last executing test programs:

9.673904961s ago: executing program 3 (id=1492):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50cd, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00', r0}, 0x18)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0)
write$vhost_msg_v2(r2, &(0x7f0000002240)={0x2, 0x0, {0x0, 0xe0749d04fc370ad3, 0x0, 0x2, 0x2}}, 0x48)
r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="e102050000001408b1", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000000b06010200c300000000000005000008050001000700000009000200737d7a3200fb760e4e811422000078f30d743b2f2be400f9677c207dac48c81a22fad18a82eba6a7d00a51c7e34a8960ada3ada7a1f71666dd0da1102ff2c59b"], 0x30}, 0x1, 0x0, 0x0, 0x2000c020}, 0x814)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001000000000000000000000000c8475050502ddba7dc5254571eb7eb4500"/44], 0x50)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x61)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x0)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e23}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x24000011)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100))

9.394019756s ago: executing program 2 (id=1494):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

9.35107367s ago: executing program 2 (id=1495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0)
io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setresgid(0xee00, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
chdir(0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x30000)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
pipe2$9p(&(0x7f0000001900), 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x5000, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

7.91939815s ago: executing program 4 (id=1499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x3, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @generic={0x2, 0xd, 0xf, 0x6, 0x2}], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x40, 0xeb4b}, 0x10, 0x19252, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880), 0x10, 0x3, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="010000000bfa33c30000000000000000", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="e47d800001"], 0x80}, 0x1, 0x0, 0x0, 0x2400404d}, 0xc0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000100)={0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)

7.918976743s ago: executing program 2 (id=1500):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r1, &(0x7f0000000100)="f4", 0x1, 0x4040004, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000001b640)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x400000}, 0x0, 0x0)

6.893859095s ago: executing program 2 (id=1501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
read$msr(r1, &(0x7f0000000500)=""/4, 0x4)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2e0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x18, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000007"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="04"]}]}}]}]}]}}]}, 0x74}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1, <r8=>0xffffffffffffffff}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x13, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='GPL\x00', 0xb0f, 0xae, &(0x7f0000000240)=""/174, 0x41000, 0x1d, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0xa31, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, 0x1, r0, r8], 0x0, 0x10, 0x7, @void, @value}, 0x94)

6.878327097s ago: executing program 1 (id=1502):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x894)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0)

6.66799743s ago: executing program 1 (id=1503):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018010000786c6c2500000000f71f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

6.667433569s ago: executing program 2 (id=1504):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000040))
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)

6.025327928s ago: executing program 3 (id=1505):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = creat(0x0, 0x10)
r3 = msgget(0x3, 0x2)
msgsnd(r3, &(0x7f0000000300)={0x1, "dabce43f2426912ffd2fa6a41ad6b5f761ede0e2edb5c2ccecb7b06bf0ef0986e227b6b481980dd09b3433fb06add0312006df06e66fcd09db5e329603ce682794b729d7fa9f9cc430327630a2240046c89390575a0c234f83ec"}, 0x62, 0x800)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x0, 0x8bc, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0907, 0x2, '\x00', @value64=0x4}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000500)=0xb0000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

5.331304269s ago: executing program 3 (id=1507):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x20002)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x2000, 0x7fffffff}, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})
recvmmsg$unix(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5d}}], 0x1, 0x2043, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, 0x0, 0x0)

5.271021404s ago: executing program 4 (id=1508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x3, "c3e904"}, 0x0})
r4 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast1, 0x8}, 0x1c)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0xd, "c729e27800d699611bee952b40"}, 0x0})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x13, 0xe2, 0xcc, 0xffffffff}})

5.264688703s ago: executing program 0 (id=1509):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="6b5ee38d48141e0000000000000000b7080009000000007b8af8ff00000000bfa2000000009dfb7b5271c6bd65e1000007020000f8ffffffb703000008000000b70400d5fda5af2275960b979f48aa130000000000850000001d000000950000000000000023a39a548b003bed96f8bc6df81be0f325510f379d3af6714f3eff2d0b9b458d64a354d70df31e1d17dadc1fe9a6b4cc6fe6a2b6837f82cac1fb3fc9d0d5f1db49da8ed2aaeaa0f25f2a2f00a2206dcec94f3542be6ea6c0b5b395773c866b6131447e330eee"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getpid()
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0x2}, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x4, @struct={0x8, 0x101}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xfeffffff, [0xcbf5, 0x9cd0, 0x3, 0x82, 0x40007fff, 0x3]}, {0x0, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0xc04, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0xfffffffffffffffe, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x4000009059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x200, 0x81, [0xa, 0x16, 0x8, 0x2, 0x0, 0x80000001]}, {0x6, 0x8000000000000000, 0x83}})
bind$inet6(r5, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000780)="1e86a6f76eb2d6f8351f413c9a141bc8024f7530df6a929c18d398164da60fb12a9b8858de296f239551a33bc1d40839c13862eae13aacec7870dc7d811b286674465ee60365c603725bcf5f4dc942ebf81e2e3e625ecefc6f292c2f0af2cea17587918c5bda9dae595ccef4357da6bb1059546c51260143d1f3da039329b1c8950eb69b13406cdb624c787c2104efdb34c24e9a33f91709dd0f2a0a889ce34a72b19e21de072dc04919aa296bf8d553610a47312bd5b10acb7877229d52", 0xbe, 0x800, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x3}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})

3.608050097s ago: executing program 0 (id=1510):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f0000000000)=[{0x0, 0xfff7}], 0x1, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x1d, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000740))

3.367294289s ago: executing program 1 (id=1511):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000300)={0x9, {0xd46, 0x0, 0x235}})
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

2.744200348s ago: executing program 3 (id=1512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
syz_open_dev$MSR(&(0x7f0000000500), 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
prlimit64(0x0, 0x1, &(0x7f0000000280)={0x7, 0x1000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
gettid()
timer_create(0x0, 0x0, &(0x7f00000004c0))
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c904}, 0x20008084)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2e39aac25b09d95b, 0x6, 0xeeee0000, 0x1000, &(0x7f0000684000/0x1000)=nil})
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x18})
mmap(&(0x7f0000684000/0x4000)=nil, 0x4000, 0x1000007, 0x11, r7, 0xffffd000)

2.542980329s ago: executing program 0 (id=1513):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) (fail_nth: 1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)

2.161650345s ago: executing program 1 (id=1514):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)={0x5e, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x5}]}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async)
shutdown(r0, 0x1) (async, rerun: 64)
chdir(0x0) (rerun: 64)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2.079178657s ago: executing program 0 (id=1515):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}], 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51f", 0xd9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f", 0xe}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36", 0xda}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}], 0x2, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51f", 0xd9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f", 0xe}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36", 0xda}], 0x5}}], 0x1, 0xc0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async)

1.997322261s ago: executing program 4 (id=1516):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000340)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xeeef0000, 0x0, 0x0}, {0x0, 0x0, 0x0}]})
openat(0xffffffffffffff9c, 0x0, 0x501483, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.744046806s ago: executing program 0 (id=1517):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000e006"]) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x10000}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x163c81) (async)
io_setup(0x3, &(0x7f0000001540)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x75c, r6, 0x0}]) (async)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
read$FUSE(r8, 0x0, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00')
preadv(r9, &(0x7f0000000880)=[{&(0x7f0000000100)=""/162, 0xa2}, {0x0}], 0x2, 0x1239, 0x4b4a) (async)
r10 = eventfd(0x0) (async, rerun: 32)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffff8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
io_submit(r7, 0x4, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xffff, r3, &(0x7f0000000200)="c586799453a82f78326ebe6e30d3048e93fe950853fa819b37c5c188af461f9fdbc4b275d87189f0dab1de30b626d3111c66e419edfcb71b86f9e6058aee2c7536d80835a74250eaee2bc6accb4e2a99f5242319750946ef82da7e60a6ebd2ebe28957e2678fef65827f7b3aa3fed29d16427da4c55a64c66d5ca096c7151a0a24967395a3360a641d4a4e22416461a43e5b39e033c5824161", 0x99, 0x10000, 0x0, 0x0, r8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000000140)="71de", 0x2, 0x6, 0x0, 0x1, r9}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000300)="7ddd997a6539276fe33a7a02724641c7070ea6f19d14190faaabc72aed7a055234b327f51b0a2d92d359cfc70c6989d7c20f7c209f99bab4f3a056d235c18621c974f0325d59abf5e8aab5aadff2537351cc810571dea7935c3261e04b936dabfa04b09afa391f230ea3d6aaf558714747fd6c6596941bf5b169185094eeec881a17a7dcffc96dcee0bcb009fa0c994f17b7e1de32a0c98a7e4220065627ca1af162fdc52fc9df6bf5e0c338c02ef95d2953561cc869d861c4fe67376580a9478d2f3bfc6898e28d15", 0xc9, 0x8000000000000001, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x0, r3, &(0x7f0000000440)="636a9e314bebf9fca215ffde7e3687d50d678afbe5b546c269670a741f3190f27c36f00f", 0x24, 0xfffffffffffffffe, 0x0, 0x0, r10}])

1.407637373s ago: executing program 2 (id=1518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x3, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @generic={0x2, 0xd, 0xf, 0x6, 0x2}], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x40, 0xeb4b}, 0x10, 0x19252, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880), 0x10, 0x3, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="010000000bfa33c30000000000000000", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="e47d800001"], 0x80}, 0x1, 0x0, 0x0, 0x2400404d}, 0xc0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000100)={0x0})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)

1.393114584s ago: executing program 3 (id=1519):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000480)=0x19)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000740)=0xffa4)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.339351165s ago: executing program 1 (id=1520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
clock_nanosleep(0x8, 0x2, &(0x7f0000000080)={0x77359400}, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)

