last executing test programs:

11.349666365s ago: executing program 1 (id=847):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmmsg(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40)

11.209697213s ago: executing program 2 (id=848):
semget$private(0x0, 0x20000000102, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8d", 0x8a}, {&(0x7f00000004c0)}], 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
read$FUSE(r1, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1)

11.004134617s ago: executing program 1 (id=849):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0)

10.390408676s ago: executing program 3 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/123, 0x7b}], 0x1, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

9.909441579s ago: executing program 2 (id=851):
ppoll(0xfffffffffffffffe, 0x0, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x7ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000380)={0xa, 0x4e23, 0x1, @remote, 0x83}, 0x1c, 0x0}, 0x8090)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
recvmsg$inet_nvme(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/222, 0xde}, 0x2000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000110}, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0)
recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x20000002)

9.876674942s ago: executing program 0 (id=852):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x80104d12, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000000c0)={0x34, 0x1, 0x5, 0xc, 0x7fff, 0x81})

9.25445459s ago: executing program 1 (id=853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0xf0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0xba, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)

8.415403029s ago: executing program 3 (id=854):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xef1, 0x101440)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000080)={0x3, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x59a7f5e94668599c, r1, 0x44cfc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"})
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000280)=0x8000)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x400c090)
r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008332101f89e4f0481000200030000006a00010073797a30000000000900010073797a31"], 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.206150522s ago: executing program 0 (id=855):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001880)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, r2, 0x511, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x44, r2, 0x408, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x8c4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r5)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r11 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r11, 0x1, &(0x7f0000258f88)={{}, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0xffffffffffffffff, 0x1})
msgsnd(r11, &(0x7f0000000240)={0x1}, 0x8, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r12, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.164272505s ago: executing program 2 (id=856):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0xf, 0x803, 0x9)
r4 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0))
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xf, 0x4)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r5, 0x5402)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r7, 0x10000)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x62, 0x32, 0x35, 0x33, 0x36, 0x62, 0x0, 0x62, 0x61, 0x36, 0x65, 0x64, 0x38, 0x65, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r9, &(0x7f0000000140)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/sequencer2\x00', 0x20, 0x6, 0x20, [0x33, 0x65, 0x37, 0xe, 0x38, 0x66]}, 0x42, r9)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)

7.799223338s ago: executing program 3 (id=857):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x71, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xc6, 0x0, 0x3, 0x40, 0x5}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x1, [@generic={0x31, 0x10, 0x3, "a216f29854844f643c1771041104b912fd6f8e7232ee0c72e0589b1ee965c8d7cf732fee14549da529e0034266eb"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3801}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "ef208ae84cc6dd915408b34eb9d45340f5f0befb35383f52234f31b49471c300d707ae7464ff6acba02a1d097ee2c3370848f3d31977818f"}}]})
syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f0000000440)={0x20, 0x30, 0xf7, {0xf7, 0x23, "8ff6d905e10e1b36e2844cd87f9000c2ccd51d1d79abe6641fc32f1d64d40746f9512237a10bee7e294adf7eaf5b9aed25f24f515e08f7fa0b151b91a72d8661020aeddb6e8328c598c5105c9a15719d6f0bacbaa07ffb252241c99866b4a69b3e5ec64ffe21927e753ac116fd6c7db8fd829f836b6259e033a623044402723d59a4eaefafcd1162c00027547653c1aac0335796ff135afc60243b0bf4b91057e2c2887d4f6b9353272f32a1a771b897854109bbfe318ff7c266ec4bb7c11ef55cc9f9d8138b4e138110d643961e8433c9d81ad21e3471a70443e7d60b8f03e572ff6f82886ca2cee3e6071f9bb20b7d9af58b636a"}}, &(0x7f0000000540)={0x0, 0x3, 0x90, @string={0x90, 0x3, "850bc349a42036c1615f998649ca9bac884f5d964fa16dad78364e67b45f54e2828eb602e9dfca58b1e14f794566a81a1d0c2938c53da45b90db6b35b1e3b27091381fda517306871c1bba4e82022e4e6857a6815a5518cb2ce3bbaff4a50498d2af9582d8ef33ab23c80faf45c128ba0fe760d401c3776c71b32864f6f79fd567389a843876b8700bd6925e751e"}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000640)={0x40, 0xd, 0xf7, "7af3141e72cf8a32cfc04c5f29ac2949715145f45e61f1f7ccff474ecbd7df8b2d3d24597e17b0f7749bef0523a297d175135a0723963783eb1741ada7a39510b6c72ea7aeed4a3ad63ef5b85bb723818c30009ef472697513ed56565637923101574b7456bcab07e3fa7c88a7d3b3e77366e1b29f03ef2681cb764357735b891bc2e0da511b945fc975e22680f4db0c1987d8c963e246233e5412737da5b6cce713c7b48ab7040b641b116a9e89bc953fdd14a45aea4cf1d00df2d6e5d629517051409544a4c450c89c73f614658557d873bc681bfa1499a313bf17e21f427e53179434725d6807c269de895880345b82d09b4f00869c"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000900)={0x20, 0x0, 0xc6, {0xc4, "5b1e505a672eb3f1e0a8bab9b02e5182cee2dfde9ee7ea606fbdc3ac5be3917b3761a12ffe7d038f72409697d7bb9ae624690067e4a2bf26ec671bb2e3c98f19eb2b9ca907c8d11baa813ffe91afd3b725aa890b82e6552333a1b83579b47231121ee64e199e7f7db818696ab386a5e0f785ca9b29e48a2b0a8566e568dc09f8a000e7eb5bb6425f2652e4bfc31a03e152e184f463dae22cb43ae346fdd7d187a959b547869d3cd7aa5c6bd5c079666afda15a34393645e49d746445c797c5271e74a736"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x9c}})
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000200))

7.265444109s ago: executing program 4 (id=858):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

6.140997823s ago: executing program 4 (id=859):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, 0x0, 0x0)
listen(r4, 0x8)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x1, "c97cbd0dd8d8951e89617a86745693cd935b25ef6e17af527b727ed8f0695ae4", 0x0, 0x8, 0xfffffffa, 0x7f}, 0x3c)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x38, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

6.074110347s ago: executing program 0 (id=860):
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380ae000000bbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f250000000000000000890000e00000017f00000100186371ae9b1c03a5f423c950d8e85634ed1b1750f9d427c6e8c562a31d807e4ae11e3bd801000000000000000000000000326b5c22807b22922a576f65fc3c6c4a34b0fbcd4df286cbef1e37744f189458da241436eb65ce0dcf1d1cfc875d007b3a2296ba2dfc7cf5dc0b789af00e234851b660fdbc167514eb803f0bfdddf63d66a34afbae8c337b8f296abba7be011bbfe37966b7c47248a0221f9b0d595d8e4d28bab3d9c66b60485ff83c37e49c34"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1}, 0x1)

5.502070508s ago: executing program 0 (id=861):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r3}) (fail_nth: 1)

5.481028829s ago: executing program 1 (id=862):
semget$private(0x0, 0x20000000102, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8d", 0x8a}, {&(0x7f00000004c0)}], 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00')
read$FUSE(r1, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1)

4.776702846s ago: executing program 4 (id=863):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r0=>0x0})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

4.691923561s ago: executing program 1 (id=864):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000004001000000002000020000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/73], 0xb8}}, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1})
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}})
r6 = dup(r4)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"])
ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r6, 0x0, 0xffffffdb)

4.598039445s ago: executing program 0 (id=865):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x46, 0x6f, 0xfe, 0x20, 0x100d, 0x3342, 0x172e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x3, 0xa, 0x0, 0x77, 0x37, 0x38, 0x7}}]}}]}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0)
r4 = mq_open(0x0, 0x42, 0x1f0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000)
syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x20, 0x0, 0xf, "2ce46fdb45d768399e1a87af3de9ec"}, 0x0, 0x0, 0x0, 0x0})
mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r4)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0)
r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000001c0)=""/4084)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"})

4.434619816s ago: executing program 4 (id=866):
syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00')
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
sendmmsg(r2, 0x0, 0x0, 0x842)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.40699157s ago: executing program 2 (id=867):
syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00')
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
sendmmsg(r2, 0x0, 0x0, 0x842)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.082240726s ago: executing program 3 (id=868):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000300)={0x1f261, 0x1}, 0xd, 0x2)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40800, 0x51)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x2640, 0x187)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6a", 0x41}, {&(0x7f0000000500)}, {&(0x7f0000000180)="3d150879aa66350175bcb4921ccb82fa544441dc3deff07bcaf2fd6952f6c185f8bd167d72cd0a4596951a60ff1e0101adffc6b7e4bc9de8d4e384cc5041f8", 0x3f}], 0x3}, 0x0)
recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)

2.466096719s ago: executing program 1 (id=869):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x240)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff14)
socket$inet6(0xa, 0x3, 0x1d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

2.329813608s ago: executing program 3 (id=870):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)

1.273035853s ago: executing program 0 (id=871):
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', <r1=>0x0, 0x8, 0x8, 0x8, 0xffffff7f, {{0x11, 0x4, 0x2, 0x11, 0x44, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xb, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xd7, 0x1, 0x6, [{@multicast2, 0x8}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xb8}]}]}}}}})
r2 = syz_open_dev$audion(0x0, 0x589, 0x100)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3c)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x96, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r4, 0xc0104d04, 0x200000000005)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x13, &(0x7f0000000200)=""/19, 0x41100, 0x9, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r3, r4], &(0x7f00000007c0)=[{0x2, 0x1, 0xc, 0xa}, {0x5, 0x5, 0xe, 0xb}], 0x10, 0x20000000}, 0x94)
r5 = dup(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))
accept4$vsock_stream(r5, &(0x7f0000000b80)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$UHID_INPUT(r5, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)

1.039981714s ago: executing program 2 (id=872):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000050000000600000008"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000018000f000000000", @ANYRES32=r3], 0x50)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x400, 0x2, 0x6, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x40000000)

703.274244ms ago: executing program 4 (id=873):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
close(r0)

690.397138ms ago: executing program 3 (id=874):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

178.145158ms ago: executing program 2 (id=875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x9, 0x8, 0x4}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r9)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=876):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x9, 0x8, 0x4}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r9)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x3, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

