last executing test programs:

11.85032061s ago: executing program 4 (id=481):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0))
r2 = syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000040)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1e, 0x0, @fd_index=0x8, 0x6, 0x0, 0xa56, 0x3})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x20004000)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000340), 0x0, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3802c00, &(0x7f0000000000)={[], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x802, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xa27c}}, './file0\x00'})

8.901306851s ago: executing program 0 (id=490):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
socket$key(0xf, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000020000d9f517"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = socket$inet(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r6, 0x7fffffff)
listen(r1, 0x1)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)

8.854553993s ago: executing program 1 (id=491):
pipe2$9p(&(0x7f0000000000), 0x80000)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (fail_nth: 9)

7.708441932s ago: executing program 1 (id=496):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0xa8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
inotify_init1(0x80000)
r2 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
unshare(0x20000400)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0)
getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x20)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000040)=0x80)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

7.683706606s ago: executing program 4 (id=497):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffdffe)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1])
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x19f)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044000)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e2800622009e0074b948b001a96c00c18cf100b541a66a5782e2926da6dfd2aa4218667df2ed8d7c94cbb440a5b5974525bb3645a988039339843d536c05380"], 0x9)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfd7f2000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

6.828633677s ago: executing program 4 (id=499):
mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
mkdir(&(0x7f0000000040)='./bus\x00', 0x16)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {}, [{0x20, 0x2}], {0x10, 0x7}, {0x20, 0x4}}, 0x4d, 0x3)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x1, 0x2000008}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)

6.598035291s ago: executing program 0 (id=501):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x41)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50)

6.516227695s ago: executing program 1 (id=503):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r3, 0x137, 0x70bd25, 0x25dfdbff}, 0x45}, 0x1, 0x0, 0x0, 0x8010}, 0x40800)
wait4(0x0, 0x0, 0x80000000, 0x0)

6.41908132s ago: executing program 0 (id=504):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40880)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000180)={0x6, 0x1, 0x5, {0xf7b, 0x0, 0x5ebf, 0x96}})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x1)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x882, 0x4)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendfile(r6, r5, 0x0, 0x5df5)
sendmsg$netlink(r1, 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000050000000000000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020692500000000e4981fba4efe002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7b4000008000000b70300000700000085000000060000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

6.372033094s ago: executing program 3 (id=505):
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7}, '\x00', "74bc397ea8c815bf853b8d659a76d8b8", "ef0bfe30", "0010000f0000003c"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b4000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000080)=0x1ff, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x62}, 0x4b)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

6.317173786s ago: executing program 1 (id=506):
r0 = openat$kvm(0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7}, '\x00', "74bc397ea8c815bf853b8d659a76d8b8", "ef0bfe30", "0010000f0000003c"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b4000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000))
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000080)=0x1ff, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x62}, 0x4b)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

5.433924926s ago: executing program 2 (id=508):
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
chdir(&(0x7f0000000040)='./file1\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x15}, {0x0, 0x8}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

5.231926355s ago: executing program 4 (id=509):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r2, 0x9, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e00040016838277cacd973315da771f20424d06f975a99f8cfa79a78847e355066221d18e203fdecf60ea08b155c6adcd020a076a8c13d2120bc991e645c741a27ce37c8f6abd66bc7e830ea63097f055d19737b467340616a5be9895d46094b9d7dc530dc8e31962f691ba1492484"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)

5.188036073s ago: executing program 3 (id=510):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x207132, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x20080)
r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {<r2=>0x80000000}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000640)={{0x80000000, 0x0, 0x6, [0xc, 0x4]}, {r2, 0x0, 0x6, [0x4e, 0xc]}, 0x10000000, [0x3, 0x1]})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x4)
ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r5, 0x0, 0x0)
write$ppp(r5, &(0x7f00000000c0)="1b33", 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2084)
writev(r7, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, 0x0, 0x2f00)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x42000, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)

4.786334166s ago: executing program 0 (id=511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40400, 0x184, 0x20}, 0x18)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @remote}, &(0x7f0000000200)=0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r1 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01)
r9 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
read$hiddev(r9, &(0x7f0000002300)=""/102, 0x66)
write$char_usb(r8, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='dax\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x20, &(0x7f0000000300)={&(0x7f0000000580)=""/167, 0xa7, <r10=>0x0, &(0x7f0000000240)=""/113, 0x71}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff2e01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x89, &(0x7f0000000480)=""/137, 0x41000, 0x43, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x302e8, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x2, 0x7, 0x4}, {0x4, 0x2, 0xd, 0x5}], 0x10, 0x7fff}, 0x94)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

4.488401149s ago: executing program 1 (id=512):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
socket$key(0xf, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000020000d9f517"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = socket$inet(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r6, 0x7fffffff)
listen(r1, 0x1)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)

4.440318196s ago: executing program 2 (id=513):
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil})
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080))
r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000001c0)=0x7, 0x4)
r2 = syz_io_uring_complete(0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x8000000)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r2, 0x10000000)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r5}})
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x40000}, &(0x7f0000000280)=0x8)
ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000002c0)=0x4142000)
r6 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x19000)
ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000340))
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x210000, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f00000003c0))
dup2(r7, r0)
write$sndseq(r2, &(0x7f0000000400)=[{0x3, 0xff, 0x9, 0x8, @time={0xffff, 0x7}, {0x7, 0xf}, {0x0, 0x40}, @raw32={[0x7fffffff, 0xba, 0x9ed]}}, {0x0, 0x9, 0x2, 0x0, @tick=0x2, {0x0, 0x7}, {0xa, 0x9}, @raw32={[0x5, 0xf, 0x7]}}, {0x6, 0x1, 0x3, 0xfc, @time={0x1, 0x8}, {0x9}, {0xd5, 0x9}, @time=@tick=0x3}, {0x1, 0xf5, 0x1, 0x1, @time={0xde8, 0x8}, {0x7, 0x2}, {0x6, 0xed}, @note={0x8, 0x4, 0x7, 0x2, 0x6}}, {0x0, 0x6, 0x63, 0x3, @time={0x18c, 0x80000001}, {0x0, 0x8}, {0x6, 0x4}, @connect={{0x98, 0x8}, {0x5b}}}], 0x8c)
ioctl$SNDCTL_TMR_METRONOME(r7, 0x40045407)
ioctl$KVM_SMI(r6, 0xaeb7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc1)
r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000600)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xd, "5c9e28ccba5868"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001600)={<r11=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000001800)={r10, r11, "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", "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"})
r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r12, 0xc0f85403, &(0x7f0000002840)={{0x3, 0x1, 0x7, 0x2, 0x5}, 0x2, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x80008, 0x1ff, 0xf6})

4.39989484s ago: executing program 3 (id=514):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x64000600)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x5, 0x3}, {0xa1}]})
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)

3.039883065s ago: executing program 2 (id=515):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r4)
connect$qrtr(r2, 0x0, 0x0)
close_range(r1, r2, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20)
preadv(0xffffffffffffffff, &(0x7f0000001080)=[{0x0}], 0x1, 0x2b, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x46)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x901, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]})

2.985982428s ago: executing program 3 (id=516):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0)
finit_module(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dfe, 0xfffffffffffffffe)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000718008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.014254243s ago: executing program 2 (id=517):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0xa8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
inotify_init1(0x80000)
r2 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
unshare(0x20000400)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0)
getpeername$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x20)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000040)=0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

1.931515765s ago: executing program 0 (id=518):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x121201, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eaeb1e9c188371b5191c51e8421f7e6dfcd1ea52256cb3a08c6d486acc039bebe6835ea3ee217858"], 0x7c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4048000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.705207717s ago: executing program 3 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fdatasync(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="efb076edb4a596d0b43822724e41414194513ef31813d0ca9bcddadf508110c2f8dd045991f3ad163cccb3ed74c1f00c266a9d5394cdcf07829d59b0e87c09d55704b72b0877527ed629b88563089f2a42cdf07994e9edfd9d78e645a7e34efb041e01ecbff329cfffbfd61486cf0f6f63ed8124b7d8ee339ea94dcc5548493b8c38de1fbea20b0309a321fb31e813959a0c351946ba9263cdce9ea7b0910516c0b7691c3ae79b47a9605bb26b034293bb75e3e679d9d1a2d6b41d881de68cb6b59f03a5b744", 0xc6}], 0x1}}], 0x1, 0x2000c001)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
socket(0xa, 0x2, 0x0)

1.513775909s ago: executing program 0 (id=520):
keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c})
ioctl$EVIOCSFF(r3, 0x40304580, 0x0)

1.381752464s ago: executing program 2 (id=521):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', <r2=>0x0, 0x8, 0x8, 0x0, 0x48f0, {{0x27, 0x4, 0x1, 0x5, 0x9c, 0x64, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, {[@noop, @end, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x1, 0xa, "d2e9c826f2f518f6"}, {0x5, 0xb, "b74420cbb312f3b107"}, {0x6, 0xa, "90614b4f8607d343"}, {0x2, 0x4, "6cd3"}, {0x0, 0x3, "f2"}, {0x2, 0x7, "77fa74ff02"}]}, @timestamp_prespec={0x44, 0x44, 0x57, 0x3, 0x7, [{@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0xfffffff9}, {@broadcast, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfae}, {@multicast2, 0x6}, {@broadcast, 0x401}, {@rand_addr=0x64010102, 0x13800}]}, @lsrr={0x83, 0xf, 0x3c, [@dev={0xac, 0x14, 0x14, 0x28}, @remote, @broadcast]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r2, 0x4, 0x0, 0x5, 0x5, 0x41, @private2, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x8000, 0x7, 0x8}})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}}, 0x20}}, 0x0)

1.3130048s ago: executing program 4 (id=522):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x8a36, 0x101, @name="b14e1ed7f6bbb1be1292b06e6655004f8f01ac386b4ac5807aea2cc5ba3d9cb2"})
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000003}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0xfffffffc}, 0x10}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x8004)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r7, 0x11e, 0x1, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x2001, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}], 0x2f})
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r8, 0x1, 0x1e, 0x0, &(0x7f00000002c0))
r9 = syz_clone(0x750b1200, &(0x7f0000000200)="1488b013fd9a7dec29a9e5e3f1c98918cb9f2a701bfb8663099d6d91c638e54b4d91cde86c3fe1be045c946ea10ff3d8e02534cc6453c82a60c6a4a2031a2ff7a29da67323d94c3a2ec65f007a8d0749c67a2e5b0c90c1f9ca054e8f1069a6fede", 0x61, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000400)="61a0e7a2da14755c18e81b47163e6b554bd927f164f6de0ec27aaf8480b893b8ad7f0c2aef06717f91c6bf91")
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000440)=r9)
getdents64(r1, &(0x7f0000000300)=""/152, 0x98)
syz_io_uring_submit(0x0, 0x0, 0x0)

1.139671729s ago: executing program 2 (id=523):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc4c01, 0x0) (fail_nth: 10)

441.194303ms ago: executing program 3 (id=524):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="88659acd873ce81ffe03c0e931e6ada98c96a46fe2ec2c1852a4aa3d1b90473d253710317a4abf3c5d8a4482bdbc5d764acb242ce0c047407ecf7eeb275496adb62199a3dc4ef705a22e7b42d395af871a19c42ce62aced8b6263812dccaed575e53aecc9e5e156e2f3515faf4c7f896eeaeed6c657697faf12e6d1216f5b13be0307732b06c961f9ddc5bd3bbe0e7094ead0092b942851456a54892dabb17d392a66b7bfc313614040f9309e51f53c50386d55969fa5263adc90f8174f56759ec94ded9b2dbce818fac0f605f1d43967e4a609f9c37facc75864a3cd7d1f5c68b02a158c0a957e7", @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r1, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x1}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
userfaultfd(0x80801)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xf9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80)

306.361532ms ago: executing program 1 (id=525):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="88659acd873ce81ffe03c0e931e6ada98c96a46fe2ec2c1852a4aa3d1b90473d253710317a4abf3c5d8a4482bdbc5d764acb242ce0c047407ecf7eeb275496adb62199a3dc4ef705a22e7b42d395af871a19c42ce62aced8b6263812dccaed575e53aecc9e5e156e2f3515faf4c7f896eeaeed6c657697faf12e6d1216f5b13be0307732b06c961f9ddc5bd3bbe0e7094ead0092b942851456a54892dabb17d392a66b7bfc313614040f9309e51f53c50386d55969fa5263adc90f8174f56759ec94ded9b2dbce818fac0f605f1d43967e4a609f9c37facc75864a3cd7d1f5c68b02a158c0a957e7", @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r1, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x1}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
userfaultfd(0x80801)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xf9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80)