653.270414ms ago: executing program 4 (id=1521):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe}, {0x10}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x17, 0x1}]}, {0x0, [0x3e, 0x5f]}}, &(0x7f0000000140)=""/238, 0x48, 0xee, 0x0, 0x5, 0x0, @void, @value}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x3, 0x1, 0x1800000, 0x4a30, r0, 0x6, '\x00', r1, r2, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000340)=0x4)
sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x4, @mcast1, 0x988}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000003c0)="d984278023a9eb583978e995426d6c072545a38bfdffe9fb0c29f6bd5e39e08f2c9ad0b09d4a31ae80631ec97635d04b62ec8116998c3b84d275863480", 0x3d}, {&(0x7f0000000400)="043a2fdaee01a0af14020345076159b3a13726c2889796d8f8184204cbd8423b79dd6fea8093369d03b55afe943b54d2b0053c3ab338a6e79061e6d5f91f3ece536be94b89d1705b7917a9506ece0919df5149acdf165c62b13619a428f4e901b6349d0884060865264323e5b61d63e383f8ecb5b3b308d97d3bf47aed4c92a1edff22b634eaeb7791d5e096dc29200e098b3cd1ae8a344b462fc9f9e2ca7f8adad7a143877a02752126b63bb4d1611b1aa37fe182", 0xb5}, {&(0x7f00000004c0)="6ee8d1ad789288a14c75438c14937bfbf4a79d861c9d989d8516d9d9db1dd407a03cff078788987987417ceaff0dc9c22f7044c46e03ff5d71e2605f58317b9404fa7447effbede8675ca7b32ae82db730885566655979000a8d997f2c3b15cb7c405d2a29ff0769673779cd9973f2dfb2f1a15e6dce13a44a5d562da2693af9e14df18ed83623599a64f6e69ff3f7b8f4dd19b7be338218a20d904ad5f8072ea3dd1d8fd696777bfa0cd2f4765bb39a2532f48487eefe993921eea386833d4f5688ecc9a5a6e55970bec7ff723d608e199b3a48c46336e3d4ff0b38c4bc3f4b685663b8fab709fc4577ab59a17ab08ab3c52162a2", 0xf5}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="b5e57fea5eaf0f0c5a08c2269126cd33faeea6b11245b27a1aba6a4dc0d5777e1ea1e106756694a64bd5812b3934ce597b", 0x31}, {&(0x7f0000000640)="03af833845b9881b0a1ededa3f5a2abe72ec0d1258e923f2be4cd9d092130e8687a60aa6b6e9acd7cdcbc3cdf3966232e99a1c4d747bc1965385320dbd2817934e4366d59f9896062dae0bc377cd826fff09a9af00974d5d3f3e1a0ef378d417ba5c001767c3a98185461c7a8f72db78c92d7b11993b3ee98753d1e77e4c75a71b31a62324f1304919b321cf5a8c0d34acb26736c05cca2a7877a90c6f37bc214004b1878104fa79955eadf87a381825f0efff7033680232894fbe4b94093518b86211a7d18703d0e94d8e", 0xcb}], 0x6, &(0x7f00000007c0)=[@rthdr={{0x48, 0x29, 0x39, {0x16, 0x6, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote]}}}], 0x48}}, {{&(0x7f0000000840)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc0}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000880)="c4719f0706bb021232797d1b0f3913f6e2c02262b95da0df99a249c6294b3f0c62cbbb52e82403f46f77b81f49724e24430e50e287", 0x35}, {&(0x7f00000008c0)="9038a36911145f1c695e0be9dbfc1e338b436d5d28300f8e6f2bf5c28497459f6f4e6d1e0497ab", 0x27}, {&(0x7f0000000900)="7a6625f3681cb5d1470663b192e9e2eecfa4789f92a85283e277f3b53ff314ec5013ba6141245c8ed04c23f999b1512dee68ce7eece69e54c5a48e706e74d5cdd7aed872b5038df53f60b8285413f95493976e2fd019cd09b72e67ea1bd497df09218c1064bb967fa17e67fe7fcbf520839ae624980294b551f13855259d8564fa573af83d3c998d9c9a6a5dc516675012f4240e8598c98982f2cb9e31df3a", 0x9f}], 0x3, &(0x7f0000000a00)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x5e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra, @enc_lim={0x4, 0x1, 0xcd}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xb0}, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}}}, @hopopts_2292={{0x1150, 0x29, 0x36, {0x42, 0x226, '\x00', [@ra={0x5, 0x2, 0x4}, @generic={0x81, 0xe1, "6506ab892dc59ff75d398a08c42521aa792a4eb0858b312e69e22a2648bc14a5bceb3e7df68f4d555df2ecb0ad8fe3c14f83f02d1103a45d030a3aae9a2f74e30673e6f9fd95dfa2f36d50716ea67e5e5597342b9562b9a492aeb11733ecc47b0fa71bd04a69cb75aebb62cd9c4692d431145c3841ed210fa095e3f223c360cb4a0d49ff75983abdebf5fd28809e865f392788003ad2958086280b664064d1fb3b3e5f180683419e33abe021f12190cb30f6c7b45c22e46a76be2ff966785d7c74a179c88583d451fac094d1f31bc974367e1b24d10ce6baf76e7b72110589cbdf"}, @jumbo={0xc2, 0x4, 0x81}, @pad1, @generic={0x4, 0x1000, "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"}, @generic={0x2, 0x40, "02483cc380e31540d103611aca39323326b0b80a75fa0fa6fd5a8a4cf2ea77ad0ef464b2aaaca7508f6256655b92284f5d82828df0fd674fdc6d53834fb90f79"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x33}, @pad1]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1248}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c80)="92d28a1f112ca27fca9ed9a79e41176966e27814fecb60fed7e5dcad88c260cfdb49470493d5c9d93cc719f0", 0x2c}], 0x1, &(0x7f0000001d00)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x70}}], 0x3, 0x40000)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000001e40)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001e80)={'tunl0\x00', <r4=>r1, 0x70b8, 0x7, 0x1, 0x5, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x65, 0x0, 0x30, 0x29, 0x0, @empty, @multicast2, {[@noop, @cipso={0x86, 0x16, 0xfffffffffffffffd, [{0x2, 0x10, "30be67d80c51f2bfd5bc8e3eb8d3"}]}, @cipso={0x86, 0x28, 0x2, [{0x6, 0xd, "4f733f3f29ed826bbc7868"}, {0x5, 0xa, "c3c3b60b3b54a8cf"}, {0x3, 0xb, "41953e3420090ddfb4"}]}, @generic={0x7, 0x5, "b5bfb8"}]}}}}})
r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000001f40)={0x27, <r6=>0x0}, &(0x7f0000001fc0)=0x60)
sendmmsg(r5, &(0x7f0000003900)=[{{&(0x7f0000002000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002080)="f4226e126d3c2751e3ae8e2fb01d", 0xe}, {&(0x7f00000020c0)="88575e4ab4ad043ae6fe7c8ae8a21f23f3740ebfc25a48201464434743d79a1722f9b970848c8c6571b762", 0x2b}, {&(0x7f0000002100)="648aae51a63a4bca2f33cff3a8ece5265091d692947a828b87ac9004def90e337c3d129d8f0ebddeae491fbf17e9e9de815247375307a4e3a97ce629b8e010f1ea5d", 0x42}, {&(0x7f0000002180)="5e6c5b7775459492653ae363e593f6768c36c99152045f91d831113e85196f8dc70439c87aa03d2bbaf11a7f69c927398298fb1a8fcf8c43e7c74ea0b8ffddbe688a9777139f235fbfa461df260b88d01ddc6747ee98bb2877182441269336cc50932417e0c76e36bf48ffae6e07ded186d17f1e376859", 0x77}, {&(0x7f0000002200)="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", 0xfe}, {&(0x7f0000002300)="bae142d7", 0x4}, {&(0x7f0000002340)="10be4824eac58a9067b51cf8955ea9a3ed6e8d659b37b6a104e78a02f27bd5e677f23aa3f482f937be7ae459fb0a0b9538daaf9df139b5e0228248ef5c88502365454d41b831782148d7bde7d8565e2808e2772e89c85d7c46035f15aac585ddba121f3d04e94539899dca436593d008076cfb113210c31c8546220284f410079bec8775d9a0e7bd98c511ebc7e01ea290b65854e24257d221511c859cfd59d430ff0a1113d27262eb5f0e92dff1d25570a08c50eef57059b42ea846a4af354cf629082e4bec277a860141ec46306c0542849715e480620ef4b43f4b0756d6b9959c07005c384797132e8683d660747f2a419f03b02f5412c2", 0xf9}, {0xffffffffffffffff}, {&(0x7f0000002440)="c944d1e26837adef5e81456d83097c59651c13a08ed468", 0x17}], 0x9, &(0x7f0000002540)=[{0xd8, 0x88, 0x58f, "5bdc18802af312d20f573c2d668af5cc6b9b1d78e40e1b264c9e30ad19a11ed3b181b58f908926c0e25acf419caea70fd0308be3039182f66b8009ff62425b3c5a20d4c231a40a461d019d4e54fa61a0fc739f14d5b9200481aa0d78b31a6511547a9de25ad306655bae0c0d3a2f3aa4d706ab54b122a704fc08b5367bcec811fe7a660fc8e974cd53668845ded444383929e5a5d86658ad3af5046b8356122b685b938942a4dc94520101bf08be61d231ebd569770fb2855d34beecde0469a1743e297b"}, {0xe8, 0x10f, 0x7d41, "15cf1378fcd3a049687a75529b65d76745a76b05d1e9f860a92e40156a7548f30d7bfa60acd19ef26ecdffcc2d2685dde448b5b0ac63141b0f0285cbe1be780b250a0e8bc85088a846d7d185e118cdef063579e15ee0315505f7a79ad68b3a77857071d260f3e1dc6a8e89c1986c9a619741fffc27e1a00e6e788dc7de93f3fb24bc4d3496861c03799089f8eee39a33321af82fb52a1016e3e828510c9ec6349c1f2a49308fb67f13525b7ce76b1df94e831198fafd62241198aeaa57916f7ac1696ede93395330219a651bd82e7e72b28370"}, {0x10, 0xff, 0x8a43}, {0x18, 0x102, 0x15a, "b9"}, {0xf8, 0x1, 0xee30, "acf947607b97ad4700b2e687a1fec41abffffcbf74dea558eda6f5ba0807c64091d5311c7450b2aa801f4557d2366f60579cc37a0ebde7a7dd3da334f26415b0ae8993d1998801b70239ceb0ab0986271a060f1f5391916128c408d38877d436106de0b1f665e96b75a97626e760de47c6e9bcbdf3f47a4fba59fdf00a1c5e2a6bf87392b8f5f9b325cae1286f873f8b396f0b7c4faf6006a6dd5931df1a7fc45a7fb7ab1628135501c940c4fc8a4624bd207cc42ca9510a12e985c0b000028cb89ba9dd5215948f667d6c2474da09e6b2b1433df30e7925b03bf17f7595c6bcd5a21d86873d"}, {0xb0, 0x107, 0x3ff, "8c673baeb2aa847fb167d71d81226f08654335bd2266d39b59363f440c44e526605628640c7b9a673b2c667643fd53e8e4a197db365392e2ab613e5f19f1a9ed68ba5f192d46fc8120055f9197419242722cf11d6f6c0411fc8f13f6cdb725ecb30ffa438b5bca59dbc264b2f613c0ee1bdf32cc8d6501722d8348da123a0d77b2881cfc36d363d553a467fdca5490baf637b853a14bedacc7caefd7"}, {0x1010, 0x112, 0x9, "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"}], 0x13a0}}], 0x1, 0x4040)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000003940)=0x5)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003b80)={&(0x7f0000003980)="c3d00fb11be68e7b76213a7a3a7c90", &(0x7f00000039c0)=""/136, &(0x7f0000003a80)="72276c74cd273e9109345eb35cf5dd4595", &(0x7f0000003ac0)="e27d9cf1ed2a0cbaf9a2b3c8a3fb3251a78920ee799e8d49a5ef9d513241f8b4e2b5c7304353d0266f9837a36facfdf8fe256c987f1799ab0e999a81e7a6281e8c14305b9832be3e88c70d4758f6cc927df2f3416184543449324998253c78ef44faed25ac3b478f3020f267a04cd93e31337d645ef88f7ede22bb3327428ae256040d21bce6d126163c77507d01f157305f889dffd22c746f1aadcb1187abb0605ffed594128235fcbe0c3d", 0x4, r3, 0x4}, 0x38)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000003bc0)={0x2, [0x0, 0x0]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)=@ipv4_deladdr={0x20, 0x15, 0x300, 0x70bd27, 0x25dfdbff, {0x2, 0x40, 0x29, 0xc8, r4}, [@IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c040}, 0x4004)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000003d00)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x7}, @ioring_restriction_sqe_op={0x1, 0x1f}, @ioring_restriction_sqe_flags_required={0x3, 0x1b}, @ioring_restriction_register_op={0x0, 0x1b}, @ioring_restriction_sqe_flags_allowed={0x2, 0x39}], 0x5)
accept$nfc_llcp(r0, &(0x7f0000003d80)={0x27, <r7=>0x0}, &(0x7f0000003e00)=0x60)
recvmsg(r0, &(0x7f0000004380)={&(0x7f0000003e40)=@isdn, 0x80, &(0x7f0000004280)=[{&(0x7f0000003ec0)=""/155, 0x9b}, {&(0x7f0000003f80)=""/30, 0x1e}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)}, {&(0x7f0000004040)=""/147, 0x93}, {&(0x7f0000004100)=""/167, 0xa7}, {&(0x7f00000041c0)=""/61, 0x3d}, {&(0x7f0000004200)=""/66, 0x42}], 0x8, &(0x7f0000004300)=""/86, 0x56}, 0x2000)
clock_gettime(0x0, &(0x7f0000004480)={<r8=>0x0, <r9=>0x0})
pselect6(0x40, &(0x7f00000043c0)={0x7fffffffffffffff, 0xbc13, 0x61, 0xc, 0x1, 0x7, 0x7, 0x6}, &(0x7f0000004400)={0x1, 0x4, 0x7fff, 0x4, 0x4, 0x3, 0xffff, 0x1}, &(0x7f0000004440)={0x7, 0xfffffffffffffff7, 0x81, 0x8001, 0x4, 0xb14, 0x0, 0x5}, &(0x7f00000044c0)={r8, r9+10000000}, &(0x7f0000004540)={&(0x7f0000004500), 0x8})
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000004580)={0xb})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000004600), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_SDREQ(r10, &(0x7f0000004ac0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004a80)={&(0x7f0000004640)={0x434, r11, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x6, 0x1, '%:'}, {0x9, 0x1, '{%*/^'}, {0x34, 0x1, '/sys/kernel/debug/binder/failed_transaction_log\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x2bc, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x12, 0x1, 'morus640-sse2\x00'}, {0xd, 0x1, '.$\'\'[(&-\xd6'}]}, {0x54, 0x0, 0x0, 0x1, [{0x12, 0x1, 'morus640-sse2\x00'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x7, 0x1, ')\\-'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'tunl0\x00'}, {0x34, 0x1, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, {0xc, 0x1, '[\x0e($(-,,'}, {0x9, 0x1, 'aead\x00'}]}, {0x88, 0x0, 0x0, 0x1, [{0x9, 0x1, '/\'B\\{'}, {0x9, 0x1, 'aead\x00'}, {0x5, 0x1, '#'}, {0x9, 0x1, 'aead\x00'}, {0xd, 0x1, '#$**\x13\\*.#'}, {0x6, 0x1, '\'^'}, {0x34, 0x1, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, {0xa, 0x1, 'tunl0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}]}, {0x50, 0x0, 0x0, 0x1, [{0x34, 0x1, '/sys/kernel/debug/binder/failed_transaction_log\x00'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x4}]}, {0x74, 0x0, 0x0, 0x1, [{0x10, 0x1, '!+--$(8-.\\*+'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x5, 0x1, '\x00'}, {0x11, 0x1, ')\\\\)#(!\xcf\'\'([\x7f'}, {0xa, 0x1, '{\xee^{\\#'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '#'}]}, {0x30, 0x0, 0x0, 0x1, [{0x6, 0x1, '{+'}, {0x7, 0x1, '\xee\'.'}, {0x4}, {0x5, 0x1, '\x00'}, {0x5, 0x1, ','}, {0x5, 0x1, '['}]}, {0x4c, 0x0, 0x0, 0x1, [{0xc, 0x1, '*-@/[\xe0{#'}, {0xf, 0x1, '+)\xcf#.\xbf}}#!,'}, {0xe, 0x1, '%-[-#%[{\xc4#'}, {0x9, 0x1, '[%&+['}, {0x4}, {0x4}, {0x6, 0x1, '{)'}]}]}, @NFC_ATTR_LLC_SDP={0xac, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'tunl0\x00'}, {0xc, 0x1, 'syztnl2\x00'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, 'aead\x00'}, {0xa, 0x1, 'tunl0\x00'}, {0x5, 0x1, '&'}, {0x12, 0x1, 'morus640-sse2\x00'}, {0x9, 0x1, '}#(.{'}]}, {0x34, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0xc, 0x1, 'syztnl2\x00'}, {0x9, 0x1, 'aead\x00'}, {0x7, 0x1, '&-+'}, {0x5, 0x1, '/'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x58, 0x13, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, 'tunl0\x00'}, {0xb, 0x1, '$\'-\xa5//:'}, {0xa, 0x1, 'tunl0\x00'}, {0x4}, {0xc, 0x1, 'syztnl2\x00'}, {0xa, 0x1, 'tunl0\x00'}, {0xb, 0x1, ')]\x8b[\')-'}, {0x4}]}]}]}, 0x434}, 0x1, 0x0, 0x0, 0xc921}, 0x8000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000004b00)={<r12=>0x0, <r13=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000004b80)={r12, 0x2, r3, 0x200, 0x80000})
socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$media(&(0x7f0000004bc0), 0x5, 0x80002)
r14 = syz_open_procfs(r13, &(0x7f0000004c00)='net/tcp6\x00')
ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000004c40)=0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000004cc0)={0x6, &(0x7f0000004c80)=[{0x5, 0x2, 0x3}, {0x5, 0x4, 0xb, 0x2}, {0x9, 0x10, 0x7, 0x6}, {0x5, 0xff, 0x9, 0x1d}, {0x7, 0x13, 0x2, 0xfffffffc}, {0x3, 0x73, 0x1, 0x7f}]})

549.745808ms ago: executing program 4 (id=1522):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) (fail_nth: 3)

444.134557ms ago: executing program 1 (id=1523):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240", @ANYRES64], 0x122}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f0000000000)=0x8328be7a30208093)
r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r9, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r9, @ANYRES64=r9, @ANYRESOCT=r9, @ANYBLOB="4a7cbe2d26c24f31b71fb858fe7270d1f26c315bce4c2e09a8c105cc3c6f01f1699b134c6aeca28bdd5fd5e74b91f75c045709d1d528dcb38478d12d7b4b3c495d6157b81b380b4db330d5"], 0x69)
close(r9)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})

363.51824ms ago: executing program 3 (id=1524):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000b0000000800000022", @ANYRES32], 0x50)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x440, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

363.210305ms ago: executing program 0 (id=1525):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
personality(0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x3a)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
gettid()
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x1000, 0x0, 0x207}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x74, 0x0, @fd, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/99, 0x63}], 0x1, 0x4, 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

0s ago: executing program 4 (id=1526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r0)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250a5d5de80c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x840) (fail_nth: 4)

kernel console output (not intermixed with test programs):