rialNumber: syz
[  268.220090][ T5884] usb 2-1: Detected FT232A
[  268.252882][ T5884] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  268.254629][   T43] usb 1-1: config 0 descriptor??
[  268.455596][   T43] usb 1-1: selecting invalid altsetting 0
[  268.608314][ T5884] usb 2-1: USB disconnect, device number 16
[  268.636311][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.660167][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  268.673010][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.703459][ T7985] netlink: 52 bytes leftover after parsing attributes in process `syz.1.471'.
[  268.739161][ T5884] ftdi_sio 2-1:0.0: device disconnected
[  268.757443][ T7986] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.765113][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  268.905927][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.033325][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.534679][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.560422][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.011485][ T8001] netlink: 277 bytes leftover after parsing attributes in process `syz.2.474'.
[  270.307974][ T8009] netlink: 277 bytes leftover after parsing attributes in process `syz.3.475'.
[  270.994338][   T43] usb 1-1: USB disconnect, device number 16
[  271.506229][   T43] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  271.674228][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.684654][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  271.693691][   T43] usb 1-1: config 1 has no interface number 0
[  271.699867][   T43] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  271.711019][   T43] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  271.722788][   T43] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  271.775756][   T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.795089][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.803614][   T43] usb 1-1: Product: syz
[  271.978498][   T43] usb 1-1: Manufacturer: syz
[  271.987013][   T43] usb 1-1: SerialNumber: syz
[  272.012543][ T8013] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  272.733556][ T8036] net_ratelimit: 2 callbacks suppressed
[  272.733582][ T8036] IPVS: sh: FWM 3 0x00000003 - no destination available
[  272.764531][   T43] cdc_ncm 1-1:1.1: bind() failure
[  272.804107][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  272.811537][ T8037] IPVS: sh: FWM 3 0x00000003 - no destination available
[  272.823449][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  273.052870][   T43] usb 1-1: USB disconnect, device number 17
[  275.702814][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  275.899801][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  276.005203][ T5884] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  276.307443][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.320277][ T5884] usb 1-1: config 0 descriptor??
[  276.334331][ T5884] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  277.909293][ T5884] usb 1-1: Detected FT232A
[  277.915289][ T5884] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  277.946203][ T5884] usb 1-1: USB disconnect, device number 18
[  278.095304][ T8081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  278.120270][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  278.153489][ T5884] ftdi_sio 1-1:0.0: device disconnected
[  278.490844][ T8093] netlink: 14 bytes leftover after parsing attributes in process `syz.0.490'.
[  278.578173][ T8096] netlink: 277 bytes leftover after parsing attributes in process `syz.2.491'.
[  278.792679][ T5884] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  279.023095][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  279.276992][ T5884] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  279.352752][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.376461][ T5884] usb 1-1: config 0 descriptor??
[  279.385205][ T5884] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  279.603463][ T8097] fuse: Unknown parameter 'group_id00000000000000000000'
[  281.178152][ T8108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  282.129901][ T5884] usb 1-1: Detected FT232A
[  282.136692][ T5884] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  282.172896][ T5884] usb 1-1: USB disconnect, device number 19
[  282.193445][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  282.246764][ T5884] ftdi_sio 1-1:0.0: device disconnected
[  283.138978][ T8142] netlink: 14 bytes leftover after parsing attributes in process `syz.4.502'.
[  283.162757][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  283.445129][   T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  283.552658][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  283.622769][   T43] usb 5-1: Using ep0 maxpacket: 16
[  283.629719][   T43] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  283.640823][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.669034][   T43] usb 5-1: config 0 descriptor??
[  283.686916][   T43] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  283.702134][ T8135] fuse: Bad value for 'fd'
[  283.791389][ T8147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  283.851834][ T5885] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  283.900689][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.115274][ T5885] usb 4-1: config 0 descriptor??
[  284.211872][ T8153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  284.245230][ T5885] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  285.050234][ T8160] netlink: 277 bytes leftover after parsing attributes in process `syz.0.505'.
[  285.806033][ T5885] usb 4-1: Detected FT232A
[  285.858781][ T5885] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1
[  286.015140][ T5885] usb 4-1: USB disconnect, device number 16
[  286.290573][ T5885] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[  286.314816][   T43] usb 5-1: Detected FT232A
[  286.320751][   T43] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  286.329162][ T5885] ftdi_sio 4-1:0.0: device disconnected
[  286.472895][   T43] usb 5-1: USB disconnect, device number 21
[  286.751158][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  286.803080][   T43] ftdi_sio 5-1:0.0: device disconnected
[  286.934227][ T5885] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  287.106713][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.148155][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  287.159568][ T5885] usb 4-1: config 1 has no interface number 0
[  287.167526][ T5885] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  287.203967][ T5885] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  287.218983][ T5885] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  287.319373][ T5885] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  287.373638][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.412100][ T5885] usb 4-1: Product: syz
[  287.421919][ T5885] usb 4-1: Manufacturer: syz
[  287.430167][ T5885] usb 4-1: SerialNumber: syz
[  287.517584][ T8165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  288.001817][ T5885] cdc_ncm 4-1:1.1: bind() failure
[  288.108425][ T5885] usb 4-1: USB disconnect, device number 17
[  290.772742][ T5924] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  291.165693][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.272560][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  291.285427][ T5924] usb 1-1: config 1 has no interface number 0
[  291.291746][ T5924] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  291.303133][ T5924] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  291.343536][ T5924] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  291.494985][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  291.515259][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.544419][ T5924] usb 1-1: Product: syz
[  291.795521][ T5924] usb 1-1: Manufacturer: syz
[  291.812693][ T5924] usb 1-1: SerialNumber: syz
[  291.953477][ T8208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  293.703847][ T5924] cdc_ncm 1-1:1.1: bind() failure
[  293.856794][ T5924] usb 1-1: USB disconnect, device number 20
[  294.116066][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'.
[  294.251762][ T8249] netlink: 277 bytes leftover after parsing attributes in process `syz.2.527'.
[  294.512845][ T5924] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  294.522726][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  294.772760][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  294.786434][ T5923] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  294.795449][ T5923] usb 3-1: config 0 has no interface number 0
[  294.943565][ T5923] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  294.958405][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.972649][ T5923] usb 3-1: Product: syz
[  294.978663][ T5923] usb 3-1: Manufacturer: syz
[  294.987083][ T5923] usb 3-1: SerialNumber: syz
[  295.002291][ T5923] usb 3-1: config 0 descriptor??
[  295.019178][ T5923] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  295.043939][ T5924] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  295.052752][ T5924] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  295.077254][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  295.112703][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  295.126276][ T5924] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  295.139671][ T5924] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  295.155589][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  295.304675][ T5924] usb 4-1: Product: syz
[  295.356436][ T5924] usb 4-1: Manufacturer: syz
[  295.675450][ T5924] cdc_wdm 4-1:1.0: skipping garbage
[  295.681311][ T5923] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  295.704016][ T5924] cdc_wdm 4-1:1.0: skipping garbage
[  295.722939][   T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  295.733480][ T8260] IPVS: sh: FWM 3 0x00000003 - no destination available
[  295.740520][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  295.754320][ T8260] IPVS: sh: FWM 3 0x00000003 - no destination available
[  295.761435][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  295.771842][ T5924] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  295.793044][ T5923] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  295.802703][ T5924] cdc_wdm 4-1:1.0: Unknown control protocol
[  295.932763][   T43] usb 5-1: Using ep0 maxpacket: 16
[  295.997286][   T43] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  296.016337][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.079854][   T43] usb 5-1: config 0 descriptor??
[  296.327845][   T43] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  296.522725][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  296.751013][ T5885] usb 1-1: Using ep0 maxpacket: 16
[  296.758323][ T5885] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  296.767488][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.798163][ T5885] usb 1-1: config 0 descriptor??
[  296.824091][ T5885] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  296.891442][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  296.899837][ T5924] usb 3-1: USB disconnect, device number 17
[  296.908525][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  296.970414][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  297.033389][ T5924] quatech2 3-1:0.51: device disconnected
[  297.424617][ T8271] IPVS: sh: FWM 3 0x00000003 - no destination available
[  297.474744][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  297.483626][ T8272] IPVS: sh: FWM 3 0x00000003 - no destination available
[  297.491164][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  297.663252][ T3092] usb 4-1: USB disconnect, device number 18
[  297.959946][ T8275] IPVS: sh: FWM 3 0x00000003 - no destination available
[  297.978259][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  298.132721][    T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  298.311549][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.329420][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  298.338987][    T9] usb 2-1: config 1 has no interface number 0
[  298.349205][    T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  298.365748][    T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  298.382935][    T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  298.398719][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  298.408494][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.420001][    T9] usb 2-1: Product: syz
[  298.425696][    T9] usb 2-1: Manufacturer: syz
[  298.434488][    T9] usb 2-1: SerialNumber: syz
[  298.511706][ T8277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.861778][   T43] usb 5-1: Detected FT232A
[  299.039137][ T5885] usb 1-1: Detected FT232A
[  299.045157][    T9] cdc_ncm 2-1:1.1: bind() failure
[  299.061578][ T5885] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB3
[  299.075023][    T9] usb 2-1: USB disconnect, device number 17
[  299.106508][ T5885] usb 1-1: USB disconnect, device number 21
[  299.111402][   T43] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB2
[  299.157553][   T43] usb 5-1: USB disconnect, device number 22
[  299.159229][ T5885] ftdi_sio ttyUSB3: FTDI USB Serial Device converter now disconnected from ttyUSB3
[  299.198788][   T43] ftdi_sio ttyUSB2: FTDI USB Serial Device converter now disconnected from ttyUSB2
[  299.220548][   T43] ftdi_sio 5-1:0.0: device disconnected
[  299.755428][ T5885] ftdi_sio 1-1:0.0: device disconnected
[  300.151787][ T8288] netlink: 277 bytes leftover after parsing attributes in process `syz.3.536'.
[  300.397619][ T8304] hub 1-0:1.0: USB hub found
[  300.402762][ T8304] hub 1-0:1.0: 1 port detected
[  301.192730][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  301.418305][    T9] usb 5-1: Using ep0 maxpacket: 16
[  301.520977][    T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  301.851075][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.862718][    T9] usb 5-1: config 0 descriptor??
[  301.977349][    T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  302.266780][ T8317] fuse: Bad value for 'group_id'
[  302.388997][ T8317] fuse: Bad value for 'group_id'
[  303.036882][   T30] audit: type=1400 audit(1764650160.833:210): avc:  denied  { create } for  pid=8319 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  303.761992][ T8336] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60948 sclass=netlink_xfrm_socket pid=8336 comm=syz.2.548
[  304.032692][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  304.423726][   T10] usb 4-1: Using ep0 maxpacket: 16
[  304.449605][    T9] usb 5-1: Detected FT232A
[  304.455900][   T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  304.502835][    T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  304.521193][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.564621][    T9] usb 5-1: USB disconnect, device number 23
[  304.603136][   T10] usb 4-1: config 0 descriptor??
[  304.626113][   T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  304.696923][ T8343] hub 1-0:1.0: USB hub found
[  304.702570][ T8343] hub 1-0:1.0: 1 port detected
[  304.733803][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  304.771410][ T8321] syz.0.545 (8321): drop_caches: 2
[  304.785142][    T9] ftdi_sio 5-1:0.0: device disconnected
[  305.199043][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  305.459931][    T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  305.662763][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.796295][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  305.805701][    T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  305.821511][    T9] usb 5-1: Product: syz
[  305.831606][    T9] usb 5-1: Manufacturer: syz
[  305.861918][    T9] usb 5-1: SerialNumber: syz
[  305.922720][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  305.928082][    T9] usb 5-1: config 0 descriptor??
[  305.999748][    T9] usb 5-1: selecting invalid altsetting 0
[  306.019881][   T10] usb 4-1: Detected FT232A
[  306.053145][   T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1
[  306.075449][ T5923] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  306.097112][ T5923] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  306.106718][ T5824] Bluetooth: hci4: unexpected event for opcode 0x1002
[  306.247606][ T8359] warning: `syz.2.554' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  306.744680][   T10] usb 4-1: USB disconnect, device number 19
[  306.944113][   T10] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1
[  306.963365][   T10] ftdi_sio 4-1:0.0: device disconnected
[  307.042714][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  307.088274][ T8345] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  307.115635][ T5923] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  307.133208][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  307.150742][ T5923] usb 2-1: Product: syz
[  307.155449][ T5923] usb 2-1: Manufacturer: syz
[  307.160073][ T5923] usb 2-1: SerialNumber: syz
[  307.176517][ T5923] usb 2-1: config 0 descriptor??
