last executing test programs:

9.929370755s ago: executing program 2 (id=337):
add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x55, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000))
syz_open_dev$ttys(0xc, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18)
connect$can_j1939(r7, &(0x7f0000000640)={0x1d, r8, 0x0, {}, 0x1}, 0x18)
sendfile(r7, r6, 0x0, 0x1000000000000a)

8.95738936s ago: executing program 1 (id=341):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001a80), 0x802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@broadcast}, {@private=0xa010102}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0xd, 0x11, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x20, &(0x7f0000001a00)={&(0x7f0000000700)=""/235, 0xeb, 0x0, &(0x7f0000001980)=""/114, 0x72}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x5, 0x9, 0xa, 0x2, 0x10}], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x49, &(0x7f0000000580)=""/73, 0x40f00, 0x5c, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x4, 0x8, 0x8001, 0x6}, 0x10, 0x1de2b, 0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x1, 0x1, 0xbb85b93834bf507a}, {0x4, 0x1, 0x9}], 0x10, 0x7}, 0x94)
read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x2010, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x11, 0x100, &(0x7f0000000040)="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"})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
fcntl$dupfd(r3, 0x406, r3)
r4 = socket$rds(0x15, 0x5, 0x0)
inotify_init()
recvfrom(r4, 0x0, 0x0, 0x2020, 0x0, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4100, 0x322})
dup(r0)

8.52296567s ago: executing program 2 (id=343):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="092201000000a4"], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x3, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xff7ffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0xfffffffa, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xd, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0xfff, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x0, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x5, 0x0, 0x2, 0x0, 0xc, 0x3, 0xb, 0xd, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000002, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000009, 0x3, 0x83, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x0, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2850, 0x100, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20108, 0x8a5, 0x8a, 0x46, 0x409, 0x6, 0x4, 0x4, 0x3, 0x4, 0xffffffff, 0x7fff, 0xffff8a32, 0xfffffff8, 0xf, 0x5, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x9]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3)
write$input_event(r2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]})
rt_sigpending(0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi5\x00', 0x101000, 0x0)
ptrace$setopts(0x4200, r0, 0xfff, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x6b462c75, 0x195142)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@delqdisc={0x34, 0x25, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0x0, 0x1}, {0x7, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0xa, 0xb}}}, 0xfffffffffffffd7c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c480)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r7, 0x29, 0x5, 0x9, 0x200, 0x0, @private2, @mcast2, 0x10, 0x1, 0x4, 0xffff}})
close(0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

8.438796919s ago: executing program 1 (id=344):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x4000000000000, 0x0, 0x0)
fsmount(r1, 0x1, 0xe)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

8.357446095s ago: executing program 1 (id=346):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000500000008"], 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019080)={0x0, <r0=>0x0})
prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0x3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth0_to_team\x00', {0x4}, 0x7})

7.944820496s ago: executing program 3 (id=348):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0xfffffffe}}], 0x18, 0x84}, 0x3ffd98)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000f, 0x4010, r2, 0x841c1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

7.18760116s ago: executing program 4 (id=350):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe3dd044183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004ac1414aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4d43ad536c3ead7ecc4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e657d3ca40dcafb3bfbb37423ae8ffdc4ea9f64a6594bf2c3f7b76c81b92525c50e59300aa2ab958d6b1ffd656b7dd1eebbfc6441b800e7a0377b8fafcd2c7cc5cb8674aac57676cc96cabf92d356c8ed183430e3698919935602bf2ad8e0e85cf6e40a86319fae1029657f6ffd4a8ce88980d3d9daef15a657b15de657d35463966a87f5ca546f9c070075761f0808cdf8eaa9dc067e9a2b30c4f0a3984999a8ed973c94c680f20147040008000001f03291972cf310546effe1f556d9d152d80955de9d24d23fb9bfa475a0e616af1f1f9b6cd0732715dc32d1d89417bd000086dde044262c7deb71f3ad2075f421a376502d21fd380f95c20320016eeb637396877d86bdbfa381a12be1f2a916d96a47f188305bbc11e07e3f513e8e101d800aa43d698e1ddcd56577d52b69281987db802118b7053664a527c42a860918ce097b09b7827124778233f8dad66f080088be00000003100125040100000000000005080022eb0000000321803a2302"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x126}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, 0x0, 0x20000011)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
io_uring_setup(0x6698, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000400)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

