last executing test programs:

5m44.078625619s ago: executing program 0 (id=12):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x38, 0x4a, 0x0, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x138, 0x0, 0x0, 0xd931}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c800}, 0x40)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1)
ptrace$setsig(0x4203, r3, 0x7, &(0x7f0000002200)={0x1b, 0xe, 0x605})
r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000100)={&(0x7f00000ab000/0x4000)=nil, 0x4000})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="ee0200007d01000005ad010000000000150000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b6376666f782502000000000031ffadbc920000003800704a86cec622007dfa673effeb09b5311f5bde054000000000187b8200b5002fa9595fcb14034354b9fd9ef196a51cd5157adc81010000001200cfb6000000000000000000000000000000001501f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a3700ff6b7acf16b47b52cb3b22b3cd5840007e37f20fdf36e13f78daae604801eb68b15be7f6f532bdf44760a9d3cd9edb8cee867a2b8a926902e2936ec9454ce5c507b5860c4049216d1f3fb741af1e2e1b00e946b945f978eca30600f8d56b6eef3a9fc7c3d01027250adde8a2e35dea0401be2a59fe983f0bf34eabf92a4d7d79fe817c010f557fc73b50cd44ac02318a8d200f49e18d3b8886b8a6f554fc29402370c0fc5bbeebb0de3852808e12dca31cee9db2f323ed826fe4fa2df3b9ceaa2c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/738, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2ee)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')

5m41.8667649s ago: executing program 0 (id=15):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
socket$inet(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a00000002100010025bd7000fbdbdf25fc020000000000000000000000000001000000000000000000000000000000014e2200074e20000002004080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000001ac1414aa0000000000000000000000003c010000003500000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

5m33.808105628s ago: executing program 0 (id=26):
r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
r1 = syz_open_procfs(0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$getsig(0x4202, r4, 0x6d4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r6, &(0x7f0000000180)='1', 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)

5m29.471621496s ago: executing program 0 (id=34):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$inet6_udp(0xa, 0x2, 0x11)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0007040000080000000000000000000000000000000000000526"], 0x40)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)

5m26.41110964s ago: executing program 0 (id=38):
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b405000003000000711020000000000006000000000000f0009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0xff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x40a, 0x2b7906, 0x21c8f9})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)

5m22.179453621s ago: executing program 0 (id=42):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310"], 0xf)

5m7.074069053s ago: executing program 32 (id=42):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310"], 0xf)

3m4.56600551s ago: executing program 2 (id=307):
setns(0xc9, 0x0)
socket(0x8, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x4000000, 0x0, 0x2}])

3m3.578701622s ago: executing program 2 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000042abd70f6ff00"/20, @ANYRES32=r2, @ANYBLOB="48270100602101001c00128009000100626f6e64000000000c00028005000e0003000000"], 0x3c}}, 0x0)

3m3.380116964s ago: executing program 2 (id=315):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07f00000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3m3.13468025s ago: executing program 2 (id=316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x1, 0x21, 0xeb})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1e7)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r1, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001")
close_range(r0, 0xffffffffffffffff, 0x0)

3m1.833744671s ago: executing program 2 (id=318):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_devices(r2, 0x0, 0x6)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x24008050)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040))
r8 = socket(0x2d, 0x2, 0x0)
setsockopt(r8, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4)
sendto(r8, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x34)

3m1.362823962s ago: executing program 2 (id=319):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000400)=@nullb, r0, &(0x7f0000000580))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2)
openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0)
request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r3)
add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r3)
write(r1, &(0x7f0000000000)='270', 0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100), 0x4)
ftruncate(r5, 0x1000004)
syz_clone(0x4000, &(0x7f0000000180)="bc87258d47ea196dc025335a27c5371656b24071594168327d283e10df083bd39b5e17a6537bf8ba6f8c84680f60053b8245cc8d6d29307d0eb1468976ee6ae43876edeba8c1d4f87f423531baccbb88d26d849992212f724e12", 0x5a, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)="cde6016cd25e433e3fc68313399c9cadbef9f4b807b4e3bd783798a5eb58469e95220c751eb90c00ca505cd96cbfaf4d7c840139a8bb20effd620fe1709f8bdedd6bca7167ce859174edfd83e5c9c85743bd2b227a1de5c58fca97c2240467e9230e300be2ef09317036708ad750e8e9deff6821641ba05f906de2d325367ecd1987")
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r6)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000})

3m1.136147984s ago: executing program 33 (id=319):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000400)=@nullb, r0, &(0x7f0000000580))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2)
openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0)
request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r3)
add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r3)
write(r1, &(0x7f0000000000)='270', 0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100), 0x4)
ftruncate(r5, 0x1000004)
syz_clone(0x4000, &(0x7f0000000180)="bc87258d47ea196dc025335a27c5371656b24071594168327d283e10df083bd39b5e17a6537bf8ba6f8c84680f60053b8245cc8d6d29307d0eb1468976ee6ae43876edeba8c1d4f87f423531baccbb88d26d849992212f724e12", 0x5a, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)="cde6016cd25e433e3fc68313399c9cadbef9f4b807b4e3bd783798a5eb58469e95220c751eb90c00ca505cd96cbfaf4d7c840139a8bb20effd620fe1709f8bdedd6bca7167ce859174edfd83e5c9c85743bd2b227a1de5c58fca97c2240467e9230e300be2ef09317036708ad750e8e9deff6821641ba05f906de2d325367ecd1987")
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r6)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000})

17.791909285s ago: executing program 1 (id=706):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0xbd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800)
recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/kallsyms\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020)
pread64(r7, &(0x7f0000000040)=""/103, 0x67, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

12.34577495s ago: executing program 1 (id=720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x80, 0xff, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

11.03760499s ago: executing program 3 (id=721):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff59eebf40fd201193004d5e95c9d50df68b2bb53383dadebc8671c72571296d95f80175f7af9c313e659ec5b0c4afb6334b3cd6f626cf2de890b9b1dca7d0ad9ee37116faa2eecd9cc3719d6bcf9f7b6f479e9f0d5555cee0a6e4cd922f876424cd99c95b769bf95a35eaaa09ea0f0a962df298ceea7e475e8c405e69c6e6cf409608b87a4242f69e38aeb6ca9f6fb1431a408b25a4ef95c91927a2f04e7d8878b34a3bd4c86e690a129fdcde23b13f98f66684d82ce491e56e9bcd77c88249900789c419168d4d1a5e2a916e9750c8497d8c3d6ce6fed6b03204f3daebc9f18c", @ANYRES64, @ANYRES32=r0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000133020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc020000000000000000000000000000ff0000000335000000000200ffffffff00000000000000000000000000000000000000000000ffefe000000200000000000000000000000000000000ac141400000000000000000000000000000100000635000002000f00ff020000000000000000000000000001ffffffff000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000a0010"], 0x27c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8c02, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000400)={0xcb, 0x101, 0x2})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r2, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16)

8.63823334s ago: executing program 1 (id=726):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a00000002100010025bd7000fbdbdf25fc020000000000000000000000000001000000000000000000000000000000014e2200074e20000002004080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000001ac1414aa0000000000000000000000003c010000003500000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

7.442161821s ago: executing program 6 (id=730):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x108, 0xfd}}, 0x18}}, 0x40010)
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0xb2)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
readv(r1, &(0x7f00000002c0)=[{0x0}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r2 = gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f0000000080)={0x77359400})

7.324213985s ago: executing program 4 (id=731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
gettid()
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x400000041)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x3, 0x3742, 0xffffff86, 0x401, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x6}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040850)
iopl(0xe)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
r5 = socket(0x15, 0x803, 0xfffffffe)
sendto(r5, 0x0, 0x0, 0x8800, 0x0, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)

6.841018483s ago: executing program 1 (id=733):
syz_usb_connect$uac3(0x0, 0x85, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400c200b104000010203010902730003010af005080b0001012430ed0904000000010130000a2401010f000080000005240c00000904010000010230000904010101010230000905010920010109100a25250500200050030009040200000102300009040201010102300009058209100006e2010a25250200002000ffff"], 0x0)
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x400, 0x1, 0x235})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeef", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8", 0x42e}], 0x1}}], 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f000000bd00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4, 0x4}, 0x4}], 0x1, 0x45833af96e4a38df, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpgrp(0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0eb010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

6.466553239s ago: executing program 6 (id=734):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind(r0, &(0x7f0000000100)=@can={0x1d, r1, 0x1, 0x2}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000480)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
read(r0, &(0x7f0000000500)=""/100, 0x64)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x1, 0x3], 0x0, 0x8340})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206d044fc200000000000109022400010000000409040008020300030009210000000122180009058103ff03bd0000e8e431a8fb8b2b33199f6388275c20d69dd35c27e9a0247bbe88d881f9d5"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x23, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0xf7, 0x7}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x6, 0x7, 0xff, 0x4}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="070f050000"], 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40a}}, {0x9, &(0x7f00000002c0)=@string={0x9, 0x3, "1c439b3b3e6972"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0xf, &(0x7f0000000380)=@string={0xf, 0x3, "a00d49089c21c575d6b067bcae"}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "f2eba8210053b76e47c1feddfe48171cbbf0b00fa6ee347e869a9bd9d6fb04584326d4372feeff6d6cb71628264177872c7e526c23ceb090e3eea65db6bf93a72ea0d22c157a46eca851659207316e55c3bc6fed7732be9bb39ad057f3e736bf096018414b21e1b6f7e8bd6be1abe23b502117748a6fa2e5b5a921c4767ead4017135eccc8a392554427c5a6c924175db7c2819e6972c3ac9f29b46d49772d6218ef02fff6b3b0509908777d134d653627482bc9d72567163f4d93cf41b5be27c92239a2c492b88bb6"}}]})
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100))
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000480))

6.453316582s ago: executing program 3 (id=735):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
socket$kcm(0x11, 0x3, 0x0)

6.139509502s ago: executing program 3 (id=736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x41, 0x107, 0xffffff02, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc010)

6.123394449s ago: executing program 5 (id=737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x80, 0xff, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

5.526686157s ago: executing program 5 (id=738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x430840, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r10=>0x0})
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r10}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x10, 0x400, {0x77359400}, {}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x31, 0x2, 0x0, 0x0, "bb6e9d3936563040973a2298cb9b6306f09a6b7013d608a67f2d93e955f444a564c536fde443612fe09f401536cca671525412447514c05acfda9c453194d5b8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff3, 0x1c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x44005}, 0x80080)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x41, 0x107, 0xffffff02, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x4008010)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
syz_io_uring_setup(0x4431, &(0x7f00000004c0)={0x0, 0xa2e8, 0x800, 0x3, 0x19d, 0x0, r9}, &(0x7f0000000540)=<r12=>0x0, &(0x7f0000000580), &(0x7f0000000680))
syz_ublk_setup_io_uring(0x35ad, &(0x7f00000006c0)={0x0, 0xd53f, 0x40000, 0x1, 0x374, 0x0, r11}, &(0x7f0000000740), &(0x7f0000000780)=<r13=>0x0, &(0x7f00000007c0))
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r12, r13, 0x0, &(0x7f0000000840)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x77359400}, 0x1, 0xc, 0x0, {0x0, r14}})
pwritev(r11, &(0x7f000000b680)=[{&(0x7f00000083c0)="109ab572495b", 0x6}], 0x1, 0x2, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

5.526238299s ago: executing program 6 (id=739):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDDISABIO(r0, 0x4b37)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0205647, &(0x7f0000000180)=0x1)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)
write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4)
fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
r3 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='ioch\xed\xe7\x9bCl\'dzG@\x8aU\x8cV\xdbm\xad\xbf\x00^\xba\x03\xf2\xcd\x8ds\x8dW(\am\xda\x943ZH\xd8\x13Am\xd5~\x8b\x8e\xf8\x99\x81\xcdlm\xd1\x12\xa1N\xd1Jm:\xfe*{\x87\xf1\x110t\xa4ZO\"\xc0\xd6\\\x02\x8dVN)8\xb8\xecj\xfa\xf6\x06\xc1\vJ\x91\xaf', &(0x7f0000000100)='iocharset', 0x0)

5.525886033s ago: executing program 3 (id=740):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb0806000800400001000009000000ac1414aa000000000000e0000001979205006815f26020e1cacaacd9298a0a0c25b8c24f9829ea3b268fe197a79a9c3d44e1c12d990faaf4d687029c67b7473174ec36ca5d752f4b58601a820e6bb8a01919395b8accb200c37a90309e91e77a5244012f0000"], 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x11)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0007040000080000000000000000000000000000000000000526"], 0x40)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2623, 0x86)
connect$can_j1939(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180), 0x1b)

3.949405003s ago: executing program 4 (id=741):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.67005457s ago: executing program 1 (id=742):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c80"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x38}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0)
write(r4, &(0x7f0000000080)="c4", 0x1)
connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10)

3.434813282s ago: executing program 3 (id=743):
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a00000002100010025bd7000fbdbdf25fc020000000000000000000000000001000000000000000000000000000000014e2200074e20000002004080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000001ac1414aa0000000000000000000000003c010000003500000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

3.254562198s ago: executing program 5 (id=744):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/kernel_sys_info\x00', 0x1, 0x0)
write$make_it_fail(r0, 0x0, 0x0) (fail_nth: 1)

2.789072618s ago: executing program 6 (id=745):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x101})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000880)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xf04b8fc03b4e69cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

2.677617565s ago: executing program 5 (id=746):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)=0x3c)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1d, 0x92, 0x40, 0x20, 0x52b, 0x1803, 0x5ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x4, 0xa0, 0x7, "", [{{0x9, 0x4, 0xfb, 0x6b, 0x0, 0x91, 0x6, 0xf3, 0xf5}}]}}]}}, 0x0)

2.584070918s ago: executing program 4 (id=747):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x101})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000880)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xf04b8fc03b4e69cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

2.454603847s ago: executing program 6 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x80, 0xff, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

1.60926331s ago: executing program 6 (id=749):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x101})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000880)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xf04b8fc03b4e69cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (fail_nth: 1)

1.56648194s ago: executing program 4 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x54, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x54}}, 0x0)
r1 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0b3bc5913dbab6a17b", 0x9, 0xfffffffffffffffa)
open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0)
r2 = geteuid()
keyctl$chown(0x4, r1, r2, 0xee01)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r2, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x54, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x54}}, 0x0) (async)
add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0b3bc5913dbab6a17b", 0x9, 0xfffffffffffffffa) (async)
open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) (async)
geteuid() (async)
keyctl$chown(0x4, r1, r2, 0xee01) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async)
quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r2, &(0x7f0000000100)) (async)

1.349902443s ago: executing program 3 (id=751):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='0', 0x1)
write(r4, &(0x7f0000000180)='1', 0x1)

1.258933543s ago: executing program 4 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0xff, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

223.94948ms ago: executing program 5 (id=753):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb0806000800400001000009000000ac1414aa000000000000e0000001979205006815f26020e1cacaacd9298a0a0c25b8c24f9829ea3b268fe197a79a9c3d44e1c12d990faaf4d687029c67b7473174ec36ca5d752f4b58601a820e6bb8a01919395b8accb200c37a90309e91e77a5244012f0000"], 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x11)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0007040000080000000000000000000000000000000000000526"], 0x40)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
sendfile(r0, r0, &(0x7f0000000040)=0x2623, 0x86)
connect$can_j1939(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180), 0x1b)

25.557688ms ago: executing program 1 (id=754):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180)=0xffffffffffffffff, 0x12)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r4, &(0x7f0000000b00)='10000', 0x5)
r5 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000003000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x4080)

11.772115ms ago: executing program 4 (id=755):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x181280)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000780)=ANY=[@ANYBLOB="840100001800010000000000000000001d0109004d000f8025b57e35619bf282cfcd8fba0cb7f2934efaf47c316cec12a9f3d643ca2c77adf0cde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b596"], 0x184}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='+-,\x00', &(0x7f00000001c0)='\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xc0104d03, &(0x7f0000000140))
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x60)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x39b3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)
syz_clone(0x8285800, &(0x7f0000000440)="6dea818d45dc30abc0d3b5f462aa7b326eacceb48b33fe7ee79886564be9d0cfe5d43c1d45ed298d1d926fb26a5254799fff3755a3f6a818cb82312cd2b642bce8ce6f9095a5d550f6b2cba8f50065e6b9a5af8eb89c640f1125d8fb16bd58076db0521b8d2d8a8c5b9e36b9f0cc9c5f7e2673f5f3fcb89fa3789785dfe21ffdc76507fb3d42b53961c14594e8b99a506c37dffbf06491009fc7374498bc557fc0817848624237f9707884d0bdf4b53ffccd39b6566ae77951e0ced892d6a9e110993adedc2d6aa14505876c", 0xcc, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000cc0)="14d0dd1d0b86036b07ae00e95d641326fe4f6d227041e2383426b6c60ac60fb8a68887c2ecb53d999968936201f83c87cdc9522ee6311790fc063417e08adf0f54220181d4558f88f926f4e0d4cb20fada3a57a3c7f3de930fb3ad8ed4e44e4e1584cdf1e6030c03115045e3f8e15009bc5cf44ff8a4435574dd21764adc1a47bd2ae6da4fe1a3aa32adbccde53142db7054bfd5344b60e49b90b9baa17700eba6f256a15af3ba7d8ede8cefb4326b550d76d49105013361716b50a07fc4759ecb1a9b8253a6a5f8584bc04dc8a1a62fbd5a924b692da71fc1625e81d94ed6f6f27c964dd05a9bfdae2eefdb42afdbbbb73327a966e9f7e582e8b7177ea21985980e97e5f683377a767d73c27352f4659e085b831f6c1201ca92d42fd6c3aafd70348bab99a2cc21540355a7b5df85d0be8add12ceec9bd99cc03fffc4f1377748800e46eade049dd6583806f50c2b54b439918305f20032cf9a4f1560ff28e6bbdcb7763a4027956306ca9743968da5c11543b0335c2ada8030f17cd78ae80c817f69b9a18ff4eb020e9c4768164905c94b70c20bfaa1765f26106649179feeaa25dff2d3b232f96af1dca28b715cd528c33743cae7114cec4048de432ed26a8c6219ca391eccb5929e3d07e23bad440e5bb04157a49d57c30140c1b3af5b4cde4b132eaf793fcdf7bd791bd9e1bb86480e09c4d75db63a34671fbc77a22d012fac262362058c6f7d07c899377c6a7e8c944cd99b30e4f8c00b652c5dc4bf2b4499f8bf14200cda390e2a918555832c76b896cde3921345a625c04a5df5db520975e147fa473e7ca8745315a9a601d1b2275c3bb18c240a2542d7f443f00b3f2592569c09095e07e0cf83ad797425273629fe28b81c785cbc19cdd55d534f342e48d8306571f5c3431493f3751311b6d5d3ae50eab91ff1f137267cd247269d27cbcd44189a829b9d5407e53169117a2902c8a6e6b24542ac177fb186dac07159f5b41e46d6eb229d322441bf93378fc781b2116f7d744192b31488e3fd836a6ef536ff22fb4ecf0580ce26f2f68acba19d214779105dda5db1771b92dacc61789faf64b792db4518c057d4eee2f73b77043d2c259667fedacea8485eac1b359928169f8040283d4380592ece03f37c86d6e462edbc3fcd3c979004df5b4c76a80d0567287e90c173950003f938b19286311e4730f22dc1645f8cd2b8c32b9ae0490d53bfe8069b8798054b473855aa48801676081b0a2899b5ff5a702472955bc1d597ca843dcd5f11c083b4e2230dbf0b5ba61c014b9284821457e4ad8b5a36e31a982fee57f54a2a3d1c88fd9cdbd7b84ed23719cc5136ed6968e55a50cd56e07903e60e47a94977aec347147f81879da5e87a70b16c538faefccba89fb90f303b54a1646876502efb7c9f2c034cb6dfb841f9c471aef516e6173d91e435f18090f5f9ac09c8cb3a53038ceeaff425afe2794bc8dfc886619e9b02c14d849e91ce764af24bf99d18d58a830bf1299049696e431d98ec3e84420ddd294fd2c8990594db2c89378ab5b269e59ae29584b2d1ddc4deb9c428935178a5273ae13fac55814cbd61aac92df9c34e2241b82f2c23a883a4e0c7a7ecc5620f0663994340402b9614f64437c44685b0f451e84ef28fb82addcae4f3205c1e7890352d82a05256ed5b7df306d798bdfee67f3d81931fcc2553f97d38221f810c943dc16d2e5457db9621ad21ba9be2dc0a8187f65408311f5f6a03c2164c0c179748aeca5fcd0a597034f480e6822410dd5e758dbd81250ec0555aad76aacec4c5ca2a178323d1db7c5f0f02fdfb18814f0b0e38b92776a73fefb6e04bebdadd4c6009eadace294f37eb7cfaaba25e2e3a50150650a33ef4be33deadb1a1b88807765f1fc6498c6992ec9d6c0daa340368f5f06feae17fa53807e7e802d04544b2fc5a343316886fa024d2857f67405a9c62b1e57cd97a17b3bb3c78717558706957dbe146cca3e9ace22348011b94650383ea7027a32de7d5e132dbc7c826e1fc6bf9f55459b737bb9e3e79f42455562a23bb5fa1e783481a1ce25392a9508029805f878fe6deb42cef80163d6d66b9623e854284a45d73e6bfbb6221140c074fa0dc48cbecd3b65d2dca15839901ef3ba508b92505ea0ca402b877943e67d19c379558a756b01466b6a085eb9333cb60a1a1e366565beaa8ce95fd6b65e072d21c62eeb1bd0e85eee8382e8f0f33ee5dcee7a78fc3489a01a33e0ca9a76e06cef35f4641a544a25c35830ca82e40e58b542d3fd7074350db40e2b45325e8c6e89ee67100dfda2caf01d3213b055d34f4a7220a17ac62514e68aa33231b6a01a8210043b4f3236c63ad59554efbf9636193e7254ab410c0819821a88a0ef8beb5d54c8476bc7e5a710d6ce88e31aec1c391efacc7311e96f07fc7d1cb6cc97d900b6268b4233441a9c5e5104d56f773c2e2b08caa37698395f3966ddc9f7d6d1dfc82c582af3b71692af67fa9a6c4005838efced88317b0804121ea71a21291246928a80c7bf345899808900f523c4d51dab92878747b030de4eec2a46da0c708210fd038bd31f10b55f050984e42ebf45912b6f7e3dc6eeff2ab4e7a9b26ca370b9846759a1cb8cef523258ecdb84c6544801dc766b405f8b7e3fab777f306afb66bb062a8e3bfb0ea43dfb06ca637d2f6d6a09977871a1b65e11e0c15e3a994fd91fdd841fc993ccb6255d6824aa452bd2751e6f2e7e2a0415a0bf6078300d9c1b2ae6ed71da2ad1f052e52be1261b3a6453665f561b76159f56eb8d47560bd1ec622c250a0bebac20447390cc666df42f0de412e3be8fde63e5785a5c761ca9ec3f6594d211665b93b9788710581f1086caa69af9711539c06be48cf87c16b522d")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