0s ago: executing program 4 (id=526):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
socket$key(0xf, 0x3, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = socket$inet(0x2, 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r5, 0x7fffffff)

kernel console output (not intermixed with test programs):

ssive=1
[  146.340367][   T30] audit: type=1400 audit(1754192311.254:429): avc:  denied  { prog_load } for  pid=6600 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  146.340403][   T30] audit: type=1400 audit(1754192311.254:430): avc:  denied  { create } for  pid=6600 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.340437][   T30] audit: type=1400 audit(1754192311.254:431): avc:  denied  { bind } for  pid=6600 comm="syz.4.161" lport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.358671][ T5931] usb 5-1: config 0 descriptor??
[  146.721847][ T6629] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  146.741410][ T6629] warning: `syz.2.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  146.759903][ T6629] bridge_slave_0: left allmulticast mode
[  146.759929][ T6629] bridge_slave_0: left promiscuous mode
[  146.760152][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.765855][ T6629] bridge_slave_1: left allmulticast mode
[  146.765881][ T6629] bridge_slave_1: left promiscuous mode
[  146.766177][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.773104][ T6629] bond0: (slave bond_slave_0): Releasing backup interface
[  146.883486][ T6629] bond0: (slave bond_slave_1): Releasing backup interface
[  146.998930][ T6632] netlink: 'syz.2.166': attribute type 10 has an invalid length.
[  147.119905][ T6629] team0: Port device team_slave_0 removed
[  147.127310][ T6629] team0: Port device team_slave_1 removed
[  147.128737][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.128758][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.130875][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.130892][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.147208][ T6602] vxcan1: entered allmulticast mode
[  147.249682][ T6632] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  147.489638][ T6639] Illegal XDP return value 4294967294 on prog  (id 18) dev N/A, expect packet loss!
[  147.581502][ T6631] tty tty22: ldisc open failed (-12), clearing slot 21
[  148.463518][ T5917] usb 5-1: USB disconnect, device number 4
[  151.068160][   T30] kauditd_printk_skb: 83 callbacks suppressed
[  151.068205][   T30] audit: type=1400 audit(1754192316.754:515): avc:  denied  { create } for  pid=6678 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  151.226077][   T30] audit: type=1400 audit(1754192316.774:516): avc:  denied  { read } for  pid=6678 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  151.348056][   T30] audit: type=1400 audit(1754192316.774:517): avc:  denied  { bind } for  pid=6678 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  151.423169][   T30] audit: type=1400 audit(1754192317.094:518): avc:  denied  { read write } for  pid=6682 comm="syz.2.178" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  151.492610][   T30] audit: type=1400 audit(1754192317.094:519): avc:  denied  { open } for  pid=6682 comm="syz.2.178" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  151.518916][   T30] audit: type=1400 audit(1754192317.094:520): avc:  denied  { mounton } for  pid=6682 comm="syz.2.178" path="/34/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  151.583563][   T30] audit: type=1400 audit(1754192317.104:521): avc:  denied  { mount } for  pid=6682 comm="syz.2.178" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  152.528567][   T30] audit: type=1400 audit(1754192317.184:522): avc:  denied  { unmount } for  pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  152.558011][   T30] audit: type=1400 audit(1754192317.214:523): avc:  denied  { create } for  pid=6682 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  152.579546][   T30] audit: type=1400 audit(1754192317.214:524): avc:  denied  { bind } for  pid=6682 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  152.949710][ T5851] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.148043][ T5851] usb 5-1: Using ep0 maxpacket: 16
[  153.162231][ T5851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.182802][ T5851] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  153.205051][ T5851] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  153.218136][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.241975][ T5851] usb 5-1: Product: syz
[  153.246155][ T5851] usb 5-1: Manufacturer: syz
[  153.325054][ T6709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.390901][ T5851] usb 5-1: SerialNumber: syz
[  153.504434][ T5851] usb 5-1: config 0 descriptor??
[  153.700187][ T6713] nbd: couldn't find a device at index 67108864
[  153.752688][ T5922] usb 5-1: USB disconnect, device number 5
[  154.355036][ T6726] fuse: Unknown parameter 'fd•]*/ßxb¢
[  154.355036][ T6726] Jç7Ÿ+*§Ú�a‹s7+ôÚÈÃk»ºÆ­h€Iå¬S”~í‘]õê9®¯É"'
[  155.174913][ T6734] /dev/nullb0: Can't open blockdev
[  155.180964][ T6734] /dev/nullb0: Can't open blockdev
[  155.186975][ T6734] /dev/nullb0: Can't open blockdev
[  155.193110][ T6734] /dev/nullb0: Can't open blockdev
[  155.199134][ T6734] /dev/nullb0: Can't open blockdev
[  155.204948][ T6734] /dev/nullb0: Can't open blockdev
[  155.213045][ T6734] /dev/nullb0: Can't open blockdev
[  155.218976][ T6734] /dev/nullb0: Can't open blockdev
[  155.224766][ T6734] /dev/nullb0: Can't open blockdev
[  155.230625][ T6734] /dev/nullb0: Can't open blockdev
[  155.236421][ T6734] /dev/nullb0: Can't open blockdev
[  155.242367][ T6734] /dev/nullb0: Can't open blockdev
[  155.249375][ T6734] /dev/nullb0: Can't open blockdev
[  155.255188][ T6734] /dev/nullb0: Can't open blockdev
[  155.261060][ T6734] /dev/nullb0: Can't open blockdev
[  155.266819][ T6734] /dev/nullb0: Can't open blockdev
[  155.274117][ T6734] /dev/nullb0: Can't open blockdev
[  155.280426][ T6734] /dev/nullb0: Can't open blockdev
[  155.286325][ T6734] /dev/nullb0: Can't open blockdev
[  155.292162][ T6734] /dev/nullb0: Can't open blockdev
[  155.298034][ T6734] /dev/nullb0: Can't open blockdev
[  155.303862][ T6734] /dev/nullb0: Can't open blockdev
[  155.309776][ T6734] /dev/nullb0: Can't open blockdev
[  155.316826][ T6734] /dev/nullb0: Can't open blockdev
[  155.323960][ T6734] /dev/nullb0: Can't open blockdev
[  155.329901][ T6734] /dev/nullb0: Can't open blockdev
[  155.335711][ T6734] /dev/nullb0: Can't open blockdev
[  155.341567][ T6734] /dev/nullb0: Can't open blockdev
[  155.347389][ T6734] /dev/nullb0: Can't open blockdev
[  155.353342][ T6734] /dev/nullb0: Can't open blockdev
[  155.359290][ T6734] /dev/nullb0: Can't open blockdev
[  155.365074][ T6734] /dev/nullb0: Can't open blockdev
[  155.370967][ T6734] /dev/nullb0: Can't open blockdev
[  155.376716][ T6734] /dev/nullb0: Can't open blockdev
[  155.382818][ T6734] /dev/nullb0: Can't open blockdev
[  155.388822][ T6734] /dev/nullb0: Can't open blockdev
[  155.394848][ T6734] /dev/nullb0: Can't open blockdev
[  155.401465][ T6734] /dev/nullb0: Can't open blockdev
[  156.534472][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  156.534504][   T30] audit: type=1400 audit(1754192322.334:557): avc:  denied  { create } for  pid=6745 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  156.633569][   T30] audit: type=1400 audit(1754192322.384:558): avc:  denied  { read } for  pid=6745 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  156.764738][   T30] audit: type=1400 audit(1754192322.474:559): avc:  denied  { write } for  pid=6745 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  156.830963][   T30] audit: type=1400 audit(1754192322.524:560): avc:  denied  { write } for  pid=6745 comm="syz.3.194" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  156.986657][   T30] audit: type=1400 audit(1754192322.774:561): avc:  denied  { create } for  pid=6755 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  157.171899][ T6762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6762 comm=syz.1.198
[  157.512602][ T6762] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  157.556209][   T30] audit: type=1400 audit(1754192323.354:562): avc:  denied  { ioctl } for  pid=6769 comm="syz.2.201" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  157.804953][ T6772] binder: 6769:6772 ioctl c0306201 200000000280 returned -14
[  157.897780][   T30] audit: type=1400 audit(1754192323.354:563): avc:  denied  { set_context_mgr } for  pid=6769 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  157.917555][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.979984][   T30] audit: type=1400 audit(1754192323.404:564): avc:  denied  { map } for  pid=6769 comm="syz.2.201" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  158.004083][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.034163][   T30] audit: type=1400 audit(1754192323.604:565): avc:  denied  { call } for  pid=6769 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  158.152177][   T30] audit: type=1400 audit(1754192323.944:566): avc:  denied  { create } for  pid=6776 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  158.564787][ T6792] FAULT_INJECTION: forcing a failure.
[  158.564787][ T6792] name failslab, interval 1, probability 0, space 0, times 0
[  158.615783][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.3.206 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  158.615806][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  158.615820][ T6792] Call Trace:
[  158.615837][ T6792]  <TASK>
[  158.615844][ T6792]  dump_stack_lvl+0x16c/0x1f0
[  158.615884][ T6792]  should_fail_ex+0x512/0x640
[  158.615915][ T6792]  should_failslab+0xc2/0x120
[  158.615936][ T6792]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  158.615955][ T6792]  ? skb_clone+0x190/0x3f0
[  158.615986][ T6792]  skb_clone+0x190/0x3f0
[  158.616010][ T6792]  netlink_deliver_tap+0xabd/0xd30
[  158.616041][ T6792]  netlink_unicast+0x64c/0x870
[  158.616068][ T6792]  ? __pfx_netlink_unicast+0x10/0x10
[  158.616092][ T6792]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  158.616123][ T6792]  netlink_sendmsg+0x8d1/0xdd0
[  158.616151][ T6792]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.616185][ T6792]  ____sys_sendmsg+0xa95/0xc70
[  158.616203][ T6792]  ? copy_msghdr_from_user+0x10a/0x160
[  158.616226][ T6792]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.616255][ T6792]  ___sys_sendmsg+0x134/0x1d0
[  158.616280][ T6792]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.616325][ T6792]  ? __mutex_unlock_slowpath+0x80/0x800
[  158.616358][ T6792]  __sys_sendmsg+0x16d/0x220
[  158.616381][ T6792]  ? __pfx___sys_sendmsg+0x10/0x10
[  158.616420][ T6792]  do_syscall_64+0xcd/0x4c0
[  158.616445][ T6792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.616463][ T6792] RIP: 0033:0x7fefafb8eb69
[  158.616481][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.616496][ T6792] RSP: 002b:00007fefb0948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.616520][ T6792] RAX: ffffffffffffffda RBX: 00007fefafdb5fa0 RCX: 00007fefafb8eb69
[  158.616534][ T6792] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  158.616544][ T6792] RBP: 00007fefb0948090 R08: 0000000000000000 R09: 0000000000000000
[  158.616553][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.616562][ T6792] R13: 0000000000000000 R14: 00007fefafdb5fa0 R15: 00007ffe8a3ac0f8
[  158.616583][ T6792]  </TASK>
[  160.395797][ T6799] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.208'.
[  160.466772][ T6816] syz.3.213 uses obsolete (PF_INET,SOCK_PACKET)
[  161.706009][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  161.706043][   T30] audit: type=1400 audit(1754192327.484:575): avc:  denied  { write } for  pid=6826 comm="syz.2.217" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  162.165563][   T30] audit: type=1400 audit(1754192327.964:576): avc:  denied  { watch } for  pid=6832 comm="syz.1.219" path="/46/bus/file1" dev="overlay" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  162.624388][   T30] audit: type=1400 audit(1754192328.424:577): avc:  denied  { setopt } for  pid=6850 comm="syz.0.223" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  162.779374][   T30] audit: type=1400 audit(1754192328.564:578): avc:  denied  { setopt } for  pid=6856 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  162.804080][ T6858] netlink: 'syz.0.223': attribute type 5 has an invalid length.
[  162.898060][   T30] audit: type=1400 audit(1754192328.624:579): avc:  denied  { write } for  pid=6856 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  163.098079][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  163.136903][   T30] audit: type=1400 audit(1754192328.934:580): avc:  denied  { setopt } for  pid=6859 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  163.255415][   T30] audit: type=1400 audit(1754192328.974:581): avc:  denied  { create } for  pid=6859 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  163.330532][   T30] audit: type=1400 audit(1754192328.984:582): avc:  denied  { ioctl } for  pid=6859 comm="syz.0.226" path="socket:[12444]" dev="sockfs" ino=12444 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  163.356031][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short
[  163.373314][ T5851] usb 4-1: config 176 has an invalid interface number: 198 but max is 0
[  163.394536][ T5851] usb 4-1: config 176 has no interface number 0
[  163.404751][ T5851] usb 4-1: config 176 interface 198 has no altsetting 0
[  163.424852][   T30] audit: type=1400 audit(1754192328.994:583): avc:  denied  { create } for  pid=6859 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  163.457361][ T5851] usb 4-1: New USB device found, idVendor=043e, idProduct=7a12, bcdDevice=d6.b5
[  163.477711][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.485983][   T30] audit: type=1400 audit(1754192329.214:584): avc:  denied  { read } for  pid=6863 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  163.509035][ T5851] usb 4-1: Product: syz
[  163.513249][ T5851] usb 4-1: Manufacturer: syz
[  163.519356][ T5851] usb 4-1: SerialNumber: syz
[  163.588503][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  163.760111][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.787195][ T5851] usb 4-1: USB disconnect, device number 5
[  163.818636][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.837964][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.883804][ T5910] usb 5-1: Product: syz
[  163.888668][ T5910] usb 5-1: Manufacturer: syz
[  163.893266][ T5910] usb 5-1: SerialNumber: syz
[  163.938377][   T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  164.087970][   T43] usb 2-1: Using ep0 maxpacket: 8
[  164.095631][   T43] usb 2-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[  164.107171][   T43] usb 2-1: too many endpoints for config 1 interface 0 altsetting 163: 217, using maximum allowed: 30
[  164.120125][   T43] usb 2-1: config 1 interface 0 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  164.133571][   T43] usb 2-1: config 1 interface 0 has no altsetting 0
[  164.144032][   T43] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.40
[  164.153897][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.164163][   T43] usb 2-1: Product: syz
[  164.168426][   T43] usb 2-1: Manufacturer: syz
[  164.173118][   T43] usb 2-1: SerialNumber: syz
[  164.311795][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.364722][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.409989][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.418558][ T5922] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  164.468149][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.579647][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  164.591276][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  164.602807][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  164.640766][ T5922] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  164.650577][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.661932][ T5922] usb 3-1: Product: syz