7.148422213s ago: executing program 0 (id=351):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x7, {<r8=>0xffffffffffffffff}, {<r9=>0xffffffffffffffff}, 0x6, 0x3})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)={0x1edc, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x1ec1, 0x1, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xe, 0x0, 0x0, @pid=r8}, @nested={0x1b3a, 0xe4, 0x0, 0x1, [@generic="df5cea749af3894f8a56b79cf7f27c85a044ec830a294998a9bcb22260ab24e899a652e5952ec396ce4a499bc13a21abcea474cb324c37876090292ba3561dd5ff1d5407cf472497ad7d50e3f2995678df4a0a7544f79a561ce1c58ce2673ee49b127d60581a42ed76c5ead50538a0f5dd9ad7c76ca230220e13207ca078b032b6d34e40d2af94ed112a94bbc58085d8111e7441f2bc0e1597b7bb0250d2751235483cc6ef4a9c328fb5f3567de02b55d4d1c51e87dac81064e698eff301fce4507c5c56db4b63b4723284", @nested={0x1664, 0x59, 0x0, 0x1, [@nested={0x4, 0x56}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x123}, @generic="9c39b839371476a8a3d6c16eb7ce8482ff8c6f2ddb16602c19d4215a9c614dd3406f8467bbb48faacbe308c1049646fe5239a6dc9631b1e952614cda770cc146401bdefb69a63c010683e7dfa5133b9f0496e20b7d62834ce42e135673fa6403785cca68962f32ad404aeab51280be6eb60fe531331f91952929c6689ca6c313f7d2be193596db", @generic="dabdf75c3187352036bd348a51f5cb71f88b7463c4f028483dbc6faddb71005707574c2f59088512df218bd7cc8688ed1d88addbd962170037725544d7e21ec22a3460bc91dcc23f1d9f23feb0101307ff50f2f5a6fb84920768fb5f1bbc6cae5449a07f20ce98af543dd26cb079719c3c403a28e45e6fbcd441982fa6694d7481af016cb41c17bb10c602e323fe342e8d79fc3faa853695a3952cd195c8919030", @nested={0x4, 0x4e}, @nested={0x4, 0xfb}, @typed={0x6, 0x81, 0x0, 0x0, @binary="9fe0"}, @nested={0x1518, 0x102, 0x0, 0x1, [@nested={0x133b, 0x3a, 0x0, 0x1, [@generic="414709ac385949b5565eff33d57afd07076d8595ffdaf6316ebfb9079f1d4764dd561a71775e3c8b1c614430c56bc3f5849315851ccfe60266245511aaf17f0e12c4ab6ec6b6c912d6a77c1846fa95458de379d40440efa5f18ea66ce607fcb0cec1b8455837db1beef9e9c838dd8ca91dd4a935614c4630905323d91f9dcef8a3d9ee5639113eda126eb54eb6ec0617dfea5061b91498b1c8f5374c3e40ad88804802acc86d1b4e5ee8a1f48a06ef3e075ee65c8df7584a4e61fda15d6f9a2ebc5ec7a99cc2bd35af69bad6e29529a25253619840548ea84b9c6b769705c0f236bc7ddf7a11e40d8a3403", @generic="108e43f7bfa61bcd85672377da162383a35e675709148626999e2310af2ecffb311f803776b4324f974a1895fa8300bda58eced5fffc9ef2dda3c4396b9f9149055d4d9b465cef9e84a14b73685f51b7b06c27a28873062b9f81963555859545fd45c4682f22c46b09f87e7b6984e4322462e91a735bdfd5f7815827eb74ff6ed30ecea033862da29dd42e3c0b0a0163dbf18969c0ebbc6d3bc41c3b6250d60990cedc0e5f72621a4d42de7083a50b94d0e27e47f38ef1764d71ffb044e41cd54c4bc6d60e48", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0xd}, @generic="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", @nested={0x100, 0x62, 0x0, 0x1, [@typed={0x14, 0x80, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="902ecc33581d12c8", @nested={0x4, 