[  307.202993][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.217363][ T5923] hub 2-1:0.0: bad descriptor, ignoring hub
[  307.227091][ T5923] hub 2-1:0.0: probe with driver hub failed with error -5
[  307.235294][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.246266][ T5923] usb 2-1: selecting invalid altsetting 0
[  307.357962][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.370376][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.393849][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.404004][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.542697][   T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  307.552981][ T5923] usb 2-1: USB disconnect, device number 18
[  307.634088][ T8375] vxcan1: entered promiscuous mode
[  307.796266][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  307.829051][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.838770][   T10] usb 3-1: Product: syz
[  307.846823][   T10] usb 3-1: Manufacturer: syz
[  307.855361][   T10] usb 3-1: SerialNumber: syz
[  307.867298][   T10] usb 3-1: config 0 descriptor??
[  307.962710][ T3092] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  308.095830][   T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  308.173935][ T3092] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  308.185595][ T3092] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  308.203787][ T3092] usb 2-1: config 0 interface 0 has no altsetting 0
[  308.215868][ T3092] usb 2-1: string descriptor 0 read error: -22
[  308.222952][ T3092] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  308.232078][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  308.247091][ T3092] usb 2-1: config 0 descriptor??
[  308.260814][ T3092] hub 2-1:0.0: bad descriptor, ignoring hub
[  308.270477][ T3092] hub 2-1:0.0: probe with driver hub failed with error -5
[  308.283656][ T3092] usb 2-1: selecting invalid altsetting 0
[  308.567478][ T8385] FAULT_INJECTION: forcing a failure.
[  308.567478][ T8385] name failslab, interval 1, probability 0, space 0, times 1
[  308.580482][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.0.562 Not tainted syzkaller #0 PREEMPT(full) 
[  308.580511][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  308.580522][ T8385] Call Trace:
[  308.580528][ T8385]  <TASK>
[  308.580536][ T8385]  dump_stack_lvl+0x16c/0x1f0
[  308.580566][ T8385]  should_fail_ex+0x512/0x640
[  308.580592][ T8385]  ? __kmalloc_cache_noprof+0x5f/0x780
[  308.580623][ T8385]  should_failslab+0xc2/0x120
[  308.580646][ T8385]  __kmalloc_cache_noprof+0x72/0x780
[  308.580674][ T8385]  ? alloc_pipe_info+0x10e/0x590
[  308.580701][ T8385]  ? alloc_pipe_info+0x10e/0x590
[  308.580723][ T8385]  alloc_pipe_info+0x10e/0x590
[  308.580749][ T8385]  splice_direct_to_actor+0x77d/0xa30
[  308.580773][ T8385]  ? __pfx_direct_splice_actor+0x10/0x10
[  308.580799][ T8385]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  308.580827][ T8385]  do_splice_direct+0x174/0x240
[  308.580849][ T8385]  ? __pfx_do_splice_direct+0x10/0x10
[  308.580870][ T8385]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  308.580894][ T8385]  ? rw_verify_area+0xcf/0x6c0
[  308.580914][ T8385]  do_sendfile+0xb06/0xe50
[  308.580936][ T8385]  ? __pfx_do_sendfile+0x10/0x10
[  308.580963][ T8385]  __x64_sys_sendfile64+0x154/0x220
[  308.580987][ T8385]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  308.581019][ T8385]  do_syscall_64+0xcd/0xfa0
[  308.581052][ T8385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.581070][ T8385] RIP: 0033:0x7f3324b8f749
[  308.581085][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.581102][ T8385] RSP: 002b:00007f3325ace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  308.581120][ T8385] RAX: ffffffffffffffda RBX: 00007f3324de6090 RCX: 00007f3324b8f749
[  308.581131][ T8385] RDX: 0000200000002080 RSI: 0000000000000006 RDI: 0000000000000007
[  308.581142][ T8385] RBP: 00007f3325ace090 R08: 0000000000000000 R09: 0000000000000000
[  308.581153][ T8385] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000001
[  308.581164][ T8385] R13: 00007f3324de6128 R14: 00007f3324de6090 R15: 00007ffd58ee43c8
[  308.581188][ T8385]  </TASK>
[  308.593204][ T5923] usb 5-1: USB disconnect, device number 24
[  308.950570][ T3092] usb 2-1: USB disconnect, device number 19
[  309.083258][   T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  309.125540][ T8386] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.561' sets config #0
[  309.136549][   T10] usb 3-1: USB disconnect, device number 18
[  309.144178][ T8386] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.561' sets config #1
[  309.251491][ T8396] net_ratelimit: 2 callbacks suppressed
[  309.251521][ T8396] IPVS: sh: FWM 3 0x00000003 - no destination available
[  309.274031][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  309.297019][ T8396] IPVS: sh: FWM 3 0x00000003 - no destination available
[  309.568769][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  309.645706][ T8391] fuse: Unknown parameter '0x0000000000000005'
[  309.805854][ T8406] netlink: 92 bytes leftover after parsing attributes in process `syz.4.567'.
[  309.822810][   T30] audit: type=1400 audit(1764650167.673:211): avc:  denied  { execute } for  pid=8404 comm="syz.4.567" path="/106/cpuacct.usage_sys" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  310.007180][   T30] audit: type=1400 audit(1764650167.673:212): avc:  denied  { create } for  pid=8404 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  310.026845][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  310.227012][   T30] audit: type=1400 audit(1764650167.673:213): avc:  denied  { ioctl } for  pid=8404 comm="syz.4.567" path="socket:[16272]" dev="sockfs" ino=16272 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  310.333304][ T8411] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.347575][   T30] audit: type=1400 audit(1764650167.673:214): avc:  denied  { create } for  pid=8404 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  310.369225][   T30] audit: type=1400 audit(1764650167.673:215): avc:  denied  { ioctl } for  pid=8404 comm="syz.4.567" path="socket:[16276]" dev="sockfs" ino=16276 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  310.394979][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.395116][ T8414] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.428472][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.433604][ T8416] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.456271][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  310.466383][   T10] usb 3-1: Using ep0 maxpacket: 16
[  310.534440][   T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  310.544203][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.634050][   T10] usb 3-1: config 0 descriptor??
[  310.690568][   T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  311.220203][ T8410] syz.1.566 (8410): drop_caches: 2
[  311.375350][   T30] audit: type=1400 audit(1764650169.213:216): avc:  denied  { write } for  pid=8425 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  311.423317][   T30] audit: type=1400 audit(1764650169.253:217): avc:  denied  { sqpoll } for  pid=8425 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  312.716855][   T10] usb 3-1: Detected FT232A
[  312.726630][   T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  312.744487][   T10] usb 3-1: USB disconnect, device number 19
[  312.762969][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  312.772504][   T10] ftdi_sio 3-1:0.0: device disconnected
[  313.813651][ T8456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  314.972216][   T30] audit: type=1400 audit(1764650172.783:218): avc:  denied  { setopt } for  pid=8462 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  315.023475][ T8459] hub 1-0:1.0: USB hub found
[  315.032726][ T8459] hub 1-0:1.0: 1 port detected
[  315.547699][ T8465] mmap: syz.0.579 (8465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  315.570229][ T8469] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  315.838715][ T8463] netlink: 'syz.0.579': attribute type 25 has an invalid length.
[  316.310703][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  316.690628][ T8464] syz.0.579 (8464): drop_caches: 2
[  316.863607][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  316.870139][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.317985][ T8486] FAULT_INJECTION: forcing a failure.
[  317.317985][ T8486] name failslab, interval 1, probability 0, space 0, times 0
[  317.332751][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.2.581 Not tainted syzkaller #0 PREEMPT(full) 
[  317.332777][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  317.332787][ T8486] Call Trace:
[  317.332793][ T8486]  <TASK>
[  317.332799][ T8486]  dump_stack_lvl+0x16c/0x1f0
[  317.332819][ T8486]  should_fail_ex+0x512/0x640
[  317.332837][ T8486]  ? fs_reclaim_acquire+0xae/0x150
[  317.332854][ T8486]  should_failslab+0xc2/0x120
[  317.332869][ T8486]  __kmalloc_noprof+0xdd/0x880
[  317.332886][ T8486]  ? tomoyo_encode2+0x100/0x3e0
[  317.332906][ T8486]  ? tomoyo_encode2+0x100/0x3e0
[  317.332921][ T8486]  tomoyo_encode2+0x100/0x3e0
[  317.332939][ T8486]  tomoyo_encode+0x29/0x50
[  317.332960][ T8486]  tomoyo_realpath_from_path+0x18f/0x6e0
[  317.332980][ T8486]  tomoyo_path_number_perm+0x245/0x580
[  317.332994][ T8486]  ? tomoyo_path_number_perm+0x237/0x580
[  317.333010][ T8486]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  317.333025][ T8486]  ? find_held_lock+0x2b/0x80
[  317.333053][ T8486]  ? find_held_lock+0x2b/0x80
[  317.333067][ T8486]  ? hook_file_ioctl_common+0x145/0x410
[  317.333082][ T8486]  ? __fget_files+0x20e/0x3c0
[  317.333098][ T8486]  security_file_ioctl+0x9b/0x240
[  317.333115][ T8486]  __x64_sys_ioctl+0xb7/0x210
[  317.333127][ T8486]  do_syscall_64+0xcd/0xfa0
[  317.333144][ T8486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.333156][ T8486] RIP: 0033:0x7fc5a858f749
[  317.333165][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.333176][ T8486] RSP: 002b:00007fc5a9413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.333187][ T8486] RAX: ffffffffffffffda RBX: 00007fc5a87e6090 RCX: 00007fc5a858f749
[  317.333194][ T8486] RDX: 00002000000007c0 RSI: 0000000000003ba0 RDI: 0000000000000007
[  317.333201][ T8486] RBP: 00007fc5a9413090 R08: 0000000000000000 R09: 0000000000000000
[  317.333207][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.333213][ T8486] R13: 00007fc5a87e6128 R14: 00007fc5a87e6090 R15: 00007ffc428c31c8
[  317.333228][ T8486]  </TASK>
[  317.333404][ T8486] ERROR: Out of memory at tomoyo_realpath_from_path.
[  317.557610][ T8486] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  319.250954][ T8508] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004
[  319.278057][   T30] audit: type=1400 audit(1764650177.093:219): avc:  denied  { create } for  pid=8507 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  319.355013][   T30] audit: type=1400 audit(1764650177.093:220): avc:  denied  { setopt } for  pid=8507 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  319.402693][   T30] audit: type=1400 audit(1764650177.103:221): avc:  denied  { write } for  pid=8507 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  319.432951][ T8511] net_ratelimit: 2 callbacks suppressed
[  319.432976][ T8511] IPVS: sh: FWM 3 0x00000003 - no destination available
[  319.446079][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  319.455919][ T8511] IPVS: sh: FWM 3 0x00000003 - no destination available
[  319.477710][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  320.465915][   T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  320.533190][ T8501] syz.1.587 (8501): drop_caches: 2
[  320.633818][   T43] usb 3-1: Using ep0 maxpacket: 16
[  320.807180][   T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  320.866410][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.998594][ T8530] FAULT_INJECTION: forcing a failure.
[  320.998594][ T8530] name failslab, interval 1, probability 0, space 0, times 0
[  321.022740][ T8530] CPU: 0 UID: 0 PID: 8530 Comm: syz.3.595 Not tainted syzkaller #0 PREEMPT(full) 
[  321.022767][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  321.022778][ T8530] Call Trace:
[  321.022784][ T8530]  <TASK>
[  321.022792][ T8530]  dump_stack_lvl+0x16c/0x1f0
[  321.022823][ T8530]  should_fail_ex+0x512/0x640
[  321.022849][ T8530]  ? fs_reclaim_acquire+0xae/0x150
[  321.022874][ T8530]  should_failslab+0xc2/0x120
[  321.022898][ T8530]  __kmalloc_noprof+0xdd/0x880
[  321.022936][ T8530]  ? tomoyo_encode2+0x100/0x3e0
[  321.022967][ T8530]  ? tomoyo_encode2+0x100/0x3e0
[  321.022991][ T8530]  tomoyo_encode2+0x100/0x3e0
[  321.023021][ T8530]  tomoyo_encode+0x29/0x50
[  321.023045][ T8530]  tomoyo_realpath_from_path+0x18f/0x6e0
[  321.023079][ T8530]  tomoyo_path_number_perm+0x245/0x580
[  321.023100][ T8530]  ? tomoyo_path_number_perm+0x237/0x580
[  321.023125][ T8530]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  321.023150][ T8530]  ? find_held_lock+0x2b/0x80
[  321.023198][ T8530]  ? find_held_lock+0x2b/0x80
[  321.023220][ T8530]  ? hook_file_ioctl_common+0x145/0x410
[  321.023245][ T8530]  ? __fget_files+0x20e/0x3c0
[  321.023271][ T8530]  security_file_ioctl+0x9b/0x240
[  321.023298][ T8530]  __x64_sys_ioctl+0xb7/0x210
[  321.023322][ T8530]  do_syscall_64+0xcd/0xfa0
[  321.023349][ T8530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.023368][ T8530] RIP: 0033:0x7faa74b8f749
[  321.023382][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.023398][ T8530] RSP: 002b:00007faa75a15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.023416][ T8530] RAX: ffffffffffffffda RBX: 00007faa74de5fa0 RCX: 00007faa74b8f749
[  321.023427][ T8530] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003
[  321.023438][ T8530] RBP: 00007faa75a15090 R08: 0000000000000000 R09: 0000000000000000
[  321.023449][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.023460][ T8530] R13: 00007faa74de6038 R14: 00007faa74de5fa0 R15: 00007ffe755011d8
[  321.023486][ T8530]  </TASK>
[  321.023587][ T8530] ERROR: Out of memory at tomoyo_realpath_from_path.
[  321.093674][   T43] usb 3-1: config 0 descriptor??
[  321.469731][ T8536] 9pnet_fd: Insufficient options for proto=fd
[  321.563412][   T30] audit: type=1400 audit(1764650179.373:222): avc:  denied  { read } for  pid=8535 comm="syz.3.597" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  321.587743][   T30] audit: type=1400 audit(1764650179.373:223): avc:  denied  { open } for  pid=8535 comm="syz.3.597" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  321.628012][   T43] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  321.851799][ T8543] =======================================================
[  321.851799][ T8543] WARNING: The mand mount option has been deprecated and
[  321.851799][ T8543]          and is ignored by this kernel. Remove the mand
[  321.851799][ T8543]          option from the mount to silence this warning.
[  321.851799][ T8543] =======================================================
[  321.888205][   T30] audit: type=1400 audit(1764650179.743:224): avc:  denied  { mount } for  pid=8542 comm="syz.0.599" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  321.923825][ T8543] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  321.941187][   T30] audit: type=1400 audit(1764650179.763:225): avc:  denied  { mount } for  pid=8542 comm="syz.0.599" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  321.988384][ T8543] netlink: 56 bytes leftover after parsing attributes in process `syz.0.599'.
[  322.050965][   T30] audit: type=1400 audit(1764650179.893:226): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  322.267565][ T8552] FAULT_INJECTION: forcing a failure.
[  322.267565][ T8552] name failslab, interval 1, probability 0, space 0, times 0
[  322.281449][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.0.603 Not tainted syzkaller #0 PREEMPT(full) 
[  322.281474][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  322.281484][ T8552] Call Trace:
[  322.281490][ T8552]  <TASK>
[  322.281497][ T8552]  dump_stack_lvl+0x16c/0x1f0
[  322.281527][ T8552]  should_fail_ex+0x512/0x640
[  322.281556][ T8552]  should_failslab+0xc2/0x120
[  322.281581][ T8552]  kmem_cache_alloc_noprof+0x75/0x6e0
[  322.281599][ T8552]  ? dst_alloc+0x99/0x1a0
[  322.281630][ T8552]  ? dst_alloc+0x99/0x1a0
[  322.281654][ T8552]  dst_alloc+0x99/0x1a0
[  322.281682][ T8552]  rt_dst_alloc+0x35/0x3a0
[  322.281709][ T8552]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  322.281735][ T8552]  ip_route_output_key_hash+0x10f/0x2b0
[  322.281754][ T8552]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  322.281780][ T8552]  ? find_held_lock+0x2b/0x80
[  322.281808][ T8552]  ip_route_output_flow+0x27/0x150
[  322.281827][ T8552]  udp_sendmsg+0x1af9/0x2870
[  322.281855][ T8552]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  322.281880][ T8552]  ? avc_has_perm_noaudit+0xd0/0x3b0
[  322.281900][ T8552]  ? __pfx_udp_sendmsg+0x10/0x10
[  322.281923][ T8552]  ? avc_has_perm+0x144/0x1f0
[  322.281953][ T8552]  ? do_user_addr_fault+0x829/0x1370