: Injecting HCI hardware error event
[  287.291443][ T5140] Bluetooth: hci0: hardware error 0x00
[  287.664448][   T30] audit: type=1400 audit(1750061003.701:710): avc:  denied  { setopt } for  pid=9471 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  288.100673][ T5870] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  288.286957][ T5870] usb 3-1: config 8 has an invalid interface number: 177 but max is 0
[  288.298111][ T5870] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  288.321333][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'.
[  288.365205][ T5870] usb 3-1: config 8 has no interface number 0
[  288.427029][ T5870] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  288.479801][ T5870] usb 3-1: config 8 interface 177 has no altsetting 0
[  288.488540][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  288.514237][ T9485] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1045'.
[  288.551949][ T9482] wg2: entered promiscuous mode
[  288.556924][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.591810][   T30] audit: type=1400 audit(1750061004.621:711): avc:  denied  { create } for  pid=9480 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  288.646553][   T30] audit: type=1400 audit(1750061004.661:712): avc:  denied  { sys_admin } for  pid=9480 comm="syz.1.1042" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  288.647044][ T5870] ir_toy 3-1:8.177: required endpoints not found
[  288.926217][   T30] audit: type=1400 audit(1750061004.861:713): avc:  denied  { setopt } for  pid=9486 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  289.112450][ T5870] usb 3-1: USB disconnect, device number 24
[  289.181352][ T9482] lo speed is unknown, defaulting to 1000
[  289.388563][   T30] audit: type=1400 audit(1750061005.421:714): avc:  denied  { read } for  pid=9493 comm="syz.4.1047" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  289.495497][ T9496] sctp: [Deprecated]: syz.0.1048 (pid 9496) Use of int in maxseg socket option.
[  289.495497][ T9496] Use struct sctp_assoc_value instead
[  289.523752][ T5140] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  289.532851][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  289.542930][   T30] audit: type=1400 audit(1750061005.421:715): avc:  denied  { open } for  pid=9493 comm="syz.4.1047" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  289.721501][   T30] audit: type=1400 audit(1750061005.701:716): avc:  denied  { ioctl } for  pid=9493 comm="syz.4.1047" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  289.793223][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.166455][ T5930] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  290.528963][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.608385][ T5930] usb 4-1: config 0 descriptor??
[  290.609938][ T9508] netlink: 'syz.4.1050': attribute type 10 has an invalid length.
[  290.627624][ T9508] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  291.497720][ T5930] elecom 0003:056E:011C.0006: unknown main item tag 0x0
[  291.796971][ T5930] elecom 0003:056E:011C.0006: item fetching failed at offset 4/7
[  291.940731][ T5930] elecom 0003:056E:011C.0006: probe with driver elecom failed with error -22
[  292.653938][ T5930] usb 4-1: USB disconnect, device number 17
[  293.273876][   T30] audit: type=1400 audit(1750061009.311:717): avc:  denied  { getopt } for  pid=9535 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  293.521611][   T30] audit: type=1400 audit(1750061009.561:718): avc:  denied  { bind } for  pid=9543 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  293.804785][ T5930] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  294.342568][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  294.444887][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  294.458828][ T5930] usb 1-1: config index 0 descriptor too short (expected 29970, got 18)
[  294.482642][ T5930] usb 1-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  294.517892][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 168
[  294.529097][   T10] usb 5-1: config 12 has an invalid interface number: 223 but max is 0
[  294.553552][   T10] usb 5-1: config 12 has no interface number 0
[  294.563870][ T5930] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  294.577271][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.589750][ T5930] usb 1-1: Product: syz
[  294.597629][   T10] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=55.7a
[  294.608244][ T5930] usb 1-1: Manufacturer: syz
[  294.613206][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.643209][ T5930] usb 1-1: SerialNumber: syz
[  294.773424][ T9561] sch_fq: defrate 0 ignored.
[  294.793805][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  294.801904][   T10] usb 5-1: Product: syz
[  294.806071][   T10] usb 5-1: Manufacturer: syz
[  294.816615][ T5930] usb 1-1: config 0 descriptor??
[  294.822150][   T10] usb 5-1: SerialNumber: syz
[  294.829101][ T5930] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  294.843334][ T5930] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27
[  294.853901][   T10] usbserial_generic 5-1:12.223: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  294.990743][    T9] usb 2-1: Using ep0 maxpacket: 8
[  295.024954][   T10] usbserial_generic 5-1:12.223: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  295.086681][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.194635][   T30] audit: type=1326 audit(1750061011.141:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.4.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3444d8e929 code=0x0
[  295.422409][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.434981][   T10] usbserial_generic 5-1:12.223: device has no bulk endpoints
[  295.465782][   T30] audit: type=1400 audit(1750061011.261:720): avc:  denied  { execmem } for  pid=9543 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  295.486558][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.490911][   T30] audit: type=1400 audit(1750061011.351:721): avc:  denied  { create } for  pid=9568 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  295.538423][   T30] audit: type=1400 audit(1750061011.351:722): avc:  denied  { create } for  pid=9568 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  295.558647][   T30] audit: type=1400 audit(1750061011.351:723): avc:  denied  { prog_load } for  pid=9568 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.599230][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.967920][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.978270][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.991456][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  296.000521][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.078804][ T9571] infiniband syz!: set active
[  296.083688][ T9571] infiniband syz!: added team_slave_0
[  296.115611][ T9571] RDS/IB: syz!: added
[  296.119635][ T9571] smc: adding ib device syz! with port count 1
[  296.126297][ T9571] smc:    ib device syz! port 1 has pnetid 
[  296.676282][   T30] audit: type=1400 audit(1750061011.351:724): avc:  denied  { bpf } for  pid=9568 comm="syz.3.1067" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  297.001127][   T30] audit: type=1400 audit(1750061011.521:725): avc:  denied  { read write } for  pid=9541 comm="syz.0.1059" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  297.039540][ T5893] usb 1-1: USB disconnect, device number 21
[  297.152950][   T30] audit: type=1400 audit(1750061011.521:726): avc:  denied  { open } for  pid=9541 comm="syz.0.1059" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  297.181297][    T9] usb 2-1: usb_control_msg returned -71
[  297.194713][    T9] usbtmc 2-1:16.0: can't read capabilities
[  297.688754][    T9] usb 2-1: USB disconnect, device number 15
[  297.702363][   T30] audit: type=1400 audit(1750061011.521:727): avc:  denied  { ioctl } for  pid=9541 comm="syz.0.1059" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  297.738095][  T870] usb 5-1: USB disconnect, device number 23
[  297.746142][   T30] audit: type=1400 audit(1750061011.551:728): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3196 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  299.370070][   T42] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  299.570828][   T42] usb 4-1: Using ep0 maxpacket: 8
[  299.582520][   T42] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  299.620864][   T42] usb 4-1: config 0 has no interface number 0
[  299.635100][   T42] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  299.855629][ T9614] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1078'.
[  300.104804][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.115313][   T42] usb 4-1: config 0 descriptor??
[  300.373934][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.411189][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.420553][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.433877][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.476632][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  300.476645][   T30] audit: type=1400 audit(1750061016.511:785): avc:  denied  { create } for  pid=9618 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  300.480792][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.511643][   T30] audit: type=1400 audit(1750061016.551:786): avc:  denied  { ioctl } for  pid=9616 comm="syz.1.1079" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  300.663606][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.225967][   T30] audit: type=1400 audit(1750061017.261:787): avc:  denied  { ioctl } for  pid=9607 comm="syz.0.1077" path="/dev/vhost-net" dev="devtmpfs" ino=1275 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  301.318546][ T9628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9628 comm=syz.2.1081
[  301.449573][   T30] audit: type=1400 audit(1750061017.291:788): avc:  denied  { prog_load } for  pid=9625 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  301.484449][    T9] usb 4-1: USB disconnect, device number 18
[  301.658507][   T30] audit: type=1400 audit(1750061017.291:789): avc:  denied  { bpf } for  pid=9625 comm="syz.2.1081" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  301.700474][   T30] audit: type=1400 audit(1750061017.291:790): avc:  denied  { perfmon } for  pid=9625 comm="syz.2.1081" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  301.908660][   T30] audit: type=1400 audit(1750061017.351:791): avc:  denied  { read append } for  pid=9625 comm="syz.2.1081" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  302.086280][   T30] audit: type=1400 audit(1750061017.351:792): avc:  denied  { open } for  pid=9625 comm="syz.2.1081" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  302.684145][   T30] audit: type=1400 audit(1750061017.441:793): avc:  denied  { ioctl } for  pid=9600 comm="syz.4.1074" path="/dev/video5" dev="devtmpfs" ino=938 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  302.845322][   T30] audit: type=1400 audit(1750061017.661:794): avc:  denied  { prog_run } for  pid=9625 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  303.038016][ T9642] FAULT_INJECTION: forcing a failure.
[  303.038016][ T9642] name failslab, interval 1, probability 0, space 0, times 0
[  303.050921][ T9642] CPU: 0 UID: 0 PID: 9642 Comm: syz.4.1085 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  303.050937][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.050944][ T9642] Call Trace:
[  303.050948][ T9642]  <TASK>
[  303.050952][ T9642]  dump_stack_lvl+0x16c/0x1f0
[  303.050972][ T9642]  should_fail_ex+0x512/0x640
[  303.050987][ T9642]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  303.051003][ T9642]  should_failslab+0xc2/0x120
[  303.051019][ T9642]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  303.051033][ T9642]  ? mas_alloc_nodes+0x18b/0x8b0
[  303.051050][ T9642]  mas_alloc_nodes+0x18b/0x8b0
[  303.051067][ T9642]  mas_node_count_gfp+0x105/0x130
[  303.051083][ T9642]  mas_preallocate+0x77b/0xda0
[  303.051096][ T9642]  ? __pfx_mas_preallocate+0x10/0x10
[  303.051111][ T9642]  ? anon_vma_name+0x75/0x100
[  303.051136][ T9642]  __split_vma+0x34a/0x1070
[  303.051151][ T9642]  ? __pfx___split_vma+0x10/0x10
[  303.051163][ T9642]  ? mas_next_slot+0x12d3/0x21b0
[  303.051180][ T9642]  vms_gather_munmap_vmas+0x392/0x1310
[  303.051196][ T9642]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  303.051209][ T9642]  ? is_bpf_text_address+0x8a/0x1a0
[  303.051223][ T9642]  ? bpf_ksym_find+0x127/0x1c0
[  303.051238][ T9642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  303.051253][ T9642]  ? is_bpf_text_address+0x94/0x1a0
[  303.051266][ T9642]  ? kernel_text_address+0x8d/0x100
[  303.051277][ T9642]  ? __kernel_text_address+0xd/0x40
[  303.051291][ T9642]  do_vmi_align_munmap+0x27c/0x7d0
[  303.051306][ T9642]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  303.051338][ T9642]  do_vmi_munmap+0x204/0x3e0
[  303.051354][ T9642]  do_munmap+0xbd/0x100
[  303.051364][ T9642]  ? __pfx_do_munmap+0x10/0x10
[  303.051378][ T9642]  ? __pfx_down_write_killable+0x10/0x10
[  303.051393][ T9642]  __do_sys_mremap+0xfe7/0x1590
[  303.051409][ T9642]  ? __pfx___do_sys_mremap+0x10/0x10
[  303.051423][ T9642]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  303.051441][ T9642]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  303.051460][ T9642]  ? __fget_files+0x20e/0x3c0
[  303.051485][ T9642]  do_syscall_64+0xcd/0x4c0
[  303.051503][ T9642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.051514][ T9642] RIP: 0033:0x7f3444d8e929
[  303.051523][ T9642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.051534][ T9642] RSP: 002b:00007f3445b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  303.051544][ T9642] RAX: ffffffffffffffda RBX: 00007f3444fb5fa0 RCX: 00007f3444d8e929
[  303.051551][ T9642] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000
[  303.051557][ T9642] RBP: 00007f3445b3f090 R08: 0000200000a00000 R09: 0000000000000000
[  303.051564][ T9642] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  303.051570][ T9642] R13: 0000000000000000 R14: 00007f3444fb5fa0 R15: 00007ffdf8c6f588
[  303.051583][ T9642]  </TASK>
[  303.344098][   T42] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  303.520775][   T42] usb 1-1: Using ep0 maxpacket: 8
[  303.538248][   T42] usb 1-1: config index 0 descriptor too short (expected 29970, got 18)
[  303.568533][   T42] usb 1-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  303.581523][   T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 168
[  303.603581][ T9658] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  303.611571][   T42] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  303.629717][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.659287][   T42] usb 1-1: Product: syz
[  303.659308][   T42] usb 1-1: Manufacturer: syz
[  303.659323][   T42] usb 1-1: SerialNumber: syz
[  303.665760][   T42] usb 1-1: config 0 descriptor??
[  303.685432][   T42] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  303.698724][   T42] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28
[  303.851018][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  303.853030][ T9665] Cannot find set identified by id 0 to match
[  304.039767][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.041499][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.737635][ T9678] wg1: entered promiscuous mode
[  304.742684][ T9678] wg1: entered allmulticast mode
[  304.902260][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.909810][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.489484][ T9679] bridge0: entered allmulticast mode
[  305.510761][  T870] usb 1-1: USB disconnect, device number 22
[  305.608331][ T9677] bridge_slave_1: left allmulticast mode
[  305.649145][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  305.649161][   T30] audit: type=1400 audit(1750061021.681:844): avc:  denied  { create } for  pid=9680 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  305.678705][ T9677] bridge_slave_1: left promiscuous mode
[  305.694172][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.714199][   T30] audit: type=1400 audit(1750061021.681:845): avc:  denied  { write } for  pid=9680 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  305.745005][ T9683] netlink: 'syz.3.1097': attribute type 2 has an invalid length.
[  305.746188][ T9677] bridge_slave_0: left allmulticast mode
[  305.769921][ T9677] bridge_slave_0: left promiscuous mode
[  305.779707][   T30] audit: type=1400 audit(1750061021.781:846): avc:  denied  { create } for  pid=9682 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  305.805632][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.837627][ T9684] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1094'.
[  305.940668][    T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  306.075188][ T9683] : entered promiscuous mode
[  306.123738][    T9] usb 3-1: config 0 has an invalid interface number: 27 but max is 0
[  306.132028][    T9] usb 3-1: config 0 has no interface number 0
[  306.140921][    T9] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  306.175465][    T9] usb 3-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.208745][    T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  306.238712][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.321694][    T9] usb 3-1: config 0 descriptor??
[  306.372141][   T30] audit: type=1400 audit(1750061022.411:847): avc:  denied  { read } for  pid=9690 comm="syz.1.1100" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  306.448561][   T30] audit: type=1400 audit(1750061022.431:848): avc:  denied  { open } for  pid=9690 comm="syz.1.1100" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  306.473725][   T30] audit: type=1400 audit(1750061022.441:849): avc:  denied  { ioctl } for  pid=9690 comm="syz.1.1100" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  306.520657][   T30] audit: type=1400 audit(1750061022.541:850): avc:  denied  { create } for  pid=9692 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.580883][   T30] audit: type=1400 audit(1750061022.541:851): avc:  denied  { ioctl } for  pid=9692 comm="syz.0.1102" path="socket:[26320]" dev="sockfs" ino=26320 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.782927][   T30] audit: type=1400 audit(1750061022.701:852): avc:  denied  { create } for  pid=9697 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  306.804140][   T30] audit: type=1400 audit(1750061022.761:853): avc:  denied  { execute } for  pid=9693 comm="syz.3.1101" name="file2" dev="tmpfs" ino=1221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  306.845874][    T9] uclogic 0003:256C:006D.0007: interface is invalid, ignoring
[  307.107379][    T9] usb 3-1: USB disconnect, device number 25
[  307.386062][ T9712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1105'.
[  308.681002][ T9730] netlink: 'syz.3.1110': attribute type 10 has an invalid length.
[  309.064471][ T9730] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  309.815399][ T9746] QAT: Device 7 not found
[  309.975153][ T9747] tipc: Started in network mode
[  309.980014][ T9747] tipc: Node identity fa3db133a837, cluster identity 4711
