  234.915682][ T8086]  ? __pfx___keyctl_dh_compute+0x10/0x10
[  234.915710][ T8086]  ? find_held_lock+0x2b/0x80
[  234.915758][ T8086]  keyctl_dh_compute+0xd2/0x140
[  234.915782][ T8086]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  234.915810][ T8086]  ? ksys_write+0x1ac/0x250
[  234.915830][ T8086]  ? __pfx_ksys_write+0x10/0x10
[  234.915854][ T8086]  __do_sys_keyctl+0x4df/0x590
[  234.915874][ T8086]  do_syscall_64+0xcd/0xf80
[  234.915896][ T8086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.915913][ T8086] RIP: 0033:0x7f9e2c18f749
[  234.915927][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.915943][ T8086] RSP: 002b:00007f9e2d112038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  234.915960][ T8086] RAX: ffffffffffffffda RBX: 00007f9e2c3e5fa0 RCX: 00007f9e2c18f749
[  234.915970][ T8086] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000017
[  234.915980][ T8086] RBP: 00007f9e2d112090 R08: 0000200000000000 R09: 0000000000000000
[  234.915990][ T8086] R10: 00000000000000f1 R11: 0000000000000246 R12: 0000000000000001
[  234.916000][ T8086] R13: 00007f9e2c3e6038 R14: 00007f9e2c3e5fa0 R15: 00007ffcd2ba70b8
[  234.916024][ T8086]  </TASK>
[  235.110340][ T6265] usb 3-1: USB disconnect, device number 9
[  235.997075][ T8112] sch_fq: defrate 0 ignored.
[  237.172511][   T30] audit: type=1400 audit(1767323028.868:556): avc:  denied  { mount } for  pid=8129 comm="syz.0.534" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  237.246445][   T30] audit: type=1400 audit(1767323028.868:557): avc:  denied  { mounton } for  pid=8129 comm="syz.0.534" path="/116/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  237.294290][ T8135] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  239.107893][   T30] audit: type=1400 audit(1767323030.818:558): avc:  denied  { read } for  pid=8166 comm="syz.2.543" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  239.138639][   T30] audit: type=1400 audit(1767323030.818:559): avc:  denied  { open } for  pid=8166 comm="syz.2.543" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  239.266345][   T30] audit: type=1400 audit(1767323030.988:560): avc:  denied  { ioctl } for  pid=8166 comm="syz.2.543" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  239.283993][ T8171] syz.3.544 (8171): /proc/8168/oom_adj is deprecated, please use /proc/8168/oom_score_adj instead.
[  239.674731][   T30] audit: type=1400 audit(1767323031.388:561): avc:  denied  { connect } for  pid=8179 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  239.793683][   T30] audit: type=1400 audit(1767323031.398:562): avc:  denied  { read } for  pid=8179 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  239.858411][   T30] audit: type=1400 audit(1767323031.458:563): avc:  denied  { write } for  pid=8179 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  239.891231][ T5934] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  239.916149][   T30] audit: type=1400 audit(1767323031.538:564): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  240.221467][ T5934] usb 3-1: Using ep0 maxpacket: 32
[  240.244498][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.275132][ T5934] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48
[  240.403327][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  240.954020][ T5934] usb 3-1: Manufacturer: syz
[  240.958629][ T5934] usb 3-1: SerialNumber: syz
[  241.001524][ T5934] usb 3-1: config 0 descriptor??
[  241.994572][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'.
[  242.040641][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'.
[  242.106181][ T6267] usb 3-1: USB disconnect, device number 10
[  242.165074][   T30] audit: type=1400 audit(1767323033.888:565): avc:  denied  { append } for  pid=8202 comm="syz.0.552" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  243.218249][ T8216] Bluetooth: MGMT ver 1.23
[  243.398438][   T30] audit: type=1400 audit(1767323035.118:566): avc:  denied  { read write } for  pid=8217 comm="syz.2.559" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  243.504937][   T30] audit: type=1400 audit(1767323035.148:567): avc:  denied  { open } for  pid=8217 comm="syz.2.559" path="/110/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  243.800004][   T30] audit: type=1400 audit(1767323035.488:568): avc:  denied  { write } for  pid=8229 comm="syz.2.561" path="socket:[19024]" dev="sockfs" ino=19024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  244.126851][ T8239] can: request_module (can-proto-0) failed.
[  245.263264][   T30] audit: type=1326 audit(1767323036.988:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.3.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a0218f749 code=0x0
[  248.008471][ T8267] NFSD: Failed to start, no listeners configured.
[  248.044129][   T30] audit: type=1400 audit(1767323039.768:570): avc:  denied  { read } for  pid=8274 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  248.870419][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.877762][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.964182][ T8280] sch_fq: defrate 0 ignored.
[  249.000892][ T6267] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  249.236647][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.259888][ T6267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  249.393481][ T6267] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  249.402887][ T6267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.476217][ T8293] No such timeout policy "syz1"
[  249.791172][ T6267] usb 4-1: config 0 descriptor??
[  249.850055][   T30] audit: type=1400 audit(1767323041.568:571): avc:  denied  { ioctl } for  pid=8295 comm="syz.0.574" path="socket:[19870]" dev="sockfs" ino=19870 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  249.885679][ T6265] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  250.135422][ T6265] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  250.157030][ T6265] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  250.181366][ T6265] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  250.196631][   T30] audit: type=1326 audit(1767323041.908:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.241378][ T6265] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  250.250435][ T6265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.253640][ T6267] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  250.270468][   T30] audit: type=1326 audit(1767323041.908:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.294463][ T6265] usb 5-1: Product: syz
[  250.298628][ T6265] usb 5-1: Manufacturer: syz
[  250.311549][ T8300] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  250.321138][ T6265] usb 5-1: SerialNumber: syz
[  250.342878][ T6265] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  250.349704][ T6265] cdc_ncm 5-1:1.0: bind() failure
[  250.360733][   T30] audit: type=1326 audit(1767323041.908:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.411081][   T30] audit: type=1326 audit(1767323041.908:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.462343][   T30] audit: type=1326 audit(1767323041.918:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.596111][ T8306] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  250.863152][   T30] audit: type=1326 audit(1767323041.918:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.900660][ T6020] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  250.925097][   T30] audit: type=1326 audit(1767323041.918:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.949849][   T30] audit: type=1326 audit(1767323041.918:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  250.974316][   T30] audit: type=1326 audit(1767323041.948:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d978f749 code=0x7ffc0000
[  251.141386][ T6020] usb 1-1: device descriptor read/64, error -71
[  251.151877][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[  251.185961][ T8310] No control pipe specified
[  251.733970][ T6267] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device
[  251.951580][ T6267] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse
[  252.015281][ T6267] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71
[  252.027861][ T6267] usb 4-1: USB disconnect, device number 19
[  252.095282][ T6020] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  252.164353][ T8316] syzkaller0: entered promiscuous mode
[  252.182674][ T8316] syzkaller0: entered allmulticast mode
[  252.432299][ T6020] usb 1-1: device descriptor read/64, error -71
[  252.490972][ T6265] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  252.500473][ T8316] tipc: Started in network mode
[  252.514489][ T6267] usb 5-1: USB disconnect, device number 18
[  252.530281][ T8316] tipc: Node identity be36e101e60a, cluster identity 4711
[  252.541580][ T8316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.575005][ T6020] usb usb1-port1: attempt power cycle
[  252.642331][ T6265] usb 3-1: Using ep0 maxpacket: 8
[  252.792467][ T6265] usb 3-1: config 0 has no interfaces?
[  252.873642][ T6265] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  252.888515][ T6265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.912859][ T8315] tipc: Resetting bearer <eth:syzkaller0>
[  252.930890][ T6020] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  252.937877][ T6265] usb 3-1: config 0 descriptor??
[  252.965081][ T8315] tipc: Disabling bearer <eth:syzkaller0>
[  252.971940][ T6020] usb 1-1: device descriptor read/8, error -71
[  253.039585][ T8328] bridge_slave_0: left allmulticast mode
[  253.046056][ T8328] bridge_slave_0: left promiscuous mode
[  253.065813][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.216518][ T8328] bridge_slave_1: left allmulticast mode
[  253.226162][ T8328] bridge_slave_1: left promiscuous mode
[  253.232297][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.244515][ T8328] bond0: (slave bond_slave_0): Releasing backup interface
[  253.257070][ T8328] bond0: (slave bond_slave_1): Releasing backup interface
[  253.784572][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'.
[  253.821045][ T6020] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  253.825002][ T8328] team0: Port device team_slave_0 removed
[  253.847606][ T8328] team0: Port device team_slave_1 removed
[  253.863290][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.871901][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.880019][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.888549][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.897439][ T8328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.040654][ T6020] usb 1-1: device not accepting address 15, error -71
[  254.064461][ T6020] usb usb1-port1: unable to enumerate USB device
[  254.248891][ T6265] usb 3-1: USB disconnect, device number 11
[  254.938363][ T8351] lo speed is unknown, defaulting to 1000
[  254.944557][ T8351] lo speed is unknown, defaulting to 1000
[  255.234555][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.310930][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.330124][ T8351] lo speed is unknown, defaulting to 1000
[  255.340973][ T8351] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  255.356350][ T8351] lo speed is unknown, defaulting to 1000
[  255.363741][ T8351] lo speed is unknown, defaulting to 1000
[  255.370175][ T8351] lo speed is unknown, defaulting to 1000
[  255.376659][ T8351] lo speed is unknown, defaulting to 1000
[  255.383700][ T8351] lo speed is unknown, defaulting to 1000
[  255.529601][ T8355] futex_wake_op: syz.1.589 tries to shift op by -1; fix this program
[  255.753341][ T8360] netlink: 'syz.0.592': attribute type 3 has an invalid length.
[  255.778095][ T8360] netlink: 'syz.0.592': attribute type 4 has an invalid length.
[  257.741394][   T30] kauditd_printk_skb: 182 callbacks suppressed
[  257.762459][   T30] audit: type=1400 audit(1767323049.468:763): avc:  denied  { accept } for  pid=8359 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  258.864134][   T30] audit: type=1400 audit(1767323050.468:764): avc:  denied  { append } for  pid=8383 comm="syz.1.598" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  259.129386][ T8390] xt_socket: unknown flags 0x4c
[  260.296150][ T8413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.605'.