[  164.667227][ T5922] usb 3-1: Manufacturer: syz
[  164.675099][ T5922] usb 3-1: SerialNumber: syz
[  164.694116][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=6887 comm=syz.3.236
[  164.718110][   T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  164.829655][ T5922] usb 3-1: config 0 descriptor??
[  164.847254][ T6881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  164.927031][   T43] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  164.968514][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.976999][   T43] usb 1-1: Product: syz
[  165.001488][   T43] usb 1-1: Manufacturer: syz
[  165.017087][   T43] usb 1-1: SerialNumber: syz
[  165.059037][   T43] usb 1-1: config 0 descriptor??
[  165.090789][ T5931] usb 2-1: USB disconnect, device number 6
[  165.127310][ T5910] cdc_ncm 5-1:1.0: failed to get mac address
[  165.167822][ T5922] powermate: unknown product id 0240
[  165.173380][ T5922] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  165.206454][ T5922] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13
[  165.554737][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'.
[  165.692810][   T43] Error reading MAC address
[  165.730441][    C1] powermate: config urb returned -71
[  165.735967][    C1] powermate: config urb returned -71
[  165.745659][    C1] powermate: config urb returned -71
[  165.751500][   T43] usb 3-1: USB disconnect, device number 6
[  165.757387][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  166.537244][ T5910] cdc_ncm 5-1:1.0: bind() failure
[  166.565472][ T5910] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  166.580826][ T5910] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  166.617210][ T5910] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  166.649382][ T5910] usb 5-1: USB disconnect, device number 6
[  166.722384][ T6907] FAULT_INJECTION: forcing a failure.
[  166.722384][ T6907] name failslab, interval 1, probability 0, space 0, times 0
[  166.750318][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.1.241 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  166.750345][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  166.750354][ T6907] Call Trace:
[  166.750361][ T6907]  <TASK>
[  166.750380][ T6907]  dump_stack_lvl+0x16c/0x1f0
[  166.750410][ T6907]  should_fail_ex+0x512/0x640
[  166.750435][ T6907]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  166.750454][ T6907]  should_failslab+0xc2/0x120
[  166.750483][ T6907]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  166.750498][ T6907]  ? __lock_acquire+0xb97/0x1ce0
[  166.750522][ T6907]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  166.750548][ T6907]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[  166.750574][ T6907]  idr_get_free+0x528/0xa30
[  166.750603][ T6907]  idr_alloc_u32+0x190/0x2f0
[  166.750626][ T6907]  ? __pfx_idr_alloc_u32+0x10/0x10
[  166.750650][ T6907]  ? __pfx___mutex_lock+0x10/0x10
[  166.750673][ T6907]  ? do_raw_spin_lock+0x12c/0x2b0
[  166.750690][ T6907]  ? find_held_lock+0x2b/0x80
[  166.750717][ T6907]  idr_alloc+0xc0/0x130
[  166.750738][ T6907]  ? __pfx_idr_alloc+0x10/0x10
[  166.750758][ T6907]  ? _raw_spin_unlock+0x28/0x50
[  166.750779][ T6907]  ? objects_lookup+0x181/0x1c0
[  166.750810][ T6907]  drm_gem_flink_ioctl+0x32d/0x400
[  166.750829][ T6907]  ? __pfx_drm_gem_flink_ioctl+0x10/0x10
[  166.750843][ T6907]  ? find_held_lock+0x2b/0x80
[  166.750863][ T6907]  ? drm_dev_exit+0x41/0x60
[  166.750886][ T6907]  drm_ioctl_kernel+0x1f4/0x3e0
[  166.750900][ T6907]  ? __pfx_drm_gem_flink_ioctl+0x10/0x10
[  166.750917][ T6907]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  166.750941][ T6907]  drm_ioctl+0x5c9/0xc30
[  166.750961][ T6907]  ? __pfx_drm_gem_flink_ioctl+0x10/0x10
[  166.750975][ T6907]  ? __pfx_drm_ioctl+0x10/0x10
[  166.751003][ T6907]  ? selinux_file_ioctl+0x180/0x270
[  166.751024][ T6907]  ? selinux_file_ioctl+0xb4/0x270
[  166.751045][ T6907]  ? __pfx_drm_ioctl+0x10/0x10
[  166.751063][ T6907]  __x64_sys_ioctl+0x18b/0x210
[  166.751091][ T6907]  do_syscall_64+0xcd/0x4c0
[  166.751118][ T6907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.751136][ T6907] RIP: 0033:0x7fd722b8eb69
[  166.751152][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.751167][ T6907] RSP: 002b:00007fd723a55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.751185][ T6907] RAX: ffffffffffffffda RBX: 00007fd722db5fa0 RCX: 00007fd722b8eb69
[  166.751196][ T6907] RDX: 0000200000000040 RSI: 00000000c008640a RDI: 0000000000000003
[  166.751206][ T6907] RBP: 00007fd723a55090 R08: 0000000000000000 R09: 0000000000000000
[  166.751220][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.751230][ T6907] R13: 0000000000000000 R14: 00007fd722db5fa0 R15: 00007fffc1571898
[  166.751254][ T6907]  </TASK>
[  167.030280][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.385938][ T6921] FAULT_INJECTION: forcing a failure.
[  167.385938][ T6921] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  167.527937][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.4.243 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  167.527966][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.527988][ T6921] Call Trace:
[  167.527996][ T6921]  <TASK>
[  167.528004][ T6921]  dump_stack_lvl+0x16c/0x1f0
[  167.528036][ T6921]  should_fail_ex+0x512/0x640
[  167.528067][ T6921]  should_fail_alloc_page+0xe7/0x130
[  167.528090][ T6921]  prepare_alloc_pages+0x3c2/0x610
[  167.528114][ T6921]  ? rcu_is_watching+0x12/0xc0
[  167.528139][ T6921]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  167.528162][ T6921]  ? rcu_is_watching+0x12/0xc0
[  167.528183][ T6921]  ? trace_mm_page_alloc+0x11f/0x1a0
[  167.528206][ T6921]  ? __alloc_frozen_pages_noprof+0x294/0x23f0
[  167.528223][ T6921]  ? lockdep_hardirqs_on+0x7c/0x110
[  167.528246][ T6921]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  167.528269][ T6921]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  167.528296][ T6921]  ? alloc_vmap_area+0x645/0x29c0
[  167.528316][ T6921]  ? __vmalloc_node_range_noprof+0x271/0x14b0
[  167.528344][ T6921]  ? sock_map_alloc+0x1f9/0x280
[  167.528370][ T6921]  ? map_create+0x592/0x1f80
[  167.528390][ T6921]  ? __sys_bpf+0x44d2/0x4de0
[  167.528410][ T6921]  ? __x64_sys_bpf+0x78/0xc0
[  167.528431][ T6921]  ? do_syscall_64+0xcd/0x4c0
[  167.528455][ T6921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.528483][ T6921]  alloc_pages_bulk_noprof+0x71c/0x1410
[  167.528501][ T6921]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  167.528523][ T6921]  ? policy_nodemask+0xea/0x4e0
[  167.528546][ T6921]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  167.528565][ T6921]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  167.528596][ T6921]  kasan_populate_vmalloc+0xf1/0x1f0
[  167.528630][ T6921]  alloc_vmap_area+0x959/0x29c0
[  167.528663][ T6921]  ? __pfx_alloc_vmap_area+0x10/0x10
[  167.528692][ T6921]  __get_vm_area_node+0x1ca/0x330
[  167.528720][ T6921]  __vmalloc_node_range_noprof+0x271/0x14b0
[  167.528745][ T6921]  ? sock_map_alloc+0x1f9/0x280
[  167.528782][ T6921]  ? sock_map_alloc+0x1f9/0x280
[  167.528813][ T6921]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  167.528838][ T6921]  ? rcu_is_watching+0x12/0xc0
[  167.528858][ T6921]  ? trace_kmalloc+0x2b/0xd0
[  167.528878][ T6921]  ? __kmalloc_node_noprof+0x23b/0x500
[  167.528900][ T6921]  ? sock_map_alloc+0x1f9/0x280
[  167.528923][ T6921]  __bpf_map_area_alloc+0x12e/0x200
[  167.528947][ T6921]  ? sock_map_alloc+0x1f9/0x280
[  167.528974][ T6921]  sock_map_alloc+0x1f9/0x280
[  167.528999][ T6921]  map_create+0x592/0x1f80
[  167.529025][ T6921]  ? __pfx_avc_has_perm+0x10/0x10
[  167.529053][ T6921]  ? __pfx_map_create+0x10/0x10
[  167.529071][ T6921]  ? __might_fault+0xe3/0x190
[  167.529092][ T6921]  ? __might_fault+0xe3/0x190
[  167.529107][ T6921]  ? __might_fault+0x13b/0x190
[  167.529128][ T6921]  ? selinux_bpf+0xde/0x130
[  167.529158][ T6921]  __sys_bpf+0x44d2/0x4de0
[  167.529183][ T6921]  ? __pfx___sys_bpf+0x10/0x10
[  167.529206][ T6921]  ? ksys_write+0x190/0x250
[  167.529229][ T6921]  ? __mutex_unlock_slowpath+0x163/0x800
[  167.529270][ T6921]  ? fput+0x9b/0xd0
[  167.529292][ T6921]  ? ksys_write+0x1ac/0x250
[  167.529308][ T6921]  ? __pfx_ksys_write+0x10/0x10
[  167.529323][ T6921]  ? xfd_validate_state+0x61/0x180
[  167.529356][ T6921]  __x64_sys_bpf+0x78/0xc0
[  167.529378][ T6921]  ? lockdep_hardirqs_on+0x7c/0x110
[  167.529402][ T6921]  do_syscall_64+0xcd/0x4c0
[  167.529429][ T6921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.529446][ T6921] RIP: 0033:0x7f74bd58eb69
[  167.529461][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.529477][ T6921] RSP: 002b:00007f74be486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.529495][ T6921] RAX: ffffffffffffffda RBX: 00007f74bd7b5fa0 RCX: 00007f74bd58eb69
[  167.529507][ T6921] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000
[  167.529517][ T6921] RBP: 00007f74be486090 R08: 0000000000000000 R09: 0000000000000000
[  167.529527][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  167.529537][ T6921] R13: 0000000000000001 R14: 00007f74bd7b5fa0 R15: 00007fff229abf68
[  167.529561][ T6921]  </TASK>
[  167.938051][    C1] vkms_vblank_simulate: vblank timer overrun
[  168.029219][ T5851] usb 1-1: USB disconnect, device number 4
[  168.408609][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  168.408624][   T30] audit: type=1400 audit(1754192334.204:602): avc:  denied  { create } for  pid=6927 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  168.946093][   T30] audit: type=1400 audit(1754192334.314:603): avc:  denied  { bind } for  pid=6933 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  168.994330][   T30] audit: type=1400 audit(1754192334.334:604): avc:  denied  { create } for  pid=6933 comm="syz.0.248" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  169.177947][   T30] audit: type=1400 audit(1754192334.974:605): avc:  denied  { unlink } for  pid=5850 comm="syz-executor" name="file0" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  169.810019][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  170.058380][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  170.085712][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  170.125208][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  170.594508][ T5917] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  170.628091][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.668259][ T5917] usb 1-1: Product: syz
[  170.678390][ T5917] usb 1-1: Manufacturer: syz
[  170.701470][ T5917] usb 1-1: SerialNumber: syz
[  170.721917][ T5917] usb 1-1: config 0 descriptor??
[  170.727719][ T6948] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  170.735817][ T6959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6959 comm=syz.3.255
[  170.826387][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'.
[  170.835624][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'.
[  170.978087][ T5910] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  171.028782][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  171.127091][ T5917] powermate: unknown product id 0240
[  171.138230][ T5917] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  171.160983][ T5917] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16
[  171.201436][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.231498][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  171.273570][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.307194][ T5910] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  171.326055][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.403606][ T5910] usb 2-1: Product: syz
[  171.428386][ T5910] usb 2-1: Manufacturer: syz
[  171.443071][ T5910] usb 2-1: SerialNumber: syz
[  171.482077][ T5910] usb 2-1: config 0 descriptor??
[  171.487804][ T6957] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  171.537289][ T6962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6962 comm=syz.3.256
[  171.554246][    C0] powermate: config urb returned -71
[  171.560074][    C0] powermate: config urb returned -71
[  171.565825][    C0] powermate: config urb returned -71
[  171.571325][    C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  171.581039][ T2151] usb 1-1: USB disconnect, device number 5
[  171.646070][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.256'.
[  171.655587][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'.
[  172.059238][ T5910] powermate: unknown product id 0240
[  172.071918][ T5910] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  172.111374][ T5910] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  172.217940][   T30] audit: type=1400 audit(1754192338.014:606): avc:  denied  { create } for  pid=6964 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  172.238128][    C1] vkms_vblank_simulate: vblank timer overrun
[  172.333531][   T30] audit: type=1400 audit(1754192338.044:607): avc:  denied  { connect } for  pid=6964 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  172.353071][    C1] vkms_vblank_simulate: vblank timer overrun
[  174.067802][    C0] powermate: config urb returned -71
[  174.073311][    C0] powermate: config urb returned -71
[  174.078741][    C0] powermate: config urb returned -71
[  174.084741][ T5910] usb 2-1: USB disconnect, device number 7
[  174.084777][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  174.261760][   T30] audit: type=1400 audit(1754192340.054:608): avc:  denied  { connect } for  pid=6970 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  174.993829][   T30] audit: type=1400 audit(1754192340.604:609): avc:  denied  { map } for  pid=6990 comm="syz.1.265" path="socket:[12252]" dev="sockfs" ino=12252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  175.061496][   T30] audit: type=1400 audit(1754192340.604:610): avc:  denied  { read } for  pid=6990 comm="syz.1.265" path="socket:[12252]" dev="sockfs" ino=12252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  175.177727][   T30] audit: type=1400 audit(1754192340.954:611): avc:  denied  { read } for  pid=6986 comm="syz.0.263" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  175.238943][   T30] audit: type=1400 audit(1754192340.974:612): avc:  denied  { module_request } for  pid=6987 comm="syz.4.264" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  175.350791][   T30] audit: type=1400 audit(1754192341.134:613): avc:  denied  { read write } for  pid=5854 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.450643][   T30] audit: type=1400 audit(1754192341.134:614): avc:  denied  { open } for  pid=5854 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.605325][   T30] audit: type=1400 audit(1754192341.134:615): avc:  denied  { ioctl } for  pid=5854 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.669418][   T30] audit: type=1400 audit(1754192341.204:616): avc:  denied  { create } for  pid=7001 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  175.758207][   T30] audit: type=1400 audit(1754192341.294:617): avc:  denied  { execmem } for  pid=7001 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  175.933814][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'.
[  175.965101][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7008 comm=syz.4.267
[  175.999126][ T7009] netlink: 'syz.4.267': attribute type 30 has an invalid length.
[  176.044547][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'.
[  176.053889][ T5984] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.064085][ T5984] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.074061][ T7009] netlink: 'syz.4.267': attribute type 30 has an invalid length.
[  176.083590][ T5984] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.110059][ T5984] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.432041][ T5851] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  178.409634][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short
[  178.419408][ T5851] usb 4-1: not running at top speed; connect to a high speed hub
[  178.466211][ T5851] usb 4-1: config 3 has an invalid interface number: 106 but max is 0