0s ago: executing program 5 (id=756):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x84180, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000400), &(0x7f0000000740)=0x4)
read(r0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000001700)=ANY=[@ANYBLOB="99000000080000002c7266646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0x7, 0x2, 0xa, 0x4, @remote, @loopback, 0x700, 0x7, 0x24, 0x2}})
mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000005, 0x4010, r3, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000700)={@empty, r4}, 0x14)
read$msr(r3, &(0x7f0000000100)=""/145, 0x91)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000200)={@broadcast, @multicast2, <r5=>0x0}, &(0x7f0000000240)=0xc)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r10=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000004c0)={0x100, 0x0, 0x9, 0x0, r10}, &(0x7f0000000500)=0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', r7, 0x700, 0x80, 0x8, 0x9, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x68, 0x0, 0x81, 0x0, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x8, 0x4e, 0x0, 0x7, [0x4]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', <r11=>0x0, 0x8000, 0x10, 0xb, 0x62, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @multicast1, {[@generic={0x82, 0xc, "2b52bafccf9582f49fbc"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xab, 0x1, 0xf, [{@loopback}, {@private=0xa010100, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010100, 0x7}]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f0000004500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000044c0)={&(0x7f0000001740)=@newchain={0x1dbc, 0x64, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xd}, {0xf}, {0xc, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xff}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x872}, @filter_kind_options=@f_route={{0xa}, {0x1d54, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xd1}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_POLICE={0x10e8, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0x7, 0x3, 0xfffffff8, 0x2809, 0xffff, 0xffffffd5, 0x1, 0x8, 0x1, 0x1, 0xfff, 0x7ff, 0x4, 0x5, 0x8, 0x3, 0x748a, 0xfffffff7, 0x7, 0x1, 0x5, 0x145b, 0x87, 0x10001, 0x0, 0xfffffffa, 0x2, 0x1, 0x2, 0x7ff, 0x2, 0x9, 0x1, 0x2, 0x6, 0x101, 0x9, 0xd2, 0x2, 0x3, 0xff, 0x0, 0x5, 0x0, 0x5, 0x213, 0xbe70, 0x2, 0x7, 0x2, 0x4, 0xff, 0x24, 0x5, 0x6, 0xb48, 0x3, 0xfffffffc, 0x4, 0xf36e, 0x1ff, 0x10000, 0xc7, 0x4, 0x4, 0xbdd7, 0xd9e, 0x0, 0x9, 0xd, 0x200, 0xab, 0x8, 0x1, 0x7, 0x2, 0x6, 0xffffff80, 0x4, 0xdeb, 0x24cf, 0x6, 0x400, 0x9a7, 0x9, 0xbb, 0xb, 0x5, 0x64dd, 0x200000, 0x101, 0x8, 0x8, 0x7, 0x8, 0x3914, 0x4, 0x60000, 0x4, 0xb, 0x9, 0x4, 0x80000001, 0x2, 0x9, 0x2, 0xffff, 0x3, 0xff, 0x10, 0x5, 0x4, 0x2, 0x3, 0x2, 0xfffffff8, 0x4, 0x7345, 0x6, 0xf4f7, 0xfffffeff, 0x8, 0x2, 0xee90, 0x200, 0x8ac1, 0xc, 0x9, 0x6, 0x62e, 0x4, 0x5, 0x3, 0x2, 0xffffffff, 0x20000000, 0x8, 0xb5f, 0x5, 0x3d5, 0x8, 0x1, 0xfffffffd, 0xad, 0xfff, 0xffff, 0x1, 0x58, 0x4, 0x3, 0x1000, 0x8, 0x101, 0x7, 0x800, 0x2, 0x25d, 0x7, 0x9, 0x5, 0x72b8, 0x7f, 0x9, 0x3, 0xff, 0xd, 0xffffffff, 0xd, 0x0, 0x3, 0x10000, 0x1, 0x7fff, 0xe0, 0x7, 0x0, 0x9, 0x80, 0x3, 0x7, 0xfb, 0xf, 0x7, 0x0, 0x400, 0x8, 0x5, 0x2, 0x2, 0x7, 0x8, 0x118, 0xb, 0x4, 0x10001, 0x2, 0x6, 0x2, 0x0, 0x8, 0x7, 0x1, 0x1, 0x7, 0xa, 0x5, 0x1, 0x4, 0x600edd5f, 0x4, 0xd544, 0x9, 0x3, 0x0, 0xbbc, 0x80, 0x1, 0x7, 0x6, 0xfffffbff, 0x7fff, 0x60, 0x8, 0x8, 0x23f, 0x6, 0x4, 0x2, 0x9, 0xfffffffc, 0x336, 0x3, 0x10304abc, 0x6, 0x0, 0x7, 0x3, 0xffff, 0x3, 0xffffffff, 0x8, 0x80000000, 0xe7, 0x0, 0x8000, 0xef, 0x3ff, 0x7bd, 0xa5, 0x9, 0x8, 0x2, 0xfe4, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x5, 0x8c3, 0x8, 0x101, 0x0, 0x5, 0x77, 0x4, 0x136, 0x7, 0x15a54d45, 0x9, 0x6, 0x400, 0x5, 0x0, 0x4, 0x8, 0x2b4, 0x0, 0x4, 0x0, 0x3, 0x53435b02, 0x7, 0x3, 0xffffffc8, 0x100, 0xffffffff, 0x47f, 0xe0b, 0x7, 0xfff, 0x8, 0x7, 0x6, 0xf339, 0x3, 0xf2, 0x4, 0x6, 0x6, 0x2, 0xfffffffc, 0xb19, 0x5, 0x4, 0xa, 0x0, 0x1, 0x7, 0x1, 0x5, 0x6, 0x3, 0x40, 0x9, 0x4, 0x9, 0x3, 0x3ff, 0x2, 0xa, 0x9, 0x2, 0x3ff, 0x9822, 0xff, 0xd, 0x7ff, 0x0, 0x80000001, 0x1, 0x5, 0x4, 0x2c00, 0x3, 0xfffffffc, 0x5, 0xb, 0x401, 0x8, 0x6, 0x5, 0x1, 0x5506, 0x3, 0x1718960d, 0x9, 0x7, 0x7, 0x2, 0x2a, 0xf58a, 0x1, 0x4, 0x5, 0x5, 0x8000, 0x6, 0x8, 0x6, 0x4, 0x0, 0xec, 0x22, 0x1, 0x7, 0x1ff, 0xffffff2e, 0xfffffe01, 0x400, 0x3, 0x4424, 0x7f, 0xe43, 0x800, 0x9, 0x8001, 0x9, 0x10001, 0x2, 0x1a, 0x101, 0x8d, 0x5, 0x1, 0x3, 0x0, 0x4, 0xb, 0x9, 0x3, 0x81, 0xdbd, 0x3, 0x101, 0x5, 0x7, 0x2, 0x81, 0x7f, 0x1, 0x5, 0xb, 0x7, 0x3, 0xed7a, 0x6, 0x9, 0x6, 0x7, 0x6, 0x6, 0x5, 0xfffffffa, 0x2, 0xaf, 0x0, 0x627, 0x3ff, 0xb, 0x5, 0x0, 0x3, 0x760, 0x3d30, 0xdae8, 0xd14d, 0x1, 0xfffffffa, 0x1f, 0x1ff, 0x2370c4b6, 0x2, 0xffffff78, 0x4, 0xfffffff9, 0x6, 0x80, 0x6, 0x8, 0x61, 0x4, 0x1f9b, 0x7ff, 0x3, 0xf, 0x9, 0x0, 0x8, 0xcd7, 0xfffffff6, 0x8, 0xfffffffb, 0x6, 0x4, 0x8, 0x7fff, 0x1000, 0x2, 0xfffffc01, 0x10, 0x1, 0x6, 0xfffffff7, 0x1, 0x4, 0x3, 0xa, 0x0, 0x7, 0x7, 0x6b2, 0x2, 0x86b, 0xfd, 0xef, 0x0, 0x1000, 0x100, 0x10, 0x0, 0x4, 0xc4, 0x8, 0x6, 0x8001, 0xb, 0x485c, 0xdfb4, 0x3, 0x7ff, 0x4, 0x10, 0x0, 0x9, 0x5, 0x6, 0x10000, 0x9, 0xff, 0x10001, 0xa, 0xada, 0x2068, 0x0, 0x8, 0x0, 0x10001, 0x6, 0x9, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x6, 0x9f, 0x9, {0x5, 0x6, 0xff, 0x90c, 0x2, 0x3}, {0x3, 0x0, 0x0, 0x0, 0x2000, 0xfffffff7}, 0x5651942f, 0x1, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x3, 0x165, 0x1400000, {0xd, 0x2, 0x4a, 0x4, 0x7, 0x101}, {0x95, 0x1, 0x3, 0x5, 0x2, 0x1}, 0xfff, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xd1, 0x2, 0x3, 0x7, 0x8, 0x8, 0x7fff, 0x3, 0xde, 0x3, 0x0, 0xa, 0x3ff, 0x3, 0x2, 0x81, 0x3, 0xb9, 0xb9c, 0xd, 0x2, 0x6, 0x8, 0x4f9, 0x0, 0x1, 0x5, 0xfffffff9, 0x7, 0x3, 0x3ff, 0x3, 0x8, 0x5, 0x5, 0x8, 0x80000001, 0x10000, 0x3, 0x4, 0xff, 0x7, 0xb88, 0x2, 0xffffbf79, 0x1, 0x6, 0x9, 0x3, 0x9, 0x9, 0x0, 0x0, 0x1, 0x5, 0x39, 0xff, 0x833, 0xb, 0x8, 0x457f, 0x1f4a, 0x8001, 0x84, 0x5, 0x0, 0xef8, 0x100, 0x1, 0xfa2, 0x4bd, 0xf5, 0x7fff000, 0x7ff, 0x9, 0x6, 0x6, 0xfffffffc, 0xf, 0x9, 0x8000, 0x8, 0x3f14, 0xffffffc0, 0xf9e3, 0x4e, 0x8, 0x4, 0x200, 0x2, 0x7fff, 0x8, 0x1, 0x5, 0x2, 0x0, 0x7a42, 0xe6cc, 0x66, 0x4, 0x2, 0x3, 0x80000000, 0x5, 0x0, 0xa, 0xfffffff9, 0x8, 0x6, 0x15d, 0x1, 0x5, 0x5, 0x9, 0x769, 0xf9, 0x7, 0x9, 0x4, 0x6, 0x1, 0x7824d907, 0x5, 0x5, 0x1, 0x6, 0x1, 0x1, 0x2, 0xb7f5, 0x0, 0x3, 0x2, 0x7, 0xdbeb, 0x8, 0xe917, 0x3b9c, 0x7, 0x101, 0x401, 0xe, 0x1ff, 0x0, 0x0, 0x0, 0xa, 0x3, 0x5faa6b95, 0x0, 0x2, 0x101, 0x1, 0xfffff3a4, 0x8c9, 0x8c, 0x10001, 0x2, 0x7d0, 0x8eb, 0x8, 0x80000000, 0xffff, 0x8001, 0xcab, 0x0, 0x6, 0x1ff, 0x5, 0x6, 0x7, 0x7, 0x0, 0x5, 0x3, 0x57a, 0x4, 0xa, 0x78b0, 0x9, 0x2, 0x0, 0xff, 0x3, 0x8, 0x2, 0xfffffffb, 0x400, 0x8, 0x10000, 0x401, 0x7, 0x1c, 0x0, 0x7edb, 0x0, 0x5, 0xf6, 0x80000000, 0x4, 0x552, 0x4, 0x3, 0x81, 0x8, 0xd, 0xc, 0x7, 0x2, 0xffffffff, 0x3, 0x1000, 0x7, 0x2, 0x1, 0xfffffffb, 0x40d, 0x75b6, 0x800, 0x8, 0x8, 0x1, 0x1, 0xfffffff2, 0xecad, 0x9, 0x2, 0x5a, 0x3, 0x4, 0xfffffff7, 0x7ded44ce, 0x0, 0x9, 0xffffc316, 0x8, 0x7f, 0x100, 0x3, 0x2, 0x8, 0xffffff4c, 0x1e, 0xc1, 0x7fff, 0x200, 0x0, 0x9, 0x200, 0xe4, 0x50243d88, 0x7fffffff, 0x4, 0xfffffff2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x9, 0x7aa, 0x5, 0x3, 0x4, 0x1, 0xbd, 0x6, 0xfffffffc, 0x8, 0x101, 0x12, 0xec86, 0xff3, 0x5, 0x0, 0x8, 0x7, 0x101, 0x3, 0x4, 0x9, 0x2, 0x1, 0xfffffffb, 0x1, 0xffffffff, 0x4, 0x1, 0x0, 0x6, 0x6, 0x95, 0x6, 0x4, 0x4, 0x740, 0xf32f, 0x9de9, 0x71b, 0xb64, 0x80000000, 0x8, 0x7, 0x9, 0xb28, 0x9, 0x8001, 0x5, 0xfffffffd, 0x5, 0x6, 0x8, 0x3f8, 0x7, 0x8, 0x7, 0x1, 0x5, 0x10000, 0x2, 0x81, 0x4, 0x4, 0x2, 0x798, 0x5, 0xfffffffe, 0x6, 0x6, 0x1, 0x7, 0x5, 0xa07f, 0x1, 0x1787, 0x1, 0x4, 0xffff0001, 0x8000, 0x94, 0xfffffff6, 0x64b, 0x2, 0x1b, 0xffffffff, 0x8, 0x0, 0xea77d3e, 0x6, 0x6, 0x2, 0x1, 0x0, 0x7, 0x81, 0x3, 0x3ff, 0x762c3a8f, 0x8, 0x80000001, 0xb6d, 0x3, 0xc2, 0x7, 0x80, 0xffff, 0x9000, 0xa, 0x9, 0x1000, 0x1, 0x8d, 0x1, 0x9, 0x1, 0x7, 0x425, 0xef80, 0x4, 0x4, 0x7, 0x9, 0xae, 0x624, 0x5, 0x101, 0x1, 0x2, 0x10, 0xd5b, 0x3, 0x55, 0x5, 0x824f, 0x1, 0x9, 0x7fff, 0x7, 0x9, 0x8001, 0xff, 0x6, 0xfffffff8, 0xfffffff7, 0x3, 0x4, 0x6ad, 0x1, 0x3, 0xffff, 0x1, 0x5, 0x5eb1, 0x0, 0x9, 0x4, 0x8, 0x7, 0x8, 0x6, 0x10000, 0xff, 0x6, 0x6, 0x9, 0x9, 0x1, 0x9, 0x743, 0x80000001, 0xfff, 0x2, 0x1, 0x80, 0x9, 0x0, 0xb3d, 0xfffffffe, 0x1, 0x1dc9, 0xc, 0x2, 0x401, 0x6, 0x2, 0x6d, 0x9f91, 0xfffff1f2, 0x39, 0x80000000, 0xe657, 0x7, 0x401, 0x970, 0xffffffff, 0x0, 0x3, 0xb, 0x10000000, 0x1, 0x2, 0x200, 0x7, 0x2, 0x3ff, 0xcd3, 0x8000, 0x3, 0x3, 0xffffff01, 0x3, 0x81, 0x6, 0x8, 0x1, 0x68, 0xffff, 0x5, 0x400, 0x2000, 0xfffffffb, 0xd45, 0x2, 0x7, 0xa53, 0x7de, 0x1ff, 0x78095400, 0x1, 0x5, 0xe9, 0x4, 0x0, 0x4, 0x800, 0x2d2, 0x0, 0x1, 0x9, 0x6, 0x4, 0x4, 0x32a6, 0x0, 0xffffd388, 0x2a509df3, 0xffffff00, 0x4, 0x0, 0x4be5, 0x2, 0x170, 0x7, 0x40000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0xffffffb6, 0x1, 0xffff, {0x6, 0x1, 0x7f, 0xfffc, 0x1, 0x4}, {0x81, 0x0, 0x0, 0x0, 0x4, 0xfffffffb}, 0x7ff, 0x7, 0xdae}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x986c}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7fff, 0x3, 0x96, 0x6, 0x7, 0x0, 0xbf44, 0x2, 0x8, 0x9, 0x8, 0x5, 0x6, 0x81, 0x2, 0x1, 0x3, 0x5, 0x0, 0xfffffffe, 0xffffff7f, 0x6, 0xfff, 0x2, 0x2, 0x73a, 0x0, 0x7fffffff, 0xa34, 0x400, 0x2, 0x9, 0x8, 0x9, 0x3, 0xb, 0x8, 0x81, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x2, 0x9, 0x10001, 0x7, 0x1, 0xd, 0x6, 0x2, 0x5, 0x4, 0x10001, 0x3, 0x9, 0x12, 0x5, 0x1, 0x4, 0x1, 0x5, 0x40, 0x4, 0x0, 0xe604, 0x1, 0x8, 0x7, 0x1, 0x10, 0x0, 0x4, 0x800, 0x0, 0x1, 0xfffffffa, 0x219, 0x7, 0x0, 0xe0, 0x1, 0x2, 0x3, 0xd9b7, 0x0, 0x8, 0xfffffff4, 0x5, 0x101, 0x3, 0x3, 0x6, 0xb, 0x81, 0x8000, 0x7, 0x0, 0x4, 0x8, 0x9, 0x2, 0x37, 0x8e5, 0x7a274cca, 0x99, 0x200, 0xc0000, 0xffffff80, 0x5, 0x2, 0xb, 0x2, 0x3, 0x5, 0x1, 0x200, 0x4, 0x0, 0x3, 0x8, 0x7d4d, 0x2, 0x0, 0x5, 0x5, 0xff, 0x0, 0x6, 0x8, 0x744a, 0x7103, 0x7, 0x401, 0x6, 0x3ff, 0x5, 0x2, 0x6, 0x7fff, 0x3, 0x8, 0x0, 0x8, 0x3, 0x9, 0x1, 0x3, 0x1, 0xffff, 0x800, 0x3, 0x4, 0xbbe, 0x5, 0x9, 0x6, 0x4, 0x8, 0x4, 0x184, 0x5, 0x1, 0x0, 0xe, 0x7, 0xc9bc56, 0xf5, 0xfffff8c6, 0x8, 0xe9ca, 0x8, 0x101, 0x8, 0x2, 0x6b, 0x1, 0x68b60da8, 0x4f5, 0x6, 0x787b, 0xffffffff, 0x1, 0x6, 0x6, 0x1000, 0x92e, 0x9, 0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x7fff, 0x6, 0xed24, 0x7, 0xfffffff7, 0x7, 0x101, 0x2, 0xeb32, 0x4, 0x7, 0x0, 0x4, 0x4, 0x1, 0x5, 0x9, 0xb, 0xfffffff7, 0x9, 0x7, 0x40, 0x7ddd, 0x1, 0x4, 0xe, 0x4, 0x8001, 0x2, 0x10000, 0xff, 0x200, 0x3, 0xfffffffc, 0x800, 0x8, 0x7, 0xca4, 0x10, 0x5, 0x4, 0x9, 0x6bf6, 0x5, 0x4, 0x3, 0x200, 0x9, 0x4, 0x2, 0x10000, 0xa2fa, 0x6, 0x3, 0x8, 0x4, 0x7, 0x8, 0x5, 0x7, 0xd78]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xeb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x81, 0xffff, 0x1, 0x8, 0xed, 0x5, 0x9, 0x4, 0x2837, 0x7, 0x8, 0x80000000, 0x51f, 0x100, 0x891a, 0x1, 0x9, 0x6, 0x3, 0x6, 0x401, 0x7fff, 0xcaa, 0x4, 0x0, 0x3, 0x4, 0x3333, 0x40, 0x1, 0xa, 0x6, 0xfffffffe, 0x8, 0x47, 0x3, 0xe, 0x4, 0x3, 0x5, 0x6, 0x9, 0x9, 0xbc55, 0x800, 0x8, 0x8, 0x400, 0x200, 0x1, 0x5, 0x3, 0x6, 0x1, 0x0, 0x8, 0x10001, 0x80000000, 0x8000, 0x1, 0x4, 0x2, 0x100, 0x7fffffff, 0x9, 0x4, 0x9, 0x2, 0xb8, 0x3, 0x6, 0x2, 0x4, 0x4, 0x8, 0x9, 0x7, 0x0, 0x400, 0x2, 0x93c, 0x0, 0x3ff, 0x0, 0x80000001, 0x8b8, 0x5, 0x80000001, 0x8, 0xc, 0xfff, 0x5f, 0xffffffff, 0x5, 0xfffffffc, 0x2, 0x1, 0x3, 0xace2, 0x77, 0x4, 0x8, 0x9, 0x1, 0x2, 0x4, 0xfffffffa, 0x9, 0x4, 0x5, 0x4, 0x80000001, 0x8, 0x1, 0x95a7, 0x2, 0x400, 0x7f, 0x266, 0x5, 0xc6, 0x2, 0x8, 0xe, 0x3, 0x401, 0x4, 0x1000, 0x4, 0xcd5, 0x1c9e, 0x10, 0xc, 0x5, 0x7, 0x36d0, 0x1eadc930, 0x8, 0x5, 0xfffffff8, 0xffac, 0x3, 0x4419, 0xc0000000, 0x73, 0x7, 0x8, 0x7, 0x1c, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x54e, 0x4523b1ac, 0x1, 0x7, 0x0, 0x10, 0x7, 0x3ff, 0x5, 0x6, 0x4, 0x3, 0x40, 0x54, 0x3ff, 0x8780, 0x6, 0x8, 0x5, 0x0, 0x1, 0x2, 0x2, 0x665, 0x8, 0x80, 0x101, 0xa2b, 0x80, 0x400, 0x9, 0xe478, 0x5, 0x1, 0x3, 0x6, 0x6, 0x31e5e5ac, 0x1ba7aca7, 0x6, 0x10001, 0x8d0, 0xffff7fff, 0x7, 0x2b, 0x2, 0x1, 0xe, 0x7, 0xd48a, 0x8, 0x3, 0x7, 0x9, 0x3ff, 0x1, 0x80000000, 0xa, 0x400, 0x6, 0x20000, 0x7, 0x0, 0x98, 0x1, 0x8, 0x8, 0x9, 0x2, 0x0, 0x3, 0x3, 0x5, 0x8, 0x211e, 0xe14, 0x4, 0x6, 0x8000, 0x3, 0x2, 0x7, 0x81, 0x9, 0x5, 0x49, 0x9, 0x5, 0x800, 0x7f, 0x4, 0xfffffff1, 0x5, 0x0, 0x4, 0x40, 0x5, 0x2, 0x0, 0x2821, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0x7f, 0xfffff18d, 0x9, 0x0, 0x1, 0x3, 0x200, 0x2, 0xfaf5, 0x6, 0x2, 0x3, 0x2, 0x4b, 0x62, 0xffff, 0x80000001, 0x401, 0x3, 0x76, 0x7, 0x1, 0xffff, 0x8000, 0x11, 0x6, 0x40, 0x5, 0x8, 0x9, 0x2, 0xe, 0x0, 0x18000000, 0x99, 0x2, 0x7f, 0x938, 0xfffffc01, 0x200, 0x200, 0x8, 0xa7, 0x100, 0x7ff, 0x455, 0x0, 0x5, 0x7, 0x2, 0x7, 0x5, 0x3, 0x5e6044ff, 0xb6, 0x3, 0x2, 0x6e, 0xff, 0x7fffffff, 0x1, 0xfffffffd, 0x9, 0x6, 0xc, 0x36, 0x6, 0x101, 0x8, 0x3, 0xfff, 0x101, 0x8, 0x1, 0x5, 0x2, 0xe9e, 0x6, 0x5, 0xa7d, 0x7, 0x6, 0x470, 0x0, 0x9, 0x2, 0xfffffff9, 0xfff, 0x4, 0x2, 0x8001, 0x4, 0x6778, 0xed5, 0xf0e4, 0x0, 0xf1e0, 0x5, 0xc18f, 0x3, 0x80, 0xc, 0x800, 0x9607, 0x0, 0x0, 0x9, 0x0, 0x9, 0xc4d4, 0x9, 0x4, 0x1, 0xb48, 0x1, 0x73b7aa39, 0x6, 0xe30, 0x6, 0xfffffffb, 0x2, 0x7, 0xe17e, 0xad, 0x1, 0x9, 0x8, 0x0, 0x2, 0xd955, 0xffffff81, 0x10, 0x100, 0x6, 0x100, 0x7, 0x3, 0x1ff, 0x100, 0x9, 0x210967a4, 0xef24, 0x7, 0x4, 0x4, 0x7, 0x3e, 0x6, 0x9, 0x71, 0x5, 0x7, 0x4, 0x9, 0x9, 0x2, 0x0, 0x111f, 0x9, 0xe5, 0x7, 0x0, 0x7, 0x40, 0x4, 0x9, 0x8, 0x5, 0x4, 0x7, 0x2, 0x821, 0x7, 0x6, 0x7, 0x401, 0x9, 0x2, 0x5, 0x800, 0xffffff6a, 0xffffff7c, 0x3, 0x4, 0x101, 0xffffffff, 0x0, 0x5, 0x6, 0xfffffff7, 0x2, 0x1, 0x5, 0x4168, 0x8, 0xffff, 0x5, 0x2, 0x9, 0x9, 0xffffffff, 0x7, 0x3, 0x48, 0x2, 0xfffffffc, 0x3, 0x8000, 0x4, 0x0, 0xfffffffa, 0x342, 0xe5, 0x8, 0xc, 0x6, 0x9, 0x20000000, 0x2, 0xcc39, 0x6, 0x4, 0xaf, 0xfffffbff, 0x45, 0xfaad, 0x100, 0x3, 0xfffffff9, 0x6, 0x3, 0x0, 0x7, 0x7, 0xfa37, 0x9, 0x10001, 0x3, 0x8, 0x9, 0x5, 0x2, 0x0, 0x2, 0x3, 0x7, 0x7, 0x0, 0x9, 0x7, 0xfffffffd, 0x7c8, 0x8, 0x7f]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xffff}}]}}, @TCA_RATE={0x6, 0x5, {0xed, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x1dbc}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000000c0)={0x33, 0x1, 0x1, 0x0, 0x3, 0x3, 0x0, &(0x7f0000000040)=[{0x11, 0x1ff, 0x1}, {0x14, 0x1ff, 0x9}, {0x5, 0x101, 0x8}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)