[  260.310120][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'.
[  260.875055][ T8421] netlink: 140 bytes leftover after parsing attributes in process `syz.1.607'.
[  262.506943][ T8394] syz.0.599 (8394): drop_caches: 2
[  262.930269][ T8445] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  263.351321][ T5934] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  263.537475][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  263.619333][   T30] audit: type=1400 audit(1767323055.338:765): avc:  denied  { execmod } for  pid=8414 comm="syz.2.606" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  263.648990][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  263.791153][ T5934] usb 5-1: Using ep0 maxpacket: 32
[  263.798203][ T5934] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  263.823913][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.852185][ T5934] usb 5-1: config 0 descriptor??
[  264.197456][ T8450] netlink: 140 bytes leftover after parsing attributes in process `syz.1.615'.
[  264.427902][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.520408][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.744549][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  264.798615][ T8453] ubi31: attaching mtd0
[  264.844237][ T5934] usb 5-1: media controller created
[  264.877124][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.906153][ T8453] ubi31: scanning is finished
[  264.918772][ T8453] ubi31: empty MTD device detected
[  265.098992][ T8461] loop5: detected capacity change from 0 to 64
[  265.105723][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.113606][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.122126][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.129970][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.137837][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.145690][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.153594][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.170659][ T8461] Buffer I/O error on dev loop5, logical block 0, async page read
[  265.178541][ T8461] ldm_validate_partition_table(): Disk read failed.
[  265.179133][ T8464] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  265.194221][ T8464] Buffer I/O error on dev loop5, logical block 1, lost async page write
[  265.208077][ T8461]  loop5: unable to read partition table
[  265.213873][ T8461] loop_reread_partitions: partition scan of loop5 (3„¾‚³˜) failed (rc=-5)
[  265.242200][   T30] audit: type=1400 audit(1767323056.818:766): avc:  denied  { append } for  pid=8457 comm="syz.2.618" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  265.828327][ T5934] az6027: usb out operation failed. (-71)
[  265.947965][ T5934] az6027: usb out operation failed. (-71)
[  265.974948][ T5934] stb0899_attach: Driver disabled by Kconfig
[  266.024388][ T5934] az6027: no front-end attached
[  266.024388][ T5934] 
[  266.352971][ T5934] az6027: usb out operation failed. (-71)
[  266.358706][ T5934] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  266.387275][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25
[  266.443836][ T5934] dvb-usb: schedule remote query interval to 400 msecs.
[  266.478008][ T5934] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  266.501248][ T5934] usb 5-1: USB disconnect, device number 19
[  266.519220][ T8453] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  266.532687][ T8353] udevd[8353]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  266.948598][   T30] audit: type=1326 audit(1767323058.668:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  266.953856][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  266.978395][   T30] audit: type=1326 audit(1767323058.698:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1326d865e7 code=0x7ffc0000
[  267.019036][   T30] audit: type=1326 audit(1767323058.698:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1326d2b829 code=0x7ffc0000
[  267.183195][ T5813] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  267.727239][ T8487] FAULT_INJECTION: forcing a failure.
[  267.727239][ T8487] name failslab, interval 1, probability 0, space 0, times 0
[  267.740230][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.2.625 Not tainted syzkaller #0 PREEMPT(full) 
[  267.740252][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  267.740258][ T8487] Call Trace:
[  267.740262][ T8487]  <TASK>
[  267.740267][ T8487]  dump_stack_lvl+0x16c/0x1f0
[  267.740284][ T8487]  should_fail_ex+0x512/0x640
[  267.740299][ T8487]  ? fs_reclaim_acquire+0xae/0x150
[  267.740315][ T8487]  should_failslab+0xc2/0x120
[  267.740329][ T8487]  __kmalloc_noprof+0xeb/0x910
[  267.740345][ T8487]  ? trace_kmalloc+0x2b/0xb0
[  267.740356][ T8487]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  267.740374][ T8487]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  267.740388][ T8487]  tomoyo_realpath_from_path+0xc2/0x6e0
[  267.740404][ T8487]  ? tomoyo_fill_path_info+0x233/0x420
[  267.740416][ T8487]  tomoyo_mount_acl+0x1ae/0x850
[  267.740430][ T8487]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  267.740444][ T8487]  ? kernel_text_address+0x8d/0x100
[  267.740459][ T8487]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  267.740471][ T8487]  ? arch_stack_walk+0xa6/0x100
[  267.740499][ T8487]  ? tomoyo_domain+0xba/0x150
[  267.740514][ T8487]  ? tomoyo_profile+0x47/0x60
[  267.740530][ T8487]  tomoyo_mount_permission+0x16d/0x420
[  267.740543][ T8487]  ? tomoyo_mount_permission+0x14f/0x420
[  267.740565][ T8487]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  267.740593][ T8487]  security_sb_mount+0x9b/0x260
[  267.740606][ T8487]  path_mount+0x158/0x23a0
[  267.740617][ T8487]  ? rcu_is_watching+0x12/0xc0
[  267.740628][ T8487]  ? __pfx_path_mount+0x10/0x10
[  267.740638][ T8487]  ? kmem_cache_free+0x2d8/0x770
[  267.740649][ T8487]  ? putname+0xf5/0x1a0
[  267.740666][ T8487]  ? putname+0xf5/0x1a0
[  267.740680][ T8487]  ? putname+0xf5/0x1a0
[  267.740696][ T8487]  ? __x64_sys_mount+0x293/0x310
[  267.740705][ T8487]  __x64_sys_mount+0x293/0x310
[  267.740715][ T8487]  ? __pfx___x64_sys_mount+0x10/0x10
[  267.740733][ T8487]  do_syscall_64+0xcd/0xf80
[  267.740747][ T8487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.740758][ T8487] RIP: 0033:0x7f53d978f749
[  267.740767][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.740778][ T8487] RSP: 002b:00007f53d79d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  267.740788][ T8487] RAX: ffffffffffffffda RBX: 00007f53d99e6090 RCX: 00007f53d978f749
[  267.740794][ T8487] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140
[  267.740800][ T8487] RBP: 00007f53d79d5090 R08: 0000000000000000 R09: 0000000000000000
[  267.740806][ T8487] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000002
[  267.740812][ T8487] R13: 00007f53d99e6128 R14: 00007f53d99e6090 R15: 00007fff2fb2c6f8
[  267.740831][ T8487]  </TASK>
[  268.012171][ T8487] ERROR: Out of memory at tomoyo_realpath_from_path.
[  268.390675][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  268.511259][   T30] audit: type=1326 audit(1767323058.698:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  268.543854][ T5813] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  268.850651][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.858674][ T5813] usb 2-1: Product: syz
[  268.862935][   T30] audit: type=1326 audit(1767323058.698:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  268.886219][ T5813] usb 2-1: Manufacturer: syz
[  268.890873][ T5813] usb 2-1: SerialNumber: syz
[  268.897375][ T5813] usb 2-1: config 0 descriptor??
[  269.043099][   T30] audit: type=1326 audit(1767323058.698:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.067099][   T30] audit: type=1326 audit(1767323058.698:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.092638][ T5813] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  269.101622][   T30] audit: type=1326 audit(1767323058.698:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.131019][   T30] audit: type=1326 audit(1767323058.698:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.184849][   T30] audit: type=1326 audit(1767323058.698:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.241063][   T30] audit: type=1326 audit(1767323058.698:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.281781][   T30] audit: type=1326 audit(1767323058.698:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.326809][ T8497] gfs2: error -5 reading superblock
[  269.412070][ T5934] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  269.427979][   T30] audit: type=1326 audit(1767323058.698:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.524889][   T30] audit: type=1326 audit(1767323058.698:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8473 comm="syz.4.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1326d8f749 code=0x7ffc0000
[  269.529774][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.574703][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.701347][ T5934] usb 4-1: Using ep0 maxpacket: 16
[  269.712386][ T5934] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  269.726893][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.765392][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.766961][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.812760][ T5934] usb 4-1: Product: syz
[  269.837194][ T5934] usb 4-1: Manufacturer: syz
[  269.856900][ T5934] usb 4-1: SerialNumber: syz
[  269.858758][ T5813] usb 2-1: clie_3_5_startup: get interface number failed: -71
[  269.869422][ T5813] visor 2-1:0.0: probe with driver visor failed with error -71
[  269.891824][ T5934] usb 4-1: config 0 descriptor??
[  269.907484][ T5813] usb 2-1: USB disconnect, device number 14
[  269.908961][ T5934] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  270.008499][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.630'.
[  270.019190][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'.
[  270.584514][ T8503] netlink: 140 bytes leftover after parsing attributes in process `syz.0.631'.
[  271.068440][ T5934] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  271.189513][ T8508] syz_tun: entered allmulticast mode
[  271.217495][ T8508] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  271.226338][ T8508] mroute: pending queue full, dropping entries
[  271.939000][ T8516] netlink: 120 bytes leftover after parsing attributes in process `syz.2.634'.
[  272.338520][ T6267] usb 4-1: USB disconnect, device number 20
[  272.675965][ T8533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8533 comm=syz.3.637
[  272.807402][ T8536] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  273.960018][ T8542] siw: device registration error -23
[  274.085736][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  274.085751][   T30] audit: type=1400 audit(1767323065.805:841): avc:  denied  { listen } for  pid=8544 comm="syz.2.642" lport=58412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  274.814976][ T8558] netlink: 140 bytes leftover after parsing attributes in process `syz.2.643'.
[  275.135357][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv1
[  275.148629][ T8559] team0: Port device batadv1 added
[  275.181085][ T6267] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  275.365151][ T6267] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  275.380399][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.439634][ T6267] usb 1-1: Product: syz
[  275.453270][ T6267] usb 1-1: Manufacturer: syz
[  275.458490][ T6267] usb 1-1: SerialNumber: syz
[  275.521274][ T5934] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  275.562793][ T6267] usb 1-1: config 0 descriptor??