[  178.557930][ T5851] usb 4-1: config 3 has no interface number 0
[  178.648739][ T5851] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  178.666754][ T7034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7034 comm=syz.4.275
[  178.871083][ T5851] usb 4-1: config 3 interface 106 has no altsetting 0
[  178.918162][ T5851] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  178.951179][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.275'.
[  178.960414][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'.
[  179.134217][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.153320][ T5851] usb 4-1: Product: О
[  179.157408][ T5851] usb 4-1: Manufacturer: ㄋ닞蘂擓囬�ꩴ藨⃽修梌ᚗѵញ�꺺냷響�뚈ᵖ�䑳�炸��翛潠벇햂狹Ὰ㉕닒쟾ꎪ怭�鉡캗�嶋婚�絵�ᶟ࿈�䦤髅�䩊ဓ䠚셈彚锴��䡊₧呩詬ှ㋭ɕ㓥䇪╜梅⺼
[  179.219095][ T5851] usb 4-1: SerialNumber:  
[  179.435987][ T7026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  179.643447][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  179.643463][   T30] audit: type=1400 audit(1754192345.444:677): avc:  denied  { read } for  pid=7043 comm="syz.1.278" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.711575][   T30] audit: type=1400 audit(1754192345.444:678): avc:  denied  { open } for  pid=7043 comm="syz.1.278" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  179.792133][ T5851] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected
[  179.824318][ T5851] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  179.855955][ T5851] usb 4-1: USB disconnect, device number 6
[  179.909426][ T5851] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  179.954344][ T5851] kobil_sct 4-1:3.106: device disconnected
[  180.060220][   T30] audit: type=1400 audit(1754192345.854:679): avc:  denied  { read } for  pid=7048 comm="syz.4.279" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  180.089333][   T30] audit: type=1400 audit(1754192345.894:680): avc:  denied  { open } for  pid=7048 comm="syz.4.279" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  180.237286][   T30] audit: type=1400 audit(1754192346.034:681): avc:  denied  { write } for  pid=7052 comm="syz.2.280" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  180.261778][ T7054] fuse: Unknown parameter 'user'
[  180.282216][   T30] audit: type=1400 audit(1754192346.074:682): avc:  denied  { open } for  pid=7052 comm="syz.2.280" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  180.376948][ T7057] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  180.651429][ T7061] =======================================================
[  180.651429][ T7061] WARNING: The mand mount option has been deprecated and
[  180.651429][ T7061]          and is ignored by this kernel. Remove the mand
[  180.651429][ T7061]          option from the mount to silence this warning.
[  180.651429][ T7061] =======================================================
[  180.726505][   T30] audit: type=1400 audit(1754192346.074:683): avc:  denied  { mounton } for  pid=7052 comm="syz.2.280" path="/54/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  180.757969][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.031381][   T30] audit: type=1400 audit(1754192346.074:684): avc:  denied  { execute } for  pid=7052 comm="syz.2.280" name="file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  181.105499][ T5851] usb 5-1: config 0 has an invalid interface number: 115 but max is 0
[  181.115556][ T5851] usb 5-1: config 0 has no interface number 0
[  181.133212][ T5851] usb 5-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30
[  181.144823][   T30] audit: type=1400 audit(1754192346.454:685): avc:  denied  { mounton } for  pid=7055 comm="syz.0.282" path="/52/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  181.528888][ T7079] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  181.555358][ T7079] CIFS: Unable to determine destination address
[  181.696148][ T5851] usb 5-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  181.709663][ T5851] usb 5-1: config 0 interface 115 has no altsetting 0
[  181.716470][ T5851] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.725612][   T30] audit: type=1400 audit(1754192346.584:686): avc:  denied  { remount } for  pid=7055 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  181.805315][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.832810][ T5851] usb 5-1: config 0 descriptor??
[  181.880856][ T5851] cp210x 5-1:0.115: cp210x converter detected
[  182.314703][ T5851] cp210x 5-1:0.115: failed to get vendor val 0x000e size 3: -71
[  182.353935][ T5851] usb 5-1: cp210x converter now attached to ttyUSB0
[  182.367825][ T5851] usb 5-1: USB disconnect, device number 7
[  182.381110][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  182.381590][ T5851] cp210x 5-1:0.115: device disconnected
[  183.091420][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.289'.
[  183.100989][ T7096] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  183.120830][ T7095] syz.4.289 (7095) used greatest stack depth: 19752 bytes left
[  183.722884][ T7108] Invalid source name
[  183.726947][ T7108] UBIFS error (pid: 7108): cannot open "./file0", error -22
[  183.740478][ T7108] binder: 7103:7108 ioctl 40046210 0 returned -14
[  183.759906][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'.
[  184.248013][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'.
[  184.257289][ T7111] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  184.384548][ T7114] fuse: Unknown parameter 'user'
[  184.413025][ T7108] team0: Port device team_slave_1 removed
[  184.468363][ T7116] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  184.760389][ T7109] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  184.773792][ T7109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  184.783522][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  184.783540][   T30] audit: type=1400 audit(1754192350.584:714): avc:  denied  { unlink } for  pid=5841 comm="syz-executor" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  184.980753][   T30] audit: type=1400 audit(1754192350.784:715): avc:  denied  { set_context_mgr } for  pid=7117 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  185.472341][ T7109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.499478][   T30] audit: type=1400 audit(1754192350.884:716): avc:  denied  { mount } for  pid=7115 comm="syz.0.295" name="/" dev="overlay" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  185.558739][   T30] audit: type=1400 audit(1754192350.904:717): avc:  denied  { write } for  pid=7115 comm="syz.0.295" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  185.581877][   T30] audit: type=1400 audit(1754192351.264:718): avc:  denied  { firmware_load } for  pid=7101 comm="syz.3.292" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  185.583358][ T7128] FAULT_INJECTION: forcing a failure.
[  185.583358][ T7128] name failslab, interval 1, probability 0, space 0, times 0
[  185.615410][ T7128] CPU: 0 UID: 0 PID: 7128 Comm: syz.1.298 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  185.615435][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  185.615445][ T7128] Call Trace:
[  185.615451][ T7128]  <TASK>
[  185.615456][ T7128]  dump_stack_lvl+0x16c/0x1f0
[  185.615489][ T7128]  should_fail_ex+0x512/0x640
[  185.615508][   T30] audit: type=1400 audit(1754192351.294:719): avc:  denied  { map } for  pid=7117 comm="syz.4.296" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  185.615515][ T7128]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  185.615548][ T7128]  should_failslab+0xc2/0x120
[  185.615566][ T7128]  __kmalloc_cache_noprof+0x6a/0x3e0
[  185.615587][ T7128]  ? find_held_lock+0x2b/0x80
[  185.615607][ T7128]  ? alloc_pipe_info+0x10e/0x590
[  185.615630][ T7128]  alloc_pipe_info+0x10e/0x590
[  185.615663][ T7128]  splice_direct_to_actor+0x77d/0xa30
[  185.615682][ T7128]  ? __lock_acquire+0x62e/0x1ce0
[  185.615704][ T7128]  ? __pfx_direct_splice_actor+0x10/0x10
[  185.615722][ T7128]  ? find_held_lock+0x2b/0x80
[  185.615740][ T7128]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  185.615755][ T7128]  ? get_pid_task+0xfc/0x250
[  185.615776][ T7128]  do_splice_direct+0x174/0x240
[  185.615792][ T7128]  ? __pfx_do_splice_direct+0x10/0x10
[  185.615809][ T7128]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  185.615826][ T7128]  ? bpf_lsm_file_permission+0x9/0x10
[  185.615847][ T7128]  ? security_file_permission+0x71/0x210
[  185.615869][ T7128]  ? rw_verify_area+0xcf/0x6c0
[  185.615894][ T7128]  do_sendfile+0xb06/0xe50
[  185.615913][ T7128]  ? __pfx_do_sendfile+0x10/0x10
[  185.615928][ T7128]  ? __fget_files+0x20e/0x3c0
[  185.615952][ T7128]  __x64_sys_sendfile64+0x1d8/0x220
[  185.615970][ T7128]  ? ksys_write+0x1ac/0x250
[  185.615985][ T7128]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  185.616011][ T7128]  do_syscall_64+0xcd/0x4c0
[  185.616036][ T7128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.616052][ T7128] RIP: 0033:0x7fd722b8eb69
[  185.616065][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.616079][ T7128] RSP: 002b:00007fd723a34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  185.616095][ T7128] RAX: ffffffffffffffda RBX: 00007fd722db6080 RCX: 00007fd722b8eb69
[  185.616105][ T7128] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  185.616114][ T7128] RBP: 00007fd723a34090 R08: 0000000000000000 R09: 0000000000000000
[  185.616123][ T7128] R10: 0000000000800007 R11: 0000000000000246 R12: 0000000000000001
[  185.616132][ T7128] R13: 0000000000000000 R14: 00007fd722db6080 R15: 00007fffc1571898
[  185.616154][ T7128]  </TASK>
[  185.957757][ T7129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7129 comm=syz.2.297
[  186.023126][ T7119] binder: 7117:7119 ioctl c0306201 0 returned -14
[  186.178887][   T30] audit: type=1400 audit(1754192351.394:720): avc:  denied  { write } for  pid=7124 comm="syz.1.298" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  186.381240][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'.
[  186.410640][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[  186.623680][   T30] audit: type=1400 audit(1754192351.394:721): avc:  denied  { open } for  pid=7124 comm="syz.1.298" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  186.762537][   T30] audit: type=1400 audit(1754192351.394:722): avc:  denied  { write } for  pid=7124 comm="syz.1.298" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  186.795266][   T30] audit: type=1400 audit(1754192351.744:723): avc:  denied  { unmount } for  pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  186.814842][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.313479][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.388959][ T7173] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  188.402353][ T5910] IPVS: starting estimator thread 0...
[  188.509872][ T7174] IPVS: using max 73 ests per chain, 175200 per kthread
[  189.093858][ T5851] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  189.358090][ T5851] usb 1-1: Using ep0 maxpacket: 32
[  189.403523][ T5851] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  189.429129][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.447356][ T5851] usb 1-1: Product: syz
[  189.461542][ T5851] usb 1-1: Manufacturer: syz
[  189.466651][ T7186] FAULT_INJECTION: forcing a failure.
[  189.466651][ T7186] name failslab, interval 1, probability 0, space 0, times 0
[  189.479463][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.2.314 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  189.479481][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.479488][ T7186] Call Trace:
[  189.479492][ T7186]  <TASK>
[  189.479497][ T7186]  dump_stack_lvl+0x16c/0x1f0
[  189.479519][ T7186]  should_fail_ex+0x512/0x640
[  189.479537][ T7186]  ? __kmalloc_noprof+0xbf/0x510
[  189.479550][ T7186]  ? iter_file_splice_write+0x1cc/0x1150
[  189.479563][ T7186]  should_failslab+0xc2/0x120
[  189.479575][ T7186]  __kmalloc_noprof+0xd2/0x510
[  189.479589][ T7186]  iter_file_splice_write+0x1cc/0x1150
[  189.479604][ T7186]  ? kfree+0x2b4/0x4d0
[  189.479619][ T7186]  ? copy_splice_read+0x897/0xba0
[  189.479633][ T7186]  ? __pfx_iter_file_splice_write+0x10/0x10
[  189.479645][ T7186]  ? __lock_acquire+0xb97/0x1ce0
[  189.479665][ T7186]  ? __pfx_copy_splice_read+0x10/0x10
[  189.479682][ T7186]  ? __pfx_iter_file_splice_write+0x10/0x10
[  189.479695][ T7186]  direct_splice_actor+0x192/0x6c0
[  189.479708][ T7186]  splice_direct_to_actor+0x342/0xa30
[  189.479720][ T7186]  ? __pfx_direct_splice_actor+0x10/0x10
[  189.479734][ T7186]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  189.479744][ T7186]  ? get_pid_task+0xfc/0x250
[  189.479758][ T7186]  do_splice_direct+0x174/0x240
[  189.479769][ T7186]  ? __pfx_do_splice_direct+0x10/0x10
[  189.479780][ T7186]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  189.479793][ T7186]  ? rw_verify_area+0xcf/0x6c0
[  189.479812][ T7186]  do_sendfile+0xb06/0xe50
[  189.479824][ T7186]  ? __pfx_do_sendfile+0x10/0x10
[  189.479839][ T7186]  __x64_sys_sendfile64+0x154/0x220
[  189.479854][ T7186]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  189.479872][ T7186]  do_syscall_64+0xcd/0x4c0
[  189.479890][ T7186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.479902][ T7186] RIP: 0033:0x7fbf9b78eb69
[  189.479913][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.479924][ T7186] RSP: 002b:00007fbf9c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  189.479934][ T7186] RAX: ffffffffffffffda RBX: 00007fbf9b9b5fa0 RCX: 00007fbf9b78eb69
[  189.479941][ T7186] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004
[  189.479948][ T7186] RBP: 00007fbf9c6db090 R08: 0000000000000000 R09: 0000000000000000
[  189.479954][ T7186] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000002
[  189.479960][ T7186] R13: 0000000000000000 R14: 00007fbf9b9b5fa0 R15: 00007fff800cfd98
[  189.479973][ T7186]  </TASK>
[  189.853962][ T5851] usb 1-1: SerialNumber: syz
[  190.266438][ T5851] usb 1-1: config 0 descriptor??
[  190.356036][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  190.356093][   T30] audit: type=1400 audit(1754192356.154:749): avc:  denied  { read write } for  pid=7193 comm="syz.2.317" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.636053][   T30] audit: type=1400 audit(1754192356.184:750): avc:  denied  { open } for  pid=7193 comm="syz.2.317" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.663421][ T5851] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  190.986373][   T30] audit: type=1400 audit(1754192356.774:751): avc:  denied  { create } for  pid=7199 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  191.058094][   T30] audit: type=1400 audit(1754192356.814:752): avc:  denied  { connect } for  pid=7199 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  191.328028][   T30] audit: type=1400 audit(1754192356.814:753): avc:  denied  { write } for  pid=7199 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  191.396761][ T5851] gspca_ov534_9: reg_w failed -71
[  191.484176][ T7208] binder: 7206:7208 ioctl c0306201 200000000540 returned -22
[  191.515900][   T30] audit: type=1400 audit(1754192357.304:754): avc:  denied  { setopt } for  pid=7206 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  191.550395][ T7211] binder: 7210:7211 ioctl c0306201 0 returned -14
[  191.592372][   T30] audit: type=1400 audit(1754192357.304:755): avc:  denied  { append } for  pid=7206 comm="syz.2.319" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  191.687974][ T5851] gspca_ov534_9: Unknown sensor 0000
[  191.688034][ T5851] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  191.739862][ T5851] usb 1-1: USB disconnect, device number 6
[  191.888267][   T30] audit: type=1400 audit(1754192357.684:756): avc:  denied  { write } for  pid=7212 comm="syz.3.321" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  191.891646][ T7214] binder: 7212:7214 ioctl c080aebe 200000000a00 returned -22
[  192.012669][   T30] audit: type=1400 audit(1754192357.694:757): avc:  denied  { call } for  pid=7212 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  192.067324][   T30] audit: type=1400 audit(1754192357.864:758): avc:  denied  { setopt } for  pid=7222 comm="syz.1.324" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  192.414468][ T7227] ip6erspan0: entered promiscuous mode