[  322.281980][ T8552]  ? sock_has_perm+0x259/0x2f0
[  322.282002][ T8552]  ? __pfx_sock_has_perm+0x10/0x10
[  322.282035][ T8552]  ? __import_iovec+0x1dd/0x650
[  322.282056][ T8552]  ? __pfx_udp_sendmsg+0x10/0x10
[  322.282081][ T8552]  inet_sendmsg+0x105/0x140
[  322.282099][ T8552]  ____sys_sendmsg+0x973/0xc70
[  322.282123][ T8552]  ? copy_msghdr_from_user+0x10a/0x160
[  322.282140][ T8552]  ? __pfx_____sys_sendmsg+0x10/0x10
[  322.282167][ T8552]  ? __pfx__kstrtoull+0x10/0x10
[  322.282193][ T8552]  ___sys_sendmsg+0x134/0x1d0
[  322.282212][ T8552]  ? __pfx____sys_sendmsg+0x10/0x10
[  322.282244][ T8552]  ? find_held_lock+0x2b/0x80
[  322.282285][ T8552]  __sys_sendmmsg+0x200/0x420
[  322.282307][ T8552]  ? __pfx___sys_sendmmsg+0x10/0x10
[  322.282340][ T8552]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  322.282377][ T8552]  ? fput+0x9b/0xd0
[  322.282400][ T8552]  ? ksys_write+0x1ac/0x250
[  322.282419][ T8552]  ? __pfx_ksys_write+0x10/0x10
[  322.282443][ T8552]  __x64_sys_sendmmsg+0x9c/0x100
[  322.282461][ T8552]  ? lockdep_hardirqs_on+0x7c/0x110
[  322.282485][ T8552]  do_syscall_64+0xcd/0xfa0
[  322.282511][ T8552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.282528][ T8552] RIP: 0033:0x7f3324b8f749
[  322.282543][ T8552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.282559][ T8552] RSP: 002b:00007f3325aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  322.282576][ T8552] RAX: ffffffffffffffda RBX: 00007f3324de5fa0 RCX: 00007f3324b8f749
[  322.282586][ T8552] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  322.282597][ T8552] RBP: 00007f3325aef090 R08: 0000000000000000 R09: 0000000000000000
[  322.282608][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.282618][ T8552] R13: 00007f3324de6038 R14: 00007f3324de5fa0 R15: 00007ffd58ee43c8
[  322.282644][ T8552]  </TASK>
[  322.750851][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  322.913446][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  322.925389][   T10] usb 4-1: config 6 has an invalid interface number: 158 but max is 0
[  322.934577][   T10] usb 4-1: config 6 has no interface number 0
[  322.940804][   T10] usb 4-1: config 6 interface 158 has no altsetting 0
[  322.958443][   T30] audit: type=1400 audit(1764650180.803:227): avc:  denied  { kexec_image_load } for  pid=8558 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  322.995063][ T8562] IPVS: sh: FWM 3 0x00000003 - no destination available
[  323.002687][   T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  323.042453][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.050713][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  323.052101][ T8563] IPVS: sh: FWM 3 0x00000003 - no destination available
[  323.068465][   T10] usb 4-1: Product: syz
[  323.076718][   T10] usb 4-1: Manufacturer: syz
[  323.106565][   T10] usb 4-1: SerialNumber: syz
[  323.754237][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  323.797197][   T43] usb 3-1: Detected FT232A
[  323.802406][   T43] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  323.824301][   T43] usb 3-1: USB disconnect, device number 20
[  323.833365][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  323.855194][   T43] ftdi_sio 3-1:0.0: device disconnected
[  324.055104][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.073105][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.119219][   T10] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -22
[  324.165718][   T10] usb 4-1: USB disconnect, device number 21
[  324.432523][ T8575] FAULT_INJECTION: forcing a failure.
[  324.432523][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  324.693967][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(full) 
[  324.693993][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  324.694002][ T8575] Call Trace:
[  324.694008][ T8575]  <TASK>
[  324.694014][ T8575]  dump_stack_lvl+0x16c/0x1f0
[  324.694040][ T8575]  should_fail_ex+0x512/0x640
[  324.694060][ T8575]  _copy_from_user+0x2e/0xd0
[  324.694078][ T8575]  copy_clone_args_from_user+0x488/0x7e0
[  324.694093][ T8575]  ? get_pid_task+0xfc/0x250
[  324.694111][ T8575]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  324.694132][ T8575]  __do_sys_clone3+0xbd/0x290
[  324.694147][ T8575]  ? __pfx___do_sys_clone3+0x10/0x10
[  324.694169][ T8575]  ? __fget_files+0x20e/0x3c0
[  324.694203][ T8575]  do_syscall_64+0xcd/0xfa0
[  324.694228][ T8575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.694245][ T8575] RIP: 0033:0x7f62aa78f749
[  324.694259][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.694275][ T8575] RSP: 002b:00007f62ab5a2f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  324.694292][ T8575] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f62aa78f749
[  324.694303][ T8575] RDX: 00007f62ab5a2f20 RSI: 0000000000000058 RDI: 00007f62ab5a2f20
[  324.694314][ T8575] RBP: 00007f62ab5a3090 R08: 0000000000000000 R09: 0000000000000058
[  324.694324][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.694334][ T8575] R13: 00007f62aa9e6038 R14: 00007f62aa9e5fa0 R15: 00007ffd60a9ca18
[  324.694359][ T8575]  </TASK>
[  325.344476][ T8585] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  325.361119][ T8585] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.611'.
[  326.518083][   T30] audit: type=1400 audit(1764650184.363:228): avc:  denied  { checkpoint_restore } for  pid=8595 comm="syz.2.615" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  326.693741][ T8601] IPVS: sh: FWM 3 0x00000003 - no destination available
[  326.701914][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  326.733706][ T8601] IPVS: sh: FWM 3 0x00000003 - no destination available
[  326.749619][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  326.842710][   T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  327.064908][   T43] usb 4-1: Using ep0 maxpacket: 16
[  327.636763][   T43] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  327.652897][   T43] usb 4-1: config 0 has no interface number 0
[  327.659664][   T43] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  327.682894][   T43] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  327.710998][   T43] usb 4-1: config 0 interface 41 has no altsetting 0
[  327.754524][   T43] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  327.792721][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.811195][   T43] usb 4-1: Product: syz
[  327.829072][   T43] usb 4-1: Manufacturer: syz
[  327.903881][   T43] usb 4-1: SerialNumber: syz
[  327.922284][   T43] usb 4-1: config 0 descriptor??
[  327.952492][ T8598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  327.997415][ T8598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  328.058749][ T8610] FAULT_INJECTION: forcing a failure.
[  328.058749][ T8610] name failslab, interval 1, probability 0, space 0, times 0
[  328.092784][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) 
[  328.092812][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  328.092822][ T8610] Call Trace:
[  328.092827][ T8610]  <TASK>
[  328.092834][ T8610]  dump_stack_lvl+0x16c/0x1f0
[  328.092862][ T8610]  should_fail_ex+0x512/0x640
[  328.092892][ T8610]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  328.092913][ T8610]  should_failslab+0xc2/0x120
[  328.092936][ T8610]  kmem_cache_alloc_node_noprof+0x78/0x770
[  328.092954][ T8610]  ? __alloc_skb+0x2b2/0x380
[  328.092975][ T8610]  ? __alloc_skb+0x2b2/0x380
[  328.092990][ T8610]  ? __pfx_netlink_insert+0x10/0x10
[  328.093009][ T8610]  __alloc_skb+0x2b2/0x380
[  328.093025][ T8610]  ? __pfx___alloc_skb+0x10/0x10
[  328.093042][ T8610]  ? netlink_autobind.isra.0+0x158/0x370
[  328.093071][ T8610]  netlink_alloc_large_skb+0x69/0x140
[  328.093095][ T8610]  netlink_sendmsg+0x698/0xdd0
[  328.093122][ T8610]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.093155][ T8610]  ____sys_sendmsg+0xa98/0xc70
[  328.093180][ T8610]  ? copy_msghdr_from_user+0x10a/0x160
[  328.093196][ T8610]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.093233][ T8610]  ___sys_sendmsg+0x134/0x1d0
[  328.093251][ T8610]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.093265][ T8610]  ? __lock_acquire+0x622/0x1c90
[  328.093320][ T8610]  __sys_sendmsg+0x16d/0x220
[  328.093340][ T8610]  ? __pfx___sys_sendmsg+0x10/0x10
[  328.093378][ T8610]  do_syscall_64+0xcd/0xfa0
[  328.093405][ T8610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.093423][ T8610] RIP: 0033:0x7f62aa78f749
[  328.093438][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.093455][ T8610] RSP: 002b:00007f62ab5a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.093473][ T8610] RAX: ffffffffffffffda RBX: 00007f62aa9e5fa0 RCX: 00007f62aa78f749
[  328.093484][ T8610] RDX: 0000000000000810 RSI: 0000200000000200 RDI: 0000000000000004
[  328.093495][ T8610] RBP: 00007f62ab5a3090 R08: 0000000000000000 R09: 0000000000000000
[  328.093505][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.093515][ T8610] R13: 00007f62aa9e6038 R14: 00007f62aa9e5fa0 R15: 00007ffd60a9ca18
[  328.093540][ T8610]  </TASK>
[  328.385482][ T8598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  328.421425][ T8598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  328.606948][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.642738][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.650452][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.659468][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.682971][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.712777][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.741813][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.778424][ T8619] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[8619]
[  328.846249][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  328.875264][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  329.002797][ T8616] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  329.173715][ T8624] Bluetooth: MGMT ver 1.23
[  329.214785][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[  329.372796][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.494326][   T30] audit: type=1400 audit(1764650187.013:229): avc:  denied  { write } for  pid=8620 comm="syz.0.624" path="socket:[18598]" dev="sockfs" ino=18598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  329.979918][ T8631] hub 1-0:1.0: USB hub found
[  329.987925][ T8631] hub 1-0:1.0: 1 port detected
[  331.753981][   T43] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  332.244187][   T43] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  332.273851][   T43] usb 4-1: USB disconnect, device number 22
[  332.304269][   T30] audit: type=1400 audit(1764650190.143:230): avc:  denied  { read write } for  pid=8650 comm="syz.4.630" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  332.376917][ T8651] input: syz1 as /devices/virtual/input/input5
[  332.808150][   T30] audit: type=1400 audit(1764650190.153:231): avc:  denied  { open } for  pid=8650 comm="syz.4.630" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  333.122933][   T30] audit: type=1400 audit(1764650190.193:232): avc:  denied  { bind } for  pid=8650 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  333.382864][   T30] audit: type=1400 audit(1764650190.223:233): avc:  denied  { ioctl } for  pid=8650 comm="syz.4.630" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  333.426401][ T8666] netlink: 277 bytes leftover after parsing attributes in process `syz.0.632'.
[  333.741707][   T30] audit: type=1400 audit(1764650190.233:234): avc:  denied  { read } for  pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=3470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.764613][   T30] audit: type=1400 audit(1764650190.233:235): avc:  denied  { open } for  pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.789832][   T30] audit: type=1400 audit(1764650190.233:236): avc:  denied  { ioctl } for  pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3470 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.882968][   T30] audit: type=1400 audit(1764650190.533:237): avc:  denied  { name_bind } for  pid=8655 comm="syz.0.631" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  334.006893][   T30] audit: type=1400 audit(1764650191.853:238): avc:  denied  { sys_module } for  pid=8650 comm="syz.4.630" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  335.103543][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  335.103557][   T30] audit: type=1400 audit(1764650192.493:243): avc:  denied  { bind } for  pid=8677 comm="syz.3.634" lport=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  335.134884][   T30] audit: type=1400 audit(1764650192.493:244): avc:  denied  { node_bind } for  pid=8677 comm="syz.3.634" saddr=fe88::4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  335.134884][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  335.191461][   T30] audit: type=1400 audit(1764650193.033:245): avc:  denied  { create } for  pid=8683 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  335.221386][   T30] audit: type=1400 audit(1764650193.033:246): avc:  denied  { setopt } for  pid=8683 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  335.249200][   T30] audit: type=1400 audit(1764650193.063:247): avc:  denied  { bind } for  pid=8681 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  335.316547][   T30] audit: type=1400 audit(1764650193.063:248): avc:  denied  { listen } for  pid=8681 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  335.377483][   T10] usb 3-1: Using ep0 maxpacket: 32
[  335.393640][   T10] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  335.398091][   T30] audit: type=1400 audit(1764650193.123:249): avc:  denied  { write } for  pid=8683 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  335.454362][   T10] usb 3-1: config 0 has no interface number 0
[  335.575112][   T10] usb 3-1: too many endpoints for config 0 interface 98 altsetting 136: 54, using maximum allowed: 30
[  335.621915][   T10] usb 3-1: config 0 interface 98 altsetting 136 has 0 endpoint descriptors, different from the interface descriptor's value: 54
[  335.693897][   T10] usb 3-1: config 0 interface 98 has no altsetting 0
[  335.897921][   T10] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  335.907126][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.917845][   T10] usb 3-1: config 0 descriptor??
[  336.515440][ T8672] syz.2.633 (8672): drop_caches: 2
[  336.521383][ T8672] syz.2.633 (8672): drop_caches: 2
[  336.858009][   T10] usb 3-1: USB disconnect, device number 21
[  337.382705][ T5856] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  337.501863][ T8709] FAULT_INJECTION: forcing a failure.
[  337.501863][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.515159][ T8709] CPU: 0 UID: 0 PID: 8709 Comm: syz.1.640 Not tainted syzkaller #0 PREEMPT(full) 
[  337.515183][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.515193][ T8709] Call Trace:
[  337.515199][ T8709]  <TASK>
[  337.515206][ T8709]  dump_stack_lvl+0x16c/0x1f0
[  337.515227][ T8709]  should_fail_ex+0x512/0x640
[  337.515247][ T8709]  _copy_from_user+0x2e/0xd0
[  337.515265][ T8709]  copy_msghdr_from_user+0x98/0x160
[  337.515278][ T8709]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  337.515292][ T8709]  ? __pfx__kstrtoull+0x10/0x10
[  337.515308][ T8709]  ___sys_sendmsg+0xfe/0x1d0
[  337.515319][ T8709]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.515337][ T8709]  ? find_held_lock+0x2b/0x80
[  337.515361][ T8709]  __sys_sendmmsg+0x200/0x420
[  337.515374][ T8709]  ? __pfx___sys_sendmmsg+0x10/0x10
[  337.515390][ T8709]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  337.515414][ T8709]  ? fput+0x9b/0xd0
[  337.515429][ T8709]  ? ksys_write+0x1ac/0x250
[  337.515441][ T8709]  ? __pfx_ksys_write+0x10/0x10
[  337.515455][ T8709]  __x64_sys_sendmmsg+0x9c/0x100
[  337.515467][ T8709]  ? lockdep_hardirqs_on+0x7c/0x110
[  337.515482][ T8709]  do_syscall_64+0xcd/0xfa0
[  337.515498][ T8709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.515510][ T8709] RIP: 0033:0x7f62aa78f749
[  337.515518][ T8709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.515530][ T8709] RSP: 002b:00007f62ab561038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  337.515540][ T8709] RAX: ffffffffffffffda RBX: 00007f62aa9e6180 RCX: 00007f62aa78f749
[  337.515547][ T8709] RDX: 040000000000017d RSI: 0000200000002940 RDI: 0000000000000005
[  337.515554][ T8709] RBP: 00007f62ab561090 R08: 0000000000000000 R09: 0000000000000000
[  337.515560][ T8709] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000001
[  337.515567][ T8709] R13: 00007f62aa9e6218 R14: 00007f62aa9e6180 R15: 00007ffd60a9ca18
[  337.515581][ T8709]  </TASK>
[  337.606924][ T8707] FAULT_INJECTION: forcing a failure.
[  337.606924][ T8707] name failslab, interval 1, probability 0, space 0, times 0
[  337.669642][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'.
[  337.751425][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.3.643 Not tainted syzkaller #0 PREEMPT(full) 
[  337.751442][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  337.751449][ T8707] Call Trace:
[  337.751452][ T8707]  <TASK>
[  337.751457][ T8707]  dump_stack_lvl+0x16c/0x1f0