[  275.671483][ T5934] usb 5-1: device descriptor read/64, error -71
[  275.875258][ T6267] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  275.931268][ T5934] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  276.253186][ T5934] usb 5-1: device descriptor read/64, error -71
[  276.455460][ T5934] usb usb5-port1: attempt power cycle
[  276.509647][ T6267] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  276.537237][ T6267] usb 1-1: USB disconnect, device number 16
[  277.092991][ T8578] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  277.320837][   T30] audit: type=1400 audit(1767323068.815:842): avc:  denied  { mounton } for  pid=8577 comm="syz.0.651" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  277.391975][ T5934] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  277.436152][ T5934] usb 5-1: device descriptor read/8, error -71
[  277.572475][ T8586] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  277.701269][ T5934] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  277.742042][ T5934] usb 5-1: device descriptor read/8, error -71
[  277.853194][ T5934] usb usb5-port1: unable to enumerate USB device
[  277.890865][ T6267] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  278.040691][ T6267] usb 3-1: Using ep0 maxpacket: 16
[  278.050518][ T6267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  278.071984][ T6267] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  278.085055][ T6267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.096655][ T6267] usb 3-1: Product: syz
[  278.101449][ T6267] usb 3-1: Manufacturer: syz
[  278.106105][ T6267] usb 3-1: SerialNumber: syz
[  278.149023][ T6267] usb 3-1: config 0 descriptor??
[  278.243652][ T6267] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  278.253575][ T6267] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  278.320335][   T30] audit: type=1400 audit(1767323070.035:843): avc:  denied  { read } for  pid=8593 comm="syz.0.654" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  278.361956][   T30] audit: type=1400 audit(1767323070.065:844): avc:  denied  { open } for  pid=8593 comm="syz.0.654" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  278.395313][   T30] audit: type=1400 audit(1767323070.115:845): avc:  denied  { map } for  pid=8593 comm="syz.0.654" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  279.115399][ T8601] netlink: 140 bytes leftover after parsing attributes in process `syz.1.658'.
[  279.685147][ T6267] em28xx 3-1:0.0: chip ID is em28178
[  280.377795][ T8614] netlink: 140 bytes leftover after parsing attributes in process `syz.1.659'.
[  280.391438][ T8619] capability: warning: `syz.4.661' uses deprecated v2 capabilities in a way that may be insecure
[  280.802745][   T30] audit: type=1400 audit(1767323072.525:846): avc:  denied  { cmd } for  pid=8623 comm="syz.1.663" path="socket:[21624]" dev="sockfs" ino=21624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  280.914019][ T6267] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  280.972238][ T5934] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  281.003331][ T6267] em28xx 3-1:0.0: board has no eeprom
[  281.074136][ T6267] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  281.090628][ T6267] em28xx 3-1:0.0: dvb set to bulk mode.
[  281.112950][ T5813] em28xx 3-1:0.0: Binding DVB extension
[  281.133806][ T6267] usb 3-1: USB disconnect, device number 12
[  281.180120][ T6267] em28xx 3-1:0.0: Disconnecting em28xx
[  281.194490][ T8632] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[  281.239745][ T8632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.666'.
[  281.243434][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.259765][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  281.269429][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.281691][ T5934] usb 4-1: config 0 descriptor??
[  281.290145][ T5934] pwc: Askey VC010 type 2 USB webcam detected.
[  281.725109][ T6020] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  281.738803][ T5813] em28xx 3-1:0.0: Registering input extension
[  281.740021][ T5934] pwc: send_video_command error -71
[  281.751854][ T5934] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  281.759718][ T5934] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  281.813566][ T5934] usb 4-1: USB disconnect, device number 21
[  281.863486][ T5813] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  281.874732][ T5813] Registered IR keymap rc-empty
[  281.893807][ T5813] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  281.969648][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.002083][ T5813] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26
[  282.013885][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.027343][ T6020] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  282.048232][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.057172][ T5813] em28xx 3-1:0.0: Input extension successfully initialized
[  282.064833][ T6267] em28xx 3-1:0.0: Closing input extension
[  282.076268][ T6020] usb 1-1: config 0 descriptor??
[  282.199772][ T8645] input: syz0 as /devices/virtual/input/input27
[  282.267705][ T6267] em28xx 3-1:0.0: Freeing device
[  282.284087][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'.
[  282.331182][ T5813] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  282.378088][ T8645] SET target dimension over the limit!
[  282.512276][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.525947][ T5813] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  282.539643][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.566179][ T5813] usb 4-1: config 0 descriptor??
[  282.585613][ T5813] pwc: Askey VC010 type 2 USB webcam detected.
[  282.635527][ T6020] usbhid 1-1:0.0: can't add hid device: -71
[  282.642263][ T6267] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  282.658106][ T6020] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  282.692576][ T6020] usb 1-1: USB disconnect, device number 17
[  282.813496][ T6267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.829224][ T6267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.862213][ T6267] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  282.996359][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00
[  283.011446][ T5813] pwc: recv_control_msg error -32 req 02 val 2700
[  283.021868][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00
[  283.112095][ T8650] netlink: 140 bytes leftover after parsing attributes in process `syz.1.670'.
[  283.458079][ T6267] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  283.471709][ T5813] pwc: recv_control_msg error -32 req 04 val 1000
[  283.487446][ T6267] usb 3-1: Manufacturer: syz
[  283.496167][ T5813] pwc: recv_control_msg error -32 req 04 val 1300
[  283.505250][ T5813] pwc: recv_control_msg error -32 req 04 val 1400
[  283.533097][ T6267] usb 3-1: config 0 descriptor??
[  283.731085][ T5813] pwc: recv_control_msg error -71 req 02 val 2100
[  283.785697][ T5813] pwc: recv_control_msg error -71 req 04 val 1500
[  283.876055][   T30] audit: type=1400 audit(1767323075.595:847): avc:  denied  { append } for  pid=8642 comm="syz.2.669" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  283.878053][ T8643] input: syz1 as /devices/virtual/input/input28
[  283.943786][ T5813] pwc: recv_control_msg error -71 req 02 val 2500
[  283.973491][ T5813] pwc: recv_control_msg error -71 req 02 val 2400
[  283.995256][ T5813] pwc: recv_control_msg error -71 req 02 val 2600
[  284.025545][ T5813] pwc: recv_control_msg error -71 req 02 val 2900
[  284.048143][ T5813] pwc: recv_control_msg error -71 req 02 val 2800
[  284.080212][   T30] audit: type=1400 audit(1767323075.785:848): avc:  denied  { write } for  pid=8642 comm="syz.2.669" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  284.080241][ T5813] pwc: recv_control_msg error -71 req 04 val 1100
[  284.121576][ T5813] pwc: recv_control_msg error -71 req 04 val 1200
[  284.131656][ T8643] netlink: 'syz.2.669': attribute type 10 has an invalid length.
[  284.380333][ T8643] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  284.514414][ T5813] pwc: Registered as video103.
[  284.520145][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[  284.807036][ T6267] usbhid 3-1:0.0: can't add hid device: -71
[  284.820678][ T6267] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  285.260169][ T6267] usb 3-1: USB disconnect, device number 13
[  285.360795][ T5813] usb 4-1: USB disconnect, device number 22
[  288.237701][   T30] audit: type=1400 audit(1767323079.955:849): avc:  denied  { append } for  pid=8698 comm="syz.0.679" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  291.505814][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'.
[  291.555629][ T8727] netlink: 'syz.3.687': attribute type 8 has an invalid length.
[  292.342476][   T30] audit: type=1400 audit(1767323084.069:850): avc:  denied  { watch watch_reads } for  pid=8736 comm="syz.2.689" path="pipe:[5426]" dev="pipefs" ino=5426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  292.434324][   T30] audit: type=1400 audit(1767323084.099:851): avc:  denied  { accept } for  pid=8736 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  292.570330][ T8741] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.720975][ T8759] trusted_key: encrypted_key: insufficient parameters specified
[  294.281446][ T8764] lo: entered allmulticast mode
[  294.291892][ T8764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.481899][ T8780] netlink: 'syz.3.692': attribute type 12 has an invalid length.
[  295.573161][ T5813] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  295.731013][ T5813] usb 1-1: Using ep0 maxpacket: 16
[  295.750930][ T5813] usb 1-1: config index 0 descriptor too short (expected 2066, got 18)
[  295.766892][ T5813] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  295.812376][ T8785] netlink: 140 bytes leftover after parsing attributes in process `syz.1.699'.
[  296.132950][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2
[  296.310687][   T30] audit: type=1400 audit(1767323087.939:852): avc:  denied  { create } for  pid=8775 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.388819][ T5813] usb 1-1: Product: syz
[  296.409891][ T5813] usb 1-1: Manufacturer: syz
[  296.422021][   T30] audit: type=1400 audit(1767323087.939:853): avc:  denied  { setopt } for  pid=8775 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.441418][ T5813] usb 1-1: SerialNumber: syz
[  296.507107][ T5813] usb 1-1: config 0 descriptor??
[  296.536667][ T8791] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  296.548082][   T30] audit: type=1400 audit(1767323087.939:854): avc:  denied  { write } for  pid=8775 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.580445][ T8791] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  296.603856][   T30] audit: type=1400 audit(1767323088.259:855): avc:  denied  { mounton } for  pid=8790 comm="syz.1.701" path="/133/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  296.648064][   T30] audit: type=1400 audit(1767323088.259:856): avc:  denied  { getattr } for  pid=8790 comm="syz.1.701" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  296.682195][   T30] audit: type=1400 audit(1767323088.299:857): avc:  denied  { mounton } for  pid=8790 comm="syz.1.701" path="/133/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  296.753308][ T6020] usb 1-1: USB disconnect, device number 18
[  297.130352][   T30] audit: type=1400 audit(1767323088.799:858): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  297.225710][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'.
[  297.563996][ T8804] netlink: 72 bytes leftover after parsing attributes in process `syz.1.703'.
[  297.578893][   T30] audit: type=1400 audit(1767323089.229:859): avc:  denied  { create } for  pid=8799 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  297.859667][   T30] audit: type=1400 audit(1767323089.239:860): avc:  denied  { bind } for  pid=8799 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  298.219883][   T30] audit: type=1400 audit(1767323089.259:861): avc:  denied  { connect } for  pid=8799 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  298.265527][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.706'.