[  192.807891][ T7228] fuse: Bad value for 'group_id'
[  192.812988][ T7228] fuse: Bad value for 'group_id'
[  194.281221][ T7239] can0: slcan on ptm0.
[  194.519708][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  194.688268][ T5910] usb 2-1: device descriptor read/64, error -71
[  194.948017][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  195.098108][ T5910] usb 2-1: device descriptor read/64, error -71
[  195.209082][ T5910] usb usb2-port1: attempt power cycle
[  195.617992][ T5910] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  195.658837][ T5910] usb 2-1: device descriptor read/8, error -71
[  195.785121][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  195.785182][   T30] audit: type=1400 audit(1754192361.584:777): avc:  denied  { map } for  pid=7265 comm="syz.3.330" path="socket:[15302]" dev="sockfs" ino=15302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  196.169230][ T5910] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  196.199256][   T30] audit: type=1400 audit(1754192361.614:778): avc:  denied  { read } for  pid=7265 comm="syz.3.330" path="socket:[15302]" dev="sockfs" ino=15302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  196.428569][ T5910] usb 2-1: device descriptor read/8, error -71
[  196.440154][ T7270] binder: 7269:7270 ioctl c0306201 0 returned -14
[  196.458303][   T30] audit: type=1400 audit(1754192362.254:779): avc:  denied  { write } for  pid=7265 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  196.540379][ T5910] usb usb2-port1: unable to enumerate USB device
[  196.613402][   T30] audit: type=1400 audit(1754192362.414:780): avc:  denied  { create } for  pid=7275 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  196.649568][ T7278] mmap: syz.3.333 (7278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  196.664195][   T30] audit: type=1400 audit(1754192362.444:781): avc:  denied  { connect } for  pid=7271 comm="syz.3.333" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  196.757779][   T30] audit: type=1400 audit(1754192362.494:782): avc:  denied  { create } for  pid=7275 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  196.791333][ T7239] can0 (unregistered): slcan off ptm0.
[  196.871390][   T30] audit: type=1400 audit(1754192362.584:783): avc:  denied  { open } for  pid=7271 comm="syz.3.333" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  196.871433][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  196.917995][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  197.164997][   T30] audit: type=1400 audit(1754192362.604:784): avc:  denied  { ioctl } for  pid=7271 comm="syz.3.333" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  197.210718][ T6890] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  198.137307][ T5931] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  198.290694][ T6890] usb 4-1: device descriptor read/64, error -71
[  198.327741][ T5922] IPVS: starting estimator thread 0...
[  198.333657][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  198.359491][ T5931] usb 1-1: config 0 has an invalid interface number: 136 but max is 0
[  198.367973][   T30] audit: type=1400 audit(1754192364.164:785): avc:  denied  { write } for  pid=7273 comm="syz.2.332" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  198.405836][ T5931] usb 1-1: config 0 has no interface number 0
[  198.518032][ T7294] IPVS: using max 73 ests per chain, 175200 per kthread
[  198.557938][ T6890] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  198.767993][ T5931] usb 1-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  198.792612][   T30] audit: type=1400 audit(1754192364.594:786): avc:  denied  { wake_alarm } for  pid=7296 comm="syz.4.338" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  198.796639][ T5931] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  198.825503][ T5931] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  198.840742][ T5931] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  198.880104][ T5931] usb 1-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  198.888101][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  198.903483][ T5931] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0
[  198.914264][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.923468][ T6890] usb 4-1: device descriptor read/64, error -71
[  198.968717][ T5931] usb 1-1: config 0 descriptor??
[  198.991609][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  199.063059][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.073644][ T5910] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  199.104288][ T5910] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  199.134730][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.173955][ T6890] usb usb4-port1: attempt power cycle
[  199.208998][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  199.211336][ T5910] usb 3-1: config 0 descriptor??
[  199.770088][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.816184][ T5922] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  199.845696][ T5910] usb 3-1: can't set config #0, error -71
[  199.853046][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.880635][ T5910] usb 3-1: USB disconnect, device number 7
[  199.946901][ T5931] snd-usb-audio 1-1:0.136: probe with driver snd-usb-audio failed with error -2
[  199.965177][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  199.985798][ T5931] usb 1-1: USB disconnect, device number 7
[  199.995176][ T5922] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  200.010547][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.018814][ T5922] usb 5-1: Product: syz
[  200.023077][ T5922] usb 5-1: Manufacturer: syz
[  200.028581][ T5922] usb 5-1: SerialNumber: syz
[  200.041768][ T5922] usb 5-1: config 0 descriptor??
[  200.051172][ T5922] usb 5-1: Found UVC 34.00 device syz (8086:0b5b)
[  200.057666][ T5922] usb 5-1: No valid video chain found.
[  200.459595][ T2151] usb 5-1: USB disconnect, device number 8
[  202.998111][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  203.270343][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short
[  203.318986][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  203.319002][   T30] audit: type=1400 audit(1754192369.124:788): avc:  denied  { ioctl } for  pid=7340 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  203.351112][ T5851] usb 5-1: config 176 has an invalid interface number: 218 but max is 0
[  203.395738][ T5851] usb 5-1: config 176 has no interface number 0
[  203.413959][ T5851] usb 5-1: config 176 interface 218 has no altsetting 0
[  203.433798][   T30] audit: type=1400 audit(1754192369.214:789): avc:  denied  { search } for  pid=7349 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  203.459502][ T5851] usb 5-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00
[  203.480298][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.501878][   T30] audit: type=1400 audit(1754192369.214:790): avc:  denied  { read } for  pid=7349 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  203.526100][ T2151] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  203.545868][ T5851] usb 5-1: Product: syz
[  203.556287][ T5851] usb 5-1: Manufacturer: syz
[  203.566160][ T5851] usb 5-1: SerialNumber: syz
[  203.594063][   T30] audit: type=1400 audit(1754192369.214:791): avc:  denied  { open } for  pid=7349 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  203.627985][   T30] audit: type=1400 audit(1754192369.214:792): avc:  denied  { getattr } for  pid=7349 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  203.694341][   T30] audit: type=1400 audit(1754192369.494:793): avc:  denied  { read write } for  pid=5850 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  203.738605][ T2151] usb 2-1: unable to get BOS descriptor or descriptor too short
[  203.754577][ T2151] usb 2-1: config 176 has an invalid interface number: 142 but max is 0
[  203.768268][ T2151] usb 2-1: config 176 has no interface number 0
[  203.793600][ T2151] usb 2-1: config 176 interface 142 has no altsetting 0
[  203.818018][   T30] audit: type=1400 audit(1754192369.494:794): avc:  denied  { open } for  pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  203.860795][ T2151] usb 2-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=9e.3c
[  203.890442][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.921742][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'.
[  203.929977][ T7362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.346'.
[  203.939514][ T2151] usb 2-1: Product: syz
[  203.944236][   T30] audit: type=1400 audit(1754192369.494:795): avc:  denied  { ioctl } for  pid=5850 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  203.972315][ T2151] usb 2-1: Manufacturer: syz
[  203.986271][ T2151] usb 2-1: SerialNumber: syz
[  204.045077][   T30] audit: type=1400 audit(1754192369.624:796): avc:  denied  { getattr } for  pid=7342 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  204.100655][   T30] audit: type=1400 audit(1754192369.624:797): avc:  denied  { add_name } for  pid=7342 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  204.598221][ T2151] usb 2-1: Found UVC 0.00 device syz (046d:087c)
[  204.629220][ T2151] usb 2-1: No valid video chain found.
[  204.665100][ T2151] usb 2-1: USB disconnect, device number 12
[  205.856735][ T5851] ipheth 5-1:176.218: Unable to find alternate settings interface
[  205.892458][ T5851] usb 5-1: USB disconnect, device number 9
[  206.738145][ T5851] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  206.897944][ T5851] usb 2-1: Using ep0 maxpacket: 8
[  206.899177][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 250, changing to 11
[  206.901899][ T5851] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40
[  206.901916][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.901929][ T5851] usb 2-1: Product: syz
[  206.901937][ T5851] usb 2-1: Manufacturer: syz
[  206.901946][ T5851] usb 2-1: SerialNumber: syz
[  207.454140][ T5851] usbhid 2-1:1.0: can't add hid device: -71
[  207.460535][ T5851] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  207.500913][ T5851] usb 2-1: USB disconnect, device number 13
[  207.565678][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'.
[  208.365170][   T30] kauditd_printk_skb: 70 callbacks suppressed
[  208.365203][   T30] audit: type=1400 audit(1754192374.144:868): avc:  denied  { write } for  pid=7434 comm="syz.0.361" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  208.647460][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.676880][ T7438] tmpfs: Group quota inode hardlimit too large.
[  208.683456][   T30] audit: type=1400 audit(1754192374.474:869): avc:  denied  { name_bind } for  pid=7437 comm="syz.1.362" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  208.683503][   T30] audit: type=1400 audit(1754192374.474:870): avc:  denied  { node_bind } for  pid=7437 comm="syz.1.362" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  209.142504][ T7449] netlink: 'syz.0.366': attribute type 11 has an invalid length.
[  209.205644][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  209.246930][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  209.253058][ T5847] Bluetooth: hci4: command 0x0405 tx timeout
[  209.256515][ T5855] Bluetooth: hci3: command 0x0406 tx timeout
[  209.311160][ T6017] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  209.547936][ T6017] usb 2-1: Using ep0 maxpacket: 16
[  209.573030][   T30] audit: type=1400 audit(1754192375.374:871): avc:  denied  { create } for  pid=7453 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.609900][ T6017] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  209.687455][ T6017] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  209.709253][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.728257][   T30] audit: type=1400 audit(1754192375.394:872): avc:  denied  { connect } for  pid=7453 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.765656][ T6017] usb 2-1: Product: syz
[  209.786037][ T6017] usb 2-1: Manufacturer: syz
[  209.790827][   T30] audit: type=1400 audit(1754192375.394:873): avc:  denied  { ioctl } for  pid=7453 comm="syz.3.367" path="socket:[18740]" dev="sockfs" ino=18740 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.790874][   T30] audit: type=1400 audit(1754192375.534:874): avc:  denied  { read } for  pid=7456 comm="syz.3.368" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  209.790914][   T30] audit: type=1400 audit(1754192375.534:875): avc:  denied  { open } for  pid=7456 comm="syz.3.368" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  209.790952][   T30] audit: type=1400 audit(1754192375.534:876): avc:  denied  { create } for  pid=7456 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  210.006533][   T30] audit: type=1400 audit(1754192375.754:877): avc:  denied  { watch } for  pid=7456 comm="syz.3.368" path="/75/bus/file1" dev="overlay" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  210.112113][ T6017] usb 2-1: SerialNumber: syz
[  210.141637][ T6017] usb 2-1: config 0 descriptor??
[  210.155310][ T6017] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  210.165513][ T6017] usb 2-1: Detected FT232R
[  210.783515][ T6017] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  211.151907][ T5922] usb 2-1: USB disconnect, device number 14
[  211.167558][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  211.178109][ T5922] ftdi_sio 2-1:0.0: device disconnected
[  211.338308][ T6017] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  211.855883][ T6017] usb 5-1: device descriptor read/64, error -71
[  212.538276][ T6017] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  212.700074][ T6017] usb 5-1: device descriptor read/64, error -71
[  212.877961][ T6017] usb usb5-port1: attempt power cycle
[  213.041780][ T7495] tmpfs: Bad value for 'mpol'
[  213.472183][ T7491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7491 comm=syz.1.378
[  213.536277][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  213.536295][   T30] audit: type=1400 audit(1754192379.264:886): avc:  denied  { read } for  pid=7482 comm="syz.3.376" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  213.706053][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'.
[  213.715474][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  213.738569][ T6017] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  213.953626][   T30] audit: type=1400 audit(1754192379.484:887): avc:  denied  { ioctl } for  pid=7490 comm="syz.1.378" path="socket:[18174]" dev="sockfs" ino=18174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  213.990386][ T6017] usb 5-1: device descriptor read/8, error -71
[  214.135368][   T30] audit: type=1400 audit(1754192379.664:888): avc:  denied  { open } for  pid=7482 comm="syz.3.376" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  214.237239][ T7505] batadv_slave_1: entered promiscuous mode
[  214.311528][   T30] audit: type=1400 audit(1754192379.744:889): avc:  denied  { ioctl } for  pid=7482 comm="syz.3.376" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  214.474644][   T30] audit: type=1400 audit(1754192380.034:890): avc:  denied  { setopt } for  pid=7504 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  214.510025][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'.
[  214.575306][   T30] audit: type=1400 audit(1754192380.194:891): avc:  denied  { create } for  pid=7508 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  214.634935][ T7513] fuse: Unknown parameter 'user'
[  214.765288][ T7514] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  214.921993][ T7511] team0: Port device team_slave_1 removed
[  214.978075][ T6017] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  215.006347][   T30] audit: type=1400 audit(1754192380.194:892): avc:  denied  { write } for  pid=7508 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  215.037818][ T6017] usb 5-1: Using ep0 maxpacket: 32