kernel console output (not intermixed with test programs):

 RIP: 0033:0x7fa544f9e159
[  300.118005][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.118022][ T7593] RSP: 002b:00007fa545e6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  300.118040][ T7593] RAX: ffffffffffffffda RBX: 00007fa545226180 RCX: 00007fa544f9e159
[  300.118052][ T7593] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000008
[  300.118062][ T7593] RBP: 00007fa545e6b090 R08: 0000000000000000 R09: 0000000000000000
[  300.118073][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.118084][ T7593] R13: 00007fa545226218 R14: 00007fa545226180 R15: 00007ffe1159b568
[  300.118109][ T7593]  </TASK>
[  300.327613][ T5800] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  300.338917][ T7570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  300.504495][ T5800] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  300.543508][ T5800] usb 5-1: config index 0 descriptor too short (expected 64906, got 45)
[  300.556910][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.556935][ T5800] usb 5-1: Product: syz
[  300.557287][ T5800] usb 5-1: Manufacturer: syz
[  300.557300][ T5800] usb 5-1: SerialNumber: syz
[  300.764612][ T5807] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  300.830889][   T10] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[  300.830946][   T10] cdc_mbim 2-1:1.0: bind() failure
[  300.856578][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  300.856629][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  300.856649][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  300.935131][ T5807] usb 7-1: Using ep0 maxpacket: 32
[  300.952373][ T7597] fuse: Bad value for 'fd'
[  300.983454][ T5807] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  300.993496][ T5807] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  301.048253][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  301.049109][ T5807] usb 7-1: Product: syz
[  301.049378][ T5800] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  301.049760][ T5807] usb 7-1: Manufacturer: syz
[  301.050614][ T5807] usb 7-1: SerialNumber: syz
[  301.255027][ T5807] usb 7-1: config 0 descriptor??
[  301.258614][ T7596] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  301.284446][   T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  301.293569][   T10] cdc_ncm 2-1:1.1: bind() failure
[  301.396895][ T5807] hub 7-1:0.0: bad descriptor, ignoring hub
[  301.400973][ T5807] hub 7-1:0.0: probe with driver hub failed with error -5
[  301.677849][   T10] usb 2-1: USB disconnect, device number 19
[  301.714806][ T5800] usb 5-1: USB disconnect, device number 23
[  301.900650][ T5807] usb 7-1: USB disconnect, device number 5
[  303.824180][ T5800] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  303.912121][   T31] audit: type=1400 audit(1791166185.260:753): avc:  denied  { setattr } for  pid=7615 comm="syz.5.469" name="[io_uring]" dev="anon_inodefs" ino=16752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  304.088865][ T7620] netlink: 80 bytes leftover after parsing attributes in process `syz.6.470'.
[  304.852781][ T5800] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.904700][ T5800] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.904727][ T5800] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  304.945124][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.945142][ T5800] usb 2-1: Product: syz
[  304.945151][ T5800] usb 2-1: Manufacturer: syz
[  304.945159][ T5800] usb 2-1: SerialNumber: syz
[  304.979311][ T5800] cdc_mbim 2-1:1.0: skipping garbage
[  305.183841][ T7604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  305.206320][   T31] audit: type=1400 audit(1791166186.550:754): avc:  denied  { bind } for  pid=7625 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  305.779860][ T7629] FAULT_INJECTION: forcing a failure.
[  305.779860][ T7629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.779892][ T7629] CPU: 0 UID: 0 PID: 7629 Comm: syz.4.473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  305.779921][ T7629] Tainted: [L]=SOFTLOCKUP
[  305.779928][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  305.779939][ T7629] Call Trace:
[  305.779946][ T7629]  <TASK>
[  305.779953][ T7629]  dump_stack_lvl+0x100/0x190
[  305.779985][ T7629]  should_fail_ex.cold+0x5/0xa
[  305.780012][ T7629]  _copy_to_user+0x32/0xd0
[  305.780037][ T7629]  simple_read_from_buffer+0xcb/0x170
[  305.780071][ T7629]  proc_fail_nth_read+0x1af/0x230
[  305.780099][ T7629]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  305.780125][ T7629]  ? rw_verify_area+0xce/0x6d0
[  305.780144][ T7629]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  305.780169][ T7629]  vfs_read+0x1e4/0xb40
[  305.780190][ T7629]  ? lock_acquire+0x1d1/0x380
[  305.780211][ T7629]  ? __fget_files+0x34/0x3d0
[  305.780234][ T7629]  ? __pfx_vfs_read+0x10/0x10
[  305.780252][ T7629]  ? find_held_lock+0x2b/0x80
[  305.780279][ T7629]  ? __fget_files+0x215/0x3d0
[  305.780306][ T7629]  ? __fget_files+0x21f/0x3d0
[  305.780338][ T7629]  ksys_read+0x12a/0x250
[  305.780358][ T7629]  ? __pfx_ksys_read+0x10/0x10
[  305.780386][ T7629]  do_syscall_64+0x123/0x790
[  305.780410][ T7629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.780430][ T7629] RIP: 0033:0x7f108f55e98e
[  305.780446][ T7629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  305.780464][ T7629] RSP: 002b:00007f1090388fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  305.780484][ T7629] RAX: ffffffffffffffda RBX: 00007f10903896c0 RCX: 00007f108f55e98e
[  305.780496][ T7629] RDX: 000000000000000f RSI: 00007f10903890a0 RDI: 0000000000000003
[  305.780507][ T7629] RBP: 00007f1090389090 R08: 0000000000000000 R09: 0000000000000000
[  305.780518][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.780529][ T7629] R13: 00007f108f826038 R14: 00007f108f825fa0 R15: 00007ffe413bb128
[  305.780555][ T7629]  </TASK>
[  306.101258][ T7604] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  306.101529][ T5800] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  306.102728][ T5800] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  306.199636][ T5800] wwan wwan0: port wwan0mbim0 attached
[  306.233382][ T5800] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 96:df:4c:06:04:aa
[  306.307772][   T31] audit: type=1400 audit(1791166187.660:755): avc:  denied  { read write } for  pid=7602 comm="syz.1.464" name="cdc-wdm0" dev="devtmpfs" ino=3213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  306.309891][   T31] audit: type=1400 audit(1791166187.660:756): avc:  denied  { open } for  pid=7602 comm="syz.1.464" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  306.312341][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.312419][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.313425][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.313444][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.313701][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.313710][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.313867][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.313877][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.314132][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.314149][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.314537][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.314552][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.314949][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.314963][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.315145][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.315159][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.315334][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.315348][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.315523][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  306.315537][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  306.413194][ T7640] Cannot find set identified by id 0 to match
[  306.809482][   T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  306.964999][   T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.966073][   T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.966111][   T30] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  306.970842][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.970874][   T30] usb 4-1: Product: syz
[  306.970891][   T30] usb 4-1: Manufacturer: syz
[  306.970906][   T30] usb 4-1: SerialNumber: syz
[  307.041052][   T30] cdc_mbim 4-1:1.0: skipping garbage
[  307.150109][ T5800] usb 2-1: USB disconnect, device number 20
[  307.151316][ T5800] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  307.245630][ T7636] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  307.365093][ T5800] wwan wwan0: port wwan0mbim0 disconnected
[  308.688228][   T31] audit: type=1400 audit(1791166190.040:757): avc:  denied  { read } for  pid=7651 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  308.958391][   T30] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  308.958644][   T30] cdc_mbim 4-1:1.0: bind() failure
[  309.001854][ T7662] fuse: Bad value for 'rootmode'
[  309.298701][   T30] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  309.298727][   T30] cdc_ncm 4-1:1.1: bind() failure
[  309.340440][   T30] usb 4-1: USB disconnect, device number 19
[  309.480294][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.481'.
[  309.676443][   T31] audit: type=1400 audit(1791166191.030:758): avc:  denied  { write } for  pid=7646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  310.059750][ T7683] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  310.508461][   T31] audit: type=1400 audit(1791166191.860:759): avc:  denied  { write } for  pid=7682 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  311.055253][   T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  311.119455][   T31] audit: type=1800 audit(1791166192.470:760): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.485" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  311.228905][   T25] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  311.229785][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.229810][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.229832][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.597877][   T31] audit: type=1400 audit(1791166192.950:761): avc:  denied  { write } for  pid=7693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  311.680462][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  311.680509][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  311.818394][   T31] audit: type=1400 audit(1791166193.170:762): avc:  denied  { write } for  pid=7708 comm="syz.4.486" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  311.898305][   T31] audit: type=1400 audit(1791166193.250:763): avc:  denied  { write } for  pid=7712 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  312.190027][ T7718] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  312.190041][ T7718] CIFS mount error: No usable UNC path provided in device string!
[  312.190041][ T7718] 
[  312.190197][ T7718] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  312.275327][ T7726] sctp: [Deprecated]: syz.5.488 (pid 7726) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.275327][ T7726] Use struct sctp_sack_info instead
[  312.841269][ T7724] netlink: 80 bytes leftover after parsing attributes in process `syz.6.489'.
[  312.990123][   T25] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -71
[  313.006815][   T25] usb 4-1: USB disconnect, device number 20
[  313.958603][   T31] audit: type=1400 audit(1791166194.960:764): avc:  denied  { write } for  pid=7734 comm="syz.5.491" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  314.106079][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'.
[  314.486841][   T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  314.650185][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  314.651072][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.651110][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  314.697681][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.697700][   T25] usb 4-1: Product: syz
[  314.697709][   T25] usb 4-1: Manufacturer: syz
[  314.697717][   T25] usb 4-1: SerialNumber: syz
[  314.743479][   T25] cdc_mbim 4-1:1.0: skipping garbage
[  314.929196][ T7745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  315.355753][   T25] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  315.355804][   T25] cdc_mbim 4-1:1.0: bind() failure
[  315.363650][ T7745] fuse: Bad value for 'rootmode'
[  315.388634][   T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  315.388676][   T25] cdc_ncm 4-1:1.1: bind() failure
[  315.418729][ T5800] usb 4-1: USB disconnect, device number 21
[  316.747507][ T7764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  316.747524][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  316.752498][ T7764] vhci_hcd vhci_hcd.0: Device attached
[  316.779247][ T7767] vhci_hcd: cannot find a urb of seqnum 65537 max seqnum 0
[  316.829714][ T7760] netlink: 288 bytes leftover after parsing attributes in process `syz.5.493'.
[  316.858536][   T31] audit: type=1400 audit(1791166198.210:765): avc:  denied  { ioctl } for  pid=7766 comm="syz.3.499" path="socket:[17071]" dev="sockfs" ino=17071 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  316.869131][   T93] vhci_hcd vhci_hcd.1: stop threads
[  316.869154][   T93] vhci_hcd vhci_hcd.1: release socket
[  316.869169][   T93] vhci_hcd vhci_hcd.1: disconnect device
[  316.932143][   T31] audit: type=1400 audit(1791166198.280:766): avc:  denied  { setopt } for  pid=7763 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  316.969157][   T31] audit: type=1400 audit(1791166198.320:767): avc:  denied  { append } for  pid=7763 comm="syz.1.498" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.084762][ T7773] input: syz0 as /devices/virtual/input/input15
[  317.112223][ T7775] FAULT_INJECTION: forcing a failure.
[  317.112223][ T7775] name failslab, interval 1, probability 0, space 0, times 0
[  317.112245][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.3.501 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.112260][ T7775] Tainted: [L]=SOFTLOCKUP
[  317.112264][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  317.112270][ T7775] Call Trace:
[  317.112274][ T7775]  <TASK>
[  317.112279][ T7775]  dump_stack_lvl+0x100/0x190
[  317.112298][ T7775]  should_fail_ex.cold+0x5/0xa
[  317.112314][ T7775]  should_failslab+0xc2/0x120
[  317.112331][ T7775]  __kmalloc_noprof+0xfc/0x840
[  317.112343][ T7775]  ? rcu_is_watching+0x13/0xc0
[  317.112359][ T7775]  ? tomoyo_realpath_from_path+0xb6/0x690
[  317.112378][ T7775]  tomoyo_realpath_from_path+0xb6/0x690
[  317.112399][ T7775]  tomoyo_path_number_perm+0x23c/0x580
[  317.112412][ T7775]  ? tomoyo_path_number_perm+0x22e/0x580
[  317.112427][ T7775]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  317.112445][ T7775]  ? __lock_acquire+0x5c0/0x1f40
[  317.112464][ T7775]  ? __fget_files+0x34/0x3d0
[  317.112480][ T7775]  ? find_held_lock+0x2b/0x80
[  317.112495][ T7775]  ? hook_file_ioctl_common+0x140/0x440
[  317.112515][ T7775]  ? __fget_files+0x21f/0x3d0
[  317.112533][ T7775]  security_file_ioctl+0xd3/0x230
[  317.112548][ T7775]  __x64_sys_ioctl+0xb7/0x210
[  317.112563][ T7775]  do_syscall_64+0x123/0x790
[  317.112577][ T7775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.112588][ T7775] RIP: 0033:0x7f576639e159
[  317.112598][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.112608][ T7775] RSP: 002b:00007f57671c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.112619][ T7775] RAX: ffffffffffffffda RBX: 00007f5766626090 RCX: 00007f576639e159
[  317.112630][ T7775] RDX: 0000000000000036 RSI: 0000000040045567 RDI: 0000000000000003
[  317.112636][ T7775] RBP: 00007f57671c9090 R08: 0000000000000000 R09: 0000000000000000
[  317.112643][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.112649][ T7775] R13: 00007f5766626128 R14: 00007f5766626090 R15: 00007ffe004a8708
[  317.112663][ T7775]  </TASK>
[  317.112813][ T7775] ERROR: Out of memory at tomoyo_realpath_from_path.
[  317.473033][ T7778] xt_hashlimit: size too large, truncated to 1048576
[  317.473276][ T7778] xt_hashlimit: max too large, truncated to 1048576
[  317.700403][   T31] audit: type=1400 audit(1791166198.860:768): avc:  denied  { execute } for  pid=7772 comm="syz.4.500" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  318.277850][ T7781] netlink: 80 bytes leftover after parsing attributes in process `syz.6.502'.
[  318.958887][ T7784] netlink: 80 bytes leftover after parsing attributes in process `syz.3.505'.
[  320.824641][   T31] audit: type=1400 audit(1791166202.180:769): avc:  denied  { cmd } for  pid=7793 comm="iou-wrk-7795" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  320.987060][   T31] audit: type=1400 audit(1791166202.340:770): avc:  denied  { write } for  pid=7794 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  321.131940][   T31] audit: type=1400 audit(1791166202.480:771): avc:  denied  { audit_write } for  pid=7793 comm="syz.1.510" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  321.211811][   T31] audit: type=1400 audit(1791166202.560:772): avc:  denied  { watch watch_reads } for  pid=7793 comm="syz.1.510" path="/proc/338/task" dev="proc" ino=17976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  322.639839][   T31] audit: type=1400 audit(1791166203.990:773): avc:  denied  { connect } for  pid=7810 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  322.654106][   T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  323.383424][   T25] usb 4-1: device descriptor read/64, error -71
[  323.624262][   T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  323.641816][ T5800] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  323.766307][   T25] usb 4-1: device descriptor read/64, error -71
[  323.780935][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  323.796728][ T5800] usb 6-1: not running at top speed; connect to a high speed hub
[  323.796759][ T5800] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  323.797539][ T5800] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  323.797556][ T5800] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  323.797566][ T5800] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  323.797591][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.874376][   T25] usb usb4-port1: attempt power cycle
[  323.944243][   T10] usb 7-1: Using ep0 maxpacket: 32
[  323.946143][   T10] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  323.947066][   T10] usb 7-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config
[  323.947086][   T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  323.951276][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.951293][   T10] usb 7-1: Product: syz
[  323.951302][   T10] usb 7-1: Manufacturer: syz
[  323.951310][   T10] usb 7-1: SerialNumber: syz
[  324.092585][ T7826] FAULT_INJECTION: forcing a failure.
[  324.092585][ T7826] name failslab, interval 1, probability 0, space 0, times 0
[  324.092618][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.5.508 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.092645][ T7826] Tainted: [L]=SOFTLOCKUP
[  324.092653][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  324.092665][ T7826] Call Trace:
[  324.092671][ T7826]  <TASK>
[  324.092679][ T7826]  dump_stack_lvl+0x100/0x190
[  324.092712][ T7826]  should_fail_ex.cold+0x5/0xa
[  324.092739][ T7826]  should_failslab+0xc2/0x120
[  324.092767][ T7826]  __kvmalloc_node_noprof+0x113/0x9b0
[  324.092790][ T7826]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  324.092811][ T7826]  ? alloc_netdev_mqs+0xf5f/0x15c0
[  324.092846][ T7826]  alloc_netdev_mqs+0xf5f/0x15c0
[  324.092880][ T7826]  vlan_ioctl_handler+0x724/0xa70
[  324.092908][ T7826]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  324.092937][ T7826]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  324.092964][ T7826]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  324.092988][ T7826]  sock_ioctl+0x5e9/0x6b0
[  324.093010][ T7826]  ? __pfx_sock_ioctl+0x10/0x10
[  324.093038][ T7826]  ? selinux_file_ioctl+0x13b/0x290
[  324.093061][ T7826]  ? selinux_file_ioctl+0xb6/0x290
[  324.093085][ T7826]  ? __pfx_sock_ioctl+0x10/0x10
[  324.093108][ T7826]  __x64_sys_ioctl+0x18e/0x210
[  324.093132][ T7826]  do_syscall_64+0x123/0x790
[  324.093157][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.093177][ T7826] RIP: 0033:0x7fa544f9e159
[  324.093193][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.093211][ T7826] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.093229][ T7826] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  324.093241][ T7826] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000005
[  324.093253][ T7826] RBP: 00007fa54503506b R08: 0000000000000000 R09: 0000000000000000
[  324.093263][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.093274][ T7826] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  324.093310][ T7826]  </TASK>
[  324.176389][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.508'.
[  324.187109][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'.