[  298.495485][ T8813] overlayfs: overlapping lowerdir path
[  301.103256][ T8834] binder: 8833:8834 ioctl c0306201 2000000003c0 returned -14
[  301.428960][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  301.428975][   T30] audit: type=1326 audit(1767323093.149:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  301.585446][   T30] audit: type=1326 audit(1767323093.179:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  301.645177][   T30] audit: type=1326 audit(1767323093.199:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.119575][   T30] audit: type=1326 audit(1767323093.199:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.323703][   T30] audit: type=1326 audit(1767323093.199:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.526937][   T30] audit: type=1326 audit(1767323093.209:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.615218][   T30] audit: type=1326 audit(1767323093.209:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.680990][   T30] audit: type=1326 audit(1767323093.219:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  302.773638][   T30] audit: type=1326 audit(1767323093.229:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  303.172070][   T30] audit: type=1326 audit(1767323093.289:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.1.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2c18f749 code=0x7ffc0000
[  303.307026][ T8855] netlink: 140 bytes leftover after parsing attributes in process `syz.1.715'.
[  303.778713][ T8864] vivid-004: =================  START STATUS  =================
[  303.791012][ T8864] vivid-004: Radio HW Seek Mode: Bounded
[  303.797754][ T8864] vivid-004: Radio Programmable HW Seek: false
[  303.807219][ T8864] vivid-004: RDS Rx I/O Mode: Block I/O
[  303.817204][ T8864] vivid-004: Generate RBDS Instead of RDS: false
[  303.837509][ T8864] vivid-004: RDS Reception: true
[  303.842741][ T8864] vivid-004: RDS Program Type: 0 inactive
[  303.849647][ T8864] vivid-004: RDS PS Name:  inactive
[  303.855224][ T8864] vivid-004: RDS Radio Text:  inactive
[  303.863393][ T8864] vivid-004: RDS Traffic Announcement: false inactive
[  303.944871][ T8864] vivid-004: RDS Traffic Program: false inactive
[  303.951844][ T8864] vivid-004: RDS Music: false inactive
[  303.957317][ T8864] vivid-004: ==================  END STATUS  ==================
[  305.120993][ T5813] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  305.694959][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  305.705100][ T5813] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  305.714493][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.729817][ T5813] usb 5-1: Product: syz
[  305.737443][ T5813] usb 5-1: Manufacturer: syz
[  305.761315][ T5813] usb 5-1: SerialNumber: syz
[  305.790433][ T5813] usb 5-1: config 0 descriptor??
[  305.841730][ T8883] fuse: Unknown parameter 'group_id00000000000000000000'
[  306.028575][ T5813] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 024
[  307.790636][ T5813] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  307.952313][ T5813] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  307.963615][ T5813] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.977721][ T5813] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  307.987966][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.134294][ T6267] usb 5-1: USB disconnect, device number 24
[  308.333442][ T5813] usb 1-1: usb_control_msg returned -32
[  308.479702][ T8905] netlink: 140 bytes leftover after parsing attributes in process `syz.4.729'.
[  308.810625][ T5813] usbtmc 1-1:16.0: can't read capabilities
[  309.022076][ T8910] veth1_macvtap: left promiscuous mode
[  309.072391][ T8910] macsec0: entered promiscuous mode
[  309.116255][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'.
[  309.548290][ T8920] IPVS: set_ctl: invalid protocol: 241 224.0.0.2:20004
[  309.586764][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[  309.596478][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  309.649216][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[  309.688348][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  310.553567][ T5813] usb 1-1: USB disconnect, device number 19
[  310.724966][ T8935] fuse: Unknown parameter 'group_id00000000000000000000'
[  311.090981][ T7545] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  311.140143][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[  311.142510][ T8954] tmpfs: Unknown parameter 'g'
[  311.261073][ T7545] usb 4-1: Using ep0 maxpacket: 8
[  311.269542][ T7545] usb 4-1: config 0 has no interfaces?
[  311.286641][ T7545] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  311.317557][ T7545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.342233][ T7545] usb 4-1: config 0 descriptor??
[  311.581623][ T8945] FAULT_INJECTION: forcing a failure.
[  311.581623][ T8945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.601123][ T8945] CPU: 0 UID: 0 PID: 8945 Comm: syz.3.739 Not tainted syzkaller #0 PREEMPT(full) 
[  311.601148][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.601158][ T8945] Call Trace:
[  311.601164][ T8945]  <TASK>
[  311.601171][ T8945]  dump_stack_lvl+0x16c/0x1f0
[  311.601197][ T8945]  should_fail_ex+0x512/0x640
[  311.601223][ T8945]  _copy_from_user+0x2e/0xd0
[  311.601248][ T8945]  core_sys_select+0x315/0xc20
[  311.601278][ T8945]  ? __pfx_core_sys_select+0x10/0x10
[  311.601319][ T8945]  ? set_user_sigmask+0x21b/0x2b0
[  311.601339][ T8945]  ? __pfx_set_user_sigmask+0x10/0x10
[  311.601363][ T8945]  do_pselect.constprop.0+0x19f/0x1e0
[  311.601392][ T8945]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  311.601421][ T8945]  __x64_sys_pselect6+0x182/0x240
[  311.601443][ T8945]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  311.601471][ T8945]  do_syscall_64+0xcd/0xf80
[  311.601492][ T8945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.601508][ T8945] RIP: 0033:0x7f8a0218f749
[  311.601521][ T8945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.601535][ T8945] RSP: 002b:00007f8a02f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  311.601549][ T8945] RAX: ffffffffffffffda RBX: 00007f8a023e5fa0 RCX: 00007f8a0218f749
[  311.601558][ T8945] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000040
[  311.601567][ T8945] RBP: 00007f8a02f67090 R08: 0000000000000000 R09: 0000000000000000
[  311.601576][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.601584][ T8945] R13: 00007f8a023e6038 R14: 00007f8a023e5fa0 R15: 00007ffdc4177228
[  311.601604][ T8945]  </TASK>
[  311.603177][ T7545] usb 4-1: USB disconnect, device number 23
[  312.198545][ T8970] netlink: 140 bytes leftover after parsing attributes in process `syz.4.743'.
[  312.212191][ T6267] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  312.467250][ T6267] usb 1-1: config 0 has an invalid interface number: 203 but max is 0
[  312.543327][ T6267] usb 1-1: config 0 has no interface number 0
[  312.575716][ T6267] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=fd.81
[  312.602696][ T6267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.694827][ T6267] usb 1-1: config 0 descriptor??
[  312.792009][ T6267] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  312.816983][ T6267] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  313.571821][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.644935][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.705822][ T7545] usb 1-1: USB disconnect, device number 20
[  313.866265][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  313.866281][   T30] audit: type=1400 audit(1767323105.589:891): avc:  denied  { execute } for  pid=8990 comm="syz.3.746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  314.717498][ T9002] netlink: 'syz.2.747': attribute type 21 has an invalid length.
[  314.872216][   T30] audit: type=1400 audit(1767323106.589:892): avc:  denied  { read write } for  pid=9008 comm="syz.0.749" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  315.192676][   T30] audit: type=1400 audit(1767323106.589:893): avc:  denied  { open } for  pid=9008 comm="syz.0.749" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  315.343036][   T30] audit: type=1400 audit(1767323106.859:894): avc:  denied  { ioctl } for  pid=9008 comm="syz.0.749" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  316.677650][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.493835][ T9034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.744993][ T9041] fuse: Unknown parameter 'group_id00000000000000000000'
[  319.361278][ T1128] Bluetooth: hci5: Frame reassembly failed (-84)
[  319.371423][ T1128] Bluetooth: hci5: Frame reassembly failed (-84)
[  319.541312][ T7545] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  319.734915][ T7545] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.745470][ T7545] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.761696][ T7545] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.771455][ T7545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.779427][ T7545] usb 4-1: Product: syz
[  319.784285][ T7545] usb 4-1: Manufacturer: syz
[  319.788857][ T7545] usb 4-1: SerialNumber: syz
[  320.003147][ T7545] usb 4-1: bad CDC descriptors
[  320.216358][ T5937] usb 4-1: USB disconnect, device number 24
[  321.380707][ T5826] Bluetooth: hci5: command 0xfc11 tx timeout
[  321.444820][ T5824] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  321.694244][   T30] audit: type=1400 audit(1767323113.418:895): avc:  denied  { create } for  pid=9071 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  322.442697][ T9085] netlink: 140 bytes leftover after parsing attributes in process `syz.2.769'.
[  322.689382][ T7545] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  322.918053][   T30] audit: type=1400 audit(1767323114.628:896): avc:  denied  { setopt } for  pid=9087 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  322.922068][ T7545] usb 1-1: config 0 has no interfaces?
[  323.014577][ T7545] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.108666][ T7545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.169301][ T7545] usb 1-1: Product: syz
[  323.179429][ T7545] usb 1-1: Manufacturer: syz
[  323.219906][ T7545] usb 1-1: SerialNumber: syz
[  323.352789][ T7545] usb 1-1: config 0 descriptor??
[  323.803661][ T9101] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  324.142659][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  324.192644][ T7545] usb 1-1: USB disconnect, device number 21
[  324.540947][ T9112] usb usb5: usbfs: process 9112 (syz.3.776) did not claim interface 0 before use
[  324.576064][   T30] audit: type=1400 audit(1767323116.278:897): avc:  denied  { bind } for  pid=9105 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  324.937032][ T6267] kernel write not supported for file /sg0 (pid: 6267 comm: kworker/1:11)
[  325.810102][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'.
[  325.820227][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'.
[  325.829907][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'.
[  325.840570][   T30] audit: type=1400 audit(1767323117.528:898): avc:  denied  { bind } for  pid=9132 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  325.874591][   T30] audit: type=1400 audit(1767323117.528:899): avc:  denied  { setopt } for  pid=9132 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  328.390610][   T30] audit: type=1400 audit(1767323120.108:900): avc:  denied  { name_bind } for  pid=9145 comm="syz.4.785" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  329.463608][ T9163] sch_fq: defrate 0 ignored.
[  331.862544][   T30] audit: type=1400 audit(1767323123.588:901): avc:  denied  { create } for  pid=9176 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  332.075076][ T9180] fuse: Bad value for 'user_id'
[  332.084923][ T9180] fuse: Bad value for 'user_id'
[  332.722404][ T7545] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  332.990957][ T7545] usb 4-1: config 0 has an invalid interface number: 190 but max is 0
[  333.017293][ T7545] usb 4-1: config 0 has no interface number 0
[  333.037662][ T7545] usb 4-1: config 0 interface 190 has no altsetting 0
[  333.544694][ T7545] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be
[  333.578047][ T7545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.645711][ T7545] usb 4-1: Product: syz
[  333.649924][ T7545] usb 4-1: Manufacturer: syz
[  333.667723][ T7545] usb 4-1: SerialNumber: syz
[  333.767129][ T7545] usb 4-1: config 0 descriptor??