[  215.047320][ T6017] usb 5-1: config 0 has an invalid interface number: 111 but max is 1
[  215.080003][ T6017] usb 5-1: config 0 has no interface number 1
[  215.097965][   T30] audit: type=1400 audit(1754192380.224:893): avc:  denied  { name_bind } for  pid=7508 comm="syz.1.381" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  215.133600][ T6017] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  215.173350][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.181469][ T6017] usb 5-1: Product: syz
[  215.185752][   T30] audit: type=1400 audit(1754192380.434:894): avc:  denied  { mounton } for  pid=7512 comm="syz.3.383" path="/78/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  215.208342][ T6017] usb 5-1: Manufacturer: syz
[  215.212945][ T6017] usb 5-1: SerialNumber: syz
[  215.222200][ T6017] usb 5-1: config 0 descriptor??
[  215.233486][   T30] audit: type=1400 audit(1754192380.554:895): avc:  denied  { read write } for  pid=7512 comm="syz.3.383" name="video5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  215.842861][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7530 comm=syz.1.388
[  215.985579][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.388'.
[  215.995211][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[  216.387978][ T6017] snd-usb-6fire 5-1:0.111: unable to receive device firmware state.
[  216.396106][ T6017] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -110
[  216.645431][ T7538] overlayfs: conflicting lowerdir path
[  216.684656][ T7538] netlink: 19 bytes leftover after parsing attributes in process `syz.2.389'.
[  216.709187][ T7504] batadv_slave_1: left promiscuous mode
[  216.718005][ T5922] usb 5-1: USB disconnect, device number 13
[  216.862529][ T7542] capability: warning: `syz.0.392' uses 32-bit capabilities (legacy support in use)
[  217.337950][ T6017] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  217.578375][ T6017] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  217.597770][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.812086][ T6017] usb 1-1: config 0 descriptor??
[  217.841087][ T6017] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  218.396258][ T7560] binder: 7558:7560 ioctl 4018620d 0 returned -22
[  219.389769][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  219.389782][   T30] audit: type=1400 audit(1754192385.194:916): avc:  denied  { remount } for  pid=7573 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  219.460487][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.018610][ T5849] Bluetooth: hci4: command 0x0405 tx timeout
[  221.421901][ T6017] usb 1-1: USB disconnect, device number 8
[  221.521271][ T7590] netlink: 9 bytes leftover after parsing attributes in process `syz.2.405'.
[  221.561407][ T7590] gretap0: entered promiscuous mode
[  221.596302][ T7590] netlink: 5 bytes leftover after parsing attributes in process `syz.2.405'.
[  221.648885][ T7590] 0ªî{X¹¦: renamed from gretap0
[  221.699003][ T7590] 0ªî{X¹¦: left promiscuous mode
[  221.704089][ T7590] 0ªî{X¹¦: entered allmulticast mode
[  221.711957][ T7590] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  221.761663][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'.
[  222.048162][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'.
[  222.372381][   T30] audit: type=1400 audit(1754192388.174:917): avc:  denied  { create } for  pid=7600 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  222.413501][   T30] audit: type=1400 audit(1754192388.174:918): avc:  denied  { create } for  pid=7600 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  222.511833][   T30] audit: type=1400 audit(1754192388.304:919): avc:  denied  { read write } for  pid=7608 comm="syz.0.411" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  222.697740][   T30] audit: type=1400 audit(1754192388.304:920): avc:  denied  { open } for  pid=7608 comm="syz.0.411" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  223.453663][ T7622] random: crng reseeded on system resumption
[  223.527928][ T7625] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.414'.
[  223.529272][   T30] audit: type=1400 audit(1754192388.304:921): avc:  denied  { ioctl } for  pid=7608 comm="syz.0.411" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  223.529321][   T30] audit: type=1400 audit(1754192388.364:922): avc:  denied  { create } for  pid=7608 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  223.529362][   T30] audit: type=1400 audit(1754192388.374:923): avc:  denied  { connect } for  pid=7608 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  223.529397][   T30] audit: type=1400 audit(1754192388.384:924): avc:  denied  { read } for  pid=7608 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  223.529430][   T30] audit: type=1400 audit(1754192388.874:925): avc:  denied  { create } for  pid=7613 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  224.328919][ T6890] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  224.478350][ T6890] usb 1-1: Using ep0 maxpacket: 8
[  224.525523][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  224.914091][   T30] audit: type=1400 audit(1754192390.304:932): avc:  denied  { read write } for  pid=7633 comm="syz.4.416" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  224.940343][   T30] audit: type=1400 audit(1754192390.304:933): avc:  denied  { open } for  pid=7633 comm="syz.4.416" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  224.946278][ T6890] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  224.965292][   T30] audit: type=1400 audit(1754192390.314:934): avc:  denied  { ioctl } for  pid=7633 comm="syz.4.416" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  225.068324][ T6890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.182664][ T6890] usb 1-1: Product: syz
[  225.196352][ T6890] usb 1-1: Manufacturer: syz
[  225.215380][ T6890] usb 1-1: SerialNumber: syz
[  225.245275][ T6890] usb 1-1: config 0 descriptor??
[  225.529318][ T6890] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  225.617260][   T30] audit: type=1400 audit(1754192391.414:935): avc:  denied  { create } for  pid=7643 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  225.665078][   T30] audit: type=1400 audit(1754192391.464:936): avc:  denied  { setopt } for  pid=7643 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  225.693277][   T30] audit: type=1400 audit(1754192391.494:937): avc:  denied  { bind } for  pid=7643 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  225.916344][   T30] audit: type=1400 audit(1754192391.674:938): avc:  denied  { read } for  pid=7643 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  225.946804][   T30] audit: type=1400 audit(1754192391.744:939): avc:  denied  { set_context_mgr } for  pid=7647 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  225.969594][   T30] audit: type=1400 audit(1754192391.754:940): avc:  denied  { map } for  pid=7647 comm="syz.2.420" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  226.072717][ T7648] binder: 7647:7648 ioctl c0306201 0 returned -14
[  226.276749][   T30] audit: type=1400 audit(1754192392.074:941): avc:  denied  { bind } for  pid=7654 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  227.969352][ T7667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7667 comm=syz.2.426
[  228.001571][ T6890] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  228.058378][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.426'.
[  228.067315][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[  228.273392][ T6890] usb 1-1: USB disconnect, device number 9
[  229.043188][ T7684] Invalid source name
[  229.047257][ T7684] UBIFS error (pid: 7684): cannot open "./file0", error -22
[  229.051085][ T7684] binder: 7678:7684 ioctl 40046210 0 returned -14
[  229.066711][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'.
[  229.412485][ T7688] FAULT_INJECTION: forcing a failure.
[  229.412485][ T7688] name failslab, interval 1, probability 0, space 0, times 0
[  229.425298][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.1.432 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  229.425323][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  229.425334][ T7688] Call Trace:
[  229.425342][ T7688]  <TASK>
[  229.425348][ T7688]  dump_stack_lvl+0x16c/0x1f0
[  229.425386][ T7688]  should_fail_ex+0x512/0x640
[  229.425421][ T7688]  should_failslab+0xc2/0x120
[  229.425445][ T7688]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  229.425465][ T7688]  ? __alloc_skb+0x2b2/0x380
[  229.425496][ T7688]  __alloc_skb+0x2b2/0x380
[  229.425519][ T7688]  ? __pfx___alloc_skb+0x10/0x10
[  229.425543][ T7688]  ? lock_acquire+0x179/0x350
[  229.425573][ T7688]  ? find_held_lock+0x2b/0x80
[  229.425597][ T7688]  fdb_notify+0xa4/0x1a0
[  229.425624][ T7688]  fdb_delete+0x6f9/0x1230
[  229.425653][ T7688]  br_fdb_flush+0x2cc/0x530
[  229.425680][ T7688]  br_fdb_delete_bulk+0x667/0xd00
[  229.425705][ T7688]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[  229.425748][ T7688]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[  229.425774][ T7688]  ? rtnl_fdb_del+0x4b7/0xc50
[  229.425803][ T7688]  ? __pfx_br_fdb_delete_bulk+0x10/0x10
[  229.425825][ T7688]  rtnl_fdb_del+0x7bc/0xc50
[  229.425855][ T7688]  ? __pfx_rtnl_fdb_del+0x10/0x10
[  229.425901][ T7688]  ? __pfx_rtnl_fdb_del+0x10/0x10
[  229.425928][ T7688]  rtnetlink_rcv_msg+0x3c9/0xe90
[  229.425956][ T7688]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  229.425980][ T7688]  ? __lock_acquire+0xb97/0x1ce0
[  229.426019][ T7688]  netlink_rcv_skb+0x158/0x420
[  229.426047][ T7688]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  229.426080][ T7688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.426104][ T7688]  ? rcu_is_watching+0x12/0xc0
[  229.426145][ T7688]  netlink_unicast+0x5a7/0x870
[  229.426175][ T7688]  ? __pfx_netlink_unicast+0x10/0x10
[  229.426212][ T7688]  netlink_sendmsg+0x8d1/0xdd0
[  229.426243][ T7688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.426287][ T7688]  ____sys_sendmsg+0xa95/0xc70
[  229.426307][ T7688]  ? lockdep_hardirqs_on+0x7c/0x110
[  229.426334][ T7688]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.426365][ T7688]  ___sys_sendmsg+0x134/0x1d0
[  229.426392][ T7688]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.426452][ T7688]  __sys_sendmsg+0x16d/0x220
[  229.426477][ T7688]  ? __pfx___sys_sendmsg+0x10/0x10
[  229.426519][ T7688]  do_syscall_64+0xcd/0x4c0
[  229.426548][ T7688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.426567][ T7688] RIP: 0033:0x7fd722b8eb69
[  229.426584][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.426601][ T7688] RSP: 002b:00007fd723a13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.426620][ T7688] RAX: ffffffffffffffda RBX: 00007fd722db6160 RCX: 00007fd722b8eb69
[  229.426631][ T7688] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  229.426641][ T7688] RBP: 00007fd723a13090 R08: 0000000000000000 R09: 0000000000000000
[  229.426652][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  229.426661][ T7688] R13: 0000000000000000 R14: 00007fd722db6160 R15: 00007fffc1571898
[  229.426687][ T7688]  </TASK>
[  229.569523][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  229.569540][   T30] audit: type=1400 audit(1754192395.204:954): avc:  denied  { setopt } for  pid=7685 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  229.774623][   T30] audit: type=1400 audit(1754192395.554:955): avc:  denied  { create } for  pid=7685 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  229.867366][   T30] audit: type=1400 audit(1754192395.564:956): avc:  denied  { bind } for  pid=7685 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  229.940785][   T30] audit: type=1400 audit(1754192395.564:957): avc:  denied  { shutdown } for  pid=7685 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  230.196057][ T5910] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  230.207919][ T6017] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  230.788200][ T6017] usb 5-1: Using ep0 maxpacket: 32
[  230.795223][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.826836][ T6017] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  230.839127][ T6017] usb 5-1: config 0 has no interface number 0
[  230.847607][ T6017] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  230.859663][ T6017] usb 5-1: config 0 interface 85 has no altsetting 0
[  230.859833][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.877271][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.888114][ T5910] usb 1-1: Product: syz
[  230.892339][ T5910] usb 1-1: Manufacturer: syz
[  230.897372][ T5910] usb 1-1: SerialNumber: syz
[  230.903244][ T6017] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  230.918499][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.928555][ T6017] usb 5-1: Product: syz
[  230.933522][ T6017] usb 5-1: Manufacturer: syz
[  230.939453][ T6017] usb 5-1: SerialNumber: syz
[  230.951964][ T6017] usb 5-1: config 0 descriptor??
[  231.178486][ T7712] netlink: 4172 bytes leftover after parsing attributes in process `syz.3.440'.
[  231.180363][ T6017] appletouch 5-1:0.85: Failed to read mode from device.
[  231.259879][ T6017] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  231.976121][ T7699] Invalid logical block size (6)
[  232.008254][ T5910] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  232.040935][ T5910] cdc_ncm 1-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  232.060519][ T5910] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  232.157224][ T7699] GUP no longer grows the stack in syz.4.436 (7699): 200000005000-200000008000 (200000004000)
[  232.187983][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.4.436 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  232.188016][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.188029][ T7699] Call Trace:
[  232.188039][ T7699]  <TASK>
[  232.188047][ T7699]  dump_stack_lvl+0x16c/0x1f0
[  232.188083][ T7699]  gup_vma_lookup+0x1d2/0x220
[  232.188101][ T7699]  __get_user_pages+0x243/0x34a0
[  232.188120][ T7699]  ? down_read_killable+0x220/0x4b0
[  232.188131][ T7699]  ? __lock_acquire+0xb97/0x1ce0
[  232.188149][ T7699]  ? __pfx___get_user_pages+0x10/0x10
[  232.188166][ T7699]  ? __lock_acquire+0x62e/0x1ce0
[  232.188185][ T7699]  __gup_longterm_locked+0xa92/0x17e0
[  232.188205][ T7699]  ? __pfx___gup_longterm_locked+0x10/0x10
[  232.188222][ T7699]  ? find_held_lock+0x2b/0x80
[  232.188239][ T7699]  gup_fast_fallback+0xf78/0x23f0
[  232.188264][ T7699]  ? __pfx_gup_fast_fallback+0x10/0x10
[  232.188280][ T7699]  ? __pfx___schedule+0x10/0x10
[  232.188295][ T7699]  ? rcu_is_watching+0x12/0xc0
[  232.188308][ T7699]  ? irqentry_exit+0x3b/0x90
[  232.188322][ T7699]  ? lockdep_hardirqs_on+0x7c/0x110
[  232.188339][ T7699]  get_user_pages_fast+0xa7/0xf0
[  232.188353][ T7699]  ? __pfx_get_user_pages_fast+0x10/0x10
[  232.188372][ T7699]  get_futex_key+0x2c6/0x1560
[  232.188390][ T7699]  ? __pfx___futex_wait+0x10/0x10
[  232.188402][ T7699]  ? __pfx_get_futex_key+0x10/0x10
[  232.188418][ T7699]  ? __lock_acquire+0xb97/0x1ce0
[  232.188438][ T7699]  futex_wake_op+0x129/0xe40
[  232.188454][ T7699]  ? __pfx_futex_wake_op+0x10/0x10
[  232.188465][ T7699]  ? rcu_is_watching+0x12/0xc0
[  232.188480][ T7699]  ? finish_task_switch.isra.0+0x221/0xc10
[  232.188496][ T7699]  ? trace_sched_exit_tp+0xd1/0x120
[  232.188508][ T7699]  ? __schedule+0x11a3/0x5de0
[  232.188524][ T7699]  do_futex+0x2e9/0x350
[  232.188541][ T7699]  ? __pfx_do_futex+0x10/0x10
[  232.188561][ T7699]  __x64_sys_futex+0x1e0/0x4c0
[  232.188580][ T7699]  ? __pfx___x64_sys_futex+0x10/0x10
[  232.188597][ T7699]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  232.188620][ T7699]  do_syscall_64+0xcd/0x4c0
[  232.188637][ T7699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.188649][ T7699] RIP: 0033:0x7f74bd58eb69
[  232.188659][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.188670][ T7699] RSP: 002b:00007f74be486038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  232.188681][ T7699] RAX: ffffffffffffffda RBX: 00007f74bd7b5fa0 RCX: 00007f74bd58eb69