[  337.751477][ T8707]  should_fail_ex+0x512/0x640
[  337.751495][ T8707]  ? fs_reclaim_acquire+0xae/0x150
[  337.751511][ T8707]  should_failslab+0xc2/0x120
[  337.751527][ T8707]  __kmalloc_noprof+0xdd/0x880
[  337.751545][ T8707]  ? tomoyo_encode2+0x100/0x3e0
[  337.751563][ T8707]  ? tomoyo_encode2+0x100/0x3e0
[  337.751579][ T8707]  tomoyo_encode2+0x100/0x3e0
[  337.751597][ T8707]  tomoyo_encode+0x29/0x50
[  337.751612][ T8707]  tomoyo_realpath_from_path+0x18f/0x6e0
[  337.751631][ T8707]  ? tomoyo_profile+0x47/0x60
[  337.751643][ T8707]  tomoyo_path_number_perm+0x245/0x580
[  337.751657][ T8707]  ? tomoyo_path_number_perm+0x237/0x580
[  337.751672][ T8707]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  337.751688][ T8707]  ? find_held_lock+0x2b/0x80
[  337.751732][ T8707]  ? find_held_lock+0x2b/0x80
[  337.751756][ T8707]  ? hook_file_ioctl_common+0x145/0x410
[  337.751782][ T8707]  ? __fget_files+0x20e/0x3c0
[  337.751809][ T8707]  security_file_ioctl+0x9b/0x240
[  337.751837][ T8707]  __x64_sys_ioctl+0xb7/0x210
[  337.751857][ T8707]  do_syscall_64+0xcd/0xfa0
[  337.751889][ T8707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.751908][ T8707] RIP: 0033:0x7faa74b8f749
[  337.751923][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.751940][ T8707] RSP: 002b:00007faa75a15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  337.751957][ T8707] RAX: ffffffffffffffda RBX: 00007faa74de5fa0 RCX: 00007faa74b8f749
[  337.751969][ T8707] RDX: 00002000000001c0 RSI: 00000000c0606610 RDI: 0000000000000003
[  337.751981][ T8707] RBP: 00007faa75a15090 R08: 0000000000000000 R09: 0000000000000000
[  337.751991][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.752002][ T8707] R13: 00007faa74de6038 R14: 00007faa74de5fa0 R15: 00007ffe755011d8
[  337.752027][ T8707]  </TASK>
[  337.787553][   T30] audit: type=1400 audit(1764650195.513:250): avc:  denied  { mount } for  pid=8704 comm="syz.0.642" name="/" dev="rpc_pipefs" ino=17877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  337.802855][ T8707] ERROR: Out of memory at tomoyo_realpath_from_path.
[  338.013141][   T30] audit: type=1400 audit(1764650195.523:251): avc:  denied  { write } for  pid=8704 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  338.069987][ T5856] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  338.268310][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0
[  339.124688][ T5856] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  339.153480][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  339.172054][ T5856] usb 5-1: Product: syz
[  339.182622][ T5856] usb 5-1: Manufacturer: syz
[  339.192703][ T5856] usb 5-1: SerialNumber: syz
[  339.218488][ T5856] usb 5-1: config 0 descriptor??
[  339.257463][ T5856] usb 5-1: selecting invalid altsetting 0
[  339.274629][ T8720] netlink: 666 bytes leftover after parsing attributes in process `syz.0.645'.
[  339.335406][ T8720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8720 comm=syz.0.645
[  339.382791][   T30] audit: type=1400 audit(1764650197.233:252): avc:  denied  { setopt } for  pid=8721 comm="syz.3.646" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  339.510835][ T8697] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  340.090450][ T8731] netlink: 277 bytes leftover after parsing attributes in process `syz.3.648'.
[  340.142167][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.365403][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.397772][ T8736] hub 1-0:1.0: USB hub found
[  340.403331][ T8736] hub 1-0:1.0: 1 port detected
[  340.672813][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.702889][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.757496][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.802322][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.643480][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  341.643522][   T30] audit: type=1400 audit(1764650199.383:255): avc:  denied  { getopt } for  pid=8748 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  341.704117][   T30] audit: type=1400 audit(1764650199.383:256): avc:  denied  { write } for  pid=8748 comm="syz.2.651" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  341.926364][ T5856] usb 5-1: USB disconnect, device number 25
[  342.080163][ T8756] netlink: 80 bytes leftover after parsing attributes in process `syz.2.653'.
[  343.338692][ T8768] tmpfs: Bad value for 'mpol'
[  343.449914][   T30] audit: type=1400 audit(1764650201.183:257): avc:  denied  { create } for  pid=8763 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  343.513844][   T30] audit: type=1400 audit(1764650201.183:258): avc:  denied  { mounton } for  pid=8763 comm="syz.2.655" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  343.668147][   T30] audit: type=1400 audit(1764650201.183:259): avc:  denied  { write } for  pid=8763 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  343.772634][ T8781] loop6: detected capacity change from 0 to 524288000
[  344.083732][   T30] audit: type=1400 audit(1764650201.613:260): avc:  denied  { append } for  pid=8771 comm="syz.4.656" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  344.123819][ T8783] loop6: detected capacity change from 524288000 to 0
[  344.310046][   T30] audit: type=1400 audit(1764650201.783:261): avc:  denied  { setopt } for  pid=8771 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  344.329821][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.172033][ T8799] hub 1-0:1.0: USB hub found
[  345.185040][ T8799] hub 1-0:1.0: 1 port detected
[  345.227059][   T30] audit: type=1400 audit(1764650203.073:262): avc:  denied  { ioctl } for  pid=8800 comm="syz.2.662" path="socket:[18974]" dev="sockfs" ino=18974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  345.251638][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.365397][ T8797] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.661' sets config #0
[  345.445731][   T30] audit: type=1400 audit(1764650203.073:263): avc:  denied  { read } for  pid=8800 comm="syz.2.662" path="socket:[18975]" dev="sockfs" ino=18975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  345.470211][   T30] audit: type=1400 audit(1764650203.223:264): avc:  denied  { ioctl } for  pid=8800 comm="syz.2.662" path="socket:[18053]" dev="sockfs" ino=18053 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  345.698638][ T8808] netlink: 80 bytes leftover after parsing attributes in process `syz.4.665'.
[  345.816702][ T8811] FAULT_INJECTION: forcing a failure.
[  345.816702][ T8811] name failslab, interval 1, probability 0, space 0, times 0
[  345.858689][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT(full) 
[  345.858714][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  345.858724][ T8811] Call Trace:
[  345.858729][ T8811]  <TASK>
[  345.858736][ T8811]  dump_stack_lvl+0x16c/0x1f0
[  345.858765][ T8811]  should_fail_ex+0x512/0x640
[  345.858798][ T8811]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  345.858818][ T8811]  should_failslab+0xc2/0x120
[  345.858841][ T8811]  kmem_cache_alloc_node_noprof+0x78/0x770
[  345.858858][ T8811]  ? __alloc_skb+0x2b2/0x380
[  345.858878][ T8811]  ? __alloc_skb+0x2b2/0x380
[  345.858890][ T8811]  ? __pfx_netlink_insert+0x10/0x10
[  345.858908][ T8811]  __alloc_skb+0x2b2/0x380
[  345.858923][ T8811]  ? __pfx___alloc_skb+0x10/0x10
[  345.858937][ T8811]  ? netlink_autobind.isra.0+0x158/0x370
[  345.858964][ T8811]  netlink_alloc_large_skb+0x69/0x140
[  345.858987][ T8811]  netlink_sendmsg+0x698/0xdd0
[  345.859012][ T8811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.859042][ T8811]  ____sys_sendmsg+0xa98/0xc70
[  345.859064][ T8811]  ? copy_msghdr_from_user+0x10a/0x160
[  345.859082][ T8811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.859116][ T8811]  ___sys_sendmsg+0x134/0x1d0
[  345.859134][ T8811]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.859150][ T8811]  ? __lock_acquire+0x622/0x1c90
[  345.859197][ T8811]  __sys_sendmsg+0x16d/0x220
[  345.859215][ T8811]  ? __pfx___sys_sendmsg+0x10/0x10
[  345.859250][ T8811]  do_syscall_64+0xcd/0xfa0
[  345.859275][ T8811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.859292][ T8811] RIP: 0033:0x7f3324b8f749
[  345.859307][ T8811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.859321][ T8811] RSP: 002b:00007f3325aef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.859338][ T8811] RAX: ffffffffffffffda RBX: 00007f3324de5fa0 RCX: 00007f3324b8f749
[  345.859349][ T8811] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  345.859359][ T8811] RBP: 00007f3325aef090 R08: 0000000000000000 R09: 0000000000000000
[  345.859369][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.859379][ T8811] R13: 00007f3324de6038 R14: 00007f3324de5fa0 R15: 00007ffd58ee43c8
[  345.859403][ T8811]  </TASK>
[  346.083146][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.252653][ T5924] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  346.443896][ T5924] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  346.452061][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.468482][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.498461][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  346.575601][ T8830] /dev/nullb0: Can't open blockdev
[  346.928491][ T5924] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.937682][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.969731][ T5924] usb 2-1: config 0 descriptor??
[  346.972009][ T8826] 0: reclassify loop, rule prio 0, protocol 800
[  347.467711][ T5924] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[  347.523692][ T5924] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  347.602125][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  347.602140][   T30] audit: type=1400 audit(1764650205.443:276): avc:  denied  { create } for  pid=8840 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  347.661762][   T30] audit: type=1400 audit(1764650205.493:277): avc:  denied  { read } for  pid=8842 comm="syz.3.677" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  347.712646][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  347.747781][   T30] audit: type=1400 audit(1764650205.493:278): avc:  denied  { open } for  pid=8842 comm="syz.3.677" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  347.787911][   T30] audit: type=1400 audit(1764650205.493:279): avc:  denied  { ioctl } for  pid=8842 comm="syz.3.677" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  347.869287][   T30] audit: type=1400 audit(1764650205.503:280): avc:  denied  { map } for  pid=8842 comm="syz.3.677" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  347.917398][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.928902][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  347.944509][   T30] audit: type=1400 audit(1764650205.743:281): avc:  denied  { mount } for  pid=8813 comm="syz.1.668" name="/" dev="hugetlbfs" ino=18113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  347.987414][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  348.005102][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.029032][    T9] usb 3-1: Product: syz
[  348.037090][   T30] audit: type=1400 audit(1764650205.763:282): avc:  denied  { ioctl } for  pid=8835 comm="syz.2.674" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  348.063821][    T9] usb 3-1: Manufacturer: syz
[  348.069470][    T9] usb 3-1: SerialNumber: syz
[  348.087088][    T9] cdc_mbim 3-1:1.0: skipping garbage
[  348.331876][   T30] audit: type=1400 audit(1764650206.173:283): avc:  denied  { read } for  pid=8854 comm="syz.0.679" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  348.417704][ T8836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  348.425908][   T30] audit: type=1400 audit(1764650206.173:284): avc:  denied  { open } for  pid=8854 comm="syz.0.679" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  348.533157][ T8856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8856 comm=syz.3.678
[  348.560054][ T8855] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  348.579052][   T30] audit: type=1400 audit(1764650206.373:285): avc:  denied  { ioctl } for  pid=8849 comm="syz.3.678" path="socket:[19097]" dev="sockfs" ino=19097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  348.993642][ T5924] usb 2-1: reset high-speed USB device number 20 using dummy_hcd
[  349.006522][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'.
[  349.039627][ T8836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  349.050176][    T9] cdc_mbim 3-1:1.0: setting tx_max = 184
[  349.069478][    T9] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device
[  349.081777][    T9] wwan wwan0: port wwan0mbim0 attached
[  349.110928][    T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 96:99:7e:a8:b6:48
[  349.362932][ T5924] usb 2-1: device descriptor read/64, error -71
[  349.570032][ T8881] FAULT_INJECTION: forcing a failure.
[  349.570032][ T8881] name failslab, interval 1, probability 0, space 0, times 0
[  349.595932][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(full) 
[  349.595959][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  349.595969][ T8881] Call Trace:
[  349.595975][ T8881]  <TASK>
[  349.595982][ T8881]  dump_stack_lvl+0x16c/0x1f0
[  349.596012][ T8881]  should_fail_ex+0x512/0x640
[  349.596037][ T8881]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  349.596059][ T8881]  should_failslab+0xc2/0x120
[  349.596083][ T8881]  kmem_cache_alloc_node_noprof+0x78/0x770
[  349.596100][ T8881]  ? __alloc_skb+0x2b2/0x380
[  349.596123][ T8881]  ? __alloc_skb+0x2b2/0x380
[  349.596136][ T8881]  ? __pfx_netlink_insert+0x10/0x10
[  349.596155][ T8881]  __alloc_skb+0x2b2/0x380
[  349.596170][ T8881]  ? __pfx___alloc_skb+0x10/0x10
[  349.596186][ T8881]  ? netlink_autobind.isra.0+0x158/0x370
[  349.596212][ T8881]  netlink_alloc_large_skb+0x69/0x140
[  349.596235][ T8881]  netlink_sendmsg+0x698/0xdd0
[  349.596261][ T8881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.596293][ T8881]  ____sys_sendmsg+0xa98/0xc70
[  349.596316][ T8881]  ? copy_msghdr_from_user+0x10a/0x160
[  349.596334][ T8881]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.596368][ T8881]  ___sys_sendmsg+0x134/0x1d0
[  349.596388][ T8881]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.596403][ T8881]  ? __lock_acquire+0x622/0x1c90
[  349.596452][ T8881]  __sys_sendmsg+0x16d/0x220
[  349.596470][ T8881]  ? __pfx___sys_sendmsg+0x10/0x10
[  349.596499][ T8881]  ? rcu_is_watching+0x12/0xc0
[  349.596527][ T8881]  do_syscall_64+0xcd/0xfa0
[  349.596552][ T8881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.596570][ T8881] RIP: 0033:0x7faa74b8f749
[  349.596586][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.596602][ T8881] RSP: 002b:00007faa75a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.596618][ T8881] RAX: ffffffffffffffda RBX: 00007faa74de5fa0 RCX: 00007faa74b8f749
[  349.596630][ T8881] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  349.596640][ T8881] RBP: 00007faa75a15090 R08: 0000000000000000 R09: 0000000000000000
[  349.596651][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.596662][ T8881] R13: 00007faa74de6038 R14: 00007faa74de5fa0 R15: 00007ffe755011d8
[  349.596687][ T8881]  </TASK>
[  349.863092][ T5924] usb 2-1: reset high-speed USB device number 20 using dummy_hcd
[  350.022869][ T3092] usb 3-1: USB disconnect, device number 22
[  350.023603][ T5924] usb 2-1: device firmware changed
[  350.031525][ T3092] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  350.036663][   T43] usb 2-1: USB disconnect, device number 20
[  350.212933][ T8893] /dev/nullb0: Can't open blockdev
[  350.267051][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  350.437726][ T3092] wwan wwan0: port wwan0mbim0 disconnected
[  350.474309][   T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  350.498894][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  350.520059][   T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  350.531819][   T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  350.560390][   T43] usb 2-1: Product: syz
[  350.565914][   T43] usb 2-1: Manufacturer: syz
[  350.573108][   T43] usb 2-1: SerialNumber: syz
[  350.595254][   T43] usb 2-1: config 0 descriptor??
[  350.630572][   T43] usb 2-1: selecting invalid altsetting 0
[  350.645217][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  350.808296][    T9] usb 5-1: Using ep0 maxpacket: 16
[  350.819860][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  350.836244][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  350.862941][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  350.864805][ T8875] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled
[  350.884338][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  350.902750][ T3092] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  350.920047][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  350.946742][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  350.965230][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.982624][    T9] usb 5-1: Product: syz
[  350.984297][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.986872][    T9] usb 5-1: Manufacturer: syz