0x9f}, @generic="8ed33012150d30b60b209a27029147cf5da1d7253428bc3302197251edcae52fb379a8970421392564f7a6198bdef6ed201c979c72983706c64440b4299c485e81c085f4789c0eda828d16561287d9d89de327d901b3f827321d982e541ff6650886392eee805b012d07b2c878647937dc9703751f92db1cdc6a94bf77b1bd1da0e4cc0de3404e80f169cb5931a65b7d4c3831d0c37fde1efd63acf23ba1d5bdc0c43a9f3403850d8b94195f6bfc792a13ee8f2adb000a16e8b38a4b61abe77b8065c3", @nested={0x4, 0x10d}, @generic="8f", @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}}]}, @generic="88d672f188c026b94b3ca4c03d235585f696e943815a32853db32c266be21bc3ff1fc5ce5fe685c7a2532baafa0f41d6f15c4f9cfc796e852ec004e7a29fd181fa53b1486c35f1c007b5512ef67c993b954d3f07cd4d84d24593274f9214b08ee9a9cbaccf98f6b8fd72cc4fab435dfc358d"]}, @nested={0x1ca, 0x42, 0x0, 0x1, [@typed={0x14, 0x120, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x5d, 0x0, 0x0, @uid=r9}, @generic="12f3e8a219d17177a88da05793678cdb3d1925143ba6f46488bbd4b46e16f0212682dfa5768a2e80d5c6c46956537315a99f9151c1be17b6637e2d8bf830ba66bf9a10a492e9e0ea7e9ffd1b4f96c4b02bbd79dbe5e300c23f2d5f2c1c07e593ef64f77ccca3d7eeb32ab48291f28ac8cb07da8280f444f3002e9147072c4c703b130e9b2a3d0ffb4d9077cf540a1e0b2fcf888890495e7613fb7da8a3e84218a00c2751189ce934cb94f62eaa85173e00623e9b84cce82a91c7cd917709f203ad93cbabe68aaae716e8bdf0427d", @nested={0x4, 0x19}, @nested={0x4, 0x4c}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r8}, @generic="eb2acda38d8fe10ad1b791b2365cce9287cc111ed272cde84966f9134d1221382bfd65e04ceb42860cef7eecab0e2cfce9f300e36b86840be03c04035d14efbcdde4dc6767083d90bd39d94ee74eadd0970b9e3d55c6460d09fb1046af666c1400903452a2f9bf6af3762e0f9d79a96970e8043ae823201db3908f0fd82cbe85411826e70b65a182072864e58a7f29f625021a76b398b2b48ec3d8fd62a12605bf6761ca0df733a71f90e722bc7a6ed7ee8fff9b8c95dd2a454a713e093fbd3aef279edf064ec9c6dd44c2e9"]}, @typed={0x8, 0x143, 0x0, 0x0, @u32=0xe2}, @typed={0x4, 0x8e}]}]}, @generic="17bb0919cdc6e37abf588afe6af00caeb90ddfc4033a4f4da8ed114557ec5bb3d876539233a7a6fc9ab91c2321e114d41ae293344ff7e6e6444ea2ad69101f9567791d0627e949e6e108607623a0c4381d38d86732dfaea98a655a566fcfb25862b7cdd2dad2fe50e6b6933d04203ab74a138d410d7d8ffd5f6b625e3737dcd1e882ca4f08b4ec3f60e7d972c9ded7b4ec", @nested={0x168, 0x161, 0x0, 0x1, [@typed={0x4, 0xa7}, @nested={0x4, 0x115}, @generic="59f7e2cfb6c5e2d576e8432110adca52822b5bd994bb391377dc273026512f79f4f9c89ed898d5625c18aadcae52ea0c356024b4744a43fc203789d842e2d9befef3d1918b25d709fb7de23e02380c79ca93ba8faa37f4513bcab71844c799d097bfb131288db47685010541d23587922580f6f0f195e4f4b615808cd410f02c1787255a709e8278c267fc3731d0f961236cd8c72f7a98ad3c97bc1273ad49a40639379896f7366d6e43b5544f83485cb788f604d28f1fec5824cf9d7049722bf701f54883f407823a1c7e7ee605b7b791b840bceeb00a0da11c8e3dda5de894b44c2cf5d8ec5ef345", @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@private1}, @generic="6ce6d46af7c1d195ae0ea1980bc9b45a4d687ac57a7e0a03b4412761b4bd4ded047a6689ca9669fcd2421e4675a5a70030e5a815e059e85ed8457f16de0a3ccbe74ce0e65a4a17e06fceb5ff1a69727184f9114502c2ddc562b4dd7e58271d"]}, @nested={0x179, 