[  333.800957][ T6265] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  333.962596][ T6265] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  333.973345][ T6265] usb 5-1: config 0 interface 0 has no altsetting 0
[  333.982331][ T9177] netlink: 72 bytes leftover after parsing attributes in process `syz.3.791'.
[  334.265786][   T30] audit: type=1400 audit(1767323125.988:902): avc:  denied  { getopt } for  pid=9197 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  334.999966][   T30] audit: type=1400 audit(1767323126.018:903): avc:  denied  { getopt } for  pid=9197 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  335.265803][ T6265] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  335.275444][ T6265] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  335.284039][ T6265] usb 5-1: Product: syz
[  335.288299][ T6265] usb 5-1: Manufacturer: syz
[  335.293475][ T6265] usb 5-1: SerialNumber: syz
[  335.305377][ T6265] usb 5-1: config 0 descriptor??
[  335.355801][ T6265] usb 5-1: selecting invalid altsetting 0
[  335.593088][ T7545] hub 4-1:0.190: bad descriptor, ignoring hub
[  335.610072][ T7545] hub 4-1:0.190: probe with driver hub failed with error -5
[  335.642928][ T7545] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  335.701581][ T5813] usb 5-1: USB disconnect, device number 25
[  335.775331][ T7545] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  335.793807][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  335.843681][ T7545] usb 4-1: USB disconnect, device number 25
[  336.595816][ T9222] FAULT_INJECTION: forcing a failure.
[  336.595816][ T9222] name failslab, interval 1, probability 0, space 0, times 0
[  336.609921][ T9222] CPU: 0 UID: 0 PID: 9222 Comm: syz.0.803 Not tainted syzkaller #0 PREEMPT(full) 
[  336.609945][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  336.609955][ T9222] Call Trace:
[  336.609962][ T9222]  <TASK>
[  336.609969][ T9222]  dump_stack_lvl+0x16c/0x1f0
[  336.609995][ T9222]  should_fail_ex+0x512/0x640
[  336.610019][ T9222]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  336.610046][ T9222]  should_failslab+0xc2/0x120
[  336.610069][ T9222]  kmem_cache_alloc_noprof+0x83/0x770
[  336.610086][ T9222]  ? skb_clone+0x190/0x3f0
[  336.610108][ T9222]  ? skb_clone+0x190/0x3f0
[  336.610123][ T9222]  skb_clone+0x190/0x3f0
[  336.610141][ T9222]  netlink_deliver_tap+0xabd/0xd30
[  336.610165][ T9222]  netlink_unicast+0x64c/0x870
[  336.610189][ T9222]  ? __pfx_netlink_unicast+0x10/0x10
[  336.610218][ T9222]  netlink_sendmsg+0x8c8/0xdd0
[  336.610241][ T9222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.610270][ T9222]  ____sys_sendmsg+0xa5d/0xc30
[  336.610291][ T9222]  ? copy_msghdr_from_user+0x10a/0x160
[  336.610308][ T9222]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.610339][ T9222]  ___sys_sendmsg+0x134/0x1d0
[  336.610357][ T9222]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.610403][ T9222]  __sys_sendmsg+0x16d/0x220
[  336.610421][ T9222]  ? __pfx___sys_sendmsg+0x10/0x10
[  336.610453][ T9222]  do_syscall_64+0xcd/0xf80
[  336.610475][ T9222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.610493][ T9222] RIP: 0033:0x7fa49ff8f749
[  336.610506][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.610522][ T9222] RSP: 002b:00007fa4a0eb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.610542][ T9222] RAX: ffffffffffffffda RBX: 00007fa4a01e6090 RCX: 00007fa49ff8f749
[  336.610552][ T9222] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005
[  336.610562][ T9222] RBP: 00007fa4a0eb9090 R08: 0000000000000000 R09: 0000000000000000
[  336.610572][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.610581][ T9222] R13: 00007fa4a01e6128 R14: 00007fa4a01e6090 R15: 00007ffc1f0b8608
[  336.610606][ T9222]  </TASK>
[  336.826529][ T9222] netlink: 'syz.0.803': attribute type 12 has an invalid length.
[  336.835758][ T9222] netlink: 'syz.0.803': attribute type 29 has an invalid length.
[  336.845078][ T9222] netlink: 148 bytes leftover after parsing attributes in process `syz.0.803'.
[  336.855687][ T9222] netlink: 'syz.0.803': attribute type 1 has an invalid length.
[  337.170603][   T30] audit: type=1400 audit(1767323128.548:904): avc:  denied  { read } for  pid=9218 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  337.460778][ T7545] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  337.554126][ T9233] netlink: 140 bytes leftover after parsing attributes in process `syz.3.806'.
[  337.965060][ T7545] usb 3-1: Using ep0 maxpacket: 16
[  338.032405][ T7545] usb 3-1: unable to get BOS descriptor or descriptor too short
[  338.111588][ T7545] usb 3-1: config 6 interface 0 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  338.218690][ T7545] usb 3-1: config 6 interface 0 has no altsetting 0
[  338.242781][ T7545] usb 3-1: string descriptor 0 read error: -22
[  338.249092][ T7545] usb 3-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice= 0.03
[  338.258546][ T7545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.440104][   T30] audit: type=1400 audit(1767323130.159:905): avc:  denied  { setattr } for  pid=9238 comm="syz.4.808" path="socket:[23407]" dev="sockfs" ino=23407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  338.609902][ T9224] fuse: Bad value for 'fd'
[  338.830936][   T30] audit: type=1400 audit(1767323130.529:906): avc:  denied  { write } for  pid=9242 comm="syz.4.810" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  338.948014][ T9246] --map-set only usable from mangle table
[  339.840121][ T6020] usb 3-1: USB disconnect, device number 14
[  341.955127][ T9266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9266 comm=syz.3.816
[  341.968276][ T9266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9266 comm=syz.3.816
[  341.981400][ T9266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9266 comm=syz.3.816
[  342.048461][ T9267] netlink: 'syz.3.816': attribute type 1 has an invalid length.
[  342.056696][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'.
[  342.244378][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'.
[  343.098446][ T9280] netlink: 140 bytes leftover after parsing attributes in process `syz.3.820'.
[  344.097085][ T9289] veth1_macvtap: left promiscuous mode
[  344.103263][ T9289] macsec0: entered promiscuous mode
[  344.836032][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  345.144277][ T6265] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  345.474907][ T6265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.486523][ T6265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.515599][ T6265] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  345.546799][ T6265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.561605][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'.
[  345.567227][ T6265] usb 5-1: config 0 descriptor??
[  345.960477][ T9309] netlink: 'syz.2.829': attribute type 30 has an invalid length.
[  346.225243][ T6265] hkems 0003:2006:0118.0003: ignoring exceeding usage max
[  346.244269][ T6265] hkems 0003:2006:0118.0003: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0
[  346.656513][ T6265] hkems 0003:2006:0118.0003: no inputs found
[  346.737441][ T6265] hkems 0003:2006:0118.0003: force feedback init failed
[  346.790274][ T6265] usb 5-1: USB disconnect, device number 26
[  347.311550][   T30] audit: type=1400 audit(1767323138.959:907): avc:  denied  { write } for  pid=9315 comm="syz.2.830" name="file0" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  347.593087][   T30] audit: type=1400 audit(1767323138.959:908): avc:  denied  { open } for  pid=9315 comm="syz.2.830" path="/164/file0" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  347.618761][   T30] audit: type=1400 audit(1767323138.959:909): avc:  denied  { ioctl } for  pid=9315 comm="syz.2.830" path="/164/file0" dev="tmpfs" ino=897 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  347.920714][ T6020] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  348.471261][ T6020] usb 1-1: Using ep0 maxpacket: 16
[  348.478780][ T6020] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  348.488569][ T6020] usb 1-1: config 0 has no interface number 0
[  348.506384][ T6020] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.520102][ T6020] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.533097][ T6020] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  348.577803][ T9337] sch_fq: defrate 0 ignored.
[  348.611885][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.625781][ T6020] usb 1-1: config 0 descriptor??
[  348.892633][ T9323] netlink: 'syz.0.832': attribute type 10 has an invalid length.
[  348.957075][ T9323] team0: Port device dummy0 added
[  348.988675][ T6020] usbhid 1-1:0.1: can't add hid device: -71
[  348.995487][ T6020] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  349.187851][ T6020] usb 1-1: USB disconnect, device number 22
[  349.291381][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'.
[  349.321092][   T30] audit: type=1400 audit(1767323141.009:910): avc:  denied  { getopt } for  pid=9341 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  351.053221][ T9366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  351.695324][ T9363] sch_fq: defrate 0 ignored.
[  351.803469][   T30] audit: type=1400 audit(1767323143.529:911): avc:  denied  { connect } for  pid=9368 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  352.378820][ T9372] sp0: Synchronizing with TNC
[  353.483366][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.491117][   T30] audit: type=1400 audit(1767323145.199:912): avc:  denied  { mount } for  pid=9380 comm="syz.0.847" name="/" dev="configfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  353.587378][ T9381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.812889][ T9391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=7956 sclass=netlink_tcpdiag_socket pid=9391 comm=syz.3.850
[  354.191400][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.199091][ T9381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.672954][   T30] audit: type=1400 audit(1767323146.399:913): avc:  denied  { map } for  pid=9403 comm="syz.3.852" path="socket:[24498]" dev="sockfs" ino=24498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  354.709158][   T30] audit: type=1400 audit(1767323146.419:914): avc:  denied  { read accept } for  pid=9403 comm="syz.3.852" path="socket:[24498]" dev="sockfs" ino=24498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  355.650084][ T9419] xt_CT: You must specify a L4 protocol and not use inversions on it
[  355.743808][ T5918] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  355.912203][ T5918] usb 1-1: Using ep0 maxpacket: 32
[  355.948128][ T5918] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06
[  355.966302][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.015304][ T5918] usb 1-1: Product: syz
[  356.019698][ T5918] usb 1-1: Manufacturer: syz
[  356.114114][ T5918] usb 1-1: SerialNumber: syz
[  356.151728][ T5918] usb 1-1: config 0 descriptor??