[  351.003814][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.030311][    T9] usb 5-1: SerialNumber: syz
[  351.048670][    T9] usb 5-1: config 0 descriptor??
[  351.066764][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.078020][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.095390][ T3092] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  351.096961][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.110501][ T3092] usb 3-1: config 0 interface 0 has no altsetting 0
[  351.124417][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.137510][ T3092] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  351.147066][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  351.162701][ T3092] usb 3-1: Product: syz
[  351.166955][ T3092] usb 3-1: Manufacturer: syz
[  351.188591][ T3092] usb 3-1: SerialNumber: syz
[  351.205737][ T3092] usb 3-1: config 0 descriptor??
[  351.287360][ T3092] usb 3-1: selecting invalid altsetting 0
[  351.333064][    T9] appledisplay 5-1:0.0: Error while getting initial brightness: -110
[  351.401053][    T9] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110
[  351.611625][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.637555][ T8922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  351.637569][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.693470][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.717716][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.754701][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.763465][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.320227][ T8940] IPVS: sh: FWM 3 0x00000003 - no destination available
[  352.327334][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  352.335138][ T8940] IPVS: sh: FWM 3 0x00000003 - no destination available
[  352.342120][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  353.346307][ T5885] usb 5-1: USB disconnect, device number 26
[  353.396938][ T5924] usb 2-1: USB disconnect, device number 21
[  353.446136][ T8950] IPVS: sh: FWM 3 0x00000003 - no destination available
[  353.461614][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  353.471698][ T8951] fuse: Unknown parameter 'group_id00000000000000000000'
[  353.714565][ T5885] usb 3-1: USB disconnect, device number 23
[  353.790660][ T8953] fuse: Bad value for 'fd'
[  353.828189][ T8962] netlink: 80 bytes leftover after parsing attributes in process `syz.2.705'.
[  354.381051][ T8971] FAULT_INJECTION: forcing a failure.
[  354.381051][ T8971] name failslab, interval 1, probability 0, space 0, times 0
[  354.427042][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.2.707 Not tainted syzkaller #0 PREEMPT(full) 
[  354.427068][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  354.427078][ T8971] Call Trace:
[  354.427083][ T8971]  <TASK>
[  354.427088][ T8971]  dump_stack_lvl+0x16c/0x1f0
[  354.427109][ T8971]  should_fail_ex+0x512/0x640
[  354.427126][ T8971]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  354.427140][ T8971]  should_failslab+0xc2/0x120
[  354.427155][ T8971]  kmem_cache_alloc_noprof+0x75/0x6e0
[  354.427170][ T8971]  ? getname_flags.part.0+0x4c/0x550
[  354.427202][ T8971]  ? getname_flags.part.0+0x4c/0x550
[  354.427225][ T8971]  getname_flags.part.0+0x4c/0x550
[  354.427252][ T8971]  getname_flags+0x93/0xf0
[  354.427271][ T8971]  do_sys_openat2+0xb8/0x1d0
[  354.427296][ T8971]  ? __pfx_do_sys_openat2+0x10/0x10
[  354.427324][ T8971]  ? __fget_files+0x20e/0x3c0
[  354.427350][ T8971]  __x64_sys_openat+0x174/0x210
[  354.427375][ T8971]  ? __pfx___x64_sys_openat+0x10/0x10
[  354.427397][ T8971]  ? ksys_write+0x1ac/0x250
[  354.427424][ T8971]  do_syscall_64+0xcd/0xfa0
[  354.427450][ T8971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.427469][ T8971] RIP: 0033:0x7fc5a858f749
[  354.427484][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.427501][ T8971] RSP: 002b:00007fc5a93f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  354.427518][ T8971] RAX: ffffffffffffffda RBX: 00007fc5a87e6180 RCX: 00007fc5a858f749
[  354.427530][ T8971] RDX: 0000000000202000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  354.427540][ T8971] RBP: 00007fc5a93f2090 R08: 0000000000000000 R09: 0000000000000000
[  354.427551][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.427562][ T8971] R13: 00007fc5a87e6218 R14: 00007fc5a87e6180 R15: 00007ffc428c31c8
[  354.427588][ T8971]  </TASK>
[  354.626543][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  354.626554][   T30] audit: type=1400 audit(1764650212.473:303): avc:  denied  { getopt } for  pid=8972 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  354.934309][ T8978] IPVS: sh: FWM 3 0x00000003 - no destination available
[  354.941547][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  354.950905][ T8978] IPVS: sh: FWM 3 0x00000003 - no destination available
[  354.958276][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  355.028092][ T8980] can0: slcan on ptm0.
[  355.191019][ T8981] can0 (unregistered): slcan off ptm0.
[  355.432177][ T8992] FAULT_INJECTION: forcing a failure.
[  355.432177][ T8992] name failslab, interval 1, probability 0, space 0, times 0
[  355.566913][ T8992] CPU: 1 UID: 0 PID: 8992 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT(full) 
[  355.566933][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  355.566941][ T8992] Call Trace:
[  355.566946][ T8992]  <TASK>
[  355.566950][ T8992]  dump_stack_lvl+0x16c/0x1f0
[  355.566969][ T8992]  should_fail_ex+0x512/0x640
[  355.566987][ T8992]  ? fs_reclaim_acquire+0xae/0x150
[  355.567003][ T8992]  should_failslab+0xc2/0x120
[  355.567019][ T8992]  __kmalloc_noprof+0xdd/0x880
[  355.567038][ T8992]  ? tomoyo_encode2+0x100/0x3e0
[  355.567057][ T8992]  ? tomoyo_encode2+0x100/0x3e0
[  355.567072][ T8992]  tomoyo_encode2+0x100/0x3e0
[  355.567090][ T8992]  tomoyo_encode+0x29/0x50
[  355.567106][ T8992]  tomoyo_realpath_from_path+0x18f/0x6e0
[  355.567127][ T8992]  tomoyo_path_number_perm+0x245/0x580
[  355.567141][ T8992]  ? tomoyo_path_number_perm+0x237/0x580
[  355.567156][ T8992]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  355.567172][ T8992]  ? find_held_lock+0x2b/0x80
[  355.567198][ T8992]  ? find_held_lock+0x2b/0x80
[  355.567213][ T8992]  ? hook_file_ioctl_common+0x145/0x410
[  355.567227][ T8992]  ? __fget_files+0x20e/0x3c0
[  355.567248][ T8992]  security_file_ioctl+0x9b/0x240
[  355.567265][ T8992]  __x64_sys_ioctl+0xb7/0x210
[  355.567277][ T8992]  do_syscall_64+0xcd/0xfa0
[  355.567294][ T8992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.567306][ T8992] RIP: 0033:0x7f3324b8f749
[  355.567315][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.567327][ T8992] RSP: 002b:00007f3325aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.567337][ T8992] RAX: ffffffffffffffda RBX: 00007f3324de5fa0 RCX: 00007f3324b8f749
[  355.567344][ T8992] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003
[  355.567351][ T8992] RBP: 00007f3325aef090 R08: 0000000000000000 R09: 0000000000000000
[  355.567357][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.567363][ T8992] R13: 00007f3324de6038 R14: 00007f3324de5fa0 R15: 00007ffd58ee43c8
[  355.567377][ T8992]  </TASK>
[  355.567389][ T8992] ERROR: Out of memory at tomoyo_realpath_from_path.
[  356.220805][ T8992] loop9: detected capacity change from 0 to 7
[  356.255818][ T8992] Dev loop9: unable to read RDB block 7
[  356.273858][ T8992]  loop9: unable to read partition table
[  356.372979][ T8992] loop9: partition table beyond EOD, truncated
[  356.390499][ T8992] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  356.646219][ T9005] loop9: detected capacity change from 0 to 7
[  356.671421][ T6885] Dev loop9: unable to read RDB block 7
[  356.698467][ T6885]  loop9: unable to read partition table
[  356.789541][ T6885] loop9: partition table beyond EOD, truncated
[  356.809090][ T9005] Dev loop9: unable to read RDB block 7
[  356.824139][ T9005]  loop9: unable to read partition table
[  356.831032][ T9005] loop9: partition table beyond EOD, truncated
[  356.860228][ T9005] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  357.137346][ T9021] netlink: 80 bytes leftover after parsing attributes in process `syz.2.717'.
[  357.146552][ T5885] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  357.329374][ T5885] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  357.338178][ T5885] usb 2-1: config 0 has no interface number 0
[  357.404648][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  357.434053][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  357.453340][ T9015] fuse: Bad value for 'fd'
[  357.487597][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  357.501643][ T9030] netlink: 666 bytes leftover after parsing attributes in process `syz.3.719'.
[  357.530352][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  357.546092][ T9033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9033 comm=syz.3.719
[  357.562750][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  357.600790][ T5885] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  357.684313][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.826559][ T5885] usb 2-1: config 0 descriptor??
[  357.839555][ T5885] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  358.222735][   T30] audit: type=1400 audit(1764650215.973:304): avc:  denied  { create } for  pid=9034 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  358.391036][   T30] audit: type=1400 audit(1764650215.993:305): avc:  denied  { ioctl } for  pid=9034 comm="syz.4.720" path="socket:[19334]" dev="sockfs" ino=19334 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  358.426922][   T30] audit: type=1400 audit(1764650216.023:306): avc:  denied  { getopt } for  pid=9034 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  358.650155][ T9052] validate_nla: 41 callbacks suppressed
[  358.650199][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.663792][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.671624][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.679548][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.687523][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.696432][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.704985][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.712790][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.720593][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.728448][ T9052] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  358.859486][   T30] audit: type=1400 audit(1764650216.583:307): avc:  denied  { write } for  pid=9010 comm="syz.1.715" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  359.254582][   T30] audit: type=1400 audit(1764650216.603:308): avc:  denied  { open } for  pid=9010 comm="syz.1.715" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  359.628899][ T9071] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  359.751857][   T30] audit: type=1400 audit(1764650217.493:309): avc:  denied  { accept } for  pid=9065 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  360.340403][ T9077] fuse: Unknown parameter 'group_id00000000000000000000'
[  360.632153][ T9083] IPVS: sh: FWM 3 0x00000003 - no destination available
[  360.640106][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  360.649472][ T9083] IPVS: sh: FWM 3 0x00000003 - no destination available
[  360.656819][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  361.564456][ T9091] IPVS: sh: FWM 3 0x00000003 - no destination available
[  361.573572][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  361.704813][ T9091] IPVS: sh: FWM 3 0x00000003 - no destination available
[  361.762180][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  361.777983][ T9093] process 'syz.3.733' launched './file0' with NULL argv: empty string added
[  361.793391][ T3092] usb 2-1: USB disconnect, device number 22
[  361.840735][ T3092] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  361.923880][   T30] audit: type=1400 audit(1764650219.763:310): avc:  denied  { execute_no_trans } for  pid=9092 comm="syz.3.733" path="/156/file0" dev="tmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  362.731699][ T9103] netlink: 666 bytes leftover after parsing attributes in process `syz.3.735'.
[  362.746934][ T9103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9103 comm=syz.3.735
[  362.783112][   T30] audit: type=1400 audit(1764650220.613:311): avc:  denied  { create } for  pid=9100 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  362.928008][ T9097] fuse: Bad value for 'fd'
[  364.050796][ T9114] IPVS: sh: FWM 3 0x00000003 - no destination available
[  364.060237][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  364.776066][ T9127] netlink: 277 bytes leftover after parsing attributes in process `syz.3.740'.
[  365.587039][   T30] audit: type=1400 audit(1764650223.433:312): avc:  denied  { mount } for  pid=9132 comm="syz.4.743" name="/" dev="autofs" ino=19443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  365.762891][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'.
[  365.866162][   T30] audit: type=1400 audit(1764650223.713:313): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  366.342879][ T9150] net_ratelimit: 2 callbacks suppressed
[  366.342899][ T9150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.352657][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  366.392221][ T9150] netlink: del zone limit has 4 unknown bytes
[  366.462852][   T30] audit: type=1400 audit(1764650224.223:314): avc:  denied  { create } for  pid=9129 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  366.686340][   T30] audit: type=1400 audit(1764650224.233:315): avc:  denied  { write } for  pid=9129 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  366.849694][   T30] audit: type=1400 audit(1764650224.693:316): avc:  denied  { ioctl } for  pid=9148 comm="syz.0.748" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  366.907405][    T9] usb 5-1: Using ep0 maxpacket: 8
[  366.914591][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  367.944051][    T9] usb 5-1: config 0 has no interfaces?
[  367.949604][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  367.959690][   T30] audit: type=1400 audit(1764650224.783:317): avc:  denied  { setopt } for  pid=9148 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  367.981178][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.997234][    T9] usb 5-1: config 0 descriptor??
[  368.002239][   T30] audit: type=1400 audit(1764650224.783:318): avc:  denied  { connect } for  pid=9148 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  368.914457][ T9158] IPVS: sh: FWM 3 0x00000003 - no destination available
[  368.921950][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  368.944489][   T30] audit: type=1400 audit(1764650226.783:319): avc:  denied  { write } for  pid=9140 comm="syz.4.746" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  368.974771][ T9160] IPVS: sh: FWM 3 0x00000003 - no destination available
[  368.992409][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  369.178572][ T9164] validate_nla: 41 callbacks suppressed
[  369.178584][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.192204][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.200167][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.209181][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.217252][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.225238][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.233313][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.241642][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.249960][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  369.258048][ T9164] netlink: 'syz.3.751': attribute type 3 has an invalid length.
[  370.449620][    T9] usb 5-1: USB disconnect, device number 27
[  371.841331][ T9197] FAULT_INJECTION: forcing a failure.
[  371.841331][ T9197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.854675][ T9197] CPU: 1 UID: 0 PID: 9197 Comm: syz.0.759 Not tainted syzkaller #0 PREEMPT(full) 
[  371.854699][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  371.854710][ T9197] Call Trace:
[  371.854716][ T9197]  <TASK>
[  371.854722][ T9197]  dump_stack_lvl+0x16c/0x1f0
[  371.854752][ T9197]  should_fail_ex+0x512/0x640
[  371.854782][ T9197]  _copy_from_user+0x2e/0xd0
[  371.854811][ T9197]  __sys_bpf+0x248/0x4980
[  371.854829][ T9197]  ? finish_task_switch.isra.0+0x21c/0xc10
[  371.854857][ T9197]  ? __pfx___sys_bpf+0x10/0x10
[  371.854873][ T9197]  ? lockdep_hardirqs_on+0x7c/0x110
[  371.854898][ T9197]  ? finish_task_switch.isra.0+0x221/0xc10
[  371.854928][ T9197]  ? rcu_is_watching+0x12/0xc0
[  371.854952][ T9197]  ? trace_sched_exit_tp+0xd1/0x120
[  371.854973][ T9197]  ? __schedule+0x11a3/0x5de0
[  371.855018][ T9197]  ? fput+0x9b/0xd0
[  371.855042][ T9197]  ? ksys_write+0x1ac/0x250
[  371.855068][ T9197]  __x64_sys_bpf+0x78/0xc0
[  371.855085][ T9197]  ? lockdep_hardirqs_on+0x7c/0x110
[  371.855109][ T9197]  do_syscall_64+0xcd/0xfa0
[  371.855135][ T9197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.855153][ T9197] RIP: 0033:0x7f3324b8f749