[  309.988214][ T9747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.951606][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  310.951637][   T30] audit: type=1400 audit(1750061026.981:894): avc:  denied  { create } for  pid=9748 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.334829][  T870] tipc: Node number set to 1376432435
[  311.669861][   T30] audit: type=1400 audit(1750061026.981:895): avc:  denied  { write } for  pid=9748 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.700849][   T30] audit: type=1400 audit(1750061026.981:896): avc:  denied  { nlmsg_write } for  pid=9748 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  311.759701][   T30] audit: type=1400 audit(1750061027.781:897): avc:  denied  { create } for  pid=9755 comm="syz.3.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  312.256764][   T30] audit: type=1400 audit(1750061028.131:898): avc:  denied  { write } for  pid=9755 comm="syz.3.1120" path="socket:[26403]" dev="sockfs" ino=26403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  312.608695][   T30] audit: type=1400 audit(1750061028.641:899): avc:  denied  { mount } for  pid=9777 comm="syz.3.1124" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  312.679734][   T30] audit: type=1400 audit(1750061028.711:900): avc:  denied  { create } for  pid=9779 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  312.679986][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'.
[  312.727111][   T30] audit: type=1400 audit(1750061028.711:901): avc:  denied  { connect } for  pid=9779 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  312.793648][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'.
[  313.093003][  T870] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  313.779739][  T870] usb 3-1: no configurations
[  313.798914][  T870] usb 3-1: can't read configurations, error -22
[  313.935717][   T30] audit: type=1400 audit(1750061029.971:902): avc:  denied  { name_bind } for  pid=9792 comm="syz.4.1127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  314.006060][  T870] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  314.040634][   T30] audit: type=1400 audit(1750061029.991:903): avc:  denied  { node_bind } for  pid=9792 comm="syz.4.1127" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  314.399509][  T870] usb 3-1: no configurations
[  314.404394][  T870] usb 3-1: can't read configurations, error -22
[  314.413632][  T870] usb usb3-port1: attempt power cycle
[  314.470485][ T9801] ieee802154 phy1 wpan1: encryption failed: -22
[  314.973039][  T870] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  315.706236][ T9816] netlink: 'syz.4.1136': attribute type 10 has an invalid length.
[  315.745936][ T9816] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  315.883708][  T870] usb 3-1: device descriptor read/8, error -71
[  316.314836][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  316.314851][   T30] audit: type=1400 audit(1750061032.351:912): avc:  denied  { getopt } for  pid=9830 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  316.395112][ T9835] Cannot find set identified by id 0 to match
[  316.540756][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  316.641070][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  316.779169][   T30] audit: type=1400 audit(1750061032.811:913): avc:  denied  { read write } for  pid=9836 comm="syz.4.1144" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  316.805646][   T30] audit: type=1400 audit(1750061032.851:914): avc:  denied  { open } for  pid=9836 comm="syz.4.1144" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  316.805800][ T9837] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  316.840071][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.884818][   T30] audit: type=1400 audit(1750061032.921:915): avc:  denied  { ioctl } for  pid=9838 comm="syz.1.1145" path="socket:[27612]" dev="sockfs" ino=27612 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  316.924135][ T9839] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  316.930750][    T9] usb 4-1: Using ep0 maxpacket: 8
[  316.938620][    T9] usb 4-1: config index 0 descriptor too short (expected 29970, got 18)
[  316.947527][    T9] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  316.955612][ T9839] kvm: pic: non byte read
[  316.956536][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168
[  316.963922][ T9839] kvm: pic: level sensitive irq not supported
[  316.979040][ T9839] kvm: pic: non byte read
[  316.988238][    T9] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  317.056983][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.082457][    T9] usb 4-1: Product: syz
[  317.095472][    T9] usb 4-1: Manufacturer: syz
[  317.107555][    T9] usb 4-1: SerialNumber: syz
[  317.108982][ T9839] kvm: pic: single mode not supported
[  317.114037][ T9839] kvm: pic: level sensitive irq not supported
[  317.124243][    T9] usb 4-1: config 0 descriptor??
[  317.141976][    T9] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  317.152340][    T9] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30
[  317.166850][   T30] audit: type=1400 audit(1750061033.191:916): avc:  denied  { unlink } for  pid=9843 comm="syz.2.1146" name="#18" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  317.200902][ T9839] kvm: pic: non byte read
[  317.205799][ T9839] kvm: pic: non byte read
[  317.213801][ T9839] kvm: pic: non byte read
[  317.233194][ T9839] kvm: pic: single mode not supported
[  317.233257][ T9839] kvm: pic: non byte read
[  317.249491][ T9839] kvm: pic: non byte read
[  317.256201][ T9839] kvm: pic: non byte read
[  317.263333][ T9839] kvm: pic: non byte read
[  317.268064][ T9839] kvm: pic: non byte read
[  317.276150][ T9839] kvm: pic: single mode not supported
[  317.276179][ T9839] kvm: pic: level sensitive irq not supported
[  317.283589][ T9839] kvm: pic: level sensitive irq not supported
[  317.308252][ T9839] kvm: pic: single mode not supported
[  317.318875][ T9839] kvm: pic: single mode not supported
[  317.341488][   T30] audit: type=1400 audit(1750061033.231:917): avc:  denied  { mount } for  pid=9843 comm="syz.2.1146" name="/" dev="overlay" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  317.359991][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.378459][ T9839] kvm: pic: level sensitive irq not supported
[  317.378626][ T9839] kvm: pic: single mode not supported
[  317.384860][ T9839] kvm: pic: level sensitive irq not supported
[  317.396514][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.411461][ T9839] kvm: pic: single mode not supported
[  317.411479][ T9839] kvm: pic: level sensitive irq not supported
[  317.908569][   T30] audit: type=1400 audit(1750061033.521:918): avc:  denied  { create } for  pid=9843 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  318.080656][   T30] audit: type=1400 audit(1750061033.521:919): avc:  denied  { getopt } for  pid=9843 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  318.121785][   T30] audit: type=1400 audit(1750061033.991:920): avc:  denied  { setopt } for  pid=9851 comm="syz.0.1148" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  318.200358][   T30] audit: type=1400 audit(1750061034.101:921): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  318.220870][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1149'.
[  318.752811][ T9870] FAULT_INJECTION: forcing a failure.
[  318.752811][ T9870] name failslab, interval 1, probability 0, space 0, times 0
[  318.765835][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.2.1150 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  318.765859][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  318.765869][ T9870] Call Trace:
[  318.765875][ T9870]  <TASK>
[  318.765882][ T9870]  dump_stack_lvl+0x16c/0x1f0
[  318.765916][ T9870]  should_fail_ex+0x512/0x640
[  318.765938][ T9870]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  318.765961][ T9870]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[  318.765982][ T9870]  should_failslab+0xc2/0x120
[  318.766007][ T9870]  __kmalloc_cache_noprof+0x6a/0x3e0
[  318.766026][ T9870]  ? hugetlb_vma_lock_alloc+0xbc/0x1f0
[  318.766049][ T9870]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[  318.766069][ T9870]  hugetlb_vma_lock_alloc+0xbc/0x1f0
[  318.766090][ T9870]  hugetlb_vm_op_open+0x26c/0x5b0
[  318.766120][ T9870]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[  318.766140][ T9870]  __split_vma+0x748/0x1070
[  318.766164][ T9870]  ? __pfx___split_vma+0x10/0x10
[  318.766181][ T9870]  ? mas_next_slot+0x12d3/0x21b0
[  318.766211][ T9870]  vms_gather_munmap_vmas+0x392/0x1310
[  318.766237][ T9870]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  318.766273][ T9870]  do_vmi_align_munmap+0x27c/0x7d0
[  318.766299][ T9870]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  318.766356][ T9870]  do_vmi_munmap+0x204/0x3e0
[  318.766382][ T9870]  do_munmap+0xbd/0x100
[  318.766399][ T9870]  ? __pfx_do_munmap+0x10/0x10
[  318.766414][ T9870]  ? lockdep_hardirqs_on+0x7c/0x110
[  318.766445][ T9870]  ? __do_sys_mremap+0xb96/0x1590
[  318.766470][ T9870]  __do_sys_mremap+0xfe7/0x1590
[  318.766494][ T9870]  ? __pfx___do_sys_mremap+0x10/0x10
[  318.766515][ T9870]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  318.766543][ T9870]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  318.766572][ T9870]  ? __fget_files+0x20e/0x3c0
[  318.766613][ T9870]  do_syscall_64+0xcd/0x4c0
[  318.766642][ T9870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.766660][ T9870] RIP: 0033:0x7fce9458e929
[  318.766674][ T9870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.766691][ T9870] RSP: 002b:00007fce9547c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  318.766707][ T9870] RAX: ffffffffffffffda RBX: 00007fce947b6160 RCX: 00007fce9458e929
[  318.766718][ T9870] RDX: 0000000000200000 RSI: 0000000000600a00 RDI: 0000200000000000
[  318.766728][ T9870] RBP: 00007fce9547c090 R08: 0000200000a00000 R09: 0000000000000000
[  318.766739][ T9870] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  318.766749][ T9870] R13: 0000000000000001 R14: 00007fce947b6160 R15: 00007ffd65df87b8
[  318.766770][ T9870]  </TASK>
[  318.767083][ T9870] HugeTLB: unable to allocate vma specific lock
[  319.105326][ T9872] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.266342][    T9] usb 4-1: USB disconnect, device number 19
[  319.811954][ T9872] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.886780][ T9880] FAULT_INJECTION: forcing a failure.
[  319.886780][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.913945][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.3.1155 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  319.913971][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  319.913982][ T9880] Call Trace:
[  319.913988][ T9880]  <TASK>
[  319.913994][ T9880]  dump_stack_lvl+0x16c/0x1f0
[  319.914025][ T9880]  should_fail_ex+0x512/0x640
[  319.914052][ T9880]  _copy_from_user+0x2e/0xd0
[  319.914076][ T9880]  ? __pfx_do_get_msr+0x10/0x10
[  319.914101][ T9880]  msr_io+0x93/0x2a0
[  319.914121][ T9880]  ? __pfx_msr_io+0x10/0x10
[  319.914138][ T9880]  ? arch_stack_walk+0xa6/0x100
[  319.914164][ T9880]  kvm_arch_vcpu_ioctl+0x7fb/0x5120
[  319.914181][ T9880]  ? kvm_arch_vcpu_ioctl+0x7d2/0x5120
[  319.914200][ T9880]  ? stack_trace_save+0x8e/0xc0
[  319.914223][ T9880]  ? stack_depot_save_flags+0x28/0xa40
[  319.914247][ T9880]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  319.914264][ T9880]  ? __lock_acquire+0xb8a/0x1c90
[  319.914292][ T9880]  ? kasan_save_stack+0x42/0x60
[  319.914313][ T9880]  ? kasan_save_stack+0x33/0x60
[  319.914333][ T9880]  ? kasan_save_track+0x14/0x30
[  319.914352][ T9880]  ? kasan_save_free_info+0x3b/0x60
[  319.914369][ T9880]  ? __kasan_slab_free+0x51/0x70
[  319.914390][ T9880]  ? kfree+0x2b4/0x4d0
[  319.914406][ T9880]  ? tomoyo_path_number_perm+0x470/0x580
[  319.914425][ T9880]  ? security_file_ioctl+0x9b/0x240
[  319.914447][ T9880]  ? __x64_sys_ioctl+0xb7/0x210
[  319.914466][ T9880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.914487][ T9880]  ? __lock_acquire+0xb8a/0x1c90
[  319.914521][ T9880]  ? __mutex_trylock_common+0xe9/0x250
[  319.914549][ T9880]  ? __pfx___mutex_trylock_common+0x10/0x10
[  319.914578][ T9880]  ? __pfx___might_resched+0x10/0x10
[  319.914601][ T9880]  ? rcu_is_watching+0x12/0xc0
[  319.914622][ T9880]  ? trace_contention_end+0xdd/0x130
[  319.914649][ T9880]  ? __mutex_lock+0x1ca/0xb90
[  319.914677][ T9880]  ? kvm_vcpu_ioctl+0x280/0x1690
[  319.914700][ T9880]  ? __pfx___mutex_lock+0x10/0x10
[  319.914734][ T9880]  ? tomoyo_path_number_perm+0x18d/0x580
[  319.914759][ T9880]  ? kvm_vcpu_ioctl+0x1236/0x1690
[  319.914776][ T9880]  kvm_vcpu_ioctl+0x1236/0x1690
[  319.914799][ T9880]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  319.914827][ T9880]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  319.914853][ T9880]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  319.914885][ T9880]  ? hook_file_ioctl_common+0x145/0x410
[  319.914910][ T9880]  ? selinux_file_ioctl+0x180/0x270
[  319.914937][ T9880]  ? selinux_file_ioctl+0xb4/0x270
[  319.914962][ T9880]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  319.914983][ T9880]  __x64_sys_ioctl+0x18e/0x210
[  319.915005][ T9880]  do_syscall_64+0xcd/0x4c0
[  319.915032][ T9880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.915049][ T9880] RIP: 0033:0x7faaa998e929
[  319.915064][ T9880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.915080][ T9880] RSP: 002b:00007faaaa806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  319.915097][ T9880] RAX: ffffffffffffffda RBX: 00007faaa9bb5fa0 RCX: 00007faaa998e929
[  319.915108][ T9880] RDX: 0000200000000000 RSI: 00000000c008ae88 RDI: 0000000000000005
[  319.915118][ T9880] RBP: 00007faaaa806090 R08: 0000000000000000 R09: 0000000000000000
[  319.915128][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.915138][ T9880] R13: 0000000000000000 R14: 00007faaa9bb5fa0 R15: 00007fff9f5489c8
[  319.915159][ T9880]  </TASK>
[  320.252971][    C0] vkms_vblank_simulate: vblank timer overrun
[  320.316949][ T9872] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.392009][ T9872] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.900236][ T9872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.940130][ T9872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.980731][ T9872] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.015587][ T9872] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.128800][ T9900] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1163'.
[  321.275105][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  321.336969][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  321.337096][   T30] audit: type=1400 audit(1750061037.381:929): avc:  denied  { listen } for  pid=9904 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  321.395824][ T9906] Cannot find set identified by id 0 to match
[  321.848653][ T9905] pimreg: entered allmulticast mode
[  321.866218][ T9905] pimreg: left allmulticast mode
[  321.890628][    T9] usb 3-1: Using ep0 maxpacket: 16
[  321.896401][    T9] usb 3-1: no configurations
[  321.901153][    T9] usb 3-1: can't read configurations, error -22
[  321.923656][   T30] audit: type=1400 audit(1750061037.961:930): avc:  denied  { create } for  pid=9904 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  322.031008][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  322.155601][   T30] audit: type=1400 audit(1750061038.191:931): avc:  denied  { read write } for  pid=9908 comm="syz.1.1165" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  322.213116][    T9] usb 3-1: Using ep0 maxpacket: 16
[  322.254988][    T9] usb 3-1: no configurations
[  322.292104][    T9] usb 3-1: can't read configurations, error -22
[  322.356457][    T9] usb usb3-port1: attempt power cycle
[  323.198415][   T30] audit: type=1400 audit(1750061038.191:932): avc:  denied  { open } for  pid=9908 comm="syz.1.1165" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  323.475023][   T30] audit: type=1400 audit(1750061039.511:933): avc:  denied  { ioctl } for  pid=9918 comm="syz.3.1169" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  323.587846][   T30] audit: type=1400 audit(1750061039.511:934): avc:  denied  { getopt } for  pid=9918 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  323.664042][   T30] audit: type=1400 audit(1750061039.551:935): avc:  denied  { ioctl } for  pid=9918 comm="syz.3.1169" path="socket:[28850]" dev="sockfs" ino=28850 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  323.690776][ T5930] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  323.698471][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  323.799158][  T870] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  323.799995][    T9] usb 3-1: Using ep0 maxpacket: 16
[  323.812420][    T9] usb 3-1: no configurations
[  323.817017][    T9] usb 3-1: can't read configurations, error -22
[  324.327330][   T30] audit: type=1400 audit(1750061039.951:936): avc:  denied  { setopt } for  pid=9924 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  324.354009][   T30] audit: type=1400 audit(1750061039.951:937): avc:  denied  { bind } for  pid=9924 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  324.400679][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  324.416887][  T870] usb 4-1: not running at top speed; connect to a high speed hub
[  324.431073][  T870] usb 4-1: config 192 has an invalid interface number: 159 but max is 1
[  324.435765][ T5930] usb 5-1: Using ep0 maxpacket: 8
[  324.444656][   T30] audit: type=1400 audit(1750061040.481:938): avc:  denied  { name_connect } for  pid=9928 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  324.446049][ T5930] usb 5-1: config index 0 descriptor too short (expected 29970, got 18)
[  324.473304][  T870] usb 4-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  324.475975][ T5930] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  324.496229][  T870] usb 4-1: config 192 has 1 interface, different from the descriptor's value: 2
[  324.499590][ T5930] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168
[  324.505793][  T870] usb 4-1: config 192 has no interface number 0
[  324.573360][  T870] usb 4-1: config 192 interface 159 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  324.595109][ T5930] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  324.605831][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.614008][ T5930] usb 5-1: Product: syz
[  324.614997][  T870] usb 4-1: config 192 interface 159 has no altsetting 0
[  324.618554][ T5930] usb 5-1: Manufacturer: syz
[  324.632595][    T9] usb 3-1: device not accepting address 33, error -71
[  324.641195][    T9] usb usb3-port1: unable to enumerate USB device
[  324.647720][ T5930] usb 5-1: SerialNumber: syz
[  324.659862][ T5930] usb 5-1: config 0 descriptor??
[  324.668111][ T5930] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  324.747552][  T870] usb 4-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=93.ae
[  324.757066][  T870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.765106][  T870] usb 4-1: Product: Ў
[  324.769185][  T870] usb 4-1: Manufacturer: ⠟
[  324.774824][  T870] usb 4-1: SerialNumber: ⽲㰞礝헾墷乲咵뚩▍캖㡨៕꣛਋裑悑Ẁ퍪܌怟橪✷俎锁侐醶皑㝡砮沎뜎⬆狚⁥㘇靈팡徏Ǽ趱遴Đꝳ할␷㞟⪰뺍ꍜ밥❍뛯㓁생镸埲펥酸嗃炠钜펅ꪔ뫄῰ﻹ湣⃔枊ᛅ鈅龱ꁳ邖㉔ꈘꏇ侩静浻ꬥ挱䮕䱠唚ꮌ쥋⧧ퟑસ᣹ᇫ珛척䷱汦獖館㈥
[  325.116918][ T5930] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31
[  325.379563][  T870] vmk80xx 4-1:192.159: driver 'vmk80xx' failed to auto-configure device.