[  324.224638][   T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  324.245810][   T25] usb 4-1: device descriptor read/8, error -71
[  324.345003][ T5800] usb 6-1: string descriptor 0 read error: -71
[  324.345095][ T5800] uvcvideo 6-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  324.345494][ T5800] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1).
[  324.354756][ T5800] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  324.354837][ T5800] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770.
[  324.420843][ T5800] usb 6-1: USB disconnect, device number 17
[  324.497787][   T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  324.505281][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.515'.
[  324.530614][   T25] usb 4-1: device descriptor read/8, error -71
[  324.648888][   T25] usb usb4-port1: unable to enumerate USB device
[  324.916856][   T31] audit: type=1400 audit(1791166206.250:774): avc:  denied  { mount } for  pid=7837 comm="syz.1.516" name="/" dev="autofs" ino=18096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  325.631420][ T7845] FAULT_INJECTION: forcing a failure.
[  325.631420][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.631452][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.3.518 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.631477][ T7845] Tainted: [L]=SOFTLOCKUP
[  325.631484][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  325.631494][ T7845] Call Trace:
[  325.631500][ T7845]  <TASK>
[  325.631508][ T7845]  dump_stack_lvl+0x100/0x190
[  325.631539][ T7845]  should_fail_ex.cold+0x5/0xa
[  325.631564][ T7845]  _copy_from_user+0x2e/0xd0
[  325.631588][ T7845]  copy_msghdr_from_user+0x9f/0x4c0
[  325.631611][ T7845]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  325.631638][ T7845]  ? lock_acquire+0x1d1/0x380
[  325.631658][ T7845]  ? get_pid_task+0x2a/0x250
[  325.631685][ T7845]  ___sys_sendmsg+0x106/0x1e0
[  325.631707][ T7845]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.631727][ T7845]  ? get_pid_task+0x106/0x250
[  325.631759][ T7845]  ? find_held_lock+0x2b/0x80
[  325.631801][ T7845]  __sys_sendmsg+0x160/0x210
[  325.631827][ T7845]  ? __pfx___sys_sendmsg+0x10/0x10
[  325.631866][ T7845]  do_syscall_64+0x123/0x790
[  325.631889][ T7845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.631907][ T7845] RIP: 0033:0x7f576639e159
[  325.631922][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.631938][ T7845] RSP: 002b:00007f57671ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.631956][ T7845] RAX: ffffffffffffffda RBX: 00007f5766625fa0 RCX: 00007f576639e159
[  325.631968][ T7845] RDX: 00000000000000d0 RSI: 0000200000000200 RDI: 0000000000000003
[  325.631979][ T7845] RBP: 00007f57671ea090 R08: 0000000000000000 R09: 0000000000000000
[  325.631990][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.632003][ T7845] R13: 00007f5766626038 R14: 00007f5766625fa0 R15: 00007ffe004a8708
[  325.632029][ T7845]  </TASK>
[  327.372235][ T7855] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  327.558782][ T7864] netlink: 80 bytes leftover after parsing attributes in process `syz.4.514'.
[  328.156868][ T7854] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  329.186215][   T10] usb 7-1: failed waiting for Axe-Fx III to boot: -32
[  329.186252][   T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -32
[  329.332409][ T5710] usb 7-1: USB disconnect, device number 6
[  329.626220][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.626570][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.635105][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.635418][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.636192][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.636473][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.638799][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.639082][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.645242][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.645549][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.648752][ T7877] netlink: 'syz.5.527': attribute type 1 has an invalid length.
[  329.874210][   T31] audit: type=1400 audit(1791166211.230:775): avc:  denied  { ioctl } for  pid=7879 comm="syz.6.528" path="socket:[17281]" dev="sockfs" ino=17281 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  329.883040][   T31] audit: type=1400 audit(1791166211.230:776): avc:  denied  { bind } for  pid=7879 comm="syz.6.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  329.885698][ T4922] Bluetooth: hci0: SCO packet too small
[  330.314258][ T5710] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  330.391892][   T31] audit: type=1400 audit(1791166211.740:777): avc:  denied  { map } for  pid=7883 comm="syz.3.525" path="socket:[18170]" dev="sockfs" ino=18170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  330.444124][ T5710] usb 2-1: device descriptor read/64, error -71
[  330.560816][   T31] audit: type=1400 audit(1791166211.910:778): avc:  denied  { remount } for  pid=7883 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  330.694227][ T5710] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  330.834652][ T5710] usb 2-1: device descriptor read/64, error -71
[  330.945308][ T5710] usb usb2-port1: attempt power cycle
[  331.697150][ T5710] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  331.729260][ T5710] usb 2-1: device descriptor read/8, error -71
[  332.016964][ T5710] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  332.057381][ T5710] usb 2-1: device descriptor read/8, error -71
[  332.075686][  T983] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  332.166877][ T5710] usb usb2-port1: unable to enumerate USB device
[  332.488360][  T983] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  332.502128][  T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.502157][  T983] usb 6-1: Product: syz
[  332.502165][  T983] usb 6-1: Manufacturer: syz
[  332.502174][  T983] usb 6-1: SerialNumber: syz
[  332.642584][   T93] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.721854][   T93] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.821445][   T93] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.948549][   T93] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.054572][  T983] usb 6-1: USB disconnect, device number 18
[  333.155343][ T7917] udevd[7917]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.207049][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  333.223883][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  333.232997][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  333.241576][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  333.251597][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  333.254489][ T5807] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  333.409265][ T5807] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  333.416640][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.416663][ T5807] usb 2-1: Product: syz
[  333.416675][ T5807] usb 2-1: Manufacturer: syz
[  333.416688][ T5807] usb 2-1: SerialNumber: syz
[  333.453870][ T5807] usb 2-1: config 0 descriptor??
[  333.468940][ T5807] gspca_main: sq905c-2.14.0 probing 2770:9052
[  333.639437][   T93] bridge_slave_1: left allmulticast mode
[  333.642954][   T93] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.701769][   T93] bridge_slave_0: left allmulticast mode
[  333.701794][   T93] bridge_slave_0: left promiscuous mode
[  333.701963][   T93] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.786018][ T5800] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  333.811302][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.813884][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.959397][ T5800] usb 7-1: Using ep0 maxpacket: 16
[  333.961323][ T5800] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  333.986014][ T5800] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.986036][ T5800] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.986049][ T5800] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  333.986063][ T5800] usb 7-1: config 0 interface 0 has no altsetting 0
[  333.986080][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.986901][ T5807] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  333.986910][ T5807] sq905c 2-1:0.0: Get version command failed
[  333.986943][ T5807] sq905c 2-1:0.0: probe with driver sq905c failed with error -110
[  334.008330][ T5800] usb 7-1: config 0 descriptor??
[  334.351387][   T31] audit: type=1400 audit(1791166215.700:779): avc:  denied  { write } for  pid=7931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.559226][   T31] audit: type=1400 audit(1791166215.910:780): avc:  denied  { write } for  pid=7948 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.641013][ T5800] hid (null): report_id 0 is invalid
[  334.658901][   T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.682401][   T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.683447][   T93] bond0 (unregistering): Released all slaves
[  334.699317][ T7933] netlink: 288 bytes leftover after parsing attributes in process `syz.5.543'.
[  334.723907][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[  334.726455][   T10] usb 2-1: USB disconnect, device number 25
[  334.763883][ T7956] FAULT_INJECTION: forcing a failure.
[  334.763883][ T7956] name failslab, interval 1, probability 0, space 0, times 0
[  334.763911][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.5.544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.763932][ T7956] Tainted: [L]=SOFTLOCKUP
[  334.763937][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  334.763945][ T7956] Call Trace:
[  334.763950][ T7956]  <TASK>
[  334.763956][ T7956]  dump_stack_lvl+0x100/0x190
[  334.763982][ T7956]  should_fail_ex.cold+0x5/0xa
[  334.764006][ T7956]  should_failslab+0xc2/0x120
[  334.764026][ T7956]  __kmalloc_cache_noprof+0x91/0x6d0
[  334.764042][ T7956]  ? proc_thread_self_get_link+0x1a6/0x210
[  334.764069][ T7956]  proc_thread_self_get_link+0x1a6/0x210
[  334.764093][ T7956]  pick_link+0xac2/0x13c0
[  334.764107][ T7956]  ? selinux_inode_permission+0x14a/0x1130
[  334.764131][ T7956]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[  334.764163][ T7956]  step_into_slowpath+0x9ba/0xf90
[  334.764184][ T7956]  ? __pfx_step_into_slowpath+0x10/0x10
[  334.764205][ T7956]  ? lookup_fast+0x2da/0x600
[  334.764219][ T7956]  ? inode_permission+0x374/0x620
[  334.764236][ T7956]  link_path_walk+0xf28/0x1cc0
[  334.764261][ T7956]  path_openat+0x1ac/0x2440
[  334.764284][ T7956]  ? __pfx_path_openat+0x10/0x10
[  334.764325][ T7956]  do_file_open+0x20e/0x430
[  334.764346][ T7956]  ? __pfx_do_file_open+0x10/0x10
[  334.764380][ T7956]  ? _raw_spin_unlock+0x28/0x50
[  334.764403][ T7956]  ? alloc_fd+0x471/0x7a0
[  334.764430][ T7956]  do_sys_openat2+0x10f/0x1e0
[  334.764451][ T7956]  ? __pfx_do_sys_openat2+0x10/0x10
[  334.764473][ T7956]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  334.764495][ T7956]  __x64_sys_openat+0x12d/0x210
[  334.764516][ T7956]  ? __pfx___x64_sys_openat+0x10/0x10
[  334.764544][ T7956]  do_syscall_64+0x123/0x790
[  334.764561][ T7956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.764576][ T7956] RIP: 0033:0x7fa544f5e98e
[  334.764588][ T7956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  334.764601][ T7956] RSP: 002b:00007fa545eacf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  334.764616][ T7956] RAX: ffffffffffffffda RBX: 00007fa545ead6c0 RCX: 00007fa544f5e98e
[  334.764625][ T7956] RDX: 0000000000000002 RSI: 00007fa545034972 RDI: ffffffffffffff9c
[  334.764633][ T7956] RBP: 00007fa54503506b R08: 0000000000000000 R09: 0000000000000000
[  334.764642][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.764650][ T7956] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  334.764670][ T7956]  </TASK>
[  334.930735][ T2280] usb 7-1: USB disconnect, device number 7
[  334.932517][ T7956] FAULT_INJECTION: forcing a failure.
[  334.932517][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.932542][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.5.544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.932564][ T7956] Tainted: [L]=SOFTLOCKUP
[  334.932569][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  334.932579][ T7956] Call Trace:
[  334.932584][ T7956]  <TASK>
[  334.932590][ T7956]  dump_stack_lvl+0x100/0x190
[  334.932618][ T7956]  should_fail_ex.cold+0x5/0xa
[  334.932647][ T7956]  _copy_from_user+0x2e/0xd0
[  334.932668][ T7956]  get_timespec64+0x8d/0x240
[  334.932686][ T7956]  ? __pfx_get_timespec64+0x10/0x10
[  334.932705][ T7956]  ? __mutex_unlock_slowpath+0x35d/0x930
[  334.932727][ T7956]  do_pselect.constprop.0+0xc8/0x270
[  334.932752][ T7956]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  334.932776][ T7956]  ? ksys_write+0x1ac/0x250
[  334.932798][ T7956]  __x64_sys_pselect6+0x149/0x1c0
[  334.932821][ T7956]  do_syscall_64+0x123/0x790
[  334.932841][ T7956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.932857][ T7956] RIP: 0033:0x7fa544f9e159
[  334.932870][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.932884][ T7956] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  334.932901][ T7956] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  334.932911][ T7956] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000040
[  334.932921][ T7956] RBP: 00007fa545ead090 R08: 0000200000000200 R09: 0000000000000000
[  334.932930][ T7956] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  334.932940][ T7956] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  334.932962][ T7956]  </TASK>
[  335.233212][ T7964] FAULT_INJECTION: forcing a failure.
[  335.233212][ T7964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.233246][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.5.545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.233272][ T7964] Tainted: [L]=SOFTLOCKUP
[  335.233277][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  335.233287][ T7964] Call Trace:
[  335.233294][ T7964]  <TASK>
[  335.233302][ T7964]  dump_stack_lvl+0x100/0x190
[  335.233335][ T7964]  should_fail_ex.cold+0x5/0xa
[  335.233361][ T7964]  _copy_from_user+0x2e/0xd0
[  335.233385][ T7964]  __sys_bpf+0x2f5/0x4a30
[  335.233414][ T7964]  ? __pfx___sys_bpf+0x10/0x10
[  335.233434][ T7964]  ? find_held_lock+0x2b/0x80
[  335.233461][ T7964]  ? futex_wake+0x4ea/0x5e0
[  335.233515][ T7964]  ? __x64_sys_futex+0x34f/0x4d0
[  335.233541][ T7964]  ? __x64_sys_futex+0x358/0x4d0
[  335.233568][ T7964]  ? xfd_validate_state+0x129/0x190
[  335.233590][ T7964]  ? __x64_sys_bpf+0xce/0x140
[  335.233610][ T7964]  __x64_sys_bpf+0xce/0x140
[  335.233631][ T7964]  ? do_syscall_64+0xae/0x790
[  335.233651][ T7964]  do_syscall_64+0x123/0x790
[  335.233675][ T7964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.233695][ T7964] RIP: 0033:0x7fa544f9e159
[  335.233712][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.233731][ T7964] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  335.233750][ T7964] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  335.233762][ T7964] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005
[  335.233773][ T7964] RBP: 00007fa54503506b R08: 0000000000000000 R09: 0000000000000000
[  335.233783][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.233793][ T7964] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  335.233815][ T7964]  </TASK>
[  335.354376][ T5616] Bluetooth: hci1: command tx timeout
[  335.450204][ T7969] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  335.487006][ T7969] FAULT_INJECTION: forcing a failure.
[  335.487006][ T7969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.487038][ T7969] CPU: 0 UID: 0 PID: 7969 Comm: syz.1.546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.487063][ T7969] Tainted: [L]=SOFTLOCKUP
[  335.487069][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  335.487080][ T7969] Call Trace:
[  335.487086][ T7969]  <TASK>
[  335.487092][ T7969]  dump_stack_lvl+0x100/0x190
[  335.487124][ T7969]  should_fail_ex.cold+0x5/0xa
[  335.487149][ T7969]  _copy_from_user+0x2e/0xd0
[  335.487172][ T7969]  do_ipt_set_ctl+0x9ac/0xcf0
[  335.487193][ T7969]  ? nf_sockopt_find.isra.0+0x222/0x290
[  335.487220][ T7969]  ? nf_sockopt_find.isra.0+0x222/0x290
[  335.487249][ T7969]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  335.487269][ T7969]  ? __mutex_unlock_slowpath+0x35d/0x930
[  335.487291][ T7969]  ? sockopt_release_sock+0x5c/0x70
[  335.487318][ T7969]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  335.487346][ T7969]  ? nf_sockopt_find.isra.0+0x222/0x290
[  335.487376][ T7969]  nf_setsockopt+0x8d/0xf0
[  335.487404][ T7969]  ip_setsockopt+0xcb/0xf0
[  335.487427][ T7969]  udp_setsockopt+0x64/0xb0
[  335.487444][ T7969]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  335.487464][ T7969]  do_sock_setsockopt+0xf3/0x1d0
[  335.487489][ T7969]  __sys_setsockopt+0x195/0x220
[  335.487519][ T7969]  __x64_sys_setsockopt+0xbd/0x160
[  335.487541][ T7969]  ? do_syscall_64+0xae/0x790
[  335.487560][ T7969]  ? lockdep_hardirqs_on+0x7d/0x110
[  335.487579][ T7969]  do_syscall_64+0x123/0x790
[  335.487599][ T7969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.487618][ T7969] RIP: 0033:0x7f213fb9e159
[  335.487633][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.487657][ T7969] RSP: 002b:00007f2140a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  335.487676][ T7969] RAX: ffffffffffffffda RBX: 00007f213fe25fa0 RCX: 00007f213fb9e159
[  335.487688][ T7969] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  335.487698][ T7969] RBP: 00007f2140a05090 R08: 000000000000ffb2 R09: 0000000000000000
[  335.487709][ T7969] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.487720][ T7969] R13: 00007f213fe26038 R14: 00007f213fe25fa0 R15: 00007ffd02d994a8
[  335.487744][ T7969]  </TASK>
[  335.652263][ T7973] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  335.852761][   T31] audit: type=1400 audit(1791166217.200:781): avc:  denied  { write } for  pid=7959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  335.882264][ T7980] FAULT_INJECTION: forcing a failure.
[  335.882264][ T7980] name failslab, interval 1, probability 0, space 0, times 0
[  335.882301][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.5.548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.882326][ T7980] Tainted: [L]=SOFTLOCKUP
[  335.882333][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  335.882344][ T7980] Call Trace:
[  335.882351][ T7980]  <TASK>
[  335.882358][ T7980]  dump_stack_lvl+0x100/0x190
[  335.882390][ T7980]  should_fail_ex.cold+0x5/0xa
[  335.882417][ T7980]  ? __pfx_mqueue_fill_super+0x10/0x10
[  335.882433][ T7980]  should_failslab+0xc2/0x120
[  335.882457][ T7980]  ? __pfx_mqueue_fill_super+0x10/0x10
[  335.882473][ T7980]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  335.882495][ T7980]  ? do_raw_spin_unlock+0x145/0x1e0
[  335.882520][ T7980]  ? __d_alloc+0x35/0xa50
[  335.882550][ T7980]  ? __pfx_mqueue_fill_super+0x10/0x10
[  335.882567][ T7980]  __d_alloc+0x35/0xa50
[  335.882597][ T7980]  ? __pfx_mqueue_fill_super+0x10/0x10
[  335.882615][ T7980]  d_make_root+0x3e/0x90
[  335.882631][ T7980]  mqueue_fill_super+0x16d/0x250
[  335.882649][ T7980]  get_tree_nodev+0xdd/0x190
[  335.882669][ T7980]  mqueue_get_tree+0xf1/0x130
[  335.882686][ T7980]  vfs_get_tree+0x92/0x320
[  335.882703][ T7980]  fc_mount_longterm+0x1a/0x270
[  335.882727][ T7980]  mq_init_ns+0x482/0x820
[  335.882760][ T7980]  copy_ipcs+0x3dd/0x7e0
[  335.882783][ T7980]  create_new_namespaces+0x20a/0xac0
[  335.882804][ T7980]  ? security_capable+0x80/0x260
[  335.882826][ T7980]  unshare_nsproxy_namespaces+0xf2/0x220
[  335.882854][ T7980]  ksys_unshare+0x4a2/0xa70
[  335.882877][ T7980]  ? __pfx_ksys_unshare+0x10/0x10
[  335.882909][ T7980]  __x64_sys_unshare+0x31/0x40
[  335.882931][ T7980]  do_syscall_64+0x123/0x790
[  335.882951][ T7980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.882970][ T7980] RIP: 0033:0x7fa544f9e159
[  335.882987][ T7980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.883005][ T7980] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  335.883023][ T7980] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  335.883035][ T7980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480
[  335.883046][ T7980] RBP: 00007fa54503506b R08: 0000000000000000 R09: 0000000000000000
[  335.883058][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.883069][ T7980] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  335.883092][ T7980]  </TASK>
[  336.181509][   T31] audit: type=1400 audit(1791166217.530:782): avc:  denied  { write } for  pid=7989 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.270243][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2
[  337.325094][   T93] hsr_slave_0: left promiscuous mode
[  337.328831][   T93] hsr_slave_1: left promiscuous mode
[  337.331110][   T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.331146][   T93] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.337082][   T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.337103][   T93] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.330182][ T7997] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  339.022917][ T5616] Bluetooth: hci1: command tx timeout