[  371.855167][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.855184][ T9197] RSP: 002b:00007f3325aad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  371.855201][ T9197] RAX: ffffffffffffffda RBX: 00007f3324de6180 RCX: 00007f3324b8f749
[  371.855213][ T9197] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  371.855224][ T9197] RBP: 00007f3325aad090 R08: 0000000000000000 R09: 0000000000000000
[  371.855234][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.855244][ T9197] R13: 00007f3324de6218 R14: 00007f3324de6180 R15: 00007ffd58ee43c8
[  371.855270][ T9197]  </TASK>
[  372.159567][ T9198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  373.631132][ T9214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.763'.
[  373.986263][   T30] audit: type=1400 audit(1764650231.503:320): avc:  denied  { connect } for  pid=9207 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  374.929531][ T9226] /dev/nullb0: Can't open blockdev
[  375.536113][ T9230] 9pnet_fd: Insufficient options for proto=fd
[  375.593452][ T9230] validate_nla: 41 callbacks suppressed
[  375.593476][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.607105][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.615576][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.623520][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.631408][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.639229][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.647239][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.655186][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.668595][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  375.676690][ T9230] netlink: 'syz.1.767': attribute type 3 has an invalid length.
[  377.800910][ T9241] Dead loop on virtual device ip6_vti0, fix it urgently!
[  378.006560][   T30] audit: type=1400 audit(1764650235.853:321): avc:  denied  { write } for  pid=9240 comm="syz.1.770" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  378.243377][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.564841][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  378.910520][   T30] audit: type=1400 audit(1764650236.433:322): avc:  denied  { ioctl } for  pid=9244 comm="syz.2.772" path="socket:[20712]" dev="sockfs" ino=20712 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  379.110237][   T30] audit: type=1400 audit(1764650236.953:323): avc:  denied  { mount } for  pid=9240 comm="syz.1.770" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  379.302717][ T3092] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  379.357878][ T9260] IPVS: sh: FWM 3 0x00000003 - no destination available
[  379.365463][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  379.378965][ T9260] IPVS: sh: FWM 3 0x00000003 - no destination available
[  379.395222][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  379.462687][ T3092] usb 4-1: Using ep0 maxpacket: 32
[  379.524694][ T3092] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  379.585955][ T3092] usb 4-1: config 0 has no interface number 0
[  379.611297][ T3092] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  379.623882][ T3092] usb 4-1: config 0 interface 85 has no altsetting 0
[  379.647642][ T3092] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  379.657165][ T3092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.665334][ T3092] usb 4-1: Product: syz
[  379.670806][ T3092] usb 4-1: Manufacturer: syz
[  379.676678][ T3092] usb 4-1: SerialNumber: syz
[  379.694590][ T3092] usb 4-1: config 0 descriptor??
[  380.515599][ T3092] appletouch 4-1:0.85: Geyser mode initialized.
[  380.523287][ T3092] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7
[  381.259507][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.778'.
[  382.348841][   T43] usb 4-1: USB disconnect, device number 23
[  382.504048][   T43] appletouch 4-1:0.85: input: appletouch disconnected
[  382.988374][ T9302] vxcan1: entered promiscuous mode
[  383.919605][ T3092] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[  384.182848][ T3092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.194257][ T3092] usb 3-1: config 0 has no interfaces?
[  384.215989][ T3092] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  384.242783][ T3092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.285802][ T3092] usb 3-1: config 0 descriptor??
[  385.487002][ T9333] netlink: 277 bytes leftover after parsing attributes in process `syz.0.793'.
[  385.998352][ T9345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  387.059007][    T9] usb 3-1: USB disconnect, device number 24
[  387.496216][   T12] Bluetooth: (null): Invalid header checksum
[  387.512918][   T12] Bluetooth: (null): Invalid header checksum
[  387.626727][ T8445] Bluetooth: (null): Invalid header checksum
[  388.144357][   T80] Bluetooth: (null): Invalid header checksum
[  388.163279][   T80] Bluetooth: (null): Invalid header checksum
[  388.169416][   T80] Bluetooth: (null): Invalid header checksum
[  388.780835][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'.
[  390.405889][   T30] audit: type=1400 audit(1764650248.243:324): avc:  denied  { create } for  pid=9374 comm="syz.3.805" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  390.492807][   T30] audit: type=1400 audit(1764650248.263:325): avc:  denied  { write } for  pid=9374 comm="syz.3.805" name="file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  390.515608][   T30] audit: type=1400 audit(1764650248.263:326): avc:  denied  { open } for  pid=9374 comm="syz.3.805" path="/174/file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  390.539811][   T30] audit: type=1400 audit(1764650248.263:327): avc:  denied  { ioctl } for  pid=9374 comm="syz.3.805" path="/174/file0" dev="tmpfs" ino=916 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  391.555138][   T30] audit: type=1400 audit(1764650249.403:328): avc:  denied  { ioctl } for  pid=9389 comm="syz.2.808" path="socket:[20042]" dev="sockfs" ino=20042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  391.582279][ T5824] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  391.604361][   T30] audit: type=1400 audit(1764650249.433:329): avc:  denied  { ioctl } for  pid=9389 comm="syz.2.808" path="socket:[20043]" dev="sockfs" ino=20043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  391.775342][   T30] audit: type=1400 audit(1764650249.593:330): avc:  denied  { unlink } for  pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  392.718534][ T9398] IPVS: sh: FWM 3 0x00000003 - no destination available
[  392.747672][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  393.244595][ T9420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  393.251188][ T9420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  393.372040][ T9420] vhci_hcd vhci_hcd.0: Device attached
[  393.844878][   T30] audit: type=1400 audit(1764650251.683:331): avc:  denied  { name_bind } for  pid=9399 comm="syz.3.812" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  393.947048][ T9421] vhci_hcd: connection closed
[  393.963236][   T12] vhci_hcd: stop threads
[  394.420142][   T12] vhci_hcd: release socket
[  394.431801][ T5924] usb 40-1: SetAddress Request (2) to port 0
[  394.438655][   T12] vhci_hcd: disconnect device
[  394.443011][   T30] audit: type=1400 audit(1764650251.683:332): avc:  denied  { shutdown } for  pid=9399 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  394.447867][ T5924] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  394.553095][ T5924] usb 40-1: enqueue for inactive port 0
[  394.665601][ T9434] validate_nla: 41 callbacks suppressed
[  394.665623][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.679220][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.687175][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.695183][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.703124][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.710825][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.718798][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.726810][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.734771][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  394.743378][ T9434] netlink: 'syz.0.817': attribute type 3 has an invalid length.
[  395.814138][ T5924] usb usb40-port1: attempt power cycle
[  396.342484][   T30] audit: type=1400 audit(1764650254.183:333): avc:  denied  { mount } for  pid=9444 comm="syz.4.822" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  396.368343][ T9445] FAULT_INJECTION: forcing a failure.
[  396.368343][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.402454][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.1.821 Not tainted syzkaller #0 PREEMPT(full) 
[  396.402482][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  396.402492][ T9445] Call Trace:
[  396.402498][ T9445]  <TASK>
[  396.402504][ T9445]  dump_stack_lvl+0x16c/0x1f0
[  396.402539][ T9445]  should_fail_ex+0x512/0x640
[  396.402567][ T9445]  _copy_from_iter+0x29f/0x1720
[  396.402599][ T9445]  ? __pfx__copy_from_iter+0x10/0x10
[  396.402625][ T9445]  ? find_held_lock+0x2b/0x80
[  396.402650][ T9445]  ? dev_get_by_index+0x17c/0x380
[  396.402673][ T9445]  packet_sendmsg+0x1cef/0x5850
[  396.402698][ T9445]  ? __lock_acquire+0xb8a/0x1c90
[  396.402723][ T9445]  ? sock_has_perm+0x259/0x2f0
[  396.402745][ T9445]  ? __pfx_sock_has_perm+0x10/0x10
[  396.402761][ T9445]  ? __pfx_packet_sendmsg+0x10/0x10
[  396.402781][ T9445]  __sys_sendto+0x4a3/0x520
[  396.402799][ T9445]  ? __pfx___sys_sendto+0x10/0x10
[  396.402828][ T9445]  ? ksys_write+0x1ac/0x250
[  396.402841][ T9445]  ? __pfx_ksys_write+0x10/0x10
[  396.402854][ T9445]  __x64_sys_sendto+0xe0/0x1c0
[  396.402871][ T9445]  ? do_syscall_64+0x91/0xfa0
[  396.402886][ T9445]  ? lockdep_hardirqs_on+0x7c/0x110
[  396.402902][ T9445]  do_syscall_64+0xcd/0xfa0
[  396.402918][ T9445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.402930][ T9445] RIP: 0033:0x7f62aa78f749
[  396.402940][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.402951][ T9445] RSP: 002b:00007f62ab5a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  396.402961][ T9445] RAX: ffffffffffffffda RBX: 00007f62aa9e5fa0 RCX: 00007f62aa78f749
[  396.402968][ T9445] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000004
[  396.402975][ T9445] RBP: 00007f62ab5a3090 R08: 0000200000000140 R09: 0000000000000014
[  396.402981][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.402987][ T9445] R13: 00007f62aa9e6038 R14: 00007f62aa9e5fa0 R15: 00007ffd60a9ca18
[  396.403002][ T9445]  </TASK>
[  396.720031][ T9449] 9pnet_fd: Insufficient options for proto=fd
[  397.019879][ T5924] usb usb40-port1: unable to enumerate USB device
[  398.804488][ T9471] /dev/nullb0: Can't open blockdev
[  398.922681][   T30] audit: type=1400 audit(1764650256.683:334): avc:  denied  { map } for  pid=9465 comm="syz.4.828" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  399.317018][ T9484] FAULT_INJECTION: forcing a failure.
[  399.317018][ T9484] name failslab, interval 1, probability 0, space 0, times 0
[  399.356821][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.4.832 Not tainted syzkaller #0 PREEMPT(full) 
[  399.356847][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  399.356857][ T9484] Call Trace:
[  399.356863][ T9484]  <TASK>
[  399.356869][ T9484]  dump_stack_lvl+0x16c/0x1f0
[  399.356899][ T9484]  should_fail_ex+0x512/0x640
[  399.356926][ T9484]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  399.356946][ T9484]  should_failslab+0xc2/0x120
[  399.356968][ T9484]  kmem_cache_alloc_noprof+0x75/0x6e0
[  399.356985][ T9484]  ? io_submit_one+0x122/0x1df0
[  399.357013][ T9484]  ? io_submit_one+0x122/0x1df0
[  399.357035][ T9484]  io_submit_one+0x122/0x1df0
[  399.357063][ T9484]  ? __lock_acquire+0xb8a/0x1c90
[  399.357086][ T9484]  ? __pfx_io_submit_one+0x10/0x10
[  399.357119][ T9484]  ? __might_fault+0xe3/0x190
[  399.357135][ T9484]  ? __might_fault+0x13b/0x190
[  399.357158][ T9484]  ? __x64_sys_io_submit+0x1a9/0x350
[  399.357183][ T9484]  __x64_sys_io_submit+0x1a9/0x350
[  399.357211][ T9484]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  399.357249][ T9484]  do_syscall_64+0xcd/0xfa0
[  399.357275][ T9484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.357293][ T9484] RIP: 0033:0x7f2f1f38f749
[  399.357309][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.357327][ T9484] RSP: 002b:00007f2f201c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  399.357344][ T9484] RAX: ffffffffffffffda RBX: 00007f2f1f5e5fa0 RCX: 00007f2f1f38f749
[  399.357356][ T9484] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007f2f201a5000
[  399.357366][ T9484] RBP: 00007f2f201c6090 R08: 0000000000000000 R09: 0000000000000000
[  399.357376][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.357386][ T9484] R13: 00007f2f1f5e6038 R14: 00007f2f1f5e5fa0 R15: 00007ffe4015ce68
[  399.357411][ T9484]  </TASK>
[  401.093977][ T9503] netlink: 666 bytes leftover after parsing attributes in process `syz.4.839'.
[  401.106798][ T9503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9503 comm=syz.4.839
[  402.472017][ T9515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.843'.
[  402.952064][ T9521] netlink: 666 bytes leftover after parsing attributes in process `syz.3.844'.
[  402.961679][ T9518] netlink: 64 bytes leftover after parsing attributes in process `syz.1.842'.
[  402.964026][ T9521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9521 comm=syz.3.844
[  403.243560][   T30] audit: type=1400 audit(1764650261.083:335): avc:  denied  { create } for  pid=9533 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  403.265668][ T9535] netlink: 14 bytes leftover after parsing attributes in process `syz.4.846'.
[  403.454656][ T9539] hub 1-0:1.0: USB hub found
[  403.508452][ T9539] hub 1-0:1.0: 1 port detected
[  403.532614][   T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  404.487416][   T43] usb 5-1: Using ep0 maxpacket: 16
[  404.513470][   T43] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  404.535777][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.683397][   T43] usb 5-1: config 0 descriptor??
[  404.707561][   T43] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  406.326930][ T9560] netlink: 666 bytes leftover after parsing attributes in process `syz.0.855'.
[  406.368714][ T9563] F2FS-fs: Conflicting test_dummy_encryption options
[  406.482143][ T9560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9560 comm=syz.0.855
[  406.538363][ T9568] netlink: 14 bytes leftover after parsing attributes in process `syz.2.856'.
[  406.716003][   T30] audit: type=1400 audit(1764650264.563:336): avc:  denied  { read write } for  pid=9570 comm="syz.3.857" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  406.741378][   T30] audit: type=1400 audit(1764650264.563:337): avc:  denied  { open } for  pid=9570 comm="syz.3.857" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  406.802692][ T5924] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  406.972859][ T5924] usb 3-1: Using ep0 maxpacket: 16
[  406.992396][   T43] usb 5-1: Detected FT232A
[  407.082701][    T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  407.155378][   T43] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  407.338481][ T9577] validate_nla: 92 callbacks suppressed
[  407.338549][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.352088][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.360026][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.367914][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.375935][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.383942][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.391884][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.399857][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.407842][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  407.418107][ T9577] netlink: 'syz.4.858': attribute type 3 has an invalid length.
[  408.165071][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  408.176010][ T5924] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  408.186119][    T9] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  408.201645][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  408.232799][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.271525][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  408.294442][   T43] usb 5-1: USB disconnect, device number 28
[  408.308184][ T5924] usb 3-1: config 0 descriptor??
[  408.323843][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  408.337082][ T5924] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  408.363049][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.403988][   T43] ftdi_sio 5-1:0.0: device disconnected
[  408.407222][    T9] usb 4-1: Product: 㠁
[  408.604872][ T9581] IPVS: sh: FWM 3 0x00000003 - no destination available
[  408.612241][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  408.622796][    T9] usb 4-1: Manufacturer: Ⰹ
[  408.627591][    T9] usb 4-1: SerialNumber: ⃯왌針ࡔ亳풹䁓﮾㠵刿伣됱熔Ãߗ璮､쭪⪠झ㟃䠈폳眙辁
[  408.643494][ T9581] IPVS: sh: FWM 3 0x00000003 - no destination available
[  408.650893][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  409.038069][ T9588] FAULT_INJECTION: forcing a failure.