[  325.446296][  T870] usb 4-1: USB disconnect, device number 20
[  325.815179][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.894550][ T9942] raw_sendmsg: syz.0.1176 forgot to set AF_INET. Fix it!
[  325.917382][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.431608][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  326.431623][   T30] audit: type=1400 audit(1750061042.471:943): avc:  denied  { read write } for  pid=9951 comm="syz.3.1177" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  326.655337][   T30] audit: type=1400 audit(1750061042.511:944): avc:  denied  { open } for  pid=9951 comm="syz.3.1177" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  326.779603][   T30] audit: type=1400 audit(1750061042.511:945): avc:  denied  { watch } for  pid=9951 comm="syz.3.1177" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  327.004336][  T870] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  327.130061][   T30] audit: type=1400 audit(1750061042.511:946): avc:  denied  { watch_sb watch_reads } for  pid=9951 comm="syz.3.1177" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  327.240941][  T870] usb 4-1: device descriptor read/64, error -71
[  327.385213][   T30] audit: type=1400 audit(1750061043.411:947): avc:  denied  { ioctl } for  pid=9951 comm="syz.3.1177" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  327.439703][   T30] audit: type=1400 audit(1750061043.451:948): avc:  denied  { read write } for  pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.490609][ T5930] usb 5-1: USB disconnect, device number 24
[  327.498803][   T30] audit: type=1400 audit(1750061043.451:949): avc:  denied  { open } for  pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.500835][  T870] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  327.546932][   T30] audit: type=1400 audit(1750061043.451:950): avc:  denied  { ioctl } for  pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.744997][   T30] audit: type=1400 audit(1750061043.591:951): avc:  denied  { map_create } for  pid=9957 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  327.767366][   T30] audit: type=1400 audit(1750061043.591:952): avc:  denied  { perfmon } for  pid=9957 comm="syz.4.1180" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  327.921737][  T870] usb 4-1: device descriptor read/64, error -71
[  328.052010][  T870] usb usb4-port1: attempt power cycle
[  328.771926][  T870] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  328.880149][  T870] usb 4-1: device descriptor read/8, error -71
[  329.002953][ T9981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  329.191162][  T870] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  329.223729][  T870] usb 4-1: device descriptor read/8, error -71
[  329.335321][  T870] usb usb4-port1: unable to enumerate USB device
[  329.616845][ T9993] Cannot find set identified by id 0 to match
[  330.711659][T10010] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1189'.
[  331.569466][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  331.569482][   T30] audit: type=1400 audit(1750061047.601:1012): avc:  denied  { create } for  pid=10021 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  331.674824][   T30] audit: type=1400 audit(1750061047.601:1013): avc:  denied  { setopt } for  pid=10021 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  331.767081][   T30] audit: type=1400 audit(1750061047.601:1014): avc:  denied  { bind } for  pid=10021 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  332.058302][   T30] audit: type=1400 audit(1750061047.601:1015): avc:  denied  { map } for  pid=10021 comm="syz.2.1195" path="socket:[28229]" dev="sockfs" ino=28229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  332.127116][   T30] audit: type=1400 audit(1750061047.601:1016): avc:  denied  { read } for  pid=10021 comm="syz.2.1195" path="socket:[28229]" dev="sockfs" ino=28229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  332.193975][   T30] audit: type=1400 audit(1750061047.601:1017): avc:  denied  { ioctl } for  pid=10021 comm="syz.2.1195" path="socket:[28229]" dev="sockfs" ino=28229 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  332.590856][   T30] audit: type=1400 audit(1750061047.761:1018): avc:  denied  { create } for  pid=10017 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  332.686835][   T30] audit: type=1400 audit(1750061047.771:1019): avc:  denied  { getopt } for  pid=10017 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  332.737402][   T30] audit: type=1400 audit(1750061047.971:1020): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  332.758277][   T30] audit: type=1400 audit(1750061048.051:1021): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  332.810790][   T42] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  332.844126][T10042] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.856960][T10042] bridge0: entered allmulticast mode
[  332.874307][T10042] bridge_slave_1: left allmulticast mode
[  332.882067][T10042] bridge_slave_1: left promiscuous mode
[  332.889182][T10042] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.903975][T10042] bridge_slave_0: left allmulticast mode
[  332.913368][T10042] bridge_slave_0: left promiscuous mode
[  332.933098][T10042] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.992318][   T42] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  333.000511][   T42] usb 2-1: config 0 has no interface number 0
[  333.009527][   T42] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  333.022996][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.031996][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1202'.
[  333.042748][   T42] usb 2-1: Product: syz
[  333.046938][   T42] usb 2-1: Manufacturer: syz
[  333.051748][T10044] bridge0: entered allmulticast mode
[  333.090542][   T42] usb 2-1: SerialNumber: syz
[  333.107694][T10047] bridge_slave_1: left allmulticast mode
[  333.113563][T10047] bridge_slave_1: left promiscuous mode
[  333.119416][T10047] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.147000][   T42] usb 2-1: config 0 descriptor??
[  333.159621][T10050] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1203'.
[  333.203859][T10047] bridge_slave_0: left allmulticast mode
[  333.214899][T10047] bridge_slave_0: left promiscuous mode
[  333.228694][T10047] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.254270][   T42] usb 2-1: non-Atmel transceiver xxxx3800
[  334.471518][   T42] usb 2-1: Firmware version (0.0) predates our first public release.
[  334.568202][   T42] usb 2-1: Please update to version 0.2 or newer
[  334.585829][   T42] usb 2-1: atusb_probe: initialization failed, error = -19
[  334.603831][   T42] usb 2-1: USB disconnect, device number 16
[  335.385659][T10078] FAULT_INJECTION: forcing a failure.
[  335.385659][T10078] name failslab, interval 1, probability 0, space 0, times 0
[  335.406162][T10078] CPU: 0 UID: 0 PID: 10078 Comm: syz.2.1214 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  335.406187][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  335.406197][T10078] Call Trace:
[  335.406202][T10078]  <TASK>
[  335.406209][T10078]  dump_stack_lvl+0x16c/0x1f0
[  335.406239][T10078]  should_fail_ex+0x512/0x640
[  335.406262][T10078]  ? __kmalloc_noprof+0xbf/0x510
[  335.406287][T10078]  ? io_cache_alloc_new+0x45/0xf0
[  335.406309][T10078]  should_failslab+0xc2/0x120
[  335.406334][T10078]  __kmalloc_noprof+0xd2/0x510
[  335.406355][T10078]  ? __io_alloc_req_refill+0x27d/0x500
[  335.406379][T10078]  io_cache_alloc_new+0x45/0xf0
[  335.406403][T10078]  io_msg_alloc_async+0x1c3/0x3a0
[  335.406425][T10078]  io_send_zc_prep+0x4a7/0xa20
[  335.406450][T10078]  io_submit_sqes+0x835/0x2580
[  335.406486][T10078]  __do_sys_io_uring_enter+0xd6a/0x1630
[  335.406510][T10078]  ? __fget_files+0x20e/0x3c0
[  335.406534][T10078]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  335.406558][T10078]  ? fput+0x70/0xf0
[  335.406583][T10078]  ? ksys_write+0x1ac/0x250
[  335.406605][T10078]  ? __pfx_ksys_write+0x10/0x10
[  335.406635][T10078]  do_syscall_64+0xcd/0x4c0
[  335.406661][T10078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.406679][T10078] RIP: 0033:0x7fce9458e929
[  335.406694][T10078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.406711][T10078] RSP: 002b:00007fce954be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  335.406727][T10078] RAX: ffffffffffffffda RBX: 00007fce947b5fa0 RCX: 00007fce9458e929
[  335.406738][T10078] RDX: 0000000000000020 RSI: 00000000000022d2 RDI: 0000000000000005
[  335.406749][T10078] RBP: 00007fce954be090 R08: 0000000000000000 R09: 0000000000000000
[  335.406759][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.406769][T10078] R13: 0000000000000000 R14: 00007fce947b5fa0 R15: 00007ffd65df87b8
[  335.406793][T10078]  </TASK>
[  336.604885][T10103] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1219'.
[  336.685346][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  336.685380][   T30] audit: type=1400 audit(1750061052.721:1038): avc:  denied  { read } for  pid=10100 comm="syz.2.1221" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  337.024835][   T30] audit: type=1400 audit(1750061052.721:1039): avc:  denied  { open } for  pid=10100 comm="syz.2.1221" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  337.300830][   T30] audit: type=1400 audit(1750061052.721:1040): avc:  denied  { read } for  pid=10100 comm="syz.2.1221" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.340672][   T30] audit: type=1400 audit(1750061052.721:1041): avc:  denied  { open } for  pid=10100 comm="syz.2.1221" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.365500][   T30] audit: type=1400 audit(1750061052.721:1042): avc:  denied  { ioctl } for  pid=10100 comm="syz.2.1221" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.392804][   T30] audit: type=1400 audit(1750061052.721:1043): avc:  denied  { set_context_mgr } for  pid=10100 comm="syz.2.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  337.431187][   T30] audit: type=1400 audit(1750061052.058:1044): avc:  denied  { name_bind } for  pid=10109 comm="syz.1.1223" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  337.584228][   T30] audit: type=1400 audit(1750061052.058:1045): avc:  denied  { node_bind } for  pid=10109 comm="syz.1.1223" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  337.690056][   T30] audit: type=1400 audit(1750061052.058:1046): avc:  denied  { create } for  pid=10110 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  338.394628][   T30] audit: type=1400 audit(1750061052.718:1047): avc:  denied  { create } for  pid=10121 comm="syz.2.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  341.572901][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'.
[  341.677718][T10174] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.685294][T10174] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.737184][T10174] bridge0: entered allmulticast mode
[  341.750233][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  341.750246][   T30] audit: type=1400 audit(1750061056.789:1111): avc:  denied  { write } for  pid=10185 comm="syz.2.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  341.777048][    C0] vkms_vblank_simulate: vblank timer overrun
[  341.804681][T10177] bridge_slave_1: left allmulticast mode
[  341.835133][T10177] bridge_slave_1: left promiscuous mode
[  341.841248][T10177] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.875014][   T30] audit: type=1400 audit(1750061056.919:1112): avc:  denied  { read write } for  pid=10193 comm="syz.2.1250" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  341.894328][T10177] bridge_slave_0: left allmulticast mode
[  341.910864][T10177] bridge_slave_0: left promiscuous mode
[  341.916691][T10177] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.927941][T10174] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1244'.
[  341.936975][   T30] audit: type=1400 audit(1750061056.919:1113): avc:  denied  { open } for  pid=10193 comm="syz.2.1250" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  341.937023][   T30] audit: type=1400 audit(1750061056.959:1114): avc:  denied  { read write } for  pid=10193 comm="syz.2.1250" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  341.937060][   T30] audit: type=1400 audit(1750061056.959:1115): avc:  denied  { open } for  pid=10193 comm="syz.2.1250" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  341.937097][   T30] audit: type=1400 audit(1750061056.959:1116): avc:  denied  { ioctl } for  pid=10193 comm="syz.2.1250" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  342.017337][   T30] audit: type=1400 audit(1750061057.059:1117): avc:  denied  { execute } for  pid=10171 comm="syz.1.1244" path="/53/net_prio.prioidx" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  342.125939][   T30] audit: type=1400 audit(1750061057.169:1118): avc:  denied  { module_request } for  pid=10199 comm="syz.3.1251" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  342.198700][   T30] audit: type=1400 audit(1750061057.239:1119): avc:  denied  { sys_module } for  pid=10199 comm="syz.3.1251" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  342.308576][   T30] audit: type=1400 audit(1750061057.349:1120): avc:  denied  { read } for  pid=10205 comm="syz.0.1252" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  343.466704][T10240] Cannot find set identified by id 0 to match
[  345.941553][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1268'.
[  346.239392][T10276] 8021q: adding VLAN 0 to HW filter on device bond2
[  346.395102][T10281] input: syz0 as /devices/virtual/input/input33
[  346.811375][   T30] kauditd_printk_skb: 109 callbacks suppressed
[  346.811417][   T30] audit: type=1400 audit(1750061061.859:1230): avc:  denied  { prog_load } for  pid=10283 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  347.013671][   T30] audit: type=1400 audit(1750061061.859:1231): avc:  denied  { bpf } for  pid=10283 comm="syz.0.1274" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  347.044613][   T30] audit: type=1400 audit(1750061061.859:1232): avc:  denied  { perfmon } for  pid=10283 comm="syz.0.1274" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  347.079247][   T30] audit: type=1326 audit(1750061061.889:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3444d8e929 code=0x7fc00000
[  347.120639][   T30] audit: type=1400 audit(1750061062.159:1234): avc:  denied  { create } for  pid=10287 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  347.200309][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'.
[  347.220880][   T30] audit: type=1400 audit(1750061062.229:1235): avc:  denied  { write } for  pid=10287 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  347.390706][   T30] audit: type=1400 audit(1750061062.229:1236): avc:  denied  { read } for  pid=10287 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  347.411565][   T30] audit: type=1400 audit(1750061062.239:1237): avc:  denied  { ioctl } for  pid=10287 comm="syz.1.1275" path="socket:[30162]" dev="sockfs" ino=30162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  347.537326][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'.
[  348.420984][   T30] audit: type=1400 audit(1750061062.309:1238): avc:  denied  { create } for  pid=10289 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  348.440967][   T30] audit: type=1400 audit(1750061062.339:1239): avc:  denied  { create } for  pid=10289 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  348.792696][T10304] mkiss: ax0: crc mode is auto.
[  349.100689][T10304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1280'.
[  350.192504][T10323] netlink: 'syz.3.1286': attribute type 1 has an invalid length.
[  350.210619][T10323] netlink: 'syz.3.1286': attribute type 2 has an invalid length.
[  350.232834][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'.
[  350.398275][T10323] input: syz1 as /devices/virtual/input/input34
[  350.598252][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  350.758343][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'.
[  350.768434][ T5888] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  350.778430][   T10] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  350.793333][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.810473][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  350.828352][   T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  350.848527][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.865340][   T10] usb 2-1: Product: syz
[  350.869651][   T10] usb 2-1: Manufacturer: syz
[  350.876489][   T10] usb 2-1: SerialNumber: syz
[  350.960833][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  351.048132][T10337] random: crng reseeded on system resumption
[  351.166130][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[  351.180986][   T10] usb 2-1: config 0 descriptor??
[  351.186159][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  351.205884][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[  351.216784][ T5888] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  351.227352][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.244247][   T10] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  351.252042][ T5888] usb 4-1: Product: syz
[  351.256198][ T5888] usb 4-1: Manufacturer: syz
[  351.262022][ T5888] usb 4-1: SerialNumber: syz
[  351.313245][ T5888] usb 4-1: config 0 descriptor??
[  351.319264][T10326] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  351.341913][ T5888] hub 4-1:0.0: bad descriptor, ignoring hub
[  351.347832][ T5888] hub 4-1:0.0: probe with driver hub failed with error -5
[  351.425349][ T5888] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35
[  351.462194][   T10] usb 2-1: USB disconnect, device number 17
[  351.660687][ T5878] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  351.845379][ T5878] usb 3-1: not running at top speed; connect to a high speed hub
[  351.869304][ T5878] usb 3-1: config 192 has an invalid interface number: 159 but max is 1
[  351.886843][ T5878] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  351.893323][   T30] kauditd_printk_skb: 112 callbacks suppressed
[  351.893335][   T30] audit: type=1400 audit(1750061066.939:1352): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  351.961578][ T5878] usb 3-1: config 192 has 1 interface, different from the descriptor's value: 2
[  352.067586][ T5878] usb 3-1: config 192 has no interface number 0
[  352.119140][ T5878] usb 3-1: config 192 interface 159 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  352.146480][   T30] audit: type=1400 audit(1750061066.939:1353): avc:  denied  { read } for  pid=10361 comm="syz.0.1295" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  352.167738][ T5878] usb 3-1: config 192 interface 159 has no altsetting 0
[  352.250425][ T5878] usb 3-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=93.ae
[  352.273606][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.273679][T10368] IPv6: NLM_F_CREATE should be specified when creating new route
[  352.294211][   T10] usb 4-1: USB disconnect, device number 25
[  352.294232][ T5878] usb 3-1: Product: Ў
[  352.310675][   T30] audit: type=1400 audit(1750061066.939:1354): avc:  denied  { open } for  pid=10361 comm="syz.0.1295" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  352.363485][ T5878] usb 3-1: Manufacturer: ⠟