[  339.078990][   T93] veth1_macvtap: left promiscuous mode
[  339.079042][   T93] veth0_macvtap: left promiscuous mode
[  339.079132][   T93] veth1_vlan: left promiscuous mode
[  339.079254][   T93] veth0_vlan: left promiscuous mode
[  339.127008][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.994698][   T31] audit: type=1400 audit(1791166221.350:783): avc:  denied  { setopt } for  pid=8009 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  340.014522][   T31] audit: type=1400 audit(1791166221.360:784): avc:  denied  { ioctl } for  pid=8009 comm="syz.4.559" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  341.046662][ T5616] Bluetooth: hci1: command tx timeout
[  341.389914][   T93] team0 (unregistering): Port device team_slave_1 removed
[  341.426384][   T93] team0 (unregistering): Port device team_slave_0 removed
[  341.493163][ T8020] FAULT_INJECTION: forcing a failure.
[  341.493163][ T8020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.493195][ T8020] CPU: 0 UID: 0 PID: 8020 Comm: syz.1.562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  341.493218][ T8020] Tainted: [L]=SOFTLOCKUP
[  341.493225][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  341.493236][ T8020] Call Trace:
[  341.493242][ T8020]  <TASK>
[  341.493250][ T8020]  dump_stack_lvl+0x100/0x190
[  341.493281][ T8020]  should_fail_ex.cold+0x5/0xa
[  341.493308][ T8020]  _copy_from_user+0x2e/0xd0
[  341.493332][ T8020]  copy_msghdr_from_user+0x9f/0x4c0
[  341.493354][ T8020]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  341.493382][ T8020]  ? lock_acquire+0x1d1/0x380
[  341.493402][ T8020]  ? get_pid_task+0x2a/0x250
[  341.493428][ T8020]  ___sys_sendmsg+0x106/0x1e0
[  341.493450][ T8020]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.493469][ T8020]  ? get_pid_task+0x106/0x250
[  341.493510][ T8020]  ? find_held_lock+0x2b/0x80
[  341.493554][ T8020]  __sys_sendmsg+0x160/0x210
[  341.493581][ T8020]  ? __pfx___sys_sendmsg+0x10/0x10
[  341.493620][ T8020]  do_syscall_64+0x123/0x790
[  341.493644][ T8020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.493662][ T8020] RIP: 0033:0x7f213fb9e159
[  341.493677][ T8020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.493694][ T8020] RSP: 002b:00007f2140a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.493713][ T8020] RAX: ffffffffffffffda RBX: 00007f213fe25fa0 RCX: 00007f213fb9e159
[  341.493724][ T8020] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000003
[  341.493735][ T8020] RBP: 00007f2140a05090 R08: 0000000000000000 R09: 0000000000000000
[  341.493746][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.493756][ T8020] R13: 00007f213fe26038 R14: 00007f213fe25fa0 R15: 00007ffd02d994a8
[  341.493781][ T8020]  </TASK>
[  342.398340][ T8021] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  342.788577][ T8045] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  342.788577][ T8045] 
[  342.788822][ T8045] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  342.789157][ T8045] CIFS: Attempting to mount //127.0.0.1/share
[  343.114222][ T5616] Bluetooth: hci1: command tx timeout
[  343.644743][ T8045] CIFS: VFS: Error connecting to socket. Aborting operation.
[  343.644785][ T8045] CIFS: VFS: cifs_mount failed w/return code = -4
[  343.729146][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.741782][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.741915][ T7919] bridge_slave_0: entered allmulticast mode
[  343.763641][ T7919] bridge_slave_0: entered promiscuous mode
[  343.776842][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.778336][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.778476][ T7919] bridge_slave_1: entered allmulticast mode
[  343.782929][ T7919] bridge_slave_1: entered promiscuous mode
[  343.812642][ T8059] FAULT_INJECTION: forcing a failure.
[  343.812642][ T8059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.812669][ T8059] CPU: 1 UID: 0 PID: 8059 Comm: syz.4.567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  343.812691][ T8059] Tainted: [L]=SOFTLOCKUP
[  343.812697][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  343.812706][ T8059] Call Trace:
[  343.812711][ T8059]  <TASK>
[  343.812717][ T8059]  dump_stack_lvl+0x100/0x190
[  343.812747][ T8059]  should_fail_ex.cold+0x5/0xa
[  343.812770][ T8059]  _copy_from_user+0x2e/0xd0
[  343.812794][ T8059]  copy_msghdr_from_user+0x9f/0x4c0
[  343.812816][ T8059]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  343.812844][ T8059]  ? lock_acquire+0x1d1/0x380
[  343.812864][ T8059]  ? get_pid_task+0x2a/0x250
[  343.812893][ T8059]  ___sys_sendmsg+0x106/0x1e0
[  343.812916][ T8059]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.812936][ T8059]  ? get_pid_task+0x106/0x250
[  343.812970][ T8059]  ? find_held_lock+0x2b/0x80
[  343.813016][ T8059]  __sys_sendmsg+0x160/0x210
[  343.813041][ T8059]  ? __pfx___sys_sendmsg+0x10/0x10
[  343.813081][ T8059]  do_syscall_64+0x123/0x790
[  343.813106][ T8059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.813125][ T8059] RIP: 0033:0x7f108f59e159
[  343.813141][ T8059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.813158][ T8059] RSP: 002b:00007f1090389028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.813175][ T8059] RAX: ffffffffffffffda RBX: 00007f108f825fa0 RCX: 00007f108f59e159
[  343.813187][ T8059] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000003
[  343.813197][ T8059] RBP: 00007f1090389090 R08: 0000000000000000 R09: 0000000000000000
[  343.813207][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.813217][ T8059] R13: 00007f108f826038 R14: 00007f108f825fa0 R15: 00007ffe413bb128
[  343.813241][ T8059]  </TASK>
[  344.026956][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.903942][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.933354][ T8069] openvswitch: netlink: IP tunnel dst address not specified
[  345.052425][ T7919] team0: Port device team_slave_0 added
[  345.058346][ T7919] team0: Port device team_slave_1 added
[  345.107780][   T31] audit: type=1400 audit(1791166226.460:785): avc:  denied  { write } for  pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  345.180096][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.180108][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.180121][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.191820][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.191832][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.191845][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.359699][ T7919] hsr_slave_0: entered promiscuous mode
[  345.373015][ T7919] hsr_slave_1: entered promiscuous mode
[  345.508228][ T5616] Bluetooth: hci3: SCO packet too small
[  345.530031][   T31] audit: type=1400 audit(1791166226.880:786): avc:  denied  { write } for  pid=8084 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  345.580743][   T31] audit: type=1400 audit(1791166226.930:787): avc:  denied  { mount } for  pid=8085 comm="syz.4.577" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  347.235388][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3
[  347.448161][ T8104] FAULT_INJECTION: forcing a failure.
[  347.448161][ T8104] name failslab, interval 1, probability 0, space 0, times 0
[  347.448188][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.5.571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.448208][ T8104] Tainted: [L]=SOFTLOCKUP
[  347.448213][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  347.448220][ T8104] Call Trace:
[  347.448225][ T8104]  <TASK>
[  347.448229][ T8104]  dump_stack_lvl+0x100/0x190
[  347.448251][ T8104]  should_fail_ex.cold+0x5/0xa
[  347.448270][ T8104]  should_failslab+0xc2/0x120
[  347.448289][ T8104]  __kmalloc_cache_noprof+0x91/0x6d0
[  347.448302][ T8104]  ? sctp_add_bind_addr+0xae/0x3e0
[  347.448318][ T8104]  sctp_add_bind_addr+0xae/0x3e0
[  347.448333][ T8104]  sctp_copy_local_addr_list+0x349/0x550
[  347.448350][ T8104]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  347.448376][ T8104]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[  347.448395][ T8104]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  347.448415][ T8104]  sctp_bind_addr_copy+0xe0/0x530
[  347.448433][ T8104]  sctp_connect_new_asoc+0x1c9/0x770
[  347.448455][ T8104]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  347.448474][ T8104]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  347.448493][ T8104]  __sctp_connect+0x3e7/0xc70
[  347.448511][ T8104]  ? lock_acquire+0x1d1/0x380
[  347.448528][ T8104]  ? __pfx___sctp_connect+0x10/0x10
[  347.448546][ T8104]  ? selinux_sctp_bind_connect+0xe0/0x230
[  347.448566][ T8104]  __sctp_setsockopt_connectx+0x100/0x190
[  347.448585][ T8104]  sctp_getsockopt+0x3f06/0x7110
[  347.448604][ T8104]  ? avc_has_perm_noaudit+0x56/0x470
[  347.448624][ T8104]  ? find_held_lock+0x2b/0x80
[  347.448643][ T8104]  ? avc_has_perm_noaudit+0x11e/0x470
[  347.448661][ T8104]  ? avc_has_perm_noaudit+0x11e/0x470
[  347.448683][ T8104]  ? __pfx_sctp_getsockopt+0x10/0x10
[  347.448703][ T8104]  ? __lock_acquire+0x5c0/0x1f40
[  347.448717][ T8104]  ? avc_has_perm+0x135/0x1e0
[  347.448729][ T8104]  ? __pfx_avc_has_perm+0x10/0x10
[  347.448751][ T8104]  ? lock_acquire+0x1d1/0x380
[  347.448764][ T8104]  ? __might_fault+0xc5/0x140
[  347.448777][ T8104]  ? find_held_lock+0x2b/0x80
[  347.448795][ T8104]  ? __might_fault+0xc5/0x140
[  347.448806][ T8104]  ? __might_fault+0xc5/0x140
[  347.448822][ T8104]  ? _copy_from_user+0x59/0xd0
[  347.448838][ T8104]  ? copy_from_sockptr_offset.constprop.0+0xe2/0x150
[  347.448853][ T8104]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  347.448869][ T8104]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  347.448883][ T8104]  do_sock_getsockopt+0x50a/0x6e0
[  347.448899][ T8104]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  347.448919][ T8104]  ? __fget_files+0x34/0x3d0
[  347.448936][ T8104]  ? find_held_lock+0x2b/0x80
[  347.448967][ T8104]  ? __fget_files+0x21f/0x3d0
[  347.448989][ T8104]  __sys_getsockopt+0x148/0x260
[  347.449013][ T8104]  ? __x64_sys_getsockopt+0xbd/0x160
[  347.449033][ T8104]  __x64_sys_getsockopt+0xbd/0x160
[  347.449050][ T8104]  ? do_syscall_64+0xae/0x790
[  347.449063][ T8104]  ? lockdep_hardirqs_on+0x7d/0x110
[  347.449076][ T8104]  do_syscall_64+0x123/0x790
[  347.449091][ T8104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.449106][ T8104] RIP: 0033:0x7fa544f9e159
[  347.449117][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.449129][ T8104] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  347.449142][ T8104] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  347.449151][ T8104] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004
[  347.449159][ T8104] RBP: 00007fa54503506b R08: 00002000000000c0 R09: 0000000000000000
[  347.449166][ T8104] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  347.449174][ T8104] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  347.449190][ T8104]  </TASK>
[  347.547355][ T5710] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  347.708402][ T5710] usb 5-1: Using ep0 maxpacket: 8
[  347.720442][ T5710] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40
[  347.738359][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.738390][ T5710] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  347.923622][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.923681][ T5710] usb 5-1: Product: syz
[  347.923744][ T5710] usb 5-1: Manufacturer: syz
[  347.923779][ T5710] usb 5-1: SerialNumber: syz
[  348.024246][  T983] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  348.204288][  T983] usb 7-1: Using ep0 maxpacket: 32
[  348.206025][  T983] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  348.208845][  T983] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  348.644901][  T983] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  348.644938][  T983] usb 7-1: Product: syz
[  348.645042][  T983] usb 7-1: Manufacturer: syz
[  348.645105][  T983] usb 7-1: SerialNumber: syz
[  348.807079][  T983] usb 7-1: config 0 descriptor??
[  348.821175][ T8110] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  349.008112][  T983] hub 7-1:0.0: bad descriptor, ignoring hub
[  349.009095][  T983] hub 7-1:0.0: probe with driver hub failed with error -5
[  349.458578][  T983] usb 7-1: USB disconnect, device number 8
[  349.809753][ T8102] udevd[8102]: setting mode of /dev/bus/usb/007/008 to 020664 failed: No such file or directory
[  349.833280][ T8102] udevd[8102]: setting owner of /dev/bus/usb/007/008 to uid=0, gid=0 failed: No such file or directory
[  351.366646][ T8117] fuse: fd is not a fuse device
[  351.393549][ T5710] usb 5-1: USB disconnect, device number 24
[  352.377259][ T8126] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  352.574749][ T8130] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  352.929100][   T31] audit: type=1400 audit(1791166234.280:788): avc:  denied  { write } for  pid=8124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  353.035179][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.591'.
[  353.035225][ T8154] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  353.109137][   T31] audit: type=1400 audit(1791166234.450:789): avc:  denied  { write } for  pid=8153 comm="syz.6.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  353.159769][   T31] audit: type=1400 audit(1791166234.490:790): avc:  denied  { ioctl } for  pid=8153 comm="syz.6.591" path="socket:[19605]" dev="sockfs" ino=19605 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  354.225407][ T8152] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  354.565830][   T31] audit: type=1400 audit(1791166235.920:791): avc:  denied  { write } for  pid=8163 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  354.666653][ T8173] syzkaller1: entered promiscuous mode
[  354.666674][ T8173] syzkaller1: entered allmulticast mode
[  354.700875][ T8173] FAULT_INJECTION: forcing a failure.
[  354.700875][ T8173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.700914][ T8173] CPU: 0 UID: 0 PID: 8173 Comm: syz.6.595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.700937][ T8173] Tainted: [L]=SOFTLOCKUP
[  354.700942][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  354.700951][ T8173] Call Trace:
[  354.700957][ T8173]  <TASK>
[  354.700964][ T8173]  dump_stack_lvl+0x100/0x190
[  354.700990][ T8173]  should_fail_ex.cold+0x5/0xa
[  354.701010][ T8173]  _copy_from_iter+0x1f4/0x1690
[  354.701034][ T8173]  ? __pfx__copy_from_iter+0x10/0x10
[  354.701051][ T8173]  ? __lock_acquire+0x5c0/0x1f40
[  354.701068][ T8173]  ? _parse_integer_limit+0x1ac/0x220
[  354.701093][ T8173]  ? _kstrtoull+0x144/0x200
[  354.701113][ T8173]  ? __pfx__kstrtoull+0x10/0x10
[  354.701136][ T8173]  tun_get_user+0x265/0x3cc0
[  354.701160][ T8173]  ? __lock_acquire+0x5c0/0x1f40
[  354.701180][ T8173]  ? __lock_acquire+0x5c0/0x1f40
[  354.701196][ T8173]  ? __pfx_tun_get_user+0x10/0x10
[  354.701218][ T8173]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  354.701249][ T8173]  ? find_held_lock+0x2b/0x80
[  354.701269][ T8173]  ? tun_get+0x191/0x370
[  354.701286][ T8173]  ? tun_get+0x191/0x370
[  354.701308][ T8173]  tun_chr_write_iter+0xdc/0x200
[  354.701330][ T8173]  vfs_write+0x6af/0x1050
[  354.701349][ T8173]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  354.701370][ T8173]  ? __pfx_vfs_write+0x10/0x10
[  354.701385][ T8173]  ? find_held_lock+0x2b/0x80
[  354.701421][ T8173]  ksys_write+0x12a/0x250
[  354.701437][ T8173]  ? __pfx_ksys_write+0x10/0x10
[  354.701460][ T8173]  do_syscall_64+0x123/0x790
[  354.701479][ T8173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.701493][ T8173] RIP: 0033:0x7fd65459e159
[  354.701506][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.701520][ T8173] RSP: 002b:00007fd655401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.701534][ T8173] RAX: ffffffffffffffda RBX: 00007fd654825fa0 RCX: 00007fd65459e159
[  354.701544][ T8173] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003
[  354.701552][ T8173] RBP: 00007fd655401090 R08: 0000000000000000 R09: 0000000000000000
[  354.701560][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.701569][ T8173] R13: 00007fd654826038 R14: 00007fd654825fa0 R15: 00007ffd8ff51148
[  354.701590][ T8173]  </TASK>
[  355.921208][ T8167] netlink: 80 bytes leftover after parsing attributes in process `syz.5.592'.
[  356.048838][   T31] audit: type=1400 audit(1791166237.400:792): avc:  denied  { bind } for  pid=8179 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  356.070048][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.596'.
[  356.070095][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.6.596'.
[  356.216683][   T31] audit: type=1400 audit(1791166237.570:793): avc:  denied  { connect } for  pid=8179 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  356.217582][ T7919] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  356.254420][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.255103][ T7919] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  356.294454][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.295143][ T7919] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  356.324504][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.326354][ T7919] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  356.356740][ T7919] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.463292][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.486293][ T7919] 8021q: adding VLAN 0 to HW filter on device team0
[  356.496886][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.496962][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.526844][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.526933][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.771390][ T8212] netlink: 'syz.4.601': attribute type 1 has an invalid length.
[  356.783182][ T8211] netlink: 'syz.6.602': attribute type 1 has an invalid length.
[  356.783213][ T8211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.841278][ T8212] 8021q: adding VLAN 0 to HW filter on device bond1
[  356.870833][   T31] audit: type=1400 audit(1791166238.220:794): avc:  denied  { write } for  pid=8178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  356.902702][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'.
[  357.032621][ T8218] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  357.456439][ T8212] bridge2: entered promiscuous mode
[  357.651970][ T8212] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  358.490932][   T31] audit: type=1400 audit(1791166239.840:795): avc:  denied  { write } for  pid=8233 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  359.258486][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.909981][ T7919] veth0_vlan: entered promiscuous mode
[  359.945914][ T7919] veth1_vlan: entered promiscuous mode
[  360.009128][ T8258] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  360.078888][ T7919] veth0_macvtap: entered promiscuous mode
[  360.101741][ T7919] veth1_macvtap: entered promiscuous mode
[  360.122982][   T31] audit: type=1400 audit(1791166241.470:796): avc:  denied  { write } for  pid=8248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.172983][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.203795][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.248430][   T31] audit: type=1400 audit(1791166241.600:797): avc:  denied  { write } for  pid=8273 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.274297][ T6093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.274335][ T6093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.274360][ T6093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.274384][ T6093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.124437][ T1422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.124459][ T1422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.295679][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.295700][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.969493][   T31] audit: type=1400 audit(1791166243.320:798): avc:  denied  { write } for  pid=8281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  363.076832][   T31] audit: type=1400 audit(1791166244.430:799): avc:  denied  { write } for  pid=8319 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  363.234382][ T5698] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  363.326227][ T8326] tipc: Started in network mode
[  363.326249][ T8326] tipc: Node identity 4, cluster identity 4711
[  363.327807][ T8326] tipc: Node number set to 4
[  363.466248][ T5698] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  363.471337][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.471364][ T5698] usb 7-1: Product: syz
[  363.471378][ T5698] usb 7-1: Manufacturer: syz
[  363.471391][ T5698] usb 7-1: SerialNumber: syz
[  364.177983][ T8329] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  364.481585][   T31] audit: type=1400 audit(1791166245.830:800): avc:  denied  { write } for  pid=8324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  364.580027][ T5800] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  364.628091][   T31] audit: type=1400 audit(1791166245.970:801): avc:  denied  { write } for  pid=8355 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  364.684790][ T5710] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  364.755209][ T5800] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  364.757460][ T5800] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  364.757490][ T5800] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  364.757513][ T5800] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  364.757536][ T5800] usb 5-1: config 0 interface 0 has no altsetting 0