[  409.038069][ T9588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.051368][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.0.861 Not tainted syzkaller #0 PREEMPT(full) 
[  409.051391][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  409.051401][ T9588] Call Trace:
[  409.051407][ T9588]  <TASK>
[  409.051414][ T9588]  dump_stack_lvl+0x16c/0x1f0
[  409.051440][ T9588]  should_fail_ex+0x512/0x640
[  409.051468][ T9588]  strncpy_from_user+0x3b/0x2e0
[  409.051490][ T9588]  keyctl_restrict_keyring+0xeb/0x250
[  409.051510][ T9588]  ? __pfx_keyctl_restrict_keyring+0x10/0x10
[  409.051528][ T9588]  ? fput+0x9b/0xd0
[  409.051549][ T9588]  ? ksys_write+0x1ac/0x250
[  409.051569][ T9588]  __do_sys_keyctl+0x4c1/0x590
[  409.051587][ T9588]  do_syscall_64+0xcd/0xfa0
[  409.051613][ T9588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.051628][ T9588] RIP: 0033:0x7f3324b8f749
[  409.051640][ T9588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.051654][ T9588] RSP: 002b:00007f3325aad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  409.051670][ T9588] RAX: ffffffffffffffda RBX: 00007f3324de6180 RCX: 00007f3324b8f749
[  409.051680][ T9588] RDX: 0000200000000240 RSI: 000000001c740187 RDI: 000000000000001d
[  409.051688][ T9588] RBP: 00007f3325aad090 R08: 0000000000000000 R09: 0000000000000000
[  409.051696][ T9588] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  409.051704][ T9588] R13: 00007f3324de6218 R14: 00007f3324de6180 R15: 00007ffd58ee43c8
[  409.051724][ T9588]  </TASK>
[  409.717631][ T9590] hub 1-0:1.0: USB hub found
[  409.722445][ T9590] hub 1-0:1.0: 1 port detected
[  409.867552][ T5885] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  410.037217][ T5885] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  410.076570][ T9600] netlink: 277 bytes leftover after parsing attributes in process `syz.1.864'.
[  410.106414][   T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  410.304063][   T43] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  410.326747][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  410.773994][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[  410.811301][   T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  410.843019][   T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  410.862942][   T43] usb 1-1: Product: syz
[  410.867279][   T43] usb 1-1: Manufacturer: syz
[  410.872655][   T43] usb 1-1: SerialNumber: syz
[  410.879975][   T43] usb 1-1: config 0 descriptor??
[  410.918931][   T43] usb 1-1: selecting invalid altsetting 0
[  410.936206][ T5924] usb 3-1: Detected FT232A
[  410.941572][ T5924] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  410.956534][ T5924] usb 3-1: USB disconnect, device number 25
[  410.980044][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  410.989961][ T5924] ftdi_sio 3-1:0.0: device disconnected
[  410.993011][    T9] usb 4-1: USB disconnect, device number 24
[  411.140177][ T9596] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  411.279727][    T9] usblp0: removed
[  411.412900][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.435014][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.546465][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.586684][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.854357][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.864497][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.176808][ T5924] usb 1-1: USB disconnect, device number 22
[  413.482736][   T30] audit: type=1400 audit(1764650271.283:338): avc:  denied  { read append } for  pid=9632 comm="syz.2.872" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  413.542462][   T30] audit: type=1400 audit(1764650271.283:339): avc:  denied  { open } for  pid=9632 comm="syz.2.872" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  413.646933][   T30] audit: type=1400 audit(1764650271.283:340): avc:  denied  { ioctl } for  pid=9632 comm="syz.2.872" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  413.914339][ T9640] validate_nla: 41 callbacks suppressed
[  413.914360][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.928199][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.936175][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.944156][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.951987][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.959987][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.968114][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.975918][ T5924] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  413.983858][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  413.992197][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  414.000460][ T9640] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  414.310251][ T5924] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  414.344631][ T5924] usb 1-1: config 0 has no interface number 0
[  414.414445][ T5924] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  414.520499][ T5924] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  414.659380][ T5924] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  414.707480][ T5924] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  414.720174][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  414.728525][ T5924] usb 1-1: Product: syz
[  414.733551][ T5924] usb 1-1: SerialNumber: syz
[  414.739753][ T5924] usb 1-1: config 0 descriptor??
[  414.746847][ T5924] cm109 1-1:0.8: invalid payload size 0, expected 4
[  414.754771][ T5924] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8
[  414.886194][ T5924] ------------[ cut here ]------------
[  414.891845][ T5924] URB ffff88807f503400 submitted while active
[  414.898327][ T5924] WARNING: CPU: 1 PID: 5924 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990
[  414.908024][ T5924] Modules linked in:
[  414.912673][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) 
[  414.922018][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  414.932615][ T5924] Workqueue: usb_hub_wq hub_event
[  414.937757][ T5924] RIP: 0010:usb_submit_urb+0x16f5/0x1990
[  414.943505][ T5924] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 53 b4 b3 fa c6 05 af d6 60 09 01 90 48 c7 c7 a0 25 50 8c 48 89 de e8 bc 2f 71 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24
[  414.963163][ T5924] RSP: 0018:ffffc9000451ee90 EFLAGS: 00010282
[  414.969225][ T5924] RAX: 0000000000000000 RBX: ffff88807f503400 RCX: ffffc9001a973000
[  414.977228][ T5924] RDX: 0000000000100000 RSI: ffffffff817b2025 RDI: 0000000000000001
[  414.985459][ T5924] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  414.993923][ T5924] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c3e8a0
[  415.001907][ T5924] R13: ffff888034c3e810 R14: ffff888034c3e89f R15: ffff888034c3e850
[  415.009895][ T5924] FS:  0000000000000000(0000) GS:ffff888124af6000(0000) knlGS:0000000000000000
[  415.019403][ T5924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  415.026435][ T5924] CR2: 000020000009e000 CR3: 000000005b21d000 CR4: 00000000003526f0
[  415.034429][ T5924] Call Trace:
[  415.037699][ T5924]  <TASK>
[  415.040615][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.045838][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.051635][ T5924]  ? __pm_runtime_resume+0xc3/0x170
[  415.056870][ T5924]  cm109_input_open+0x27a/0x490
[  415.061710][ T5924]  ? __pfx_cm109_input_open+0x10/0x10
[  415.067080][ T5924]  input_open_device+0x24c/0x3d0
[  415.072023][ T5924]  kbd_connect+0x103/0x160
[  415.076487][ T5924]  input_attach_handler.isra.0+0x176/0x250
[  415.082327][ T5924]  input_register_device+0xab9/0x1180
[  415.087740][ T5924]  cm109_usb_probe+0x122f/0x17c0
[  415.092721][ T5924]  usb_probe_interface+0x303/0xa40
[  415.097823][ T5924]  ? __pfx_usb_probe_interface+0x10/0x10
[  415.103460][ T5924]  really_probe+0x241/0xa90
[  415.107966][ T5924]  __driver_probe_device+0x1de/0x440
[  415.113253][ T5924]  driver_probe_device+0x4c/0x1b0
[  415.118822][ T5924]  __device_attach_driver+0x1df/0x310
[  415.124672][ T5924]  ? __pfx___device_attach_driver+0x10/0x10
[  415.130559][ T5924]  bus_for_each_drv+0x159/0x1e0
[  415.135411][ T5924]  ? __pfx_bus_for_each_drv+0x10/0x10
[  415.140767][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.145964][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.151759][ T5924]  __device_attach+0x1e4/0x4b0
[  415.156534][ T5924]  ? __pfx___device_attach+0x10/0x10
[  415.161810][ T5924]  ? do_raw_spin_unlock+0x172/0x230
[  415.167006][ T5924]  bus_probe_device+0x17f/0x1c0
[  415.171845][ T5924]  device_add+0x1148/0x1aa0
[  415.176359][ T5924]  ? __pfx_device_add+0x10/0x10
[  415.181199][ T5924]  ? preempt_schedule_thunk+0x16/0x30
[  415.186621][ T5924]  usb_set_configuration+0x1187/0x1e20
[  415.192117][ T5924]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  415.198219][ T5924]  usb_generic_driver_probe+0xb1/0x110
[  415.203684][ T5924]  usb_probe_device+0xef/0x3e0
[  415.208436][ T5924]  ? __pfx_usb_probe_device+0x10/0x10
[  415.213827][ T5924]  really_probe+0x241/0xa90
[  415.218890][ T5924]  __driver_probe_device+0x1de/0x440
[  415.224637][ T5924]  ? usb_driver_applicable+0x1c7/0x220
[  415.230088][ T5924]  driver_probe_device+0x4c/0x1b0
[  415.235131][ T5924]  __device_attach_driver+0x1df/0x310
[  415.240494][ T5924]  ? __pfx___device_attach_driver+0x10/0x10
[  415.246419][ T5924]  bus_for_each_drv+0x159/0x1e0
[  415.251254][ T5924]  ? __pfx_bus_for_each_drv+0x10/0x10
[  415.256626][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.261813][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.267628][ T5924]  __device_attach+0x1e4/0x4b0
[  415.272380][ T5924]  ? __pfx___device_attach+0x10/0x10
[  415.277681][ T5924]  ? do_raw_spin_unlock+0x172/0x230
[  415.282877][ T5924]  bus_probe_device+0x17f/0x1c0
[  415.287714][ T5924]  device_add+0x1148/0x1aa0
[  415.292206][ T5924]  ? __pfx_device_add+0x10/0x10
[  415.297052][ T5924]  ? add_device_randomness+0xb7/0xf0
[  415.302326][ T5924]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  415.308214][ T5924]  usb_new_device+0xd07/0x1a60
[  415.312976][ T5924]  ? do_raw_spin_lock+0x12c/0x2b0
[  415.318005][ T5924]  ? __pfx_usb_new_device+0x10/0x10
[  415.323802][ T5924]  ? mark_held_locks+0x49/0x80
[  415.328553][ T5924]  hub_event+0x2f34/0x4fe0
[  415.333503][ T5924]  ? __pfx_hub_event+0x10/0x10
[  415.338285][ T5924]  ? interval_tree_remove+0xc20/0xee0
[  415.343692][ T5924]  ? rcu_is_watching+0x12/0xc0
[  415.348465][ T5924]  process_one_work+0x9cf/0x1b70
[  415.353420][ T5924]  ? __pfx_free_obj_work+0x10/0x10
[  415.358526][ T5924]  ? __pfx_process_one_work+0x10/0x10
[  415.363904][ T5924]  ? assign_work+0x1a0/0x250
[  415.368484][ T5924]  worker_thread+0x6c8/0xf10
[  415.373604][ T5924]  ? __pfx_worker_thread+0x10/0x10
[  415.378699][ T5924]  kthread+0x3c5/0x780
[  415.382764][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.387336][ T5924]  ? rcu_is_watching+0x12/0xc0
[  415.392095][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.396801][ T5924]  ret_from_fork+0x675/0x7d0
[  415.401383][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.405973][ T5924]  ret_from_fork_asm+0x1a/0x30
[  415.410741][ T5924]  </TASK>
[  415.413753][ T5924] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  415.421011][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) 
[  415.430365][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  415.440398][ T5924] Workqueue: usb_hub_wq hub_event
[  415.445400][ T5924] Call Trace:
[  415.448651][ T5924]  <TASK>
[  415.451553][ T5924]  dump_stack_lvl+0x3d/0x1f0
[  415.456120][ T5924]  vpanic+0x640/0x6f0
[  415.460078][ T5924]  ? usb_submit_urb+0x16f5/0x1990
[  415.465075][ T5924]  panic+0xca/0xd0
[  415.468772][ T5924]  ? __pfx_panic+0x10/0x10
[  415.473171][ T5924]  check_panic_on_warn+0xab/0xb0
[  415.478086][ T5924]  __warn+0xf6/0x3c0
[  415.481948][ T5924]  ? preempt_schedule_notrace+0x62/0xe0
[  415.487558][ T5924]  ? usb_submit_urb+0x16f5/0x1990
[  415.492584][ T5924]  report_bug+0x3c3/0x580
[  415.496917][ T5924]  ? usb_submit_urb+0x16f5/0x1990
[  415.501932][ T5924]  handle_bug+0x184/0x210
[  415.506240][ T5924]  exc_invalid_op+0x17/0x50
[  415.510715][ T5924]  asm_exc_invalid_op+0x1a/0x20
[  415.515535][ T5924] RIP: 0010:usb_submit_urb+0x16f5/0x1990
[  415.521144][ T5924] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 53 b4 b3 fa c6 05 af d6 60 09 01 90 48 c7 c7 a0 25 50 8c 48 89 de e8 bc 2f 71 fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24
[  415.540723][ T5924] RSP: 0018:ffffc9000451ee90 EFLAGS: 00010282
[  415.546767][ T5924] RAX: 0000000000000000 RBX: ffff88807f503400 RCX: ffffc9001a973000
[  415.554710][ T5924] RDX: 0000000000100000 RSI: ffffffff817b2025 RDI: 0000000000000001
[  415.562656][ T5924] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  415.570608][ T5924] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888034c3e8a0
[  415.578573][ T5924] R13: ffff888034c3e810 R14: ffff888034c3e89f R15: ffff888034c3e850
[  415.586525][ T5924]  ? __warn_printk+0x1a5/0x350
[  415.591276][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.596464][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.602247][ T5924]  ? __pm_runtime_resume+0xc3/0x170
[  415.607423][ T5924]  cm109_input_open+0x27a/0x490
[  415.612249][ T5924]  ? __pfx_cm109_input_open+0x10/0x10
[  415.617592][ T5924]  input_open_device+0x24c/0x3d0
[  415.622503][ T5924]  kbd_connect+0x103/0x160
[  415.626892][ T5924]  input_attach_handler.isra.0+0x176/0x250
[  415.632683][ T5924]  input_register_device+0xab9/0x1180
[  415.638030][ T5924]  cm109_usb_probe+0x122f/0x17c0
[  415.642943][ T5924]  usb_probe_interface+0x303/0xa40
[  415.648034][ T5924]  ? __pfx_usb_probe_interface+0x10/0x10
[  415.653637][ T5924]  really_probe+0x241/0xa90
[  415.658118][ T5924]  __driver_probe_device+0x1de/0x440
[  415.663386][ T5924]  driver_probe_device+0x4c/0x1b0
[  415.668384][ T5924]  __device_attach_driver+0x1df/0x310
[  415.673730][ T5924]  ? __pfx___device_attach_driver+0x10/0x10
[  415.679607][ T5924]  bus_for_each_drv+0x159/0x1e0
[  415.684435][ T5924]  ? __pfx_bus_for_each_drv+0x10/0x10
[  415.689785][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.695132][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.700915][ T5924]  __device_attach+0x1e4/0x4b0
[  415.705654][ T5924]  ? __pfx___device_attach+0x10/0x10
[  415.710921][ T5924]  ? do_raw_spin_unlock+0x172/0x230
[  415.716095][ T5924]  bus_probe_device+0x17f/0x1c0
[  415.720921][ T5924]  device_add+0x1148/0x1aa0
[  415.725404][ T5924]  ? __pfx_device_add+0x10/0x10
[  415.730235][ T5924]  ? preempt_schedule_thunk+0x16/0x30
[  415.735593][ T5924]  usb_set_configuration+0x1187/0x1e20
[  415.741030][ T5924]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  415.747078][ T5924]  usb_generic_driver_probe+0xb1/0x110
[  415.752521][ T5924]  usb_probe_device+0xef/0x3e0
[  415.757266][ T5924]  ? __pfx_usb_probe_device+0x10/0x10
[  415.762615][ T5924]  really_probe+0x241/0xa90
[  415.767096][ T5924]  __driver_probe_device+0x1de/0x440
[  415.772352][ T5924]  ? usb_driver_applicable+0x1c7/0x220
[  415.777796][ T5924]  driver_probe_device+0x4c/0x1b0
[  415.782796][ T5924]  __device_attach_driver+0x1df/0x310
[  415.788144][ T5924]  ? __pfx___device_attach_driver+0x10/0x10
[  415.794017][ T5924]  bus_for_each_drv+0x159/0x1e0
[  415.798841][ T5924]  ? __pfx_bus_for_each_drv+0x10/0x10
[  415.804193][ T5924]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.809366][ T5924]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  415.815148][ T5924]  __device_attach+0x1e4/0x4b0
[  415.819890][ T5924]  ? __pfx___device_attach+0x10/0x10
[  415.825150][ T5924]  ? do_raw_spin_unlock+0x172/0x230
[  415.830334][ T5924]  bus_probe_device+0x17f/0x1c0
[  415.835187][ T5924]  device_add+0x1148/0x1aa0
[  415.839670][ T5924]  ? __pfx_device_add+0x10/0x10
[  415.844496][ T5924]  ? add_device_randomness+0xb7/0xf0
[  415.849758][ T5924]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  415.855627][ T5924]  usb_new_device+0xd07/0x1a60
[  415.860370][ T5924]  ? do_raw_spin_lock+0x12c/0x2b0
[  415.865384][ T5924]  ? __pfx_usb_new_device+0x10/0x10
[  415.870550][ T5924]  ? mark_held_locks+0x49/0x80
[  415.875299][ T5924]  hub_event+0x2f34/0x4fe0
[  415.879700][ T5924]  ? __pfx_hub_event+0x10/0x10
[  415.884432][ T5924]  ? interval_tree_remove+0xc20/0xee0
[  415.889781][ T5924]  ? rcu_is_watching+0x12/0xc0
[  415.894520][ T5924]  process_one_work+0x9cf/0x1b70
[  415.899433][ T5924]  ? __pfx_free_obj_work+0x10/0x10
[  415.904514][ T5924]  ? __pfx_process_one_work+0x10/0x10
[  415.909861][ T5924]  ? assign_work+0x1a0/0x250
[  415.914420][ T5924]  worker_thread+0x6c8/0xf10
[  415.918986][ T5924]  ? __pfx_worker_thread+0x10/0x10
[  415.924067][ T5924]  kthread+0x3c5/0x780
[  415.928106][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.932673][ T5924]  ? rcu_is_watching+0x12/0xc0
[  415.937430][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.941990][ T5924]  ret_from_fork+0x675/0x7d0
[  415.946554][ T5924]  ? __pfx_kthread+0x10/0x10
[  415.951113][ T5924]  ret_from_fork_asm+0x1a/0x30
[  415.955859][ T5924]  </TASK>
[  415.959122][ T5924] Kernel Offset: disabled
[  415.963421][ T5924] Rebooting in 86400 seconds..