0x40, 0x0, 0x1, [@nested={0x4, 0x106}, @generic="bd279b6334da68d206129fba507683420cf6ac962a68a3c6cabfe570b036862d82a503471c60dd69deea84b27b037a37d1cc37470ff745e551a3d6fb71a99203fc3d948db4a3e3aadd49e3b22000cacc382966954dd916c96365873cd2320365c235a76520a1d8d62468cd10348a65741fe2be5fb85510651310c4c626241cf8a9930d601ed5039b7844f67dbbde59b3593ee79d71", @generic="41d45ed6bb8c31956a3416b9849f56976300d553bcf614a115a5275fce583e3eb7", @generic="3f4289cd4af4f2c09638f421eb16f50a2ba5006cee842cf957be0fb087fdc6664b6cd0602c155cca7bdce0fcc8a4b23c4bf7fe8e05f27059ff128e47278e3f1e5dde75ab065eb1214dd937382aa3b6306e239b88e8a834d1c4588edc1d4a0ec0f2da4ec525e5b4aa8afcf92feba1c8e1ed927489658e1fcedad7f088a0d23bc07d331bbfff6b9cce07c0296e72051a5cfc76eb", @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @nested={0x4, 0x108}, @typed={0x8, 0x10b, 0x0, 0x0, @str='-@)\x00'}, @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x10, 0xee, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x88}, @nested={0x4, 0x15b}]}, @generic="1627af018e61b88054a4f812d84e814a96f701658e1888c04df113cec1b6d1821cabd507e37799148762c5", @generic="5e07cb59f464acacbcdcf2f6eabf89dd25b02360813ca3531a53078e96ca63ba9121897bfcb08502a5c4b38f80b1aab2d9f4fdb9dc76f2f4b7389669aebcd0febb0cb1047cbe6bea9ca73c63d6838d4245b44753f20402"]}, @typed={0x8, 0xab, 0x0, 0x0, @fd}, @typed={0x8, 0x43, 0x0, 0x0, @pid=r8}, @generic="464e568e802afcecd93903b32aaf6147f1d56f910d23286fa459b096bcded53f4a3345f0dd9cdf75a9117fa467cbbfb71f0d4b504e6c57b4f36361b7b7b431b3f79d852accf69fcd4d42860c4a4a9b80ae157e4201d4bf53d2bd5df331bb606127f0dd4ed31d860b4b8db4c3ce1674c7c54013b2dfbf4171c7a8ea631adde3f7a6e1f367623879e1ce2b40e7659cd8ba5fdc1f16ea784ec2620352c443fec894591bb69fc4c6719e0f45c725cfbe84a5a81793a6a1b0f1f02af1ade73fc05a3ad7bb640549465220cd9561e58a9cccc660beed4f74bdfaf08e179563e912d46ad3f466b0d07aaeeea7a84f0d87a09f7c997777c9b6b65ef451c1a5ab5c", @nested={0x262, 0x10a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @generic="1a2d", @nested={0x187, 0xc8, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @nested={0x4, 0xfb}, @nested={0x4, 0x5b}, @generic="a1be9ccac64063e881e8f0656853f622040f8d97370767fa44c1ad562e4a5c0e513b6cf03ed4b85facf0f195018309c233137de0b96798600cacab46de2195107da29ee83f3efb1e6897c62847dd423a9e578ac71dfe48439036a6af54632172390b1e8f11b920f43be488cf9ed5b431ca7fa676"]}, @typed={0x8, 0x78, 0x0, 0x0, @str='[@(\x00'}, @typed={0x8, 0xab, 0x0, 0x0, @u32=0x8}, @nested={0xb1, 0x13d, 0x0, 0x1, [@nested={0x4, 0x5e}, @generic="871455c88217b049d302fba31b5cb27de3e0ffcd838de742fabbc4f400acabfc20733441b99e403734e0b01ef1149e9b1a82a5a77531be277685076bad627768c24f928bda8158657d7d7f63531572dbf3ecf2e647a5308888901834865d08589efd176b21523e6a1471579a1b572c84e892632548242001a5108033fcc98422bbacde0b2fb60898d96953be37ba2dc9ecc6821e122a7995b83e7fef227d0818c38164e2ccd0503481"]}]}]}]}, 0x1edc}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)