[  364.757563][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.826866][ T5710] usb 6-1: device descriptor read/64, error -71
[  365.064444][ T5710] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  365.164156][   T31] audit: type=1400 audit(1791166246.480:802): avc:  denied  { write } for  pid=8357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  365.197777][ T5710] usb 6-1: device descriptor read/64, error -71
[  365.254635][   T31] audit: type=1400 audit(1791166246.610:803): avc:  denied  { write } for  pid=8370 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  365.498126][ T5710] usb usb6-port1: attempt power cycle
[  365.505815][ T5800] usb 5-1: config 0 descriptor??
[  365.514888][ T8343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  365.844302][ T5710] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  365.893987][ T5710] usb 6-1: device descriptor read/8, error -71
[  366.170983][ T5710] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  366.188208][ T5710] usb 6-1: device descriptor read/8, error -71
[  366.301243][ T5710] usb usb6-port1: unable to enumerate USB device
[  367.056150][ T5800] logitech-djreceiver 0003:046D:C539.0007: hidraw0: USB HID v0.00 Keyboard [HID 046d:c539] on usb-dummy_hcd.4-1/input0
[  367.281738][ T5698] usb 7-1: USB disconnect, device number 9
[  367.351249][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.351611][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.501909][ T8387] udevd[8387]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  367.669631][   T30] usb 5-1: USB disconnect, device number 25
[  367.732184][ T8394] netlink: 288 bytes leftover after parsing attributes in process `syz.3.630'.
[  368.093516][ T5698] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  369.724604][ T5698] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  369.725465][ T5698] usb 7-1: config 0 has an invalid interface number: 237 but max is 0
[  369.725488][ T5698] usb 7-1: config 0 has no interface number 0
[  369.725517][ T5698] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  369.725531][ T5698] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  369.725543][ T5698] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  369.725557][ T5698] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[  369.727254][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  369.727274][ T5698] usb 7-1: Product: syz
[  369.727287][ T5698] usb 7-1: Manufacturer: syz
[  369.727301][ T5698] usb 7-1: SerialNumber: syz
[  369.729289][ T5698] usb 7-1: config 0 descriptor??
[  369.731092][ T5698] xpad 7-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  369.734720][ T5698] xpad 7-1:0.237: probe with driver xpad failed with error -90
[  370.027874][ T5807] usb 7-1: USB disconnect, device number 10
[  370.978144][ T8403] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  372.125143][   T93] IPVS: starting estimator thread 0...
[  372.231427][ T8420] IPVS: using max 41 ests per chain, 98400 per kthread
[  373.118504][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  373.118676][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  373.565525][ T8423] fuse: Bad value for 'fd'
[  375.426124][ T8443] 
: renamed from bond0 (while UP)
[  377.646583][   T31] audit: type=1400 audit(1791166259.000:804): avc:  denied  { read } for  pid=8459 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  377.694759][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'.
[  377.721755][   T31] audit: type=1400 audit(1791166259.070:805): avc:  denied  { write } for  pid=8459 comm="syz.6.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  377.758514][ T8453] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  377.872720][   T31] audit: type=1400 audit(1791166259.220:806): avc:  denied  { getopt } for  pid=8461 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  378.894021][ T8476] netlink: 288 bytes leftover after parsing attributes in process `syz.3.641'.
[  379.114789][ T5710] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  379.266966][ T5710] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  379.269651][ T5710] usb 5-1: config 0 has an invalid interface number: 237 but max is 0
[  379.269711][ T5710] usb 5-1: config 0 has no interface number 0
[  379.269837][ T5710] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  379.269870][ T5710] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  379.269898][ T5710] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  379.269930][ T5710] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024
[  379.371683][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  379.371740][ T5710] usb 5-1: Product: syz
[  379.371782][ T5710] usb 5-1: Manufacturer: syz
[  379.371817][ T5710] usb 5-1: SerialNumber: syz
[  379.406294][ T5710] usb 5-1: config 0 descriptor??
[  379.481836][ T5710] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  379.496630][ T5710] xpad 5-1:0.237: probe with driver xpad failed with error -90
[  379.707120][ T5710] usb 5-1: USB disconnect, device number 26
[  379.974141][ T5807] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  379.999181][   T31] audit: type=1326 audit(1791166261.350:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.000658][   T31] audit: type=1326 audit(1791166261.350:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.000809][   T31] audit: type=1326 audit(1791166261.350:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.000960][   T31] audit: type=1326 audit(1791166261.350:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.001103][   T31] audit: type=1326 audit(1791166261.350:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.140810][   T31] audit: type=1326 audit(1791166261.500:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.140947][   T31] audit: type=1326 audit(1791166261.500:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.654" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed7f9e159 code=0x7ffc0000
[  380.174644][ T5807] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  380.175624][ T5807] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.175656][ T5807] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  380.177374][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.177393][ T5807] usb 7-1: Product: syz
[  380.177405][ T5807] usb 7-1: Manufacturer: syz
[  380.177417][ T5807] usb 7-1: SerialNumber: syz
[  380.187663][ T5807] cdc_mbim 7-1:1.0: skipping garbage
[  380.427460][ T8474] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  381.087897][ T5807] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS
[  381.088069][ T5807] cdc_mbim 7-1:1.0: bind() failure
[  381.162870][ T5807] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  381.162911][ T5807] cdc_ncm 7-1:1.1: bind() failure
[  381.168307][ T8474] fuse: Bad value for 'rootmode'
[  381.249609][ T5800] usb 7-1: USB disconnect, device number 11
[  381.377416][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.660'.
[  381.506457][ T5710] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  381.980098][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.660'.
[  382.416365][ T5710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  382.417661][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.417685][ T5710] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  382.419305][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.419320][ T5710] usb 6-1: Product: syz
[  382.419328][ T5710] usb 6-1: Manufacturer: syz
[  382.419336][ T5710] usb 6-1: SerialNumber: syz
[  382.487428][ T5710] cdc_mbim 6-1:1.0: skipping garbage
[  382.533970][ T5616] Bluetooth: hci4: SCO packet too small
[  382.632203][ T8494] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  382.697685][   T31] kauditd_printk_skb: 36 callbacks suppressed
[  382.697703][   T31] audit: type=1400 audit(1791166264.050:848): avc:  denied  { kexec_image_load } for  pid=8515 comm="syz.6.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  382.875726][ T8518] FAULT_INJECTION: forcing a failure.
[  382.875726][ T8518] name failslab, interval 1, probability 0, space 0, times 0
[  382.875761][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.6.666 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  382.875791][ T8518] Tainted: [L]=SOFTLOCKUP
[  382.875798][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  382.875809][ T8518] Call Trace:
[  382.875816][ T8518]  <TASK>
[  382.875824][ T8518]  dump_stack_lvl+0x100/0x190
[  382.875858][ T8518]  should_fail_ex.cold+0x5/0xa
[  382.875886][ T8518]  should_failslab+0xc2/0x120
[  382.875913][ T8518]  kmem_cache_alloc_noprof+0x92/0x6a0
[  382.875938][ T8518]  ? do_getname+0x35/0x390
[  382.875961][ T8518]  do_getname+0x35/0x390
[  382.875982][ T8518]  do_sys_openat2+0xc7/0x1e0
[  382.876014][ T8518]  ? __pfx_do_sys_openat2+0x10/0x10
[  382.876043][ T8518]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  382.876074][ T8518]  __x64_sys_openat+0x12d/0x210
[  382.876110][ T8518]  ? __pfx___x64_sys_openat+0x10/0x10
[  382.876150][ T8518]  do_syscall_64+0x123/0x790
[  382.876174][ T8518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.876195][ T8518] RIP: 0033:0x7fd65459e159
[  382.876211][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.876231][ T8518] RSP: 002b:00007fd655401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  382.876250][ T8518] RAX: ffffffffffffffda RBX: 00007fd654825fa0 RCX: 00007fd65459e159
[  382.876263][ T8518] RDX: 000000000000275a RSI: 0000200000000400 RDI: ffffffffffffff9c
[  382.876275][ T8518] RBP: 00007fd65463506b R08: 0000000000000000 R09: 0000000000000000
[  382.876286][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.876297][ T8518] R13: 00007fd654826038 R14: 00007fd654825fa0 R15: 00007ffd8ff51148
[  382.876323][ T8518]  </TASK>
[  382.896862][   T31] audit: type=1400 audit(1791166264.250:849): avc:  denied  { create } for  pid=8517 comm="syz.6.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  382.908552][   T31] audit: type=1400 audit(1791166264.260:850): avc:  denied  { setopt } for  pid=8517 comm="syz.6.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  383.061281][   T31] audit: type=1400 audit(1791166264.410:851): avc:  denied  { read } for  pid=8508 comm="syz.3.662" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  383.061552][   T31] audit: type=1400 audit(1791166264.410:852): avc:  denied  { open } for  pid=8508 comm="syz.3.662" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  383.101183][   T31] audit: type=1400 audit(1791166264.450:853): avc:  denied  { create } for  pid=8493 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  383.120832][   T31] audit: type=1400 audit(1791166264.470:854): avc:  denied  { mounton } for  pid=8517 comm="syz.6.666" path="/66/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  383.143580][   T31] audit: type=1400 audit(1791166264.480:855): avc:  denied  { write } for  pid=8493 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  383.172278][ T8518] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  383.172298][ T8518] audit: out of memory in audit_log_start
[  383.252274][ T5710] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[  383.252331][ T5710] cdc_mbim 6-1:1.0: bind() failure
[  383.268477][ T5710] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  383.268518][ T5710] cdc_ncm 6-1:1.1: bind() failure
[  383.403968][ T8494] fuse: Bad value for 'rootmode'
[  383.459772][ T2280] usb 6-1: USB disconnect, device number 23
[  385.754175][ T5800] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  385.783047][ T8540] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  385.904937][ T5800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.905844][ T5800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.905882][ T5800] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  385.910810][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.910833][ T5800] usb 6-1: Product: syz
[  385.910847][ T5800] usb 6-1: Manufacturer: syz
[  385.910860][ T5800] usb 6-1: SerialNumber: syz
[  385.982995][ T5800] cdc_mbim 6-1:1.0: skipping garbage
[  386.012664][ T5616] Bluetooth: hci0: SCO packet too small
[  386.183458][ T8544] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  386.629110][ T5800] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[  386.629167][ T5800] cdc_mbim 6-1:1.0: bind() failure
[  386.652824][ T5800] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  386.653805][ T5800] cdc_ncm 6-1:1.1: bind() failure
[  386.668149][ T8544] fuse: Bad value for 'rootmode'
[  386.750729][ T5800] usb 6-1: USB disconnect, device number 24
[  387.395176][ T5698] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  387.526020][ T5698] usb 4-1: device descriptor read/64, error -71
[  387.632189][ T8580] FAULT_INJECTION: forcing a failure.
[  387.632189][ T8580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.632220][ T8580] CPU: 1 UID: 0 PID: 8580 Comm: syz.5.684 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  387.632243][ T8580] Tainted: [L]=SOFTLOCKUP
[  387.632249][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  387.632258][ T8580] Call Trace:
[  387.632263][ T8580]  <TASK>
[  387.632270][ T8580]  dump_stack_lvl+0x100/0x190
[  387.632298][ T8580]  should_fail_ex.cold+0x5/0xa
[  387.632322][ T8580]  _copy_from_user+0x2e/0xd0
[  387.632344][ T8580]  copy_msghdr_from_user+0x9f/0x4c0
[  387.632364][ T8580]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  387.632389][ T8580]  ? lock_acquire+0x1d1/0x380
[  387.632408][ T8580]  ? get_pid_task+0x2a/0x250
[  387.632433][ T8580]  ___sys_sendmsg+0x106/0x1e0
[  387.632453][ T8580]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.632472][ T8580]  ? get_pid_task+0x106/0x250
[  387.632505][ T8580]  ? find_held_lock+0x2b/0x80
[  387.632545][ T8580]  __sys_sendmsg+0x160/0x210
[  387.632569][ T8580]  ? __pfx___sys_sendmsg+0x10/0x10
[  387.632606][ T8580]  do_syscall_64+0x123/0x790
[  387.632627][ T8580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.632643][ T8580] RIP: 0033:0x7fa544f9e159
[  387.632657][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.632672][ T8580] RSP: 002b:00007fa545e8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  387.632688][ T8580] RAX: ffffffffffffffda RBX: 00007fa545226090 RCX: 00007fa544f9e159
[  387.632699][ T8580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  387.632709][ T8580] RBP: 00007fa545e8c090 R08: 0000000000000000 R09: 0000000000000000
[  387.632719][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.632728][ T8580] R13: 00007fa545226128 R14: 00007fa545226090 R15: 00007ffe1159b568
[  387.632751][ T8580]  </TASK>
[  387.769412][ T5698] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  387.895602][ T5698] usb 4-1: device descriptor read/64, error -71
[  388.824958][ T5698] usb usb4-port1: attempt power cycle
[  389.165540][ T5698] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  389.186068][ T5698] usb 4-1: device descriptor read/8, error -71
[  389.424094][ T5698] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  389.449770][ T5698] usb 4-1: device descriptor read/8, error -71
[  389.560977][ T5698] usb usb4-port1: unable to enumerate USB device
[  389.780758][   T31] kauditd_printk_skb: 33 callbacks suppressed
[  389.780831][   T31] audit: type=1400 audit(1791166271.130:889): avc:  denied  { read write } for  pid=8589 comm="syz.6.687" name="sg0" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  389.781166][   T31] audit: type=1400 audit(1791166271.130:890): avc:  denied  { open } for  pid=8589 comm="syz.6.687" path="/dev/sg0" dev="devtmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  390.095062][ T5710] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  390.287881][ T5710] usb 7-1: Using ep0 maxpacket: 32
[  390.302866][ T5710] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  390.340469][ T5710] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  390.375913][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  390.376013][ T5710] usb 7-1: Product: syz
[  390.376061][ T5710] usb 7-1: Manufacturer: syz
[  390.376124][ T5710] usb 7-1: SerialNumber: syz
[  390.555829][ T5710] usb 7-1: config 0 descriptor??
[  390.574939][ T8591] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  390.651112][ T5710] hub 7-1:0.0: bad descriptor, ignoring hub
[  390.651200][ T5710] hub 7-1:0.0: probe with driver hub failed with error -5
[  391.120910][ T5710] usb 7-1: USB disconnect, device number 12
[  392.211728][   T31] audit: type=1400 audit(1791166273.560:891): avc:  denied  { create } for  pid=8594 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  393.014784][   T31] audit: type=1400 audit(1791166274.370:892): avc:  denied  { name_bind } for  pid=8598 comm="syz.1.690" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  393.014833][   T31] audit: type=1400 audit(1791166274.370:893): avc:  denied  { node_bind } for  pid=8598 comm="syz.1.690" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  396.176628][   T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.617680][   T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.842493][   T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.207372][  T983] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  397.363920][  T983] usb 7-1: Using ep0 maxpacket: 32
[  397.374520][  T983] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  397.407116][  T983] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  397.477888][  T983] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  397.477986][  T983] usb 7-1: Product: syz
[  397.478057][  T983] usb 7-1: Manufacturer: syz
[  397.478120][  T983] usb 7-1: SerialNumber: syz
[  397.630136][  T983] usb 7-1: config 0 descriptor??
[  397.643507][ T8620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  397.698799][  T983] hub 7-1:0.0: bad descriptor, ignoring hub
[  397.698858][  T983] hub 7-1:0.0: probe with driver hub failed with error -5
[  398.177920][  T983] usb 7-1: USB disconnect, device number 13
[  399.216769][   T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.139520][   T31] audit: type=1400 audit(1791166281.490:894): avc:  denied  { create } for  pid=8632 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  400.165754][   T31] audit: type=1400 audit(1791166281.520:895): avc:  denied  { module_request } for  pid=8632 comm="syz.3.695" kmod="bt-proto-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  400.264636][ T8629] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  400.361127][   T31] audit: type=1400 audit(1791166281.710:896): avc:  denied  { read } for  pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  400.380042][   T31] audit: type=1400 audit(1791166281.740:897): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.380248][   T31] audit: type=1400 audit(1791166281.740:898): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.380792][   T31] audit: type=1400 audit(1791166281.740:899): avc:  denied  { search } for  pid=5267 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.381004][   T31] audit: type=1400 audit(1791166281.740:900): avc:  denied  { read } for  pid=5267 comm="dhcpcd" name="n37" dev="tmpfs" ino=3062 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  400.381932][   T31] audit: type=1400 audit(1791166281.740:901): avc:  denied  { open } for  pid=5267 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=3062 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  400.382181][   T31] audit: type=1400 audit(1791166281.740:902): avc:  denied  { getattr } for  pid=5267 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=3062 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  400.762031][   T31] audit: type=1400 audit(1791166282.110:903): avc:  denied  { read write } for  pid=8645 comm="syz.4.698" name="vbi6" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  400.835595][   T79] bridge_slave_1: left allmulticast mode
[  400.835622][   T79] bridge_slave_1: left promiscuous mode
[  400.835795][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.839245][   T79] bridge_slave_0: left allmulticast mode
[  400.839267][   T79] bridge_slave_0: left promiscuous mode
[  400.842120][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.434238][   T30] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  401.584097][   T30] usb 6-1: Using ep0 maxpacket: 8
[  401.585763][   T30] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  401.587780][   T30] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  401.587804][   T30] usb 6-1: config 0 has no interface number 0
[  401.587835][   T30] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  401.587848][   T30] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  401.587862][   T30] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  401.587876][   T30] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  401.587897][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.589401][   T30] usb 6-1: config 0 descriptor??