[  356.200377][ T5918] ums_eneub6250 1-1:0.0: USB Mass Storage device detected
[  356.232467][   T30] audit: type=1400 audit(1767323147.959:915): avc:  denied  { append } for  pid=9422 comm="syz.4.856" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  356.356661][   T30] audit: type=1400 audit(1767323148.009:916): avc:  denied  { recv } for  pid=9430 comm="syz.2.858" saddr=10.128.0.169 src=43536 daddr=10.128.1.197 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  356.822096][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.035744][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.192088][ T5918] usb 1-1: USB disconnect, device number 23
[  358.173308][ T9459] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  360.385937][   T30] audit: type=1400 audit(1767323151.679:917): avc:  denied  { read } for  pid=9482 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  361.190430][ T9492] netlink: 140 bytes leftover after parsing attributes in process `syz.0.871'.
[  362.439982][ T9501] 9pnet_fd: p9_fd_create_unix (9501): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  363.337725][ T9517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.832074][ T9519] netlink: 'syz.1.877': attribute type 4 has an invalid length.
[  363.999973][ T6265] lo speed is unknown, defaulting to 1000
[  364.029496][ T6265] syz0: Port: 1 Link DOWN
[  364.185316][ T9498] netlink: 140 bytes leftover after parsing attributes in process `syz.3.872'.
[  364.359832][ T9519] netlink: 'syz.1.877': attribute type 6 has an invalid length.
[  366.823831][   T30] audit: type=1400 audit(1767323158.539:918): avc:  denied  { name_bind } for  pid=9543 comm="syz.2.885" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  366.922716][ T9549] netlink: 140 bytes leftover after parsing attributes in process `syz.4.884'.
[  367.646751][ T9552] netlink: 'syz.1.886': attribute type 10 has an invalid length.
[  367.729685][ T9552] team0: Device ipvlan1 failed to register rx_handler
[  367.863315][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  369.640587][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  369.760666][ T5921] usb 1-1: device descriptor read/all, error -71
[  370.089166][ T9567] netlink: 140 bytes leftover after parsing attributes in process `syz.1.890'.
[  370.149870][   T30] audit: type=1400 audit(1767323161.869:919): avc:  denied  { mount } for  pid=9562 comm="syz.3.888" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  370.372691][ T9571] fuse: Bad value for 'fd'
[  370.510436][   T30] audit: type=1400 audit(1767323162.229:920): avc:  denied  { unmount } for  pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  371.124396][   T30] audit: type=1400 audit(1767323162.849:921): avc:  denied  { getopt } for  pid=9581 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  371.248801][   T30] audit: type=1400 audit(1767323162.969:922): avc:  denied  { bind } for  pid=9581 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  371.682446][ T9589] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  372.121942][ T9607] usb usb5: usbfs: process 9607 (syz.2.897) did not claim interface 0 before use
[  372.773366][ T7545] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  372.873781][ T9615] comedi comedi0: Minor 3 specified more than once!
[  373.342104][ T7545] usb 4-1: Using ep0 maxpacket: 16
[  373.356576][ T7545] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  373.374109][ T7545] usb 4-1: config 0 has no interface number 0
[  373.391703][ T7545] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  373.411294][ T7545] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  373.429565][ T7545] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  373.440203][ T7545] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  373.455728][ T7545] usb 4-1: Product: syz
[  373.470089][ T7545] usb 4-1: SerialNumber: syz
[  373.480742][ T7545] usb 4-1: config 0 descriptor??
[  373.496335][ T7545] cm109 4-1:0.8: invalid payload size 0, expected 4
[  373.545108][ T7545] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input30
[  373.709389][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  373.709436][ T5921] usb 4-1: USB disconnect, device number 26
[  373.716588][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  373.861121][ T5921] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  373.990492][ T9621] sch_fq: defrate 0 ignored.
[  374.660212][   T30] audit: type=1400 audit(1767323166.379:923): avc:  denied  { setopt } for  pid=9627 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  376.343669][ T9650] fuse: Bad value for 'fd'
[  376.655733][ T9656] sch_fq: defrate 0 ignored.
[  377.344991][   T30] audit: type=1400 audit(1767323169.069:924): avc:  denied  { map } for  pid=9659 comm="syz.2.912" path="socket:[26178]" dev="sockfs" ino=26178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  377.395785][   T30] audit: type=1400 audit(1767323169.099:925): avc:  denied  { read } for  pid=9659 comm="syz.2.912" path="socket:[26178]" dev="sockfs" ino=26178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  377.892993][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'.
[  378.062727][ T9667] vivid-003: =================  START STATUS  =================
[  378.070684][ T9667] vivid-003: Radio HW Seek Mode: Bounded
[  378.076415][ T9667] vivid-003: Radio Programmable HW Seek: false
[  378.082787][ T9667] vivid-003: RDS Rx I/O Mode: Block I/O
[  378.088515][ T9667] vivid-003: Generate RBDS Instead of RDS: false
[  378.095011][ T9667] vivid-003: RDS Reception: true
[  378.100085][ T9667] vivid-003: RDS Program Type: 0 inactive
[  378.109352][ T9667] vivid-003: RDS PS Name:  inactive
[  378.114930][ T9667] vivid-003: RDS Radio Text:  inactive
[  378.120592][ T9667] vivid-003: RDS Traffic Announcement: false inactive
[  378.127482][ T9667] vivid-003: RDS Traffic Program: false inactive
[  378.133966][ T9667] vivid-003: RDS Music: false inactive
[  378.139553][ T9667] vivid-003: ==================  END STATUS  ==================
[  378.423124][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  382.548044][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'.
[  384.208580][ T9712] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  384.387586][   T30] audit: type=1400 audit(1767323176.099:926): avc:  denied  { audit_write } for  pid=9715 comm="syz.1.924" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  384.872110][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'.
[  386.293878][ T9734] xt_CT: You must specify a L4 protocol and not use inversions on it
[  389.612089][ T9756] netlink: 140 bytes leftover after parsing attributes in process `syz.1.934'.
[  391.299755][ T9757] fuse: Bad value for 'fd'
[  392.681993][ T9767] fuse: Invalid rootmode
[  392.864146][ T9775] netlink: 140 bytes leftover after parsing attributes in process `syz.4.935'.
[  392.904778][   T30] audit: type=1400 audit(1767323184.609:927): avc:  denied  { connect } for  pid=9769 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  393.031412][ T5918] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  393.872067][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.919075][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.987487][ T5918] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  394.023151][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.091298][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.109733][ T5918] usb 4-1: Product: syz
[  394.124708][ T5918] usb 4-1: Manufacturer: syz
[  394.129327][ T5918] usb 4-1: SerialNumber: syz
[  394.165585][ T5918] cdc_mbim 4-1:1.0: skipping garbage
[  395.644493][ T9787] sch_fq: defrate 0 ignored.
[  395.754936][ T9773] Mount JFS Failure: -5
[  397.205244][ T9798] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.818458][ T5918] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed
[  397.965373][ T5918] cdc_mbim 4-1:1.0: bind() failure
[  397.978368][ T5918] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  398.001209][ T5918] cdc_ncm 4-1:1.1: bind() failure
[  398.026355][ T5918] usb 4-1: USB disconnect, device number 27
[  398.417903][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.432315][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.443201][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.451823][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.460989][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.513713][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.523737][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.553312][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.592571][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.600284][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.641933][ T9805] lo speed is unknown, defaulting to 1000
[  400.173723][ T9805] chnl_net:caif_netlink_parms(): no params data found
[  400.382170][   T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.534169][   T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.633917][   T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.669198][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.676773][ T5824] Bluetooth: hci5: command tx timeout
[  400.697820][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.721502][ T9805] bridge_slave_0: entered allmulticast mode
[  400.738336][ T9805] bridge_slave_0: entered promiscuous mode
[  400.764323][   T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.793149][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.802909][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.810130][ T9805] bridge_slave_1: entered allmulticast mode
[  400.846224][ T9805] bridge_slave_1: entered promiscuous mode
[  400.935824][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.954966][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.660334][ T9805] team0: Port device team_slave_0 added
[  401.697962][ T9805] team0: Port device team_slave_1 added
[  401.723071][   T75] batman_adv: batadv0: Interface deactivated: gretap1
[  401.740135][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'.
[  401.841490][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'.
[  401.860722][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'.
[  402.961743][ T5824] Bluetooth: hci5: command tx timeout
[  405.285310][ T5824] Bluetooth: hci5: command tx timeout
[  405.412159][   T75] batman_adv: batadv0: Removing interface: gretap1
[  407.033806][   T75] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  407.054845][   T75] bond0 (unregistering): Released all slaves
[  407.069018][   T75] bond1 (unregistering): Released all slaves
[  407.137553][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.145939][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.222431][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.251930][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.258870][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.296830][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.301070][ T5824] Bluetooth: hci5: command tx timeout
[  408.405103][ T9805] hsr_slave_0: entered promiscuous mode
[  408.412573][ T9805] hsr_slave_1: entered promiscuous mode
[  408.426338][ T9805] debugfs: 'hsr0' already exists in 'hsr'
[  408.439623][ T9805] Cannot create hsr debugfs directory
[  409.009807][   T75] hsr_slave_0: left promiscuous mode
[  409.047095][   T75] hsr_slave_1: left promiscuous mode
[  409.346275][   T75] veth1_macvtap: left promiscuous mode
[  409.394221][   T75] veth0_macvtap: left allmulticast mode
[  409.433399][   T75] veth0_macvtap: left promiscuous mode
[  409.455250][   T75] veth1_vlan: left promiscuous mode
[  409.475500][   T75] veth0_vlan: left promiscuous mode
[  409.756429][ T9901] sctp: [Deprecated]: syz.0.966 (pid 9901) Use of struct sctp_assoc_value in delayed_ack socket option.
[  409.756429][ T9901] Use struct sctp_sack_info instead
[  412.280845][ T5891] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  412.442758][ T5891] usb 5-1: Using ep0 maxpacket: 8
[  412.457784][ T5891] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  412.480288][ T9879] lo speed is unknown, defaulting to 1000
[  412.487697][ T5891] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  412.510601][ T5891] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  412.522552][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.558628][ T5891] usb 5-1: config 0 descriptor??