[  352.368108][ T5878] usb 3-1: SerialNumber: ⽲㰞礝헾墷乲咵뚩▍캖㡨៕꣛਋裑悑Ẁ퍪܌怟橪✷俎锁侐醶皑㝡砮沎뜎⬆狚⁥㘇靈팡徏Ǽ趱遴Đꝳ할␷㞟⪰뺍ꍜ밥❍뛯㓁생镸埲펥酸嗃炠钜펅ꪔ뫄῰ﻹ湣⃔枊ᛅ鈅龱ꁳ邖㉔ꈘꏇ侩静浻ꬥ挱䮕䱠唚ꮌ쥋⧧ퟑસ᣹ᇫ珛척䷱汦獖館㈥
[  352.401921][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.428547][   T30] audit: type=1400 audit(1750061066.969:1355): avc:  denied  { create } for  pid=10361 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  352.461263][T10370] overlayfs: failed to resolve './file1/file0': -20
[  352.491230][   T30] audit: type=1400 audit(1750061066.969:1356): avc:  denied  { getopt } for  pid=10361 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  352.543532][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  352.583097][   T30] audit: type=1400 audit(1750061066.969:1357): avc:  denied  { ioctl } for  pid=10361 comm="syz.0.1295" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  352.614221][   T30] audit: type=1400 audit(1750061067.419:1358): avc:  denied  { create } for  pid=10369 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  352.647665][   T30] audit: type=1400 audit(1750061067.449:1359): avc:  denied  { mounton } for  pid=10369 comm="syz.4.1299" path="/236/file1" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  352.695046][   T30] audit: type=1400 audit(1750061067.449:1360): avc:  denied  { read write } for  pid=10367 comm="syz.1.1297" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  352.746662][   T30] audit: type=1400 audit(1750061067.449:1361): avc:  denied  { open } for  pid=10367 comm="syz.1.1297" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  352.757473][ T5878] vmk80xx 3-1:192.159: driver 'vmk80xx' failed to auto-configure device.
[  352.809620][ T5878] usb 3-1: USB disconnect, device number 34
[  354.264279][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[  354.580648][   T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  354.794240][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  354.833508][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'.
[  354.836983][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  354.856225][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  354.868548][   T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  354.881447][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.916704][   T10] usb 2-1: Product: syz
[  354.932686][   T10] usb 2-1: Manufacturer: syz
[  354.943165][   T10] usb 2-1: SerialNumber: syz
[  354.964716][   T10] usb 2-1: config 0 descriptor??
[  354.977451][T10399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  354.988891][   T10] usb 2-1: ucan: probing device on interface #0
[  354.995930][   T10] usb 2-1: ucan: invalid endpoint configuration
[  355.002599][   T10] usb 2-1: ucan: probe failed; try to update the device firmware
[  355.094880][T10417] overlayfs: overlapping lowerdir path
[  355.193583][   T10] usb 2-1: USB disconnect, device number 18
[  355.244463][T10419] trusted_key: encrypted_key: insufficient parameters specified
[  355.339890][T10419] Cannot find add_set index 0 as target
[  356.045397][ T5870] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  356.176107][T10434] netlink: 'syz.1.1317': attribute type 10 has an invalid length.
[  356.217779][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.275794][T10434] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  356.552632][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.564214][ T5870] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  356.573486][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.601715][ T5870] usb 4-1: config 0 descriptor??
[  357.259930][   T30] kauditd_printk_skb: 106 callbacks suppressed
[  357.259944][   T30] audit: type=1400 audit(1750061072.299:1468): avc:  denied  { create } for  pid=10448 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  357.291256][ T5870] lenovo 0003:17EF:60A3.0008: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0
[  357.399324][   T30] audit: type=1400 audit(1750061072.349:1469): avc:  denied  { write } for  pid=10448 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  357.574544][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'.
[  357.607920][   T30] audit: type=1400 audit(1750061072.359:1470): avc:  denied  { create } for  pid=10448 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  357.693492][   T30] audit: type=1400 audit(1750061072.359:1471): avc:  denied  { write } for  pid=10448 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  357.745283][   T30] audit: type=1400 audit(1750061072.359:1472): avc:  denied  { connect } for  pid=10448 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  357.829131][   T30] audit: type=1400 audit(1750061072.359:1473): avc:  denied  { name_connect } for  pid=10448 comm="syz.4.1321" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  357.899297][   T30] audit: type=1400 audit(1750061072.379:1474): avc:  denied  { read write } for  pid=10453 comm="syz.0.1322" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  357.899342][   T30] audit: type=1400 audit(1750061072.379:1475): avc:  denied  { open } for  pid=10453 comm="syz.0.1322" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  357.900296][   T30] audit: type=1400 audit(1750061072.379:1476): avc:  denied  { ioctl } for  pid=10453 comm="syz.0.1322" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  357.900339][   T30] audit: type=1400 audit(1750061072.399:1477): avc:  denied  { mounton } for  pid=10453 comm="syz.0.1322" path="/" dev="tmpfs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  358.132875][    C1] vkms_vblank_simulate: vblank timer overrun
[  358.236465][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'.
[  358.583759][ T5888] usb 4-1: USB disconnect, device number 26
[  358.898657][T10496] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  359.359071][T10503] Cannot find set identified by id 0 to match
[  360.921931][T10528] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  361.728418][ T5888] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  361.893090][ T5888] usb 1-1: Using ep0 maxpacket: 8
[  361.921784][ T5888] usb 1-1: config index 0 descriptor too short (expected 29970, got 18)
[  362.055468][ T5888] usb 1-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  362.170385][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 168
[  362.357564][ T5888] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  362.553626][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.561991][ T5888] usb 1-1: Product: syz
[  362.566214][ T5888] usb 1-1: Manufacturer: syz
[  362.568343][T10554] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1355'.
[  362.571214][ T5888] usb 1-1: SerialNumber: syz
[  362.573670][ T5888] usb 1-1: config 0 descriptor??
[  362.599135][ T5888] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  362.612854][ T5888] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36
[  362.623389][   T30] kauditd_printk_skb: 47 callbacks suppressed
[  362.623402][   T30] audit: type=1400 audit(1750061077.669:1525): avc:  denied  { read } for  pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3408 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  362.702950][   T30] audit: type=1400 audit(1750061077.669:1526): avc:  denied  { open } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3408 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  362.730532][   T30] audit: type=1400 audit(1750061077.669:1527): avc:  denied  { ioctl } for  pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3408 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  362.807589][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.852577][   T30] audit: type=1400 audit(1750061077.899:1528): avc:  denied  { create } for  pid=10558 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  362.855341][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.880327][    C1] vkms_vblank_simulate: vblank timer overrun
[  362.954153][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'.
[  363.070420][   T30] audit: type=1400 audit(1750061077.939:1529): avc:  denied  { create } for  pid=10558 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  363.236123][T10569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=10569 comm=syz.4.1357
[  363.266884][   T30] audit: type=1400 audit(1750061077.939:1530): avc:  denied  { ioctl } for  pid=10558 comm="syz.3.1356" path="socket:[31622]" dev="sockfs" ino=31622 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  363.293095][   T30] audit: type=1400 audit(1750061077.939:1531): avc:  denied  { name_bind } for  pid=10558 comm="syz.3.1356" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  363.424534][   T30] audit: type=1400 audit(1750061077.939:1532): avc:  denied  { create } for  pid=10558 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  363.477999][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'.
[  363.504890][   T30] audit: type=1400 audit(1750061077.949:1533): avc:  denied  { bind } for  pid=10558 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  363.558855][   T30] audit: type=1400 audit(1750061077.949:1534): avc:  denied  { listen } for  pid=10558 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  363.817589][ T5888] usb 1-1: USB disconnect, device number 23
[  364.111888][T10587] Cannot find set identified by id 0 to match
[  365.520729][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  365.845179][ T5888] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  366.061288][ T5888] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  366.082926][ T5888] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.100531][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  366.115693][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.177454][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  366.250284][ T5888] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  367.260647][   T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  367.670619][   T24] usb 3-1: Using ep0 maxpacket: 8
[  367.687174][   T24] usb 3-1: config index 0 descriptor too short (expected 29970, got 18)
[  367.715114][   T24] usb 3-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  367.915847][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  367.922084][   T30] audit: type=1400 audit(1750061082.829:1557): avc:  denied  { execute_no_trans } for  pid=10630 comm="syz.4.1380" path="/254/file2" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  368.132960][   T30] audit: type=1400 audit(1750061082.839:1558): avc:  denied  { create } for  pid=10630 comm="syz.4.1380" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  368.152328][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 168
[  368.163556][   T30] audit: type=1400 audit(1750061082.849:1559): avc:  denied  { read write } for  pid=10630 comm="syz.4.1380" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  368.188235][   T30] audit: type=1400 audit(1750061082.849:1560): avc:  denied  { open } for  pid=10630 comm="syz.4.1380" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  368.215026][   T24] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  368.224185][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.245582][   T30] audit: type=1400 audit(1750061082.849:1561): avc:  denied  { ioctl } for  pid=10630 comm="syz.4.1380" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  368.247400][   T24] usb 3-1: Product: syz
[  368.388985][ T5878] usb 2-1: USB disconnect, device number 19
[  368.408871][   T24] usb 3-1: Manufacturer: syz
[  368.413536][   T24] usb 3-1: SerialNumber: syz
[  368.436275][   T24] usb 3-1: config 0 descriptor??
[  368.452804][   T30] audit: type=1400 audit(1750061083.489:1562): avc:  denied  { unlink } for  pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  368.490740][   T24] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  368.499069][   T24] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38
[  368.552750][   T30] audit: type=1400 audit(1750061083.539:1563): avc:  denied  { ioctl } for  pid=10640 comm="syz.0.1383" path="socket:[32045]" dev="sockfs" ino=32045 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  368.644189][T10645] FAULT_INJECTION: forcing a failure.
[  368.644189][T10645] name failslab, interval 1, probability 0, space 0, times 0
[  368.658410][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.701185][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.711915][T10645] CPU: 0 UID: 0 PID: 10645 Comm: syz.4.1385 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  368.711939][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  368.711950][T10645] Call Trace:
[  368.711955][T10645]  <TASK>
[  368.711962][T10645]  dump_stack_lvl+0x16c/0x1f0
[  368.711991][T10645]  should_fail_ex+0x512/0x640
[  368.712014][T10645]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  368.712036][T10645]  should_failslab+0xc2/0x120
[  368.712061][T10645]  __kmalloc_cache_noprof+0x6a/0x3e0
[  368.712081][T10645]  ? copy_mount_options+0x55/0x190
[  368.712098][T10645]  ? _copy_from_user+0x59/0xd0
[  368.712124][T10645]  copy_mount_options+0x55/0x190
[  368.712143][T10645]  __x64_sys_mount+0x1ac/0x310
[  368.712169][T10645]  ? __pfx___x64_sys_mount+0x10/0x10
[  368.712202][T10645]  do_syscall_64+0xcd/0x4c0
[  368.712229][T10645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.712247][T10645] RIP: 0033:0x7f3444d8e929
[  368.712260][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.712277][T10645] RSP: 002b:00007f3445b3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  368.712293][T10645] RAX: ffffffffffffffda RBX: 00007f3444fb5fa0 RCX: 00007f3444d8e929
[  368.712304][T10645] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  368.712315][T10645] RBP: 00007f3445b3f090 R08: 0000200000000a00 R09: 0000000000000000
[  368.712325][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.712335][T10645] R13: 0000000000000000 R14: 00007f3444fb5fa0 R15: 00007ffdf8c6f588
[  368.712357][T10645]  </TASK>
[  368.883474][    C0] vkms_vblank_simulate: vblank timer overrun
[  369.170706][   T30] audit: type=1400 audit(1750061084.169:1564): avc:  denied  { bind } for  pid=10647 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  369.191035][    C0] vkms_vblank_simulate: vblank timer overrun
[  369.375008][   T30] audit: type=1400 audit(1750061084.169:1565): avc:  denied  { accept } for  pid=10647 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  369.416560][ T5888] usb 3-1: USB disconnect, device number 35
[  369.591438][T10664] binder: BINDER_SET_CONTEXT_MGR already set
[  369.597572][T10664] binder: 10660:10664 ioctl 4018620d 200000000040 returned -16
[  370.350710][   T30] audit: type=1400 audit(1750061084.619:1566): avc:  denied  { read } for  pid=10660 comm="syz.4.1389" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  372.750952][   T24] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  372.920710][   T24] usb 1-1: Invalid ep0 maxpacket: 64
[  373.121406][   T24] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  373.236123][T10705] sp0: Synchronizing with TNC
[  373.238869][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  373.238880][   T30] audit: type=1400 audit(1750061088.279:1576): avc:  denied  { read } for  pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  373.536632][   T24] usb 1-1: Invalid ep0 maxpacket: 64
[  373.544824][   T24] usb usb1-port1: attempt power cycle
[  374.545437][   T24] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  374.971904][   T24] usb 1-1: Invalid ep0 maxpacket: 64
[  375.116834][   T24] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[  375.158328][   T24] usb 1-1: Invalid ep0 maxpacket: 64
[  375.209503][   T24] usb usb1-port1: unable to enumerate USB device
[  375.220216][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'.
[  375.228728][T10724] netlink: 'syz.1.1408': attribute type 178 has an invalid length.
[  375.247423][   T30] audit: type=1400 audit(1750061090.289:1577): avc:  denied  { map } for  pid=10721 comm="syz.1.1408" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  375.271801][  T870] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  375.274191][ T5888] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  375.281024][   T30] audit: type=1400 audit(1750061090.289:1578): avc:  denied  { execute } for  pid=10721 comm="syz.1.1408" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  375.458347][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'.
[  375.460801][ T5888] usb 4-1: Using ep0 maxpacket: 8
[  375.467759][  T870] usb 5-1: Using ep0 maxpacket: 8
[  375.482323][ T5888] usb 4-1: config index 0 descriptor too short (expected 29970, got 18)
[  375.484821][  T870] usb 5-1: unable to get BOS descriptor or descriptor too short
[  375.504738][ T5888] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  375.504873][  T870] usb 5-1: config 8 has an invalid interface number: 255 but max is 0
[  375.534259][ T5888] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168
[  375.535538][  T870] usb 5-1: config 8 has no interface number 0
[  375.552525][ T5888] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  375.724605][  T870] usb 5-1: config 8 interface 255 has no altsetting 0
[  375.731544][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.731566][ T5888] usb 4-1: Product: syz
[  375.731581][ T5888] usb 4-1: Manufacturer: syz
[  375.731596][ T5888] usb 4-1: SerialNumber: syz
[  375.795231][  T870] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  375.812249][  T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.813124][ T5888] usb 4-1: config 0 descriptor??
[  375.872442][  T870] usb 5-1: Product: syz
[  375.876833][  T870] usb 5-1: Manufacturer: syz
[  375.907712][  T870] usb 5-1: SerialNumber: syz
[  375.937502][ T5888] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  375.976811][T10737] FAULT_INJECTION: forcing a failure.
[  375.976811][T10737] name failslab, interval 1, probability 0, space 0, times 0
[  375.989594][T10737] CPU: 0 UID: 0 PID: 10737 Comm: syz.1.1414 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  375.989613][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.989622][T10737] Call Trace:
[  375.989628][T10737]  <TASK>
[  375.989635][T10737]  dump_stack_lvl+0x16c/0x1f0
[  375.989663][T10737]  should_fail_ex+0x512/0x640
[  375.989683][T10737]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  375.989701][T10737]  should_failslab+0xc2/0x120
[  375.989717][T10737]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  375.989731][T10737]  ? is_bpf_text_address+0x94/0x1a0
[  375.989744][T10737]  ? alloc_empty_file+0x55/0x1e0
[  375.989761][T10737]  alloc_empty_file+0x55/0x1e0
[  375.989778][T10737]  path_openat+0xda/0x2cb0
[  375.989805][T10737]  ? stack_trace_save+0x8e/0xc0
[  375.989825][T10737]  ? __pfx_path_openat+0x10/0x10
[  375.989841][T10737]  ? stack_depot_save_flags+0x28/0xa40
[  375.989860][T10737]  do_filp_open+0x20b/0x470
[  375.989873][T10737]  ? kasan_save_track+0x14/0x30
[  375.989888][T10737]  ? __pfx_do_filp_open+0x10/0x10
[  375.989906][T10737]  ? __x64_sys_execve+0x74/0xb0
[  375.989925][T10737]  ? do_syscall_64+0xcd/0x4c0
[  375.989947][T10737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.989982][T10737]  do_open_execat+0xf9/0x450
[  375.989995][T10737]  ? __pfx_do_open_execat+0x10/0x10
[  375.990013][T10737]  alloc_bprm+0x2d/0x6f0
[  375.990026][T10737]  do_execveat_common.isra.0+0x1ce/0x610
[  375.990048][T10737]  __x64_sys_execve+0x8e/0xb0
[  375.990069][T10737]  do_syscall_64+0xcd/0x4c0