[  232.188700][ T7699] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000
[  232.188711][ T7699] RBP: 00007f74bd611df1 R08: 0000000000000000 R09: 00000000a3020000
[  232.188722][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.188731][ T7699] R13: 0000000000000000 R14: 00007f74bd7b5fa0 R15: 00007fff229abf68
[  232.188752][ T7699]  </TASK>
[  232.194212][ T5910] cdc_ncm 1-1:1.0: setting tx_max = 88
[  232.898038][   T30] audit: type=1400 audit(1754192398.574:958): avc:  denied  { write } for  pid=7722 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  232.908038][ T6017] usb 5-1: USB disconnect, device number 14
[  233.820432][   T30] audit: type=1400 audit(1754192399.564:959): avc:  denied  { create } for  pid=7731 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  234.106784][ T5910] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  234.125740][ T5910] usb 1-1: USB disconnect, device number 10
[  234.132729][ T5910] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  234.178204][   T30] audit: type=1400 audit(1754192399.584:960): avc:  denied  { setopt } for  pid=7731 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  234.208246][   T30] audit: type=1400 audit(1754192399.584:961): avc:  denied  { watch watch_reads } for  pid=7731 comm="syz.0.445" path="/82" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  234.231250][   T30] audit: type=1400 audit(1754192399.604:962): avc:  denied  { create } for  pid=7731 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  234.259656][   T30] audit: type=1400 audit(1754192399.614:963): avc:  denied  { setopt } for  pid=7731 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  234.692540][ T7745] overlayfs: failed to resolve './file1': -2
[  235.094378][ T6023] udevd[6023]: setting mode of /dev/bus/usb/001/010 to 020664 failed: No such file or directory
[  235.136698][ T6023] udevd[6023]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory
[  235.432869][   T30] audit: type=1400 audit(1754192401.214:964): avc:  denied  { read } for  pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  235.623259][   T30] audit: type=1400 audit(1754192401.424:965): avc:  denied  { ioctl } for  pid=7758 comm="syz.2.451" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  235.907948][   T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  236.143767][ T7767] process 'syz.1.454' launched '/dev/fd/3' with NULL argv: empty string added
[  236.156250][   T30] audit: type=1400 audit(1754192401.944:966): avc:  denied  { execute } for  pid=7766 comm="syz.1.454" dev="hugetlbfs" ino=19915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  236.219393][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  236.242809][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  236.280917][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  236.287304][   T30] audit: type=1400 audit(1754192402.014:967): avc:  denied  { execute_no_trans } for  pid=7766 comm="syz.1.454" path=2F6D656D66643A5B0BDB58AE5B1AA9F298313683A67DFDFAADD16D64C8854158A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=19915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  237.008965][   T43] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  237.042138][ T7767] netlink: 44 bytes leftover after parsing attributes in process `syz.1.454'.
[  237.133296][   T30] audit: type=1400 audit(1754192402.854:968): avc:  denied  { connect } for  pid=7766 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  237.178717][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.205319][   T43] usb 3-1: Product: syz
[  237.275972][   T43] usb 3-1: Manufacturer: syz
[  237.305296][   T30] audit: type=1400 audit(1754192402.854:969): avc:  denied  { read } for  pid=7766 comm="syz.1.454" path="socket:[20520]" dev="sockfs" ino=20520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  237.342186][   T43] usb 3-1: SerialNumber: syz
[  237.370204][   T43] usb 3-1: config 0 descriptor??
[  237.396797][ T7759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  237.786975][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'.
[  237.857884][   T30] audit: type=1400 audit(1754192403.654:970): avc:  denied  { create } for  pid=7758 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  237.958301][   T43] powermate: unknown product id 0240
[  237.994177][   T43] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  238.026877][   T43] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  238.091363][   T30] audit: type=1400 audit(1754192403.884:971): avc:  denied  { read } for  pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  238.223532][ T7786] fuse: Unknown parameter 'user'
[  238.297343][ T7787] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  238.550588][   T30] audit: type=1400 audit(1754192403.884:972): avc:  denied  { open } for  pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  238.727948][   T30] audit: type=1400 audit(1754192403.884:973): avc:  denied  { ioctl } for  pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  239.486118][    C1] powermate: config urb returned -71
[  239.486544][ T6017] usb 3-1: USB disconnect, device number 8
[  239.491444][    C1] powermate: usb_submit_urb(config) failed
[  239.491804][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  240.503475][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'.
[  241.236341][ T7112] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  241.375281][ T7824] overlayfs: failed to resolve './file0': -2
[  241.385588][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.417058][ T7112] usb 3-1: Using ep0 maxpacket: 16
[  241.558057][ T5922] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  241.741510][ T7112] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  241.769292][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.785430][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.799846][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.808934][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.818910][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.827957][ T7823] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[  241.835812][ T7826] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[  241.850964][ T7112] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  241.928720][ T7823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  241.930576][ T7826] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  242.002139][ T7112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.072390][ T5922] usb 4-1: device descriptor read/all, error -71
[  242.182373][ T7112] usb 3-1: Product: syz
[  242.186600][ T7112] usb 3-1: Manufacturer: syz
[  242.265679][ T7834] netlink: 104 bytes leftover after parsing attributes in process `syz.3.469'.
[  242.277000][ T7112] usb 3-1: SerialNumber: syz
[  243.187464][ T7112] usb 3-1: config 0 descriptor??
[  243.192776][   T30] audit: type=1400 audit(1754192408.404:974): avc:  denied  { mounton } for  pid=7836 comm="syz.4.470" path="/proc/345/task" dev="proc" ino=20076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  243.215492][   T30] audit: type=1400 audit(1754192408.404:975): avc:  denied  { mount } for  pid=7836 comm="syz.4.470" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  243.240784][ T7112] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  243.258729][ T7112] usb 3-1: Detected FT232R
[  243.380565][ T2151] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  243.484066][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'.
[  243.496539][ T7845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.846814][ T2151] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  243.906893][ T2151] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  243.948093][ T2151] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  243.951131][   T30] audit: type=1400 audit(1754192409.744:976): avc:  denied  { getopt } for  pid=7844 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  244.005654][ T2151] usb 5-1: config 220 has no interface number 2
[  244.034570][ T2151] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 991
[  244.051150][ T7112] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  244.077294][ T2151] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  244.103067][ T7845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.140198][ T2151] usb 5-1: config 220 interface 0 has no altsetting 0
[  244.182112][ T2151] usb 5-1: config 220 interface 76 has no altsetting 0
[  244.211131][ T2151] usb 5-1: config 220 interface 1 has no altsetting 0
[  244.223173][ T2151] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  244.274239][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.304392][ T5922] usb 3-1: USB disconnect, device number 9
[  244.327727][ T2151] usb 5-1: Product: syz
[  244.364767][ T2151] usb 5-1: Manufacturer: syz
[  244.375081][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  244.376983][ T2151] usb 5-1: SerialNumber: syz
[  244.409530][ T5922] ftdi_sio 3-1:0.0: device disconnected
[  244.842629][ T2151] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  244.882815][ T2151] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  244.922305][ T2151] usb 5-1: No valid video chain found.
[  244.963734][ T2151] usb 5-1: selecting invalid altsetting 0
[  244.999583][ T2151] usb 5-1: selecting invalid altsetting 0
[  245.005457][ T2151] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  245.080023][ T7866] fuse: Unknown parameter 'grou00000000000000000000'
[  245.487102][ T2151] usb 5-1: USB disconnect, device number 15
[  246.251694][ T7871] FAULT_INJECTION: forcing a failure.
[  246.251694][ T7871] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  246.265548][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.2.479 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  246.265574][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  246.265585][ T7871] Call Trace:
[  246.265591][ T7871]  <TASK>
[  246.265597][ T7871]  dump_stack_lvl+0x16c/0x1f0
[  246.265629][ T7871]  should_fail_ex+0x512/0x640
[  246.265658][ T7871]  _copy_from_user+0x2e/0xd0
[  246.265677][ T7871]  copy_msghdr_from_user+0x98/0x160
[  246.265701][ T7871]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  246.265732][ T7871]  ___sys_sendmsg+0xfe/0x1d0
[  246.265755][ T7871]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.265797][ T7871]  ? __mutex_unlock_slowpath+0x80/0x800
[  246.265829][ T7871]  __sys_sendmsg+0x16d/0x220
[  246.265861][ T7871]  ? __pfx___sys_sendmsg+0x10/0x10
[  246.265892][ T7871]  do_syscall_64+0xcd/0x4c0
[  246.265911][ T7871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.265923][ T7871] RIP: 0033:0x7fbf9b78eb69
[  246.265933][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.265945][ T7871] RSP: 002b:00007fbf9c6db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.265956][ T7871] RAX: ffffffffffffffda RBX: 00007fbf9b9b5fa0 RCX: 00007fbf9b78eb69
[  246.265964][ T7871] RDX: 0000000020000000 RSI: 0000200000000640 RDI: 0000000000000003
[  246.265971][ T7871] RBP: 00007fbf9c6db090 R08: 0000000000000000 R09: 0000000000000000
[  246.265977][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.265983][ T7871] R13: 0000000000000000 R14: 00007fbf9b9b5fa0 R15: 00007fff800cfd98
[  246.266009][ T7871]  </TASK>
[  247.029589][ T7881] orangefs_devreq_open: device cannot be opened in blocking mode
[  247.126468][   T30] audit: type=1400 audit(1754192412.834:977): avc:  denied  { read } for  pid=7875 comm="syz.2.482" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  247.158140][   T30] audit: type=1400 audit(1754192412.834:978): avc:  denied  { open } for  pid=7875 comm="syz.2.482" path="/90/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  247.227096][   T30] audit: type=1400 audit(1754192412.844:979): avc:  denied  { getopt } for  pid=7875 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  247.880782][ T7891] 9pnet_fd: Insufficient options for proto=fd
[  247.902099][ T7891] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  248.054972][   T30] audit: type=1400 audit(1754192413.854:980): avc:  denied  { setopt } for  pid=7898 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  248.088462][ T5922] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  248.093009][   T30] audit: type=1400 audit(1754192413.874:981): avc:  denied  { connect } for  pid=7898 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  248.229435][ T5922] usb 5-1: device descriptor read/64, error -71
[  248.260194][ T7901] fuse: Unknown parameter '0x0000000000000008'
[  248.571620][ T5922] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  249.197941][ T5922] usb 5-1: device descriptor read/64, error -71
[  249.347412][ T5922] usb usb5-port1: attempt power cycle
[  249.726563][ T7918] FAULT_INJECTION: forcing a failure.
[  249.726563][ T7918] name failslab, interval 1, probability 0, space 0, times 0
[  249.782724][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.1.491 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  249.782751][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.782767][ T7918] Call Trace:
[  249.782773][ T7918]  <TASK>
[  249.782780][ T7918]  dump_stack_lvl+0x16c/0x1f0
[  249.782810][ T7918]  should_fail_ex+0x512/0x640
[  249.782835][ T7918]  ? fs_reclaim_acquire+0xae/0x150
[  249.782860][ T7918]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  249.782883][ T7918]  should_failslab+0xc2/0x120
[  249.782902][ T7918]  __kmalloc_noprof+0xd2/0x510
[  249.782919][ T7918]  ? trace_kmalloc+0x2b/0xd0
[  249.782939][ T7918]  ? __kmalloc_noprof+0x242/0x510
[  249.782959][ T7918]  tomoyo_realpath_from_path+0xc2/0x6e0
[  249.782982][ T7918]  ? tomoyo_fill_path_info+0x233/0x420
[  249.783011][ T7918]  tomoyo_mount_acl+0x1ae/0x850
[  249.783031][ T7918]  ? bpf_ksym_find+0x127/0x1c0
[  249.783056][ T7918]  ? is_bpf_text_address+0x94/0x1a0
[  249.783075][ T7918]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  249.783093][ T7918]  ? __kernel_text_address+0xd/0x40
[  249.783113][ T7918]  ? unwind_get_return_address+0x59/0xa0
[  249.783134][ T7918]  ? arch_stack_walk+0xa6/0x100
[  249.783177][ T7918]  ? tomoyo_domain+0xbb/0x150
[  249.783200][ T7918]  ? tomoyo_profile+0x47/0x60
[  249.783227][ T7918]  tomoyo_mount_permission+0x16d/0x420
[  249.783246][ T7918]  ? tomoyo_mount_permission+0x14f/0x420
[  249.783268][ T7918]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  249.783305][ T7918]  security_sb_mount+0x9b/0x260
[  249.783328][ T7918]  path_mount+0x15f/0x1fd0
[  249.783358][ T7918]  ? __pfx_path_mount+0x10/0x10
[  249.783382][ T7918]  ? kmem_cache_free+0x2d1/0x4d0
[  249.783398][ T7918]  ? putname+0x154/0x1a0
[  249.783438][ T7918]  ? putname+0x154/0x1a0
[  249.783463][ T7918]  ? __x64_sys_mount+0x28d/0x310
[  249.783483][ T7918]  __x64_sys_mount+0x28d/0x310
[  249.783506][ T7918]  ? __pfx___x64_sys_mount+0x10/0x10
[  249.783535][ T7918]  do_syscall_64+0xcd/0x4c0
[  249.783563][ T7918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.783582][ T7918] RIP: 0033:0x7fd722b8eb69
[  249.783596][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.783613][ T7918] RSP: 002b:00007fd723a55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  249.783633][ T7918] RAX: ffffffffffffffda RBX: 00007fd722db5fa0 RCX: 00007fd722b8eb69
[  249.783644][ T7918] RDX: 000020000015bffc RSI: 0000200000000240 RDI: 0000000000000000
[  249.783655][ T7918] RBP: 00007fd723a55090 R08: 0000200000000000 R09: 0000000000000000
[  249.783666][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.783677][ T7918] R13: 0000000000000000 R14: 00007fd722db5fa0 R15: 00007fffc1571898
[  249.783701][ T7918]  </TASK>
[  249.783709][ T7918] ERROR: Out of memory at tomoyo_realpath_from_path.
[  249.807925][ T5922] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  250.089261][ T7921] FAULT_INJECTION: forcing a failure.
[  250.089261][ T7921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.102442][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.3.493 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  250.102467][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  250.102477][ T7921] Call Trace:
[  250.102483][ T7921]  <TASK>
[  250.102489][ T7921]  dump_stack_lvl+0x16c/0x1f0
[  250.102525][ T7921]  should_fail_ex+0x512/0x640
[  250.102555][ T7921]  _copy_from_user+0x2e/0xd0
[  250.102573][ T7921]  copy_msghdr_from_user+0x98/0x160
[  250.102599][ T7921]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  250.102631][ T7921]  ___sys_sendmsg+0xfe/0x1d0
[  250.102655][ T7921]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.102697][ T7921]  ? __mutex_unlock_slowpath+0x80/0x800
[  250.102731][ T7921]  __sys_sendmsg+0x16d/0x220
[  250.102754][ T7921]  ? __pfx___sys_sendmsg+0x10/0x10
[  250.102795][ T7921]  do_syscall_64+0xcd/0x4c0
[  250.102821][ T7921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.102839][ T7921] RIP: 0033:0x7fefafb8eb69
[  250.102853][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.102870][ T7921] RSP: 002b:00007fefb0948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.102889][ T7921] RAX: ffffffffffffffda RBX: 00007fefafdb5fa0 RCX: 00007fefafb8eb69
[  250.102900][ T7921] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003
[  250.102910][ T7921] RBP: 00007fefb0948090 R08: 0000000000000000 R09: 0000000000000000
[  250.102920][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.102930][ T7921] R13: 0000000000000000 R14: 00007fefafdb5fa0 R15: 00007ffe8a3ac0f8
[  250.102953][ T7921]  </TASK>
[  250.398568][ T5922] usb 5-1: device descriptor read/8, error -71
[  250.504843][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7923 comm=syz.2.495
[  250.522430][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'.
[  250.531363][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  250.680891][   T30] audit: type=1400 audit(1754192416.484:982): avc:  denied  { create } for  pid=7925 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  250.701261][ T5852] Bluetooth: hci0: unexpected event for opcode 0x2062
[  252.383552][ T7948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  252.390998][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  252.410300][ T7948] vhci_hcd vhci_hcd.0: Device attached
[  252.540014][ T7948] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9)
[  252.546565][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  252.567613][ T7948] vhci_hcd vhci_hcd.0: Device attached
[  252.577730][   T30] audit: type=1400 audit(1754192418.374:983): avc:  denied  { create } for  pid=7963 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  252.598000][ T7961] vhci_hcd: connection closed
[  252.598284][ T2151] vhci_hcd: vhci_device speed not set
[  252.602223][ T7958] vhci_hcd: connection closed
[  252.621095][ T5977] vhci_hcd: stop threads
[  252.658023][ T2151] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  252.684131][ T5977] vhci_hcd: release socket
[  252.694829][ T7959] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  252.703200][ T5977] vhci_hcd: disconnect device
[  252.718163][   T30] audit: type=1400 audit(1754192418.444:984): avc:  denied  { connect } for  pid=7963 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  252.782580][   T30] audit: type=1400 audit(1754192418.444:985): avc:  denied  { map } for  pid=7963 comm="syz.2.507" path="socket:[20915]" dev="sockfs" ino=20915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  252.805786][ T5977] vhci_hcd: stop threads
[  252.810372][ T5977] vhci_hcd: release socket
[  252.819305][ T5977] vhci_hcd: disconnect device
[  252.889917][   T30] audit: type=1400 audit(1754192418.444:986): avc:  denied  { accept } for  pid=7963 comm="syz.2.507" path="socket:[20915]" dev="sockfs" ino=20915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  253.008680][   T30] audit: type=1400 audit(1754192418.794:987): avc:  denied  { read } for  pid=7965 comm="syz.2.508" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  253.303203][   T30] audit: type=1400 audit(1754192418.794:988): avc:  denied  { open } for  pid=7965 comm="syz.2.508" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  253.504371][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'.
[  253.540046][   T30] audit: type=1400 audit(1754192418.864:989): avc:  denied  { ioctl } for  pid=7965 comm="syz.2.508" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  253.564359][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'.
[  253.574133][   T30] audit: type=1400 audit(1754192418.944:990): avc:  denied  { write } for  pid=7968 comm="syz.3.510" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  253.770184][   T30] audit: type=1400 audit(1754192419.444:991): avc:  denied  { read } for  pid=7976 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  254.712628][ T5852] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  254.722974][ T5852] Bluetooth: hci0: Injecting HCI hardware error event
[  254.737048][ T5849] Bluetooth: hci0: hardware error 0x00
[  256.284678][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  256.284694][   T30] audit: type=1400 audit(1754192422.084:995): avc:  denied  { setopt } for  pid=8014 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  256.300942][ T8015] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.518'.
[  256.403770][   T30] audit: type=1400 audit(1754192422.084:996): avc:  denied  { write } for  pid=8014 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  256.686769][   T30] audit: type=1400 audit(1754192422.484:997): avc:  denied  { view } for  pid=8019 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  256.871006][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  256.917984][ T6017] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  257.048550][   T30] audit: type=1400 audit(1754192422.814:998): avc:  denied  { getopt } for  pid=8024 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  257.384937][ T6017] usb 1-1: Using ep0 maxpacket: 8
[  257.767976][   T30] audit: type=1400 audit(1754192422.814:999): avc:  denied  { mount } for  pid=8024 comm="syz.4.522" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  258.006350][ T8028] random: crng reseeded on system resumption
[  258.040003][ T2151] vhci_hcd: vhci_device speed not set
[  258.056324][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  258.067480][ T6017] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  258.076862][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.085354][ T8028] FAULT_INJECTION: forcing a failure.
[  258.085354][ T8028] name failslab, interval 1, probability 0, space 0, times 0
[  258.096044][   T30] audit: type=1400 audit(1754192423.874:1000): avc:  denied  { unmount } for  pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  258.153114][ T8031] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.525'.
[  258.155224][ T8033] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.524'.
[  258.174783][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.2.523 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  258.174809][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  258.174819][ T8028] Call Trace:
[  258.174825][ T8028]  <TASK>
[  258.174832][ T8028]  dump_stack_lvl+0x16c/0x1f0
[  258.174863][ T8028]  should_fail_ex+0x512/0x640
[  258.174888][ T8028]  ? lockdep_hardirqs_on+0x7c/0x110
[  258.174915][ T8028]  should_failslab+0xc2/0x120
[  258.174934][ T8028]  __kmalloc_cache_noprof+0x6a/0x3e0
[  258.174957][ T8028]  ? do_raw_spin_lock+0x12c/0x2b0
[  258.174975][ T8028]  ? find_held_lock+0x2b/0x80
[  258.174992][ T8028]  ? async_schedule_node_domain+0x54/0x120
[  258.175017][ T8028]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  258.175040][ T8028]  async_schedule_node_domain+0x54/0x120
[  258.175064][ T8028]  dev_cache_fw_image+0x38e/0x490
[  258.175088][ T8028]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  258.175112][ T8028]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  258.175132][ T8028]  dpm_for_each_dev+0x5a/0xb0
[  258.175153][ T8028]  fw_pm_notify+0x81/0x150
[  258.175173][ T8028]  notifier_call_chain+0xb9/0x410
[  258.175198][ T8028]  ? __pfx_fw_pm_notify+0x10/0x10
[  258.175223][ T8028]  blocking_notifier_call_chain_robust+0xc8/0x160
[  258.175249][ T8028]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  258.175281][ T8028]  pm_notifier_call_chain_robust+0x27/0x60
[  258.175308][ T8028]  snapshot_open+0x218/0x2b0
[  258.175330][ T8028]  ? __pfx_snapshot_open+0x10/0x10
[  258.175354][ T8028]  misc_open+0x35a/0x420
[  258.175377][ T8028]  ? __pfx_misc_open+0x10/0x10
[  258.175406][ T8028]  chrdev_open+0x234/0x6a0
[  258.175427][ T8028]  ? __pfx_chrdev_open+0x10/0x10
[  258.175445][ T8028]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  258.175472][ T8028]  do_dentry_open+0x982/0x1530
[  258.175493][ T8028]  ? __pfx_chrdev_open+0x10/0x10
[  258.175518][ T8028]  vfs_open+0x82/0x3f0
[  258.175545][ T8028]  path_openat+0x1de4/0x2cb0
[  258.175574][ T8028]  ? __pfx_path_openat+0x10/0x10
[  258.175601][ T8028]  do_filp_open+0x20b/0x470
[  258.175620][ T8028]  ? __pfx_do_filp_open+0x10/0x10
[  258.175659][ T8028]  ? alloc_fd+0x471/0x7d0
[  258.175687][ T8028]  do_sys_openat2+0x11b/0x1d0
[  258.175723][ T8028]  ? __pfx_do_sys_openat2+0x10/0x10
[  258.175747][ T8028]  ? __fget_files+0x20e/0x3c0
[  258.175770][ T8028]  __x64_sys_openat+0x174/0x210
[  258.175794][ T8028]  ? __pfx___x64_sys_openat+0x10/0x10
[  258.175816][ T8028]  ? ksys_write+0x1ac/0x250
[  258.175841][ T8028]  do_syscall_64+0xcd/0x4c0
[  258.175868][ T8028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.175884][ T8028] RIP: 0033:0x7fbf9b78eb69
[  258.175899][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.175914][ T8028] RSP: 002b:00007fbf9c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  258.175930][ T8028] RAX: ffffffffffffffda RBX: 00007fbf9b9b5fa0 RCX: 00007fbf9b78eb69
[  258.175941][ T8028] RDX: 00000000000c4c01 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  258.175951][ T8028] RBP: 00007fbf9c6db090 R08: 0000000000000000 R09: 0000000000000000
[  258.175960][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  258.175970][ T8028] R13: 0000000000000000 R14: 00007fbf9b9b5fa0 R15: 00007fff800cfd98
[  258.175992][ T8028]  </TASK>
[  258.521607][ T8028] 
[  258.523957][ T8028] ============================================
[  258.530082][ T8028] WARNING: possible recursive locking detected
[  258.536202][ T8028] 6.16.0-syzkaller-11129-geacf91b0c78a #0 Not tainted
[  258.542932][ T8028] --------------------------------------------
[  258.549054][ T8028] syz.2.523/8028 is trying to acquire lock:
[  258.554911][ T8028] ffffffff8f514048 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640
[  258.562802][ T8028] 
[  258.562802][ T8028] but task is already holding lock:
[  258.570129][ T8028] ffffffff8f514048 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150
[  258.578274][ T8028] 
[  258.578274][ T8028] other info that might help us debug this:
[  258.586297][ T8028]  Possible unsafe locking scenario:
[  258.586297][ T8028] 
[  258.593711][ T8028]        CPU0
[  258.596956][ T8028]        ----
[  258.600201][ T8028]   lock(fw_lock);
[  258.603890][ T8028]   lock(fw_lock);
[  258.607574][ T8028] 
[  258.607574][ T8028]  *** DEADLOCK ***
[  258.607574][ T8028] 
[  258.615700][ T8028]  May be due to missing lock nesting notation
[  258.615700][ T8028] 
[  258.623982][ T8028] 5 locks held by syz.2.523/8028:
[  258.628969][ T8028]  #0: ffffffff8f2fe5c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420
[  258.637374][ T8028]  #1: ffffffff8e4847c8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0
[  258.647692][ T8028]  #2: ffffffff8e4c4cf0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160
[  258.659484][ T8028]  #3: ffffffff8f514048 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150
[  258.668064][ T8028]  #4: ffffffff8f50ea48 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0
[  258.677334][ T8028] 
[  258.677334][ T8028] stack backtrace:
[  258.683189][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.2.523 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) 
[  258.683204][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  258.683211][ T8028] Call Trace:
[  258.683216][ T8028]  <TASK>
[  258.683221][ T8028]  dump_stack_lvl+0x116/0x1f0
[  258.683239][ T8028]  print_deadlock_bug+0x1e9/0x240
[  258.683256][ T8028]  __lock_acquire+0x1133/0x1ce0
[  258.683285][ T8028]  lock_acquire+0x179/0x350
[  258.683301][ T8028]  ? assign_fw+0x4e/0x640
[  258.683315][ T8028]  ? __pfx___might_resched+0x10/0x10
[  258.683329][ T8028]  ? __pfx___schedule+0x10/0x10
[  258.683344][ T8028]  ? assign_fw+0x4e/0x640
[  258.683357][ T8028]  __mutex_lock+0x193/0x10b0
[  258.683374][ T8028]  ? assign_fw+0x4e/0x640
[  258.683388][ T8028]  ? __pfx___mutex_lock+0x10/0x10
[  258.683404][ T8028]  ? irqentry_exit+0x3b/0x90
[  258.683420][ T8028]  ? do_syscall_64+0xcd/0x4c0
[  258.683438][ T8028]  ? assign_fw+0x4e/0x640
[  258.683451][ T8028]  assign_fw+0x4e/0x640
[  258.683464][ T8028]  ? _request_firmware+0x957/0x1470
[  258.683479][ T8028]  _request_firmware+0x988/0x1470
[  258.683496][ T8028]  ? __pfx__request_firmware+0x10/0x10
[  258.683511][ T8028]  ? dump_stack_lvl+0x197/0x1f0
[  258.683526][ T8028]  ? dump_stack_lvl+0x1a3/0x1f0
[  258.683542][ T8028]  __async_dev_cache_fw_image+0xb1/0x340
[  258.683558][ T8028]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  258.683574][ T8028]  ? mark_held_locks+0x49/0x80
[  258.683590][ T8028]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  258.683604][ T8028]  ? __pfx___async_dev_cache_fw_image+0x10/0x10
[  258.683620][ T8028]  async_schedule_node_domain+0xd4/0x120
[  258.683636][ T8028]  dev_cache_fw_image+0x38e/0x490
[  258.683650][ T8028]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  258.683665][ T8028]  ? __pfx_dev_cache_fw_image+0x10/0x10
[  258.683679][ T8028]  dpm_for_each_dev+0x5a/0xb0
[  258.683696][ T8028]  fw_pm_notify+0x81/0x150
[  258.683708][ T8028]  notifier_call_chain+0xb9/0x410
[  258.683725][ T8028]  ? __pfx_fw_pm_notify+0x10/0x10
[  258.683739][ T8028]  blocking_notifier_call_chain_robust+0xc8/0x160
[  258.683756][ T8028]  ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10
[  258.683776][ T8028]  pm_notifier_call_chain_robust+0x27/0x60
[  258.683793][ T8028]  snapshot_open+0x218/0x2b0
[  258.683808][ T8028]  ? __pfx_snapshot_open+0x10/0x10
[  258.683823][ T8028]  misc_open+0x35a/0x420
[  258.683837][ T8028]  ? __pfx_misc_open+0x10/0x10
[  258.683850][ T8028]  chrdev_open+0x234/0x6a0
[  258.683864][ T8028]  ? __pfx_chrdev_open+0x10/0x10
[  258.683877][ T8028]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  258.683891][ T8028]  do_dentry_open+0x982/0x1530
[  258.683902][ T8028]  ? __pfx_chrdev_open+0x10/0x10
[  258.683915][ T8028]  vfs_open+0x82/0x3f0
[  258.683930][ T8028]  path_openat+0x1de4/0x2cb0
[  258.683943][ T8028]  ? __pfx_path_openat+0x10/0x10
[  258.683956][ T8028]  do_filp_open+0x20b/0x470
[  258.683970][ T8028]  ? __pfx_do_filp_open+0x10/0x10
[  258.683986][ T8028]  ? alloc_fd+0x471/0x7d0
[  258.683998][ T8028]  do_sys_openat2+0x11b/0x1d0
[  258.684012][ T8028]  ? __pfx_do_sys_openat2+0x10/0x10
[  258.684027][ T8028]  ? __fget_files+0x20e/0x3c0
[  258.684039][ T8028]  __x64_sys_openat+0x174/0x210
[  258.684054][ T8028]  ? __pfx___x64_sys_openat+0x10/0x10
[  258.684069][ T8028]  ? ksys_write+0x1ac/0x250
[  258.684081][ T8028]  do_syscall_64+0xcd/0x4c0
[  258.684097][ T8028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.684109][ T8028] RIP: 0033:0x7fbf9b78eb69
[  258.684120][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.684131][ T8028] RSP: 002b:00007fbf9c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  258.684141][ T8028] RAX: ffffffffffffffda RBX: 00007fbf9b9b5fa0 RCX: 00007fbf9b78eb69
[  258.684149][ T8028] RDX: 00000000000c4c01 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  258.684155][ T8028] RBP: 00007fbf9c6db090 R08: 0000000000000000 R09: 0000000000000000
[  258.684162][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  258.684168][ T8028] R13: 0000000000000000 R14: 00007fbf9b9b5fa0 R15: 00007fff800cfd98
[  258.684177][ T8028]  </TASK>
[  259.154022][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  259.160669][ T1298] ieee802154 phy1 wpan1: encryption failed: -22