[  412.808372][ T5891] usb 5-1: USB disconnect, device number 27
[  412.952033][ T9805] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  413.454647][ T9805] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  413.507659][ T9805] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  413.538501][   T75] IPVS: stop unused estimator thread 0...
[  413.545690][ T9805] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  414.923578][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.999033][ T9805] 8021q: adding VLAN 0 to HW filter on device team0
[  415.061649][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.068711][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.135844][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.143017][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.162431][T10001] netlink: 140 bytes leftover after parsing attributes in process `syz.1.977'.
[  416.952391][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'.
[  417.010115][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.518658][ T9805] veth0_vlan: entered promiscuous mode
[  418.540191][ T9805] veth1_vlan: entered promiscuous mode
[  419.031446][ T9805] veth0_macvtap: entered promiscuous mode
[  419.076109][ T9805] veth1_macvtap: entered promiscuous mode
[  419.188982][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.334895][ T9805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.605435][ T2200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.666459][ T2200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.081106][T10041] xt_hashlimit: max too large, truncated to 1048576
[  420.128606][ T2200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.162440][T10043] fuse: Invalid rootmode
[  420.259270][ T6068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.421787][ T6012] wlan1: Trigger new scan to find an IBSS to join
[  420.464675][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.575727][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.055585][ T2136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.116597][ T2136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.308650][   T30] audit: type=1400 audit(1767323213.019:928): avc:  denied  { mounton } for  pid=9805 comm="syz-executor" path="/root/syzkaller.4pEEVo/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  422.301199][   T30] audit: type=1400 audit(1767323214.019:929): avc:  denied  { mounton } for  pid=9805 comm="syz-executor" path="/root/syzkaller.4pEEVo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  422.890944][   T30] audit: type=1400 audit(1767323214.599:930): avc:  denied  { mounton } for  pid=9805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  423.810547][   T30] audit: type=1400 audit(1767323215.529:931): avc:  denied  { lock } for  pid=10091 comm="syz.0.995" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  424.489912][T10100] 
[  424.492268][T10100] ======================================================
[  424.499274][T10100] WARNING: possible circular locking dependency detected
[  424.506276][T10100] syzkaller #0 Not tainted
[  424.510678][T10100] ------------------------------------------------------
[  424.517687][T10100] syz.1.996/10100 is trying to acquire lock:
[  424.523660][T10100] ffff88807cb0f948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  424.533416][T10100] 
[  424.533416][T10100] but task is already holding lock:
[  424.540770][T10100] ffff888031da3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  424.550093][T10100] 
[  424.550093][T10100] which lock already depends on the new lock.
[  424.550093][T10100] 
[  424.560493][T10100] 
[  424.560493][T10100] the existing dependency chain (in reverse order) is:
[  424.569494][T10100] 
[  424.569494][T10100] -> #3 (&of->mutex){+.+.}-{4:4}:
[  424.576675][T10100]        __mutex_lock+0x1aa/0x1ca0
[  424.581766][T10100]        kernfs_seq_start+0x4f/0x2a0
[  424.587024][T10100]        traverse.part.0.constprop.0+0xaf/0x650
[  424.593238][T10100]        seq_read_iter+0x93c/0x12d0
[  424.598411][T10100]        kernfs_fop_read_iter+0x46c/0x610
[  424.604104][T10100]        vfs_read+0x8bf/0xcf0
[  424.608749][T10100]        __x64_sys_pread64+0x1eb/0x250
[  424.614180][T10100]        do_syscall_64+0xcd/0xf80
[  424.619175][T10100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.625557][T10100] 
[  424.625557][T10100] -> #2 (&p->lock){+.+.}-{4:4}:
[  424.632555][T10100]        __mutex_lock+0x1aa/0x1ca0
[  424.637665][T10100]        seq_read_iter+0xe1/0x12d0
[  424.642759][T10100]        kernfs_fop_read_iter+0x46c/0x610
[  424.648454][T10100]        copy_splice_read+0x618/0xc20
[  424.653801][T10100]        do_splice_read+0x285/0x370
[  424.658977][T10100]        splice_file_to_pipe+0x109/0x120
[  424.664582][T10100]        do_sendfile+0x400/0xe50
[  424.669489][T10100]        __x64_sys_sendfile64+0x1d8/0x220
[  424.675179][T10100]        do_syscall_64+0xcd/0xf80
[  424.680173][T10100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.686566][T10100] 
[  424.686566][T10100] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[  424.693920][T10100]        __mutex_lock+0x1aa/0x1ca0
[  424.699013][T10100]        anon_pipe_write+0x15d/0x1bd0
[  424.704359][T10100]        __kernel_write_iter+0x720/0xb10
[  424.709960][T10100]        __kernel_write+0xf5/0x140
[  424.715040][T10100]        autofs_notify_daemon+0x4db/0xd60
[  424.720734][T10100]        autofs_wait+0x10f3/0x1ac0
[  424.725819][T10100]        autofs_mount_wait+0x132/0x3c0
[  424.731246][T10100]        autofs_d_automount+0x4b2/0x960
[  424.736767][T10100]        __traverse_mounts+0x1b9/0x830
[  424.742197][T10100]        step_into_slowpath+0x772/0xf50
[  424.747720][T10100]        path_lookupat+0x627/0xc40
[  424.752798][T10100]        filename_lookup+0x224/0x5f0
[  424.758054][T10100]        user_path_at+0x3a/0x60
[  424.762873][T10100]        __x64_sys_mount+0x1fb/0x310
[  424.768136][T10100]        do_syscall_64+0xcd/0xf80
[  424.773131][T10100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.779511][T10100] 
[  424.779511][T10100] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  424.787206][T10100]        __lock_acquire+0x1669/0x2890
[  424.792546][T10100]        lock_acquire+0x179/0x330
[  424.797537][T10100]        __mutex_lock+0x1aa/0x1ca0
[  424.802618][T10100]        autofs_notify_daemon+0x4a6/0xd60
[  424.808315][T10100]        autofs_wait+0x10f3/0x1ac0
[  424.813395][T10100]        autofs_mount_wait+0x132/0x3c0
[  424.818829][T10100]        autofs_d_automount+0x4b2/0x960
[  424.824352][T10100]        __traverse_mounts+0x1b9/0x830
[  424.829782][T10100]        step_into_slowpath+0x772/0xf50
[  424.835307][T10100]        path_lookupat+0x627/0xc40
[  424.840387][T10100]        filename_lookup+0x224/0x5f0
[  424.845640][T10100]        kern_path+0x35/0x50
[  424.850201][T10100]        lookup_bdev+0xd8/0x280
[  424.855026][T10100]        resume_store+0x1d6/0x490
[  424.860023][T10100]        kobj_attr_store+0x58/0x80
[  424.865103][T10100]        sysfs_kf_write+0xf2/0x150
[  424.870182][T10100]        kernfs_fop_write_iter+0x3af/0x570
[  424.875957][T10100]        vfs_write+0x7d3/0x11d0
[  424.880775][T10100]        ksys_write+0x12a/0x250
[  424.885595][T10100]        do_syscall_64+0xcd/0xf80
[  424.890590][T10100]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.896972][T10100] 
[  424.896972][T10100] other info that might help us debug this:
[  424.896972][T10100] 
[  424.907165][T10100] Chain exists of:
[  424.907165][T10100]   &sbi->pipe_mutex --> &p->lock --> &of->mutex
[  424.907165][T10100] 
[  424.919290][T10100]  Possible unsafe locking scenario:
[  424.919290][T10100] 
[  424.926704][T10100]        CPU0                    CPU1
[  424.932035][T10100]        ----                    ----
[  424.937367][T10100]   lock(&of->mutex);
[  424.941324][T10100]                                lock(&p->lock);
[  424.947617][T10100]                                lock(&of->mutex);
[  424.954082][T10100]   lock(&sbi->pipe_mutex);
[  424.958548][T10100] 
[  424.958548][T10100]  *** DEADLOCK ***
[  424.958548][T10100] 
[  424.966664][T10100] 4 locks held by syz.1.996/10100:
[  424.971740][T10100]  #0: ffff88807d4eb0b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  424.980752][T10100]  #1: ffff888033e04420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  424.989679][T10100]  #2: ffff888031da3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  424.999392][T10100]  #3: ffff888141ef5008 (kn->active#73){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  425.009361][T10100] 
[  425.009361][T10100] stack backtrace:
[  425.015401][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.1.996 Not tainted syzkaller #0 PREEMPT(full) 
[  425.015413][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  425.015419][T10100] Call Trace:
[  425.015422][T10100]  <TASK>
[  425.015427][T10100]  dump_stack_lvl+0x116/0x1f0
[  425.015441][T10100]  print_circular_bug+0x275/0x340
[  425.015453][T10100]  check_noncircular+0x146/0x160
[  425.015469][T10100]  __lock_acquire+0x1669/0x2890
[  425.015483][T10100]  lock_acquire+0x179/0x330
[  425.015493][T10100]  ? autofs_notify_daemon+0x4a6/0xd60
[  425.015506][T10100]  ? __pfx___might_resched+0x10/0x10
[  425.015515][T10100]  ? __lock_acquire+0x12c2/0x2890
[  425.015527][T10100]  __mutex_lock+0x1aa/0x1ca0
[  425.015540][T10100]  ? autofs_notify_daemon+0x4a6/0xd60
[  425.015551][T10100]  ? __kernel_text_address+0xd/0x40
[  425.015564][T10100]  ? find_held_lock+0x2b/0x80
[  425.015578][T10100]  ? autofs_notify_daemon+0x4a6/0xd60
[  425.015589][T10100]  ? autofs_notify_daemon+0x45a/0xd60
[  425.015600][T10100]  ? __pfx___mutex_lock+0x10/0x10
[  425.015613][T10100]  ? __mutex_unlock_slowpath+0x161/0x790
[  425.015626][T10100]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  425.015640][T10100]  ? from_kgid_munged+0xab/0x130
[  425.015653][T10100]  ? autofs_notify_daemon+0x4a6/0xd60
[  425.015664][T10100]  autofs_notify_daemon+0x4a6/0xd60
[  425.015676][T10100]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  425.015687][T10100]  ? kernfs_fop_write_iter+0x3af/0x570
[  425.015701][T10100]  ? vfs_write+0x7d3/0x11d0
[  425.015712][T10100]  ? ksys_write+0x12a/0x250
[  425.015728][T10100]  ? lockdep_init_map_type+0x5c/0x270
[  425.015740][T10100]  ? lockdep_init_map_type+0x5c/0x270
[  425.015753][T10100]  autofs_wait+0x10f3/0x1ac0
[  425.015765][T10100]  ? __pfx_autofs_wait+0x10/0x10
[  425.015776][T10100]  ? __pfx_path_check_mount+0x10/0x10
[  425.015785][T10100]  ? find_held_lock+0x2b/0x80
[  425.015800][T10100]  ? path_has_submounts+0xcf/0x120
[  425.015811][T10100]  ? do_raw_spin_unlock+0x172/0x230