[  375.990093][T10737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.990109][T10737] RIP: 0033:0x7fbf45f8e929
[  375.990121][T10737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.990132][T10737] RSP: 002b:00007fbf43df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  375.990142][T10737] RAX: ffffffffffffffda RBX: 00007fbf461b5fa0 RCX: 00007fbf45f8e929
[  375.990149][T10737] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180
[  375.990155][T10737] RBP: 00007fbf43df6090 R08: 0000000000000000 R09: 0000000000000000
[  375.990161][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.990167][T10737] R13: 0000000000000000 R14: 00007fbf461b5fa0 R15: 00007ffe17cc0a18
[  375.990182][T10737]  </TASK>
[  376.218872][   T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  376.234160][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.242720][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.507514][ T5888] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39
[  376.522542][   T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  376.534212][ T5888] usb 4-1: USB disconnect, device number 27
[  376.540598][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.552925][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  376.561943][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.570798][  T870] catc 5-1:8.255: Can't set altsetting 1.
[  376.579756][   T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  376.589916][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  376.598311][  T870] catc 5-1:8.255: probe with driver catc failed with error -5
[  376.647585][   T10] usb 3-1: Product: syz
[  376.648986][  T870] usb 5-1: USB disconnect, device number 25
[  376.678035][   T10] usb 3-1: Manufacturer: syz
[  376.689096][   T30] audit: type=1400 audit(1750061091.719:1579): avc:  denied  { create } for  pid=10727 comm="syz.0.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  376.750443][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  376.775653][   T30] audit: type=1400 audit(1750061091.819:1580): avc:  denied  { create } for  pid=10740 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  376.820582][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  376.856336][   T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  376.873692][   T30] audit: type=1400 audit(1750061091.889:1581): avc:  denied  { create } for  pid=10740 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  376.893439][   T10] cdc_wdm 3-1:1.0: Unknown control protocol
[  376.953424][   T10] usb 3-1: USB disconnect, device number 36
[  377.550624][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  378.083536][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.101542][   T30] audit: type=1400 audit(1750061093.129:1582): avc:  denied  { create } for  pid=10742 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  378.177938][T10757] xt_SECMARK: invalid security context 'system_u:object_r:admin_passwd_exec_t:s0'
[  378.351246][   T30] audit: type=1400 audit(1750061093.359:1583): avc:  denied  { getopt } for  pid=10742 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  378.396979][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  378.413198][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  378.433058][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  378.448306][T10760] batadv0: entered promiscuous mode
[  378.453581][T10760] batadv0: entered allmulticast mode
[  378.463788][   T30] audit: type=1400 audit(1750061093.509:1584): avc:  denied  { mount } for  pid=10759 comm="syz.3.1421" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  378.488474][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  378.525531][   T10] usb 3-1: Product: syz
[  378.529698][   T10] usb 3-1: Manufacturer: syz
[  378.570952][   T10] usb 3-1: SerialNumber: syz
[  378.597003][   T10] usb 3-1: config 0 descriptor??
[  378.624221][   T30] audit: type=1400 audit(1750061093.669:1585): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  378.654938][   T10] usb 3-1: can't set config #0, error -71
[  378.672512][   T10] usb 3-1: USB disconnect, device number 37
[  379.055853][   T30] audit: type=1400 audit(1750061094.099:1586): avc:  denied  { setopt } for  pid=10778 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  379.150614][   T30] audit: type=1400 audit(1750061094.099:1587): avc:  denied  { bind } for  pid=10778 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  379.184142][   T30] audit: type=1400 audit(1750061094.099:1588): avc:  denied  { name_bind } for  pid=10778 comm="syz.1.1428" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  379.240659][   T30] audit: type=1400 audit(1750061094.099:1589): avc:  denied  { node_bind } for  pid=10778 comm="syz.1.1428" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  379.262920][    C1] vkms_vblank_simulate: vblank timer overrun
[  379.299956][   T30] audit: type=1400 audit(1750061094.099:1590): avc:  denied  { map } for  pid=10778 comm="syz.1.1428" path="socket:[32450]" dev="sockfs" ino=32450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  379.339519][   T30] audit: type=1400 audit(1750061094.099:1591): avc:  denied  { read } for  pid=10778 comm="syz.1.1428" path="socket:[32450]" dev="sockfs" ino=32450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  379.362827][    C1] vkms_vblank_simulate: vblank timer overrun
[  379.391017][  T870] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  379.398696][ T5870] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  379.415497][   T30] audit: type=1400 audit(1750061094.099:1592): avc:  denied  { execute } for  pid=10778 comm="syz.1.1428" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  379.559263][  T870] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  379.612801][ T5870] usb 5-1: Using ep0 maxpacket: 8
[  379.641994][  T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.657261][ T5870] usb 5-1: config index 0 descriptor too short (expected 29970, got 18)
[  379.670880][ T5870] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  379.679638][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168
[  379.691895][  T870] usb 3-1: config 0 descriptor??
[  379.698989][  T870] cp210x 3-1:0.0: cp210x converter detected
[  379.709974][ T5870] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  379.719181][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.727439][ T5870] usb 5-1: Product: syz
[  379.732006][ T5870] usb 5-1: Manufacturer: syz
[  379.737648][ T5870] usb 5-1: SerialNumber: syz
[  379.800474][ T5870] usb 5-1: config 0 descriptor??
[  379.830057][ T5870] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  379.938262][  T870] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32
[  379.950765][ T5870] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41
[  379.976593][  T870] cp210x 3-1:0.0: querying part number failed
[  380.004411][  T870] usb 3-1: cp210x converter now attached to ttyUSB0
[  380.041185][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.063471][  T870] usb 3-1: USB disconnect, device number 38
[  380.077132][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.105771][  T870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  380.193836][  T870] cp210x 3-1:0.0: device disconnected
[  380.495211][ T5870] usb 5-1: USB disconnect, device number 26
[  381.686256][T10820] trusted_key: encrypted_key: insufficient parameters specified
[  381.727065][ T5140] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  382.766851][T10842] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1445'.
[  382.828578][T10841] bridge0: entered allmulticast mode
[  383.752526][T10854] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1446'.
[  383.885619][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  383.885645][   T30] audit: type=1400 audit(1750061098.919:1597): avc:  denied  { name_connect } for  pid=10847 comm="syz.4.1448" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  385.384103][   T30] audit: type=1400 audit(1750061100.429:1598): avc:  denied  { read write } for  pid=10870 comm="syz.2.1452" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  385.393197][T10873] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1451'.
[  385.432328][   T30] audit: type=1400 audit(1750061100.429:1599): avc:  denied  { open } for  pid=10870 comm="syz.2.1452" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  385.847147][   T30] audit: type=1400 audit(1750061100.889:1600): avc:  denied  { unlink } for  pid=10877 comm="syz.4.1453" name="#1c" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  386.108810][   T30] audit: type=1400 audit(1750061100.919:1601): avc:  denied  { mount } for  pid=10877 comm="syz.4.1453" name="/" dev="overlay" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  386.768805][   T30] audit: type=1400 audit(1750061101.809:1602): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  386.804851][   T30] audit: type=1400 audit(1750061101.839:1603): avc:  denied  { unmount } for  pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  387.181895][ T5870] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  387.370659][   T30] audit: type=1400 audit(1750061102.409:1604): avc:  denied  { watch watch_reads } for  pid=10889 comm="syz.3.1457" path="pipe:[34130]" dev="pipefs" ino=34130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  387.479255][ T5870] usb 2-1: Using ep0 maxpacket: 8
[  387.493681][T10898] (syz.2.1460,10898,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  387.512391][T10898] (syz.2.1460,10898,0):ocfs2_fill_super:1177 ERROR: status = -22
[  387.534020][ T5870] usb 2-1: config index 0 descriptor too short (expected 29970, got 18)
[  388.051294][ T5870] usb 2-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  388.060010][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 168
[  388.072624][ T5870] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  388.083450][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.118320][ T5870] usb 2-1: Product: syz
[  388.127673][ T5870] usb 2-1: Manufacturer: syz
[  388.140611][ T5870] usb 2-1: SerialNumber: syz
[  388.235850][ T5870] usb 2-1: config 0 descriptor??
[  388.243595][ T5870] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  388.281267][ T5870] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42
[  388.662263][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.774734][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.700349][ T5888] usb 2-1: USB disconnect, device number 20
[  389.933641][T10921] Cannot find set identified by id 0 to match
[  389.956333][   T30] audit: type=1400 audit(1750061104.999:1605): avc:  denied  { append } for  pid=10922 comm="syz.4.1465" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  390.367687][T10934] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1467'.
[  392.938243][   T30] audit: type=1400 audit(1750061107.979:1606): avc:  denied  { map } for  pid=10955 comm="syz.4.1475" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  393.904865][   T30] audit: type=1326 audit(1750061108.929:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa998e929 code=0x7fc00000
[  394.322656][ T5870] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  394.340639][ T5888] usb 3-1: new low-speed USB device number 39 using dummy_hcd
[  394.395603][T10983] FAULT_INJECTION: forcing a failure.
[  394.395603][T10983] name failslab, interval 1, probability 0, space 0, times 0
[  394.843060][T10983] CPU: 1 UID: 0 PID: 10983 Comm: syz.0.1482 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  394.843086][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  394.843095][T10983] Call Trace:
[  394.843100][T10983]  <TASK>
[  394.843107][T10983]  dump_stack_lvl+0x16c/0x1f0
[  394.843138][T10983]  should_fail_ex+0x512/0x640
[  394.843164][T10983]  should_failslab+0xc2/0x120
[  394.843188][T10983]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  394.843217][T10983]  ? skb_clone+0x190/0x3f0
[  394.843245][T10983]  skb_clone+0x190/0x3f0
[  394.843270][T10983]  netlink_deliver_tap+0xabd/0xd30
[  394.843295][T10983]  netlink_unicast+0x5df/0x7f0
[  394.843316][T10983]  ? __pfx_netlink_unicast+0x10/0x10
[  394.843335][T10983]  ? netlink_alloc_large_skb+0x71/0x130
[  394.843357][T10983]  netlink_sendmsg+0x8d1/0xdd0
[  394.843378][T10983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  394.843405][T10983]  ____sys_sendmsg+0xa95/0xc70
[  394.843425][T10983]  ? copy_msghdr_from_user+0x10a/0x160
[  394.843448][T10983]  ? __pfx_____sys_sendmsg+0x10/0x10
[  394.843478][T10983]  ___sys_sendmsg+0x134/0x1d0
[  394.843505][T10983]  ? __pfx____sys_sendmsg+0x10/0x10
[  394.843527][T10983]  ? __lock_acquire+0x622/0x1c90
[  394.843585][T10983]  __sys_sendmsg+0x16d/0x220
[  394.843610][T10983]  ? __pfx___sys_sendmsg+0x10/0x10
[  394.843651][T10983]  do_syscall_64+0xcd/0x4c0
[  394.843678][T10983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.843696][T10983] RIP: 0033:0x7ff8bf18e929
[  394.843710][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.843726][T10983] RSP: 002b:00007ff8bff20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.843742][T10983] RAX: ffffffffffffffda RBX: 00007ff8bf3b5fa0 RCX: 00007ff8bf18e929
[  394.843754][T10983] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[  394.843764][T10983] RBP: 00007ff8bff20090 R08: 0000000000000000 R09: 0000000000000000
[  394.843774][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.843784][T10983] R13: 0000000000000000 R14: 00007ff8bf3b5fa0 R15: 00007ffc6378d0c8
[  394.843807][T10983]  </TASK>
[  395.080614][ T5870] usb 2-1: Using ep0 maxpacket: 8
[  395.086752][ T5870] usb 2-1: config index 0 descriptor too short (expected 29970, got 18)
[  395.095308][ T5870] usb 2-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  395.117640][ T5888] usb 3-1: config 13 has an invalid interface number: 91 but max is 2
[  395.126093][ T5888] usb 3-1: config 13 contains an unexpected descriptor of type 0x2, skipping
[  395.166034][ T5870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 168
[  395.181529][   T30] audit: type=1400 audit(1750061110.119:1608): avc:  denied  { setopt } for  pid=10979 comm="syz.4.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  395.211911][ T5870] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  395.220834][ T5888] usb 3-1: config 13 has an invalid interface number: 43 but max is 2
[  395.221102][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.237473][ T5870] usb 2-1: Product: syz
[  395.241916][ T5870] usb 2-1: Manufacturer: syz
[  395.246845][ T5870] usb 2-1: SerialNumber: syz
[  395.249555][ T5888] usb 3-1: config 13 contains an unexpected descriptor of type 0x2, skipping
[  395.304599][ T5870] usb 2-1: config 0 descriptor??
[  395.330015][ T5870] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  395.365157][ T5870] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46
[  395.477830][    T9] libceph: connect (1)[c::]:6789 error -101
[  395.537906][   T30] audit: type=1400 audit(1750061110.579:1609): avc:  denied  { setopt } for  pid=10994 comm="syz.3.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  395.550582][ T5888] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  395.622399][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  395.638799][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.649199][ T5888] usb 3-1: config 13 has 2 interfaces, different from the descriptor's value: 3
[  395.658543][ T5888] usb 3-1: config 13 has no interface number 0
[  395.665743][ T5888] usb 3-1: config 13 has no interface number 1
[  395.672078][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 8
[  395.682982][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 8
[  395.694841][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0xE has invalid maxpacket 32, setting to 0
[  395.707779][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.735002][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0x6 has invalid maxpacket 544, setting to 8
[  395.735647][T10986] ceph: No mds server is up or the cluster is laggy
[  395.754225][ T5888] usb 3-1: config 13 interface 91 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  395.999657][    T9] libceph: connect (1)[c::]:6789 error -101
[  396.122543][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  396.159915][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  396.869850][   T10] libceph: connect (1)[c::]:6789 error -101
[  396.893936][ T5888] usb 3-1: config 13 interface 91 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 8
[  397.004683][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  397.039445][ T5888] usb 3-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  397.440633][ T5888] usb 3-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[  397.512441][ T5930] usb 2-1: USB disconnect, device number 21
[  397.555434][ T5888] usb 3-1: config 13 interface 91 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  397.648322][ T5888] usb 3-1: config 13 interface 43 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  397.731891][ T5888] usb 3-1: config 13 interface 91 has no altsetting 0
[  397.820580][ T5888] usb 3-1: config 13 interface 43 has no altsetting 0
[  397.851858][ T5888] usb 3-1: string descriptor 0 read error: -71
[  397.858155][ T5888] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01c3, bcdDevice=92.dd
[  397.997842][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.080949][ T5888] usb 3-1: can't set config #13, error -71
[  398.105076][   T30] audit: type=1400 audit(1750061113.149:1610): avc:  denied  { create } for  pid=11026 comm="syz.4.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  398.240607][ T5888] usb 3-1: USB disconnect, device number 39
[  398.699471][   T30] audit: type=1326 audit(1750061113.739:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf18e929 code=0x7fc00000
[  398.873982][T11035] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  399.133778][   T30] audit: type=1400 audit(1750061114.169:1612): avc:  denied  { name_bind } for  pid=11030 comm="syz.1.1493" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  399.277660][   T30] audit: type=1400 audit(1750061114.199:1613): avc:  denied  { write } for  pid=11036 comm="syz.4.1496" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  399.301460][   T30] audit: type=1400 audit(1750061114.209:1614): avc:  denied  { create } for  pid=11043 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  399.722123][   T30] audit: type=1400 audit(1750061114.489:1615): avc:  denied  { getopt } for  pid=11040 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  400.540734][ T5888] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  400.730681][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  401.346720][   T30] audit: type=1400 audit(1750061116.389:1616): avc:  denied  { mount } for  pid=11060 comm="syz.2.1501" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  401.361049][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'.
[  401.369536][ T5888] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  401.398214][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  401.410787][   T10] usb 5-1: Using ep0 maxpacket: 8
[  401.426219][   T10] usb 5-1: config index 0 descriptor too short (expected 29970, got 18)
[  401.436214][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.445112][   T10] usb 5-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  401.459146][ T5888] usb 1-1: Product: syz