[  401.710301][   T30] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  401.772020][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.807461][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.845311][   T79] bond0 (unregistering): Released all slaves
[  401.957408][ T8649] nbd: must specify at least one socket
[  402.066943][ T8649] 9p: Bad value for 'rfdno'
[  402.129876][   T30] usb 6-1: USB disconnect, device number 25
[  402.147276][   T30] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  402.755465][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[  402.774962][ T8676] syzkaller0: entered promiscuous mode
[  402.774985][ T8676] syzkaller0: entered allmulticast mode
[  404.448498][   T79] hsr_slave_0: left promiscuous mode
[  404.459453][   T79] hsr_slave_1: left promiscuous mode
[  404.460203][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.460221][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.460823][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.460836][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.541700][   T79] veth1_macvtap: left promiscuous mode
[  404.541735][   T79] veth0_macvtap: left promiscuous mode
[  404.541820][   T79] veth1_vlan: left promiscuous mode
[  404.541873][   T79] veth0_vlan: left promiscuous mode
[  405.091182][   T79] team0 (unregistering): Port device team_slave_1 removed
[  405.103514][   T79] team0 (unregistering): Port device team_slave_0 removed
[  405.104215][ T5800] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  405.264557][ T5800] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  405.267198][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.267224][ T5800] usb 7-1: Product: syz
[  405.267238][ T5800] usb 7-1: Manufacturer: syz
[  405.267252][ T5800] usb 7-1: SerialNumber: syz
[  405.310623][ T8713] FAULT_INJECTION: forcing a failure.
[  405.310623][ T8713] name failslab, interval 1, probability 0, space 0, times 0
[  405.310645][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.3.713 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.310661][ T8713] Tainted: [L]=SOFTLOCKUP
[  405.310665][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  405.310671][ T8713] Call Trace:
[  405.310675][ T8713]  <TASK>
[  405.310679][ T8713]  dump_stack_lvl+0x100/0x190
[  405.310699][ T8713]  should_fail_ex.cold+0x5/0xa
[  405.310715][ T8713]  should_failslab+0xc2/0x120
[  405.310732][ T8713]  __kmalloc_noprof+0xfc/0x840
[  405.310744][ T8713]  ? rcu_is_watching+0x13/0xc0
[  405.310760][ T8713]  ? tomoyo_realpath_from_path+0xb6/0x690
[  405.310780][ T8713]  tomoyo_realpath_from_path+0xb6/0x690
[  405.310799][ T8713]  tomoyo_path_number_perm+0x23c/0x580
[  405.310817][ T8713]  ? tomoyo_path_number_perm+0x22e/0x580
[  405.310831][ T8713]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  405.310852][ T8713]  ? __lock_acquire+0x5c0/0x1f40
[  405.310871][ T8713]  ? __fget_files+0x34/0x3d0
[  405.310887][ T8713]  ? find_held_lock+0x2b/0x80
[  405.310903][ T8713]  ? hook_file_ioctl_common+0x140/0x440
[  405.310925][ T8713]  ? __fget_files+0x21f/0x3d0
[  405.310943][ T8713]  security_file_ioctl+0xd3/0x230
[  405.310959][ T8713]  __x64_sys_ioctl+0xb7/0x210
[  405.310974][ T8713]  do_syscall_64+0x123/0x790
[  405.310987][ T8713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.310999][ T8713] RIP: 0033:0x7feed7f9e159
[  405.311008][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.311019][ T8713] RSP: 002b:00007feed8e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  405.311031][ T8713] RAX: ffffffffffffffda RBX: 00007feed8225fa0 RCX: 00007feed7f9e159
[  405.311038][ T8713] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 0000000000000003
[  405.311044][ T8713] RBP: 00007feed8e28090 R08: 0000000000000000 R09: 0000000000000000
[  405.311051][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.311057][ T8713] R13: 00007feed8226038 R14: 00007feed8225fa0 R15: 00007fff14678b38
[  405.311071][ T8713]  </TASK>
[  405.311075][ T8713] ERROR: Out of memory at tomoyo_realpath_from_path.
[  405.311454][ T8713] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  405.428312][   T31] kauditd_printk_skb: 23 callbacks suppressed
[  405.428327][   T31] audit: type=1400 audit(1791166286.780:927): avc:  denied  { read } for  pid=8716 comm="syz.3.716" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  405.430154][   T31] audit: type=1400 audit(1791166286.780:928): avc:  denied  { open } for  pid=8716 comm="syz.3.716" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  405.438223][   T31] audit: type=1400 audit(1791166286.790:929): avc:  denied  { ioctl } for  pid=8716 comm="syz.3.716" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  406.477746][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2
[  407.878522][   T31] audit: type=1400 audit(1791166288.990:930): avc:  denied  { watch } for  pid=8716 comm="syz.3.716" path="/21/file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  407.878557][   T31] audit: type=1400 audit(1791166288.990:931): avc:  denied  { watch_sb watch_reads } for  pid=8716 comm="syz.3.716" path="/21/file1" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  408.304766][ T8742] FAULT_INJECTION: forcing a failure.
[  408.304766][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.304797][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.5.722 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.304822][ T8742] Tainted: [L]=SOFTLOCKUP
[  408.304828][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  408.304839][ T8742] Call Trace:
[  408.304846][ T8742]  <TASK>
[  408.304853][ T8742]  dump_stack_lvl+0x100/0x190
[  408.304884][ T8742]  should_fail_ex.cold+0x5/0xa
[  408.304910][ T8742]  _copy_from_user+0x2e/0xd0
[  408.304933][ T8742]  copy_msghdr_from_user+0x9f/0x4c0
[  408.304955][ T8742]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  408.304982][ T8742]  ? lock_acquire+0x1d1/0x380
[  408.305002][ T8742]  ? get_pid_task+0x2a/0x250
[  408.305030][ T8742]  ___sys_sendmsg+0x106/0x1e0
[  408.305052][ T8742]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.305072][ T8742]  ? get_pid_task+0x106/0x250
[  408.305106][ T8742]  ? find_held_lock+0x2b/0x80
[  408.305148][ T8742]  __sys_sendmsg+0x160/0x210
[  408.305173][ T8742]  ? __pfx___sys_sendmsg+0x10/0x10
[  408.305211][ T8742]  do_syscall_64+0x123/0x790
[  408.305237][ T8742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.305255][ T8742] RIP: 0033:0x7fa544f9e159
[  408.305270][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.305286][ T8742] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.305305][ T8742] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  408.305316][ T8742] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003
[  408.305327][ T8742] RBP: 00007fa545ead090 R08: 0000000000000000 R09: 0000000000000000
[  408.305338][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.305348][ T8742] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  408.305373][ T8742]  </TASK>
[  408.421687][   T31] audit: type=1400 audit(1791166289.770:932): avc:  denied  { write } for  pid=8743 comm="syz.6.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  408.421725][   T31] audit: type=1400 audit(1791166289.770:933): avc:  denied  { nlmsg_write } for  pid=8743 comm="syz.6.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  408.476078][ T5800] usb 7-1: USB disconnect, device number 14
[  408.551937][   T31] audit: type=1400 audit(1791166289.890:934): avc:  denied  { write } for  pid=8728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.657642][   T31] audit: type=1400 audit(1791166290.010:935): avc:  denied  { write } for  pid=8747 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  408.750714][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3
[  408.900294][ T8751] busy
[  408.901559][ T8751] FAULT_INJECTION: forcing a failure.
[  408.901559][ T8751] name failslab, interval 1, probability 0, space 0, times 0
[  408.901592][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: syz.5.724 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.901620][ T8751] Tainted: [L]=SOFTLOCKUP
[  408.901628][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  408.901640][ T8751] Call Trace:
[  408.901647][ T8751]  <TASK>
[  408.901654][ T8751]  dump_stack_lvl+0x100/0x190
[  408.901688][ T8751]  should_fail_ex.cold+0x5/0xa
[  408.901721][ T8751]  should_failslab+0xc2/0x120
[  408.901748][ T8751]  kmem_cache_alloc_noprof+0x92/0x6a0
[  408.901773][ T8751]  ? do_getname+0x35/0x390
[  408.901796][ T8751]  do_getname+0x35/0x390
[  408.901817][ T8751]  do_sys_openat2+0xc7/0x1e0
[  408.901845][ T8751]  ? __pfx_do_sys_openat2+0x10/0x10
[  408.901871][ T8751]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  408.901905][ T8751]  __x64_sys_openat+0x12d/0x210
[  408.901934][ T8751]  ? __pfx___x64_sys_openat+0x10/0x10
[  408.901973][ T8751]  do_syscall_64+0x123/0x790
[  408.901997][ T8751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.902016][ T8751] RIP: 0033:0x7fa544f5e98e
[  408.902033][ T8751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  408.902050][ T8751] RSP: 002b:00007fa545eacb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  408.902071][ T8751] RAX: ffffffffffffffda RBX: 00007fa545ead6c0 RCX: 00007fa544f5e98e
[  408.902084][ T8751] RDX: 0000000000000000 RSI: 00007fa545eacc00 RDI: ffffffffffffff9c
[  408.902096][ T8751] RBP: 00007fa545eacc00 R08: 0000000000000000 R09: 0000000000000000
[  408.902107][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  408.902118][ T8751] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  408.902144][ T8751]  </TASK>
[  409.000802][ T8754] udevd[8754]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  409.239986][   T31] audit: type=1400 audit(1791166290.590:936): avc:  denied  { read } for  pid=8763 comm="syz.4.718" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  409.287896][ T8744] netlink: 'syz.6.723': attribute type 4 has an invalid length.
[  409.304532][ T5800] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  409.357312][ T5800] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  409.559168][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4
[  410.484101][ T5698] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  410.599155][   T31] kauditd_printk_skb: 9 callbacks suppressed
[  410.599173][   T31] audit: type=1400 audit(1791166291.950:946): avc:  denied  { mount } for  pid=8791 comm="syz.6.727" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  410.635541][   T31] audit: type=1400 audit(1791166291.990:947): avc:  denied  { unmount } for  pid=7024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  410.752369][ T5698] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  410.762888][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  410.762913][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  411.246157][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.246182][ T5698] usb 4-1: Product: syz
[  411.246197][ T5698] usb 4-1: Manufacturer: syz
[  411.246210][ T5698] usb 4-1: SerialNumber: syz
[  411.288759][ T5698] ums-onetouch 4-1:1.0: USB Mass Storage device detected
[  411.341929][ T5698] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  411.341975][ T5698] input input16: usb_submit_urb failed
[  411.370608][ T5698] input: failed to attach handler kbd to device input16, error: -5
[  411.373007][ T5698] scsi host1: usb-storage 4-1:1.0
[  411.388592][   T31] audit: type=1400 audit(1791166292.750:948): avc:  denied  { read } for  pid=4957 comm="acpid" name="event4" dev="devtmpfs" ino=3293 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  411.389734][   T31] audit: type=1400 audit(1791166292.750:949): avc:  denied  { open } for  pid=4957 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3293 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  411.451924][ T4957] input input16: usb_submit_urb failed
[  411.468348][   T31] audit: type=1400 audit(1791166292.820:950): avc:  denied  { bind } for  pid=8799 comm="syz.6.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  411.468554][ T4957] input input16: usb_submit_urb failed
[  411.499261][   T31] audit: type=1400 audit(1791166292.830:951): avc:  denied  { listen } for  pid=8799 comm="syz.6.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  411.503022][ T8800] FAULT_INJECTION: forcing a failure.
[  411.503022][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  411.503049][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.6.729 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.503071][ T8800] Tainted: [L]=SOFTLOCKUP
[  411.503077][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  411.503086][ T8800] Call Trace:
[  411.503092][ T8800]  <TASK>
[  411.503098][ T8800]  dump_stack_lvl+0x100/0x190
[  411.503124][ T8800]  should_fail_ex.cold+0x5/0xa
[  411.503147][ T8800]  _copy_from_user+0x2e/0xd0
[  411.503167][ T8800]  move_addr_to_kernel+0x65/0x170
[  411.503187][ T8800]  __sys_connect+0xb5/0x170
[  411.503206][ T8800]  ? __pfx___sys_connect+0x10/0x10
[  411.503225][ T8800]  ? __fget_files+0x21f/0x3d0
[  411.503254][ T8800]  ? __pfx_ksys_write+0x10/0x10
[  411.503276][ T8800]  __x64_sys_connect+0x72/0xb0
[  411.503295][ T8800]  ? lockdep_hardirqs_on+0x7d/0x110
[  411.503318][ T8800]  do_syscall_64+0x123/0x790
[  411.503338][ T8800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.503353][ T8800] RIP: 0033:0x7fd65459e159
[  411.503366][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.503380][ T8800] RSP: 002b:00007fd655401028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  411.503397][ T8800] RAX: ffffffffffffffda RBX: 00007fd654825fa0 RCX: 00007fd65459e159
[  411.503408][ T8800] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000006
[  411.503417][ T8800] RBP: 00007fd655401090 R08: 0000000000000000 R09: 0000000000000000
[  411.503427][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.503436][ T8800] R13: 00007fd654826038 R14: 00007fd654825fa0 R15: 00007ffd8ff51148
[  411.503458][ T8800]  </TASK>
[  411.676581][ T8626] input input16: usb_submit_urb failed
[  411.713737][   T31] audit: type=1400 audit(1791166293.060:952): avc:  denied  { append } for  pid=8783 comm="syz.3.721" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  411.715823][ T4957] input input16: usb_submit_urb failed
[  411.744704][ T4957] input input16: usb_submit_urb failed
[  411.831451][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.730'.
[  411.846337][   T31] audit: type=1400 audit(1791166293.200:953): avc:  denied  { mount } for  pid=8802 comm="syz.6.730" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  411.877666][   T31] audit: type=1400 audit(1791166293.210:954): avc:  denied  { mounton } for  pid=8802 comm="syz.6.730" path="/85/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  412.028877][ T5807] usb 4-1: USB disconnect, device number 30
[  412.233493][ T8812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.726'.
[  412.522257][   T31] audit: type=1400 audit(1791166293.870:955): avc:  denied  { write } for  pid=8805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.767692][ T8830] FAULT_INJECTION: forcing a failure.
[  412.767692][ T8830] name failslab, interval 1, probability 0, space 0, times 0
[  412.767730][ T8830] CPU: 0 UID: 0 PID: 8830 Comm: syz.3.735 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  412.767756][ T8830] Tainted: [L]=SOFTLOCKUP
[  412.767762][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  412.767779][ T8830] Call Trace:
[  412.767786][ T8830]  <TASK>
[  412.767794][ T8830]  dump_stack_lvl+0x100/0x190
[  412.767835][ T8830]  should_fail_ex.cold+0x5/0xa
[  412.767862][ T8830]  should_failslab+0xc2/0x120
[  412.767886][ T8830]  __kmalloc_noprof+0xfc/0x840
[  412.767907][ T8830]  ? sk_prot_alloc+0x10b/0x2a0
[  412.767929][ T8830]  sk_prot_alloc+0x10b/0x2a0
[  412.767948][ T8830]  sk_alloc+0x36/0xe80
[  412.767977][ T8830]  packet_create+0x127/0x8e0
[  412.768005][ T8830]  __sock_create+0x339/0x860
[  412.768035][ T8830]  __sys_socket+0x14d/0x260
[  412.768058][ T8830]  ? __pfx___sys_socket+0x10/0x10
[  412.768088][ T8830]  __x64_sys_socket+0x72/0xb0
[  412.768108][ T8830]  ? lockdep_hardirqs_on+0x7d/0x110
[  412.768128][ T8830]  do_syscall_64+0x123/0x790
[  412.768151][ T8830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.768170][ T8830] RIP: 0033:0x7feed7f9e159
[  412.768187][ T8830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.768205][ T8830] RSP: 002b:00007feed8e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  412.768225][ T8830] RAX: ffffffffffffffda RBX: 00007feed8225fa0 RCX: 00007feed7f9e159
[  412.768237][ T8830] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  412.768247][ T8830] RBP: 00007feed803506b R08: 0000000000000000 R09: 0000000000000000
[  412.768258][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.768268][ T8830] R13: 00007feed8226038 R14: 00007feed8225fa0 R15: 00007fff14678b38
[  412.768294][ T8830]  </TASK>
[  413.082901][ T8837] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  415.550727][ T5698] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  415.550746][ T5698] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  415.584797][ T5698] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  415.841886][ T8869] fido_id[8869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  416.234131][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  416.234151][   T31] audit: type=1400 audit(1791166297.540:970): avc:  denied  { write } for  pid=8832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.292543][ T8873] netlink: 80 bytes leftover after parsing attributes in process `syz.3.743'.
[  416.368207][ T8881] FAULT_INJECTION: forcing a failure.
[  416.368207][ T8881] name failslab, interval 1, probability 0, space 0, times 0
[  416.368229][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.5.744 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.368250][ T8881] Tainted: [L]=SOFTLOCKUP
[  416.368254][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  416.368261][ T8881] Call Trace:
[  416.368265][ T8881]  <TASK>
[  416.368269][ T8881]  dump_stack_lvl+0x100/0x190
[  416.368289][ T8881]  should_fail_ex.cold+0x5/0xa
[  416.368305][ T8881]  should_failslab+0xc2/0x120
[  416.368321][ T8881]  __kvmalloc_node_noprof+0x113/0x9b0
[  416.368337][ T8881]  ? proc_sys_call_handler+0x2c7/0x5a0
[  416.368352][ T8881]  proc_sys_call_handler+0x2c7/0x5a0
[  416.368364][ T8881]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  416.368380][ T8881]  vfs_write+0x6af/0x1050
[  416.368393][ T8881]  ? __pfx_proc_sys_write+0x10/0x10
[  416.368406][ T8881]  ? __pfx_vfs_write+0x10/0x10
[  416.368417][ T8881]  ? find_held_lock+0x2b/0x80
[  416.368443][ T8881]  ksys_write+0x12a/0x250
[  416.368456][ T8881]  ? __pfx_ksys_write+0x10/0x10
[  416.368473][ T8881]  do_syscall_64+0x123/0x790
[  416.368487][ T8881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.368498][ T8881] RIP: 0033:0x7fa544f9e159
[  416.368508][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.368518][ T8881] RSP: 002b:00007fa545ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  416.368529][ T8881] RAX: ffffffffffffffda RBX: 00007fa545225fa0 RCX: 00007fa544f9e159
[  416.368536][ T8881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  416.368542][ T8881] RBP: 00007fa545ead090 R08: 0000000000000000 R09: 0000000000000000
[  416.368549][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.368556][ T8881] R13: 00007fa545226038 R14: 00007fa545225fa0 R15: 00007ffe1159b568
[  416.368578][ T8881]  </TASK>
[  416.440367][   T31] audit: type=1400 audit(1791166297.790:971): avc:  denied  { ioctl } for  pid=8882 comm="syz.6.745" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  416.440419][   T31] audit: type=1400 audit(1791166297.790:972): avc:  denied  { set_context_mgr } for  pid=8882 comm="syz.6.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  416.451417][   T31] audit: type=1400 audit(1791166297.810:973): avc:  denied  { map } for  pid=8882 comm="syz.6.745" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  416.454112][   T31] audit: type=1400 audit(1791166297.810:974): avc:  denied  { call } for  pid=8882 comm="syz.6.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  416.454792][ T8883] binder: 8882:8883 ioctl 80047013 200000000100 returned -22
[  416.465725][ T8883] binder_alloc: 8882: binder_alloc_buf, no vma
[  416.636784][   T31] audit: type=1400 audit(1791166297.980:975): avc:  denied  { write } for  pid=8884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.751353][ T8888] binder_alloc: 8885: binder_alloc_buf, no vma
[  417.455054][   T30] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  417.624342][   T30] usb 6-1: Using ep0 maxpacket: 32
[  417.625682][   T30] usb 6-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff
[  417.626445][   T30] usb 6-1: config 10 has an invalid interface number: 251 but max is 0
[  417.626460][   T30] usb 6-1: config 10 has no interface number 0
[  417.626475][   T30] usb 6-1: config 10 interface 251 has no altsetting 0
[  417.630926][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.630942][   T30] usb 6-1: Product: syz
[  417.630951][   T30] usb 6-1: Manufacturer: syz
[  417.630959][   T30] usb 6-1: SerialNumber: syz
[  417.860180][   T30] gspca_main: sunplus-2.14.0 probing 052b:1803