[  425.015825][T10100]  ? find_held_lock+0x2b/0x80
[  425.015840][T10100]  autofs_mount_wait+0x132/0x3c0
[  425.015851][T10100]  autofs_d_automount+0x4b2/0x960
[  425.015863][T10100]  __traverse_mounts+0x1b9/0x830
[  425.015880][T10100]  step_into_slowpath+0x772/0xf50
[  425.015892][T10100]  ? __up_read+0x2d1/0x700
[  425.015904][T10100]  ? __pfx_step_into_slowpath+0x10/0x10
[  425.015916][T10100]  ? __lookup_slow+0x430/0x460
[  425.015927][T10100]  path_lookupat+0x627/0xc40
[  425.015940][T10100]  filename_lookup+0x224/0x5f0
[  425.015952][T10100]  ? __pfx_filename_lookup+0x10/0x10
[  425.015969][T10100]  ? getname_kernel+0x52/0x370
[  425.015984][T10100]  ? __asan_memcpy+0x3c/0x60
[  425.015995][T10100]  kern_path+0x35/0x50
[  425.016007][T10100]  lookup_bdev+0xd8/0x280
[  425.016020][T10100]  ? __pfx_lookup_bdev+0x10/0x10
[  425.016033][T10100]  ? __asan_memcpy+0x3c/0x60
[  425.016043][T10100]  resume_store+0x1d6/0x490
[  425.016057][T10100]  ? __pfx_resume_store+0x10/0x10
[  425.016072][T10100]  ? find_held_lock+0x2b/0x80
[  425.016087][T10100]  ? __pfx_resume_store+0x10/0x10
[  425.016100][T10100]  kobj_attr_store+0x58/0x80
[  425.016113][T10100]  ? __pfx_kobj_attr_store+0x10/0x10
[  425.016125][T10100]  sysfs_kf_write+0xf2/0x150
[  425.016135][T10100]  kernfs_fop_write_iter+0x3af/0x570
[  425.016149][T10100]  ? __pfx_sysfs_kf_write+0x10/0x10
[  425.016160][T10100]  vfs_write+0x7d3/0x11d0
[  425.016172][T10100]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  425.016188][T10100]  ? __pfx_vfs_write+0x10/0x10
[  425.016203][T10100]  ksys_write+0x12a/0x250
[  425.016215][T10100]  ? __pfx_ksys_write+0x10/0x10
[  425.016228][T10100]  do_syscall_64+0xcd/0xf80
[  425.016241][T10100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.016252][T10100] RIP: 0033:0x7f9e2c18f749
[  425.016261][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  425.016270][T10100] RSP: 002b:00007f9e2d112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  425.016279][T10100] RAX: ffffffffffffffda RBX: 00007f9e2c3e5fa0 RCX: 00007f9e2c18f749
[  425.016285][T10100] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003
[  425.016291][T10100] RBP: 00007f9e2c213f91 R08: 0000000000000000 R09: 0000000000000000
[  425.016297][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.016302][T10100] R13: 00007f9e2c3e6038 R14: 00007f9e2c3e5fa0 R15: 00007ffcd2ba70b8
[  425.016311][T10100]  </TASK>
[  425.582883][   T13] wlan1: Trigger new scan to find an IBSS to join
[  425.701663][T10100] PM: Image not found (code -22)
[  426.371581][ T5811] syz_tun (unregistering): left allmulticast mode
[  426.435867][   T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.562367][   T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.671237][ T8506] wlan1: Creating new IBSS network, BSSID 72:32:1d:32:07:2b
[  426.685273][   T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.757777][   T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.838346][   T75] bridge_slave_1: left allmulticast mode
[  426.851931][   T75] bridge_slave_1: left promiscuous mode
[  426.857618][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.868147][   T75] bridge_slave_0: left allmulticast mode
[  426.874245][   T75] bridge_slave_0: left promiscuous mode
[  426.879834][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.003700][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.013427][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.022983][   T75] bond0 (unregistering): Released all slaves
[  427.198759][   T75] hsr_slave_0: left promiscuous mode
[  427.204511][   T75] hsr_slave_1: left promiscuous mode
[  427.210327][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.218568][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.226925][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.235520][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.244428][   T75] batadv_slave_1: left promiscuous mode
[  427.249992][   T75] veth1_macvtap: left promiscuous mode
[  427.255484][   T75] veth0_macvtap: left promiscuous mode
[  427.261376][   T75] veth1_vlan: left promiscuous mode
[  427.266599][   T75] veth0_vlan: left promiscuous mode
[  427.298377][   T75] pimreg (unregistering): left allmulticast mode
[  427.366278][   T75] team0 (unregistering): Port device team_slave_1 removed
[  427.391738][   T75] team0 (unregistering): Port device team_slave_0 removed
[  427.756113][   T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.766587][   T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48411 - 0
[  427.834348][   T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.845285][   T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48411 - 0
[  427.904950][   T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.922792][   T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48411 - 0
[  427.990966][   T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.001309][   T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48411 - 0
[  428.096975][   T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.125583][   T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.185168][   T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.229491][   T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.299914][   T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.342609][   T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.392658][   T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.441413][   T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.527137][   T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.541306][   T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.622537][   T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.633696][   T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.695146][   T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.707023][   T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.746769][   T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.757639][   T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.869384][   T75] bridge_slave_1: left allmulticast mode
[  428.876709][   T75] bridge_slave_1: left promiscuous mode
[  428.883341][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.893137][   T75] bridge_slave_0: left allmulticast mode
[  428.898784][   T75] bridge_slave_0: left promiscuous mode
[  428.905270][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.914949][   T75] bridge_slave_1: left allmulticast mode
[  428.920782][   T75] bridge_slave_1: left promiscuous mode
[  428.926420][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.935537][   T75] bridge_slave_0: left allmulticast mode
[  428.942330][   T75] bridge_slave_0: left promiscuous mode
[  428.948001][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.959137][   T75] bridge_slave_1: left allmulticast mode
[  428.965426][   T75] bridge_slave_1: left promiscuous mode
[  428.971857][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.979632][   T75] bridge_slave_0: left allmulticast mode
[  428.985737][   T75] bridge_slave_0: left promiscuous mode
[  428.992652][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.153643][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.165551][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.175094][   T75] bond0 (unregistering): (slave team0): Releasing backup interface
[  429.183723][   T75] bond0 (unregistering): Released all slaves
[  429.264124][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.274661][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.283893][   T75] bond0 (unregistering): Released all slaves
[  429.347361][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.356770][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.366454][   T75] bond0 (unregistering): Released all slaves
[  429.535080][   T75] bond0 (unregistering): Released all slaves
[  429.636151][   T75] tipc: Disabling bearer <udp:syz0>
[  429.644503][   T75] tipc: Left network mode
[  429.656348][   T75] tipc: Left network mode
[  430.202571][   T75] hsr_slave_0: left promiscuous mode
[  430.208205][   T75] hsr_slave_1: left promiscuous mode
[  430.218067][   T75] hsr_slave_0: left promiscuous mode
[  430.223739][   T75] hsr_slave_1: left promiscuous mode
[  430.229372][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.240832][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.248370][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.256074][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.265488][   T75] hsr_slave_0: left promiscuous mode
[  430.271450][   T75] hsr_slave_1: left promiscuous mode
[  430.276948][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.284555][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.294132][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.302035][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.311546][   T75] hsr_slave_0: left promiscuous mode
[  430.317195][   T75] hsr_slave_1: left promiscuous mode
[  430.323784][   T75] batman_adv: batadv0: Interface deactivated: ipvlan2
[  430.330889][   T75] batman_adv: batadv0: Removing interface: ipvlan2
[  430.347792][   T75] veth1_macvtap: left promiscuous mode
[  430.353343][   T75] veth0_macvtap: left promiscuous mode
[  430.358855][   T75] veth1_vlan: left promiscuous mode
[  430.365423][   T75] veth0_vlan: left promiscuous mode
[  430.371056][   T75] veth0_macvtap: left promiscuous mode
[  430.376537][   T75] veth1_vlan: left promiscuous mode
[  430.381799][   T75] veth0_vlan: left promiscuous mode
[  430.388379][   T75] veth1_macvtap: left promiscuous mode
[  430.393941][   T75] veth0_macvtap: left promiscuous mode
[  430.399434][   T75] veth1_vlan: left promiscuous mode
[  430.404786][   T75] veth0_vlan: left promiscuous mode
[  430.410430][   T75] veth0_macvtap: left promiscuous mode
[  430.416055][   T75] veth1_vlan: left promiscuous mode
[  430.421625][   T75] veth0_vlan: left promiscuous mode
[  430.574094][   T75] team0 (unregistering): Port device team_slave_1 removed
[  430.592115][   T75] team0 (unregistering): Port device team_slave_0 removed
[  430.626564][   T75] team0 (unregistering): Port device dummy0 removed
[  430.696829][   T75] team0 (unregistering): Port device batadv1 removed
[  430.768256][   T75] team0 (unregistering): Port device team_slave_1 removed
[  430.787273][   T75] team0 (unregistering): Port device team_slave_0 removed
[  430.884633][   T75] team0 (unregistering): Port device team_slave_1 removed
[  430.895288][   T75] team0 (unregistering): Port device team_slave_0 removed
[  431.964180][   T75] IPVS: stop unused estimator thread 0...
[  431.974526][   T75] IPVS: stop unused estimator thread 0...