[  401.463709][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 168
[  401.483501][ T5888] usb 1-1: Manufacturer: syz
[  401.488112][ T5888] usb 1-1: SerialNumber: syz
[  401.497237][ T5888] usb 1-1: config 0 descriptor??
[  401.507582][   T10] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  401.520037][   T30] audit: type=1400 audit(1750061116.559:1617): avc:  denied  { unmount } for  pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  401.545044][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.562026][   T10] usb 5-1: Product: syz
[  401.569380][ T5140] Bluetooth: hci5: urb ffff888143fbc000 submission failed (2)
[  401.579761][   T10] usb 5-1: Manufacturer: syz
[  401.584676][   T10] usb 5-1: SerialNumber: syz
[  401.592092][   T10] usb 5-1: config 0 descriptor??
[  401.600969][   T10] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  401.609834][   T10] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47
[  402.155342][   T10] usb 1-1: USB disconnect, device number 28
[  402.252975][T11058] usb 5-1: USB disconnect, device number 27
[  404.740596][ T5888] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  404.761982][   T30] audit: type=1326 audit(1750061119.809:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11084 comm="syz.3.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa998e929 code=0x7fc00000
[  405.261411][T11103] Cannot find set identified by id 0 to match
[  405.484488][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.518426][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.544885][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  405.576083][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.668688][ T5888] usb 5-1: config 0 descriptor??
[  405.671570][T11108] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1512'.
[  405.749141][T11110] FAULT_INJECTION: forcing a failure.
[  405.749141][T11110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.784916][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.0.1513 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  405.784941][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  405.784951][T11110] Call Trace:
[  405.784957][T11110]  <TASK>
[  405.784964][T11110]  dump_stack_lvl+0x16c/0x1f0
[  405.784995][T11110]  should_fail_ex+0x512/0x640
[  405.785022][T11110]  _copy_from_user+0x2e/0xd0
[  405.785047][T11110]  copy_msghdr_from_user+0x98/0x160
[  405.785073][T11110]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  405.785109][T11110]  ___sys_sendmsg+0xfe/0x1d0
[  405.785135][T11110]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.785158][T11110]  ? __lock_acquire+0x622/0x1c90
[  405.785214][T11110]  __sys_sendmsg+0x16d/0x220
[  405.785239][T11110]  ? __pfx___sys_sendmsg+0x10/0x10
[  405.785280][T11110]  do_syscall_64+0xcd/0x4c0
[  405.785307][T11110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.785324][T11110] RIP: 0033:0x7ff8bf18e929
[  405.785338][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.785355][T11110] RSP: 002b:00007ff8bff20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.785373][T11110] RAX: ffffffffffffffda RBX: 00007ff8bf3b5fa0 RCX: 00007ff8bf18e929
[  405.785384][T11110] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  405.785395][T11110] RBP: 00007ff8bff20090 R08: 0000000000000000 R09: 0000000000000000
[  405.785405][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.785415][T11110] R13: 0000000000000000 R14: 00007ff8bf3b5fa0 R15: 00007ffc6378d0c8
[  405.785438][T11110]  </TASK>
[  406.150044][ T5888] usbhid 5-1:0.0: can't add hid device: -71
[  406.173828][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  406.247402][ T5888] usb 5-1: USB disconnect, device number 28
[  406.380596][   T30] audit: type=1400 audit(1750061121.379:1619): avc:  denied  { bind } for  pid=11118 comm="syz.0.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  406.516411][   T30] audit: type=1400 audit(1750061121.379:1620): avc:  denied  { write } for  pid=11118 comm="syz.0.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  406.753804][   T30] audit: type=1400 audit(1750061121.799:1621): avc:  denied  { read } for  pid=11125 comm="syz.0.1517" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  406.815733][   T30] audit: type=1400 audit(1750061121.799:1622): avc:  denied  { open } for  pid=11125 comm="syz.0.1517" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  407.444482][   T30] audit: type=1400 audit(1750061122.399:1623): avc:  denied  { create } for  pid=11132 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  407.464483][   T30] audit: type=1400 audit(1750061122.409:1624): avc:  denied  { write } for  pid=11129 comm="syz.3.1519" name="route" dev="proc" ino=4026533282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  407.487810][   T30] audit: type=1400 audit(1750061122.409:1625): avc:  denied  { bind } for  pid=11132 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  407.510905][ T5878] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  407.532118][   T30] audit: type=1400 audit(1750061122.419:1626): avc:  denied  { write } for  pid=11132 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  407.562400][   T30] audit: type=1400 audit(1750061122.419:1627): avc:  denied  { create } for  pid=11132 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  407.619588][   T30] audit: type=1400 audit(1750061122.659:1628): avc:  denied  { create } for  pid=11142 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  407.671132][ T5878] usb 3-1: Using ep0 maxpacket: 8
[  407.679811][ T5878] usb 3-1: config index 0 descriptor too short (expected 29970, got 18)
[  407.692088][ T5878] usb 3-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  407.703519][ T5878] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 168
[  407.774068][ T5878] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  407.811756][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.819774][ T5878] usb 3-1: Product: syz
[  407.830315][T11145] FAULT_INJECTION: forcing a failure.
[  407.830315][T11145] name failslab, interval 1, probability 0, space 0, times 0
[  407.844021][ T5878] usb 3-1: Manufacturer: syz
[  407.859192][ T5878] usb 3-1: SerialNumber: syz
[  407.864728][T11147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'.
[  407.874432][T11145] CPU: 1 UID: 0 PID: 11145 Comm: syz.4.1522 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  407.874456][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  407.874467][T11145] Call Trace:
[  407.874472][T11145]  <TASK>
[  407.874479][T11145]  dump_stack_lvl+0x16c/0x1f0
[  407.874509][T11145]  should_fail_ex+0x512/0x640
[  407.874532][T11145]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  407.874557][T11145]  should_failslab+0xc2/0x120
[  407.874583][T11145]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  407.874606][T11145]  ? getname_flags.part.0+0x4c/0x550
[  407.874629][T11145]  getname_flags.part.0+0x4c/0x550
[  407.874650][T11145]  getname_flags+0x93/0xf0
[  407.874672][T11145]  __x64_sys_renameat2+0xd4/0x130
[  407.874701][T11145]  do_syscall_64+0xcd/0x4c0
[  407.874729][T11145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.874747][T11145] RIP: 0033:0x7f3444d8e929
[  407.874761][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.874778][T11145] RSP: 002b:00007f3445b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  407.874795][T11145] RAX: ffffffffffffffda RBX: 00007f3444fb5fa0 RCX: 00007f3444d8e929
[  407.874807][T11145] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000003
[  407.874818][T11145] RBP: 00007f3445b3f090 R08: 0000000000000000 R09: 0000000000000000
[  407.874828][T11145] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  407.874839][T11145] R13: 0000000000000000 R14: 00007f3444fb5fa0 R15: 00007ffdf8c6f588
[  407.874862][T11145]  </TASK>
[  408.194516][   T31] INFO: task kworker/u8:4:59 blocked for more than 143 seconds.
[  408.214216][   T31]       Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0
[  408.214846][ T5878] usb 3-1: config 0 descriptor??
[  408.229647][ T5878] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  408.246796][ T5878] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48
[  408.253294][T11149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  408.495313][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  408.759686][   T31] task:kworker/u8:4    state:D stack:25064 pid:59    tgid:59    ppid:2      task_flags:0x4208060 flags:0x00004000
[  408.830655][   T31] Workqueue: netns cleanup_net
[  408.835555][   T31] Call Trace:
[  408.838986][   T31]  <TASK>
[  408.842273][   T31]  __schedule+0x116a/0x5de0
[  408.847963][   T31]  ? __lock_acquire+0x622/0x1c90
[  408.855347][   T31]  ? __pfx___schedule+0x10/0x10
[  408.875920][   T31]  ? find_held_lock+0x2b/0x80
[  408.889823][   T31]  ? schedule+0x2d7/0x3a0
[  408.897678][   T31]  schedule+0xe7/0x3a0
[  408.909865][   T31]  afs_cell_purge+0x41f/0x4f0
[  408.920281][   T31]  ? __try_to_del_timer_sync+0x115/0x170
[  408.935498][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[  408.951296][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  408.956911][   T31]  ? __timer_delete_sync+0x108/0x1b0
[  408.965902][   T31]  ? __pfx_afs_net_exit+0x10/0x10
[  408.974171][   T31]  afs_net_exit+0x83/0x140
[  408.978680][   T31]  ops_undo_list+0x2eb/0xab0
[  408.987739][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  408.994523][   T31]  ? __local_bh_enable_ip+0xa4/0x120
[  408.999931][   T31]  cleanup_net+0x408/0x890
[  409.007671][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  409.013363][   T31]  ? rcu_is_watching+0x12/0xc0
[  409.018310][   T31]  process_one_work+0x9cc/0x1b70
[  409.026837][   T31]  ? __pfx_process_one_work+0x10/0x10
[  409.033054][   T31]  ? assign_work+0x1a0/0x250
[  409.037767][   T31]  worker_thread+0x6c8/0xf10
[  409.045685][   T31]  ? __pfx_worker_thread+0x10/0x10
[  409.051841][   T31]  kthread+0x3c2/0x780
[  409.056100][   T31]  ? __pfx_kthread+0x10/0x10
[  409.064005][   T31]  ? rcu_is_watching+0x12/0xc0
[  409.068951][   T31]  ? __pfx_kthread+0x10/0x10
[  409.075846][   T31]  ret_from_fork+0x5d7/0x6f0
[  409.086108][   T31]  ? __pfx_kthread+0x10/0x10
[  409.092490][   T31]  ret_from_fork_asm+0x1a/0x30
[  409.097381][   T31]  </TASK>
[  409.103084][   T31] 
[  409.103084][   T31] Showing all locks held in the system:
[  409.142220][ T5878] usb 3-1: USB disconnect, device number 40
[  409.158208][   T31] 1 lock held by khungtaskd/31:
[  409.167155][T11163] FAULT_INJECTION: forcing a failure.
[  409.167155][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.190716][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.4.1526 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  409.190740][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.190750][T11163] Call Trace:
[  409.190755][T11163]  <TASK>
[  409.190762][T11163]  dump_stack_lvl+0x16c/0x1f0
[  409.190793][T11163]  should_fail_ex+0x512/0x640
[  409.190818][T11163]  _copy_from_iter+0x29f/0x16f0
[  409.190846][T11163]  ? __alloc_skb+0x200/0x380
[  409.190870][T11163]  ? __pfx__copy_from_iter+0x10/0x10
[  409.190891][T11163]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  409.190914][T11163]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  409.190946][T11163]  netlink_sendmsg+0x829/0xdd0
[  409.190970][T11163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.190997][T11163]  ____sys_sendmsg+0xa95/0xc70
[  409.191016][T11163]  ? copy_msghdr_from_user+0x10a/0x160
[  409.191041][T11163]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.191070][T11163]  ___sys_sendmsg+0x134/0x1d0
[  409.191095][T11163]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.191116][T11163]  ? __lock_acquire+0x622/0x1c90
[  409.191174][T11163]  __sys_sendmsg+0x16d/0x220
[  409.191199][T11163]  ? __pfx___sys_sendmsg+0x10/0x10
[  409.191239][T11163]  do_syscall_64+0xcd/0x4c0
[  409.191266][T11163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.191283][T11163] RIP: 0033:0x7f3444d8e929
[  409.191297][T11163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.191313][T11163] RSP: 002b:00007f3445b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.191330][T11163] RAX: ffffffffffffffda RBX: 00007f3444fb5fa0 RCX: 00007f3444d8e929
[  409.191340][T11163] RDX: 0000000000000840 RSI: 0000200000001180 RDI: 0000000000000004
[  409.191351][T11163] RBP: 00007f3445b3f090 R08: 0000000000000000 R09: 0000000000000000
[  409.191361][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.191371][T11163] R13: 0000000000000000 R14: 00007f3444fb5fa0 R15: 00007ffdf8c6f588
[  409.191394][T11163]  </TASK>
[  409.199360][   T31]  #0: ffffffff8e5c4840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  409.414995][   T31] 3 locks held by kworker/u8:4/59:
[  409.420228][   T31]  #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  409.430863][   T31]  #1: ffffc9000210fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  409.440821][   T31]  #2: ffffffff903370d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  409.450167][   T31] 2 locks held by getty/5583:
[  409.454896][   T31]  #0: ffff888032ce30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  409.464850][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  409.474972][   T31] 8 locks held by kworker/1:6/5878:
[  409.480461][   T31]  #0: ffff88801eef3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  409.491909][   T31]  #1: ffffc9000480fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  409.503186][   T31]  #2: ffff888143f77198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  409.512174][   T31]  #3: ffff888037d30198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920
[  409.521752][   T31]  #4: ffff888053e6a160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620
[  409.532329][   T31]  #5: ffff88807ce32c98 (&gspca_dev->usb_lock){+.+.}-{4:4}, at: gspca_disconnect+0xb8/0x350
[  409.542476][   T31]  #6: ffffffff8fb825e8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x156/0x470
[  409.552887][   T31]  #7: ffffffff8e5cfe38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  409.562923][   T31] 4 locks held by udevd/6064:
[  409.567586][   T31]  #0: ffff88804aa192f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0
[  409.576486][   T31]  #1: ffff888058bcec88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240
[  409.586811][   T31]  #2: ffff88802cb8b3c8 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x240
[  409.596380][   T31]  #3: ffff888037d30198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  409.606792][   T31] 
[  409.609520][   T31] =============================================
[  409.609520][   T31] 
[  409.619797][   T31] NMI backtrace for cpu 1
[  409.619811][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  409.619832][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.619841][   T31] Call Trace:
[  409.619847][   T31]  <TASK>
[  409.619854][   T31]  dump_stack_lvl+0x116/0x1f0
[  409.619886][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  409.619905][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  409.619927][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  409.619952][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  409.619974][   T31]  watchdog+0xf70/0x12c0
[  409.619997][   T31]  ? __pfx_watchdog+0x10/0x10
[  409.620013][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  409.620038][   T31]  ? __kthread_parkme+0x19e/0x250
[  409.620063][   T31]  ? __pfx_watchdog+0x10/0x10
[  409.620078][   T31]  kthread+0x3c2/0x780
[  409.620088][   T31]  ? __pfx_kthread+0x10/0x10
[  409.620099][   T31]  ? rcu_is_watching+0x12/0xc0
[  409.620112][   T31]  ? __pfx_kthread+0x10/0x10
[  409.620123][   T31]  ret_from_fork+0x5d7/0x6f0
[  409.620139][   T31]  ? __pfx_kthread+0x10/0x10
[  409.620149][   T31]  ret_from_fork_asm+0x1a/0x30
[  409.620166][   T31]  </TASK>
[  409.620172][   T31] Sending NMI from CPU 1 to CPUs 0:
[  409.746292][    C0] NMI backtrace for cpu 0
[  409.746304][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  409.746321][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.746329][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  409.746351][    C0] Code: 6b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f0 29 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  409.746364][    C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2
[  409.746376][    C0] RAX: 00000000018369d7 RBX: 0000000000000000 RCX: ffffffff8b801c19
[  409.746385][    C0] RDX: 0000000000000000 RSI: ffffffff8de19e08 RDI: ffffffff8c157920
[  409.746393][    C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645
[  409.746401][    C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000
[  409.746409][    C0] R13: ffffffff8e297780 R14: ffffffff90a81450 R15: 0000000000000000
[  409.746418][    C0] FS:  0000000000000000(0000) GS:ffff888124753000(0000) knlGS:0000000000000000
[  409.746431][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.746440][    C0] CR2: 00007fbf46180ab8 CR3: 000000007f0ad000 CR4: 00000000003526f0
[  409.746449][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  409.746457][    C0] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  409.746466][    C0] Call Trace:
[  409.746470][    C0]  <TASK>
[  409.746475][    C0]  default_idle+0x13/0x20
[  409.746488][    C0]  default_idle_call+0x6d/0xb0
[  409.746500][    C0]  do_idle+0x391/0x510
[  409.746517][    C0]  ? __pfx_do_idle+0x10/0x10
[  409.746532][    C0]  ? trace_sched_exit_tp+0x31/0x130
[  409.746552][    C0]  cpu_startup_entry+0x4f/0x60
[  409.746568][    C0]  rest_init+0x16b/0x2b0
[  409.746580][    C0]  ? acpi_subsystem_init+0x133/0x180
[  409.746597][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  409.746616][    C0]  start_kernel+0x3ee/0x4d0
[  409.746634][    C0]  x86_64_start_reservations+0x18/0x30
[  409.746659][    C0]  x86_64_start_kernel+0x130/0x190
[  409.746676][    C0]  common_startup_64+0x13e/0x148
[  409.746693][    C0]  </TASK>
[  409.752811][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  409.752825][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  409.752844][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.752854][   T31] Call Trace:
[  409.752860][   T31]  <TASK>
[  409.752871][   T31]  dump_stack_lvl+0x3d/0x1f0
[  409.752897][   T31]  panic+0x71c/0x800
[  409.752921][   T31]  ? __pfx_panic+0x10/0x10
[  409.752942][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  409.752965][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  409.752986][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  409.753006][   T31]  ? watchdog+0xdda/0x12c0
[  409.753023][   T31]  ? watchdog+0xdcd/0x12c0
[  409.753042][   T31]  watchdog+0xdeb/0x12c0
[  409.753062][   T31]  ? __pfx_watchdog+0x10/0x10
[  409.753078][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  409.753102][   T31]  ? __kthread_parkme+0x19e/0x250
[  409.753124][   T31]  ? __pfx_watchdog+0x10/0x10
[  409.753141][   T31]  kthread+0x3c2/0x780
[  409.753155][   T31]  ? __pfx_kthread+0x10/0x10
[  409.753171][   T31]  ? rcu_is_watching+0x12/0xc0
[  409.753190][   T31]  ? __pfx_kthread+0x10/0x10
[  409.753205][   T31]  ret_from_fork+0x5d7/0x6f0
[  409.753226][   T31]  ? __pfx_kthread+0x10/0x10
[  409.753240][   T31]  ret_from_fork_asm+0x1a/0x30
[  409.753265][   T31]  </TASK>
[  410.089384][   T31] Kernel Offset: disabled
[  410.093684][   T31] Rebooting in 86400 seconds..