[  417.862431][   T30] gspca_sunplus: reg_r err -71
[  417.862472][   T30] sunplus 6-1:10.251: probe with driver sunplus failed with error -71
[  417.870567][   T31] audit: type=1400 audit(1791166299.220:976): avc:  denied  { create } for  pid=8904 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  417.883057][   T30] usb 6-1: USB disconnect, device number 26
[  417.925198][   T31] audit: type=1400 audit(1791166299.280:977): avc:  denied  { ioctl } for  pid=8904 comm="syz.3.751" path="socket:[22239]" dev="sockfs" ino=22239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  418.050950][ T8905] smpboot: CPU 1 is now offline
[  419.219718][ T8908] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  419.221478][ T8878] ------------[ cut here ]------------
[  419.221486][ T8878] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
[  419.221494][ T8878] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.743/8878
[  419.250832][ T8878] Modules linked in:
[  419.254717][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: syz.3.743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.265460][ T8878] Tainted: [L]=SOFTLOCKUP
[  419.269763][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  419.279796][ T8878] RIP: 0010:update_rq_clock+0x40a/0xd20
[  419.285331][ T8878] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  419.305093][ T8878] RSP: 0018:ffffc90006cbdf88 EFLAGS: 00010046
[  419.311141][ T8878] RAX: 0000000000000000 RBX: ffff8880b853bf00 RCX: 0000000000000001
[  419.319112][ T8878] RDX: 0000000000000046 RSI: ffffffff8e36912e RDI: ffffffff8c623a80
[  419.327072][ T8878] RBP: ffffc90006cbe128 R08: 0000000000000001 R09: 0000000000000001
[  419.335044][ T8878] R10: ffff8880b843ca98 R11: 0000000000000000 R12: ffffffff91458f04
[  419.343037][ T8878] R13: ffff8880b853cde0 R14: ffff8880b853bf00 R15: 0000000000000001
[  419.351000][ T8878] FS:  00007feed8e076c0(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000
[  419.359925][ T8878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.366492][ T8878] CR2: 00007fd6545aedc0 CR3: 000000006113b000 CR4: 00000000003526f0
[  419.374492][ T8878] Call Trace:
[  419.377760][ T8878]  <TASK>
[  419.380681][ T8878]  __schedule+0x1c69/0x6920
[  419.385195][ T8878]  ? __pfx___schedule+0x10/0x10
[  419.390049][ T8878]  ? mark_held_locks+0x40/0x70
[  419.394839][ T8878]  preempt_schedule_irq+0x4e/0x90
[  419.399860][ T8878]  irqentry_exit+0x205/0xa10
[  419.404440][ T8878]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  419.409891][ T8878] RIP: 0010:lock_release+0x19e/0x310
[  419.415161][ T8878] Code: ff 65 0f c1 05 9b e9 a5 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 9d a2 a5 12 0f 85 4d 01 00 00 48 83 c4
[  419.435014][ T8878] RSP: 0018:ffffc90006cbe248 EFLAGS: 00000206
[  419.441063][ T8878] RAX: 0000000000000046 RBX: ffffffff8edec5a0 RCX: ffffc90006cbe254
[  419.449015][ T8878] RDX: 0000000000000000 RSI: ffffffff8e36912e RDI: ffffffff8c623a80
[  419.456975][ T8878] RBP: ffffffff81b9b54e R08: 0000000000000001 R09: 0000000000000007
[  419.464927][ T8878] R10: 0000000000000200 R11: 000000000001942d R12: ffff88807dbd8000
[  419.472900][ T8878] R13: ffffc90006cbe300 R14: 0000000000000202 R15: 0000000000000003
[  419.480855][ T8878]  ? unwind_next_frame+0x3be/0x2090
[  419.486058][ T8878]  unwind_next_frame+0x3c3/0x2090
[  419.491070][ T8878]  ? __kernel_write_iter+0x2ac/0x930
[  419.496343][ T8878]  ? unwind_next_frame+0x3be/0x2090
[  419.501529][ T8878]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  419.507668][ T8878]  arch_stack_walk+0x94/0xf0
[  419.512286][ T8878]  ? dump_user_range+0x3f9/0xad0
[  419.517216][ T8878]  stack_trace_save+0x8e/0xc0
[  419.521878][ T8878]  ? __pfx_stack_trace_save+0x10/0x10
[  419.527237][ T8878]  ? lock_acquire+0x1d1/0x380
[  419.531913][ T8878]  save_stack+0x162/0x1e0
[  419.536230][ T8878]  ? __pfx_save_stack+0x10/0x10
[  419.541066][ T8878]  ? post_alloc_hook+0xfd/0x120
[  419.545899][ T8878]  ? get_page_from_freelist+0x110d/0x35d0
[  419.551614][ T8878]  ? __alloc_frozen_pages_noprof+0x2eb/0x3300
[  419.557671][ T8878]  ? alloc_pages_mpol+0x201/0x550
[  419.562703][ T8878]  ? folio_alloc_mpol_noprof+0x36/0x260
[  419.568231][ T8878]  ? shmem_alloc_folio+0x135/0x160
[  419.573331][ T8878]  ? shmem_alloc_and_add_folio+0x371/0xd40
[  419.579128][ T8878]  ? shmem_get_folio_gfp+0x75b/0x1980
[  419.584490][ T8878]  ? shmem_write_begin+0x1a4/0x420
[  419.589668][ T8878]  ? generic_perform_write+0x292/0xa40
[  419.595114][ T8878]  ? shmem_file_write_iter+0x10e/0x140
[  419.600560][ T8878]  ? __kernel_write_iter+0x2ac/0x930
[  419.605831][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.610759][ T8878]  __set_page_owner+0x8c/0x540
[  419.615528][ T8878]  ? __pfx___set_page_owner+0x10/0x10
[  419.620891][ T8878]  ? bad_range+0x257/0x3f0
[  419.625296][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  419.630477][ T8878]  ? get_page_from_freelist+0x10e6/0x35d0
[  419.636182][ T8878]  post_alloc_hook+0xfd/0x120
[  419.640846][ T8878]  get_page_from_freelist+0x110d/0x35d0
[  419.646390][ T8878]  ? __pfx_get_page_from_freelist+0x10/0x10
[  419.652268][ T8878]  ? prepare_alloc_pages+0x1f0/0x5b0
[  419.657544][ T8878]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  419.663430][ T8878]  ? page_table_check_set+0x11d/0x580
[  419.668797][ T8878]  ? find_held_lock+0x2b/0x80
[  419.673521][ T8878]  ? page_table_check_set+0x30f/0x580
[  419.678880][ T8878]  ? page_table_check_set+0x30f/0x580
[  419.684253][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.689196][ T8878]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  419.695517][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.700449][ T8878]  ? lock_acquire+0x1d1/0x380
[  419.705121][ T8878]  ? do_raw_spin_lock+0x128/0x260
[  419.710138][ T8878]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  419.715502][ T8878]  ? find_held_lock+0x2b/0x80
[  419.720188][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.725113][ T8878]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  419.730998][ T8878]  ? policy_nodemask+0xed/0x4f0
[  419.736022][ T8878]  alloc_pages_mpol+0x201/0x550
[  419.740869][ T8878]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  419.746236][ T8878]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  419.752127][ T8878]  folio_alloc_mpol_noprof+0x36/0x260
[  419.757482][ T8878]  shmem_alloc_folio+0x135/0x160
[  419.762414][ T8878]  shmem_alloc_and_add_folio+0x371/0xd40
[  419.768065][ T8878]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  419.774213][ T8878]  ? shmem_allowable_huge_orders+0x1d7/0x470
[  419.780190][ T8878]  shmem_get_folio_gfp+0x75b/0x1980
[  419.785375][ T8878]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  419.790992][ T8878]  ? vm_normal_page+0x1d1/0x380
[  419.795833][ T8878]  ? __pfx_vm_normal_page+0x10/0x10
[  419.801022][ T8878]  shmem_write_begin+0x1a4/0x420
[  419.805945][ T8878]  ? __pfx_shmem_write_begin+0x10/0x10
[  419.811389][ T8878]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  419.818235][ T8878]  generic_perform_write+0x292/0xa40
[  419.823598][ T8878]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  419.829400][ T8878]  ? __pfx_generic_perform_write+0x10/0x10
[  419.835212][ T8878]  ? file_update_time_flags+0x38c/0x520
[  419.840746][ T8878]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  419.846537][ T8878]  shmem_file_write_iter+0x10e/0x140
[  419.851810][ T8878]  __kernel_write_iter+0x2ac/0x930
[  419.856915][ T8878]  ? __pfx___kernel_write_iter+0x10/0x10
[  419.862552][ T8878]  ? __up_read+0x333/0x980
[  419.867065][ T8878]  ? dump_user_range+0x65e/0xad0
[  419.871995][ T8878]  dump_user_range+0x3f9/0xad0
[  419.877186][ T8878]  ? __pfx_dump_user_range+0x10/0x10
[  419.882464][ T8878]  ? __pfx_writenote+0x10/0x10
[  419.887214][ T8878]  ? elf_core_dump+0x1f25/0x3d20
[  419.892171][ T8878]  elf_core_dump+0x2d68/0x3d20
[  419.896970][ T8878]  ? __pfx_elf_core_dump+0x10/0x10
[  419.902084][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  419.907269][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  419.913153][ T8878]  ? trace_sched_exit_tp+0x120/0x160
[  419.918440][ T8878]  ? 0xffffffffff600000
[  419.922603][ T8878]  ? lock_acquire+0x1d1/0x380
[  419.927264][ T8878]  ? get_signal+0x1f2a/0x21e0
[  419.931934][ T8878]  ? vfs_coredump+0x281a/0x54a0
[  419.936769][ T8878]  vfs_coredump+0x281a/0x54a0
[  419.941441][ T8878]  ? __pfx_vfs_coredump+0x10/0x10
[  419.946451][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.951379][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.956305][ T8878]  ? lock_acquire+0x1d1/0x380
[  419.960967][ T8878]  ? unwind_next_frame+0xbd/0x2090
[  419.966077][ T8878]  ? bpf_ksym_find+0x128/0x1c0
[  419.970852][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  419.975787][ T8878]  ? do_raw_spin_unlock+0x145/0x1e0
[  419.981012][ T8878]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  419.986805][ T8878]  ? rcu_is_watching+0x13/0xc0
[  419.991558][ T8878]  ? trace_hrtimer_start+0x77/0x220
[  419.996761][ T8878]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[  420.003003][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  420.008895][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  420.014092][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  420.019985][ T8878]  ? rcu_is_watching+0x13/0xc0
[  420.024739][ T8878]  ? trace_sched_exit_tp+0x120/0x160
[  420.030011][ T8878]  ? __schedule+0x126b/0x6920
[  420.034681][ T8878]  ? rcu_is_watching+0x13/0xc0
[  420.039447][ T8878]  ? __pfx___schedule+0x10/0x10
[  420.044283][ T8878]  ? proc_coredump_connector+0x2d3/0x4f0
[  420.049901][ T8878]  ? __pfx_proc_coredump_connector+0x10/0x10
[  420.055876][ T8878]  get_signal+0x1f2a/0x21e0
[  420.060374][ T8878]  ? __pfx_get_signal+0x10/0x10
[  420.065219][ T8878]  arch_do_signal_or_restart+0x91/0x7e0
[  420.070769][ T8878]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  420.076927][ T8878]  irqentry_exit+0x402/0xa10
[  420.081506][ T8878]  asm_exc_page_fault+0x26/0x30
[  420.086352][ T8878] RIP: 0033:0x7feed7f9e161
[  420.090749][ T8878] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  420.110339][ T8878] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  420.116396][ T8878] RAX: 0000000000000000 RBX: 00007feed8226090 RCX: 00007feed7f9e159
[  420.124350][ T8878] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  420.132302][ T8878] RBP: 00007feed803506b R08: 0000000000000000 R09: 0000000000000000
[  420.140255][ T8878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  420.148222][ T8878] R13: 00007feed8226128 R14: 00007feed8226090 R15: 00007fff14678b38
[  420.156189][ T8878]  </TASK>
[  420.159195][ T8878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  420.166463][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: syz.3.743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.177209][ T8878] Tainted: [L]=SOFTLOCKUP
[  420.181512][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  420.191546][ T8878] Call Trace:
[  420.194809][ T8878]  <TASK>
[  420.197722][ T8878]  dump_stack_lvl+0x100/0x190
[  420.202393][ T8878]  vpanic+0x553/0x970
[  420.206358][ T8878]  ? __pfx_vpanic+0x10/0x10
[  420.210850][ T8878]  panic+0xd1/0xe0
[  420.214553][ T8878]  ? __pfx_panic+0x10/0x10
[  420.218963][ T8878]  check_panic_on_warn.cold+0x19/0x34
[  420.224321][ T8878]  ? update_rq_clock+0x40a/0xd20
[  420.229245][ T8878]  __warn.cold+0x191/0x318
[  420.233647][ T8878]  __report_bug+0x30f/0x440
[  420.238134][ T8878]  ? update_rq_clock+0x40a/0xd20
[  420.243060][ T8878]  ? __pfx___report_bug+0x10/0x10
[  420.248068][ T8878]  ? __css_rstat_updated+0x1ce/0x590
[  420.253346][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.258448][ T8878]  ? update_rq_clock+0x40a/0xd20
[  420.263372][ T8878]  report_bug+0xb3/0x220
[  420.267608][ T8878]  ? update_rq_clock+0x40a/0xd20
[  420.272550][ T8878]  handle_bug+0x16a/0x2a0
[  420.276867][ T8878]  exc_invalid_op+0x17/0x50
[  420.281358][ T8878]  asm_exc_invalid_op+0x1a/0x20
[  420.286209][ T8878] RIP: 0010:update_rq_clock+0x40a/0xd20
[  420.291743][ T8878] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[  420.311332][ T8878] RSP: 0018:ffffc90006cbdf88 EFLAGS: 00010046
[  420.317386][ T8878] RAX: 0000000000000000 RBX: ffff8880b853bf00 RCX: 0000000000000001
[  420.325340][ T8878] RDX: 0000000000000046 RSI: ffffffff8e36912e RDI: ffffffff8c623a80
[  420.333304][ T8878] RBP: ffffc90006cbe128 R08: 0000000000000001 R09: 0000000000000001
[  420.341259][ T8878] R10: ffff8880b843ca98 R11: 0000000000000000 R12: ffffffff91458f04
[  420.349214][ T8878] R13: ffff8880b853cde0 R14: ffff8880b853bf00 R15: 0000000000000001
[  420.357178][ T8878]  ? update_rq_clock+0x9c/0xd20
[  420.362024][ T8878]  __schedule+0x1c69/0x6920
[  420.366525][ T8878]  ? __pfx___schedule+0x10/0x10
[  420.371363][ T8878]  ? mark_held_locks+0x40/0x70
[  420.376117][ T8878]  preempt_schedule_irq+0x4e/0x90
[  420.381137][ T8878]  irqentry_exit+0x205/0xa10
[  420.385715][ T8878]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  420.391172][ T8878] RIP: 0010:lock_release+0x19e/0x310
[  420.396449][ T8878] Code: ff 65 0f c1 05 9b e9 a5 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 9d a2 a5 12 0f 85 4d 01 00 00 48 83 c4
[  420.416052][ T8878] RSP: 0018:ffffc90006cbe248 EFLAGS: 00000206
[  420.422107][ T8878] RAX: 0000000000000046 RBX: ffffffff8edec5a0 RCX: ffffc90006cbe254
[  420.430072][ T8878] RDX: 0000000000000000 RSI: ffffffff8e36912e RDI: ffffffff8c623a80
[  420.438025][ T8878] RBP: ffffffff81b9b54e R08: 0000000000000001 R09: 0000000000000007
[  420.445982][ T8878] R10: 0000000000000200 R11: 000000000001942d R12: ffff88807dbd8000
[  420.453959][ T8878] R13: ffffc90006cbe300 R14: 0000000000000202 R15: 0000000000000003
[  420.461915][ T8878]  ? unwind_next_frame+0x3be/0x2090
[  420.467118][ T8878]  unwind_next_frame+0x3c3/0x2090
[  420.472135][ T8878]  ? __kernel_write_iter+0x2ac/0x930
[  420.477418][ T8878]  ? unwind_next_frame+0x3be/0x2090
[  420.482615][ T8878]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  420.488760][ T8878]  arch_stack_walk+0x94/0xf0
[  420.493348][ T8878]  ? dump_user_range+0x3f9/0xad0
[  420.498283][ T8878]  stack_trace_save+0x8e/0xc0
[  420.502946][ T8878]  ? __pfx_stack_trace_save+0x10/0x10
[  420.508310][ T8878]  ? lock_acquire+0x1d1/0x380
[  420.512975][ T8878]  save_stack+0x162/0x1e0
[  420.517297][ T8878]  ? __pfx_save_stack+0x10/0x10
[  420.522141][ T8878]  ? post_alloc_hook+0xfd/0x120
[  420.526986][ T8878]  ? get_page_from_freelist+0x110d/0x35d0
[  420.532705][ T8878]  ? __alloc_frozen_pages_noprof+0x2eb/0x3300
[  420.538760][ T8878]  ? alloc_pages_mpol+0x201/0x550
[  420.543775][ T8878]  ? folio_alloc_mpol_noprof+0x36/0x260
[  420.549304][ T8878]  ? shmem_alloc_folio+0x135/0x160
[  420.554408][ T8878]  ? shmem_alloc_and_add_folio+0x371/0xd40
[  420.560213][ T8878]  ? shmem_get_folio_gfp+0x75b/0x1980
[  420.565573][ T8878]  ? shmem_write_begin+0x1a4/0x420
[  420.570669][ T8878]  ? generic_perform_write+0x292/0xa40
[  420.576205][ T8878]  ? shmem_file_write_iter+0x10e/0x140
[  420.581649][ T8878]  ? __kernel_write_iter+0x2ac/0x930
[  420.586925][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.591855][ T8878]  __set_page_owner+0x8c/0x540
[  420.596612][ T8878]  ? __pfx___set_page_owner+0x10/0x10
[  420.601973][ T8878]  ? bad_range+0x257/0x3f0
[  420.606379][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  420.611566][ T8878]  ? get_page_from_freelist+0x10e6/0x35d0
[  420.617272][ T8878]  post_alloc_hook+0xfd/0x120
[  420.621953][ T8878]  get_page_from_freelist+0x110d/0x35d0
[  420.627502][ T8878]  ? __pfx_get_page_from_freelist+0x10/0x10
[  420.633384][ T8878]  ? prepare_alloc_pages+0x1f0/0x5b0
[  420.638662][ T8878]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  420.644570][ T8878]  ? page_table_check_set+0x11d/0x580
[  420.649932][ T8878]  ? find_held_lock+0x2b/0x80
[  420.654613][ T8878]  ? page_table_check_set+0x30f/0x580
[  420.659975][ T8878]  ? page_table_check_set+0x30f/0x580
[  420.665339][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.670273][ T8878]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  420.676587][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.681513][ T8878]  ? lock_acquire+0x1d1/0x380
[  420.686183][ T8878]  ? do_raw_spin_lock+0x128/0x260
[  420.691210][ T8878]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  420.696574][ T8878]  ? find_held_lock+0x2b/0x80
[  420.701259][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.706182][ T8878]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  420.712066][ T8878]  ? policy_nodemask+0xed/0x4f0
[  420.716910][ T8878]  alloc_pages_mpol+0x201/0x550
[  420.721767][ T8878]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  420.727144][ T8878]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  420.733034][ T8878]  folio_alloc_mpol_noprof+0x36/0x260
[  420.738390][ T8878]  shmem_alloc_folio+0x135/0x160
[  420.743338][ T8878]  shmem_alloc_and_add_folio+0x371/0xd40
[  420.748968][ T8878]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  420.755112][ T8878]  ? shmem_allowable_huge_orders+0x1d7/0x470
[  420.761104][ T8878]  shmem_get_folio_gfp+0x75b/0x1980
[  420.766311][ T8878]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  420.772026][ T8878]  ? vm_normal_page+0x1d1/0x380
[  420.776871][ T8878]  ? __pfx_vm_normal_page+0x10/0x10
[  420.782063][ T8878]  shmem_write_begin+0x1a4/0x420
[  420.786991][ T8878]  ? __pfx_shmem_write_begin+0x10/0x10
[  420.792439][ T8878]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  420.799278][ T8878]  generic_perform_write+0x292/0xa40
[  420.804550][ T8878]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  420.810365][ T8878]  ? __pfx_generic_perform_write+0x10/0x10
[  420.816173][ T8878]  ? file_update_time_flags+0x38c/0x520
[  420.821710][ T8878]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  420.827501][ T8878]  shmem_file_write_iter+0x10e/0x140
[  420.832778][ T8878]  __kernel_write_iter+0x2ac/0x930
[  420.837896][ T8878]  ? __pfx___kernel_write_iter+0x10/0x10
[  420.843518][ T8878]  ? __up_read+0x333/0x980
[  420.847927][ T8878]  ? dump_user_range+0x65e/0xad0
[  420.852853][ T8878]  dump_user_range+0x3f9/0xad0
[  420.857605][ T8878]  ? __pfx_dump_user_range+0x10/0x10
[  420.862889][ T8878]  ? __pfx_writenote+0x10/0x10
[  420.867638][ T8878]  ? elf_core_dump+0x1f25/0x3d20
[  420.872574][ T8878]  elf_core_dump+0x2d68/0x3d20
[  420.877337][ T8878]  ? __pfx_elf_core_dump+0x10/0x10
[  420.882448][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  420.887633][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  420.893517][ T8878]  ? trace_sched_exit_tp+0x120/0x160
[  420.898791][ T8878]  ? 0xffffffffff600000
[  420.902952][ T8878]  ? lock_acquire+0x1d1/0x380
[  420.907614][ T8878]  ? get_signal+0x1f2a/0x21e0
[  420.912284][ T8878]  ? vfs_coredump+0x281a/0x54a0
[  420.917120][ T8878]  vfs_coredump+0x281a/0x54a0
[  420.921805][ T8878]  ? __pfx_vfs_coredump+0x10/0x10
[  420.926817][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.931745][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.936675][ T8878]  ? lock_acquire+0x1d1/0x380
[  420.941337][ T8878]  ? unwind_next_frame+0xbd/0x2090
[  420.946472][ T8878]  ? bpf_ksym_find+0x128/0x1c0
[  420.951226][ T8878]  ? __lock_acquire+0x5c0/0x1f40
[  420.956157][ T8878]  ? do_raw_spin_unlock+0x145/0x1e0
[  420.961358][ T8878]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  420.967149][ T8878]  ? rcu_is_watching+0x13/0xc0
[  420.971903][ T8878]  ? trace_hrtimer_start+0x77/0x220
[  420.977099][ T8878]  ? hrtimer_start_range_ns_common+0x778/0x16f0
[  420.983360][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  420.989250][ T8878]  ? lockdep_hardirqs_on+0x7d/0x110
[  420.994441][ T8878]  ? finish_task_switch.isra.0+0x2c2/0x10d0
[  421.000322][ T8878]  ? rcu_is_watching+0x13/0xc0
[  421.005076][ T8878]  ? trace_sched_exit_tp+0x120/0x160
[  421.010349][ T8878]  ? __schedule+0x126b/0x6920
[  421.015017][ T8878]  ? rcu_is_watching+0x13/0xc0
[  421.019793][ T8878]  ? __pfx___schedule+0x10/0x10
[  421.024630][ T8878]  ? proc_coredump_connector+0x2d3/0x4f0
[  421.030249][ T8878]  ? __pfx_proc_coredump_connector+0x10/0x10
[  421.036251][ T8878]  get_signal+0x1f2a/0x21e0
[  421.040750][ T8878]  ? __pfx_get_signal+0x10/0x10
[  421.045594][ T8878]  arch_do_signal_or_restart+0x91/0x7e0
[  421.051136][ T8878]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  421.057296][ T8878]  irqentry_exit+0x402/0xa10
[  421.061893][ T8878]  asm_exc_page_fault+0x26/0x30
[  421.066729][ T8878] RIP: 0033:0x7feed7f9e161
[  421.071127][ T8878] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  421.090726][ T8878] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  421.096797][ T8878] RAX: 0000000000000000 RBX: 00007feed8226090 RCX: 00007feed7f9e159
[  421.104751][ T8878] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  421.112708][ T8878] RBP: 00007feed803506b R08: 0000000000000000 R09: 0000000000000000
[  421.120665][ T8878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  421.128619][ T8878] R13: 00007feed8226128 R14: 00007feed8226090 R15: 00007fff14678b38
[  421.136591][ T8878]  </TASK>
[  421.139755][ T8878] Kernel Offset: disabled
[  421.144071][ T8878] Rebooting in 86400 seconds..