6.969096472s ago: executing program 3 (id=352):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

6.673524757s ago: executing program 3 (id=353):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030403020000002cbd7000ffdbdf25"], 0x10}, 0x1, 0x7}, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000280), 0xb00000, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES8])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3", 0x1b}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0)

5.65803452s ago: executing program 0 (id=354):
recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/234, 0xea}, {&(0x7f0000003b80)=""/61, 0x3d}, {&(0x7f0000008980)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/107, 0x6b}, {&(0x7f0000004c40)=""/72, 0x48}], 0x8, &(0x7f0000004d40)=""/149, 0x95}, 0x2}, {{&(0x7f0000004e00)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e80)=""/11, 0xb}, {&(0x7f0000004ec0)=""/44, 0x2c}, {&(0x7f0000004f00)}], 0x3, &(0x7f0000004f80)=""/196, 0xc4}, 0x1}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/81, 0xfffffffffffffdbc}], 0x2, &(0x7f0000006140)=""/120, 0x78}, 0x1}, {{&(0x7f00000061c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000007780)=[{&(0x7f0000006240)=""/184, 0xb8}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/141, 0x99}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/49, 0x31}, {&(0x7f0000007540)=""/237, 0xed}, {&(0x7f00000005c0)=""/127, 0x6f}, {&(0x7f00000076c0)=""/190, 0xbe}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}, 0x10001}], 0x4, 0x12002, &(0x7f0000008940)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0xc, 0x3, 0x0, 0x11})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x20000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x32, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41320}, [@IFLA_LINKINFO={0xe, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000})
fcntl$lock(r1, 0x24, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x73f, 0xffffffffffffffff})
fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
sched_getparam(r9, &(0x7f0000002a40))
r10 = syz_io_uring_setup(0x10c7, &(0x7f0000000640)={0x0, 0x96e1, 0x1, 0x3, 0x372}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
syz_ublk_setup_io_uring(0x2143, &(0x7f0000000780)={0x0, 0x2bf6, 0x40000, 0x2, 0x272, 0x0, r10}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0))
ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, 0x0, &(0x7f00000001c0)}, 0x20)

5.219822462s ago: executing program 4 (id=355):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x2000}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)

5.111264155s ago: executing program 1 (id=356):
r0 = syz_open_dev$video(&(0x7f0000004c40), 0x3, 0x800)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000004c80)={0xa, @raw_data="fb27df132d2e3be32ce163f050360756fd77abc4e37d3772f5e6f33677e56809fa18c42795a1c0576446858bcb62584870bf121845d073d5efa3773f0f7514844489b344a0d9c0475dd5ffe8277d2cd3de8c021148885f1b69d59bc95488f2ed104c3a51679444d8d15dc107b8cb9ce84cd837d64682ad196f4ae2e80b277fbdf7b4ed11ba50451c3b4a59866e1c60ac967bd1101f59712ccd4d1353531079fdff12c0ff53e605739b7fb05b42cfd9c451a76c47fc2c42da05899cb2ff5e27eab9ffb648eb741345"})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r1, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4b53bc6d85bf1a06533f04089a401c6a2cfbd0371220ca9c1d843f7bb3df6d57bbac6e0eab61c3e2382af3f570774b7235b8a80f9a7c9671145360b8865fe649c259248bcb23be974347adf616340aa88fc94b20cc6f12cc777a63a16669abd4b88f467a73d05d6ed5a9d3ecb071a175d34ea96ea0c1fb702f18567c88b1a2aab5f8d1161772740a08e8ffa614931a7d8636ed35d781e6a48d416ab3b1e9e35a1b6edfff3046dfd504740cfc1c7a719800a77fe9bbb78e1114d1a78833cf36466fdf4028988ec608fe774794204fc1130115bb1bd204cc56adb3017a949a392860b2ebc987a7"], 0x10}}], 0x1, 0x8000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x7c}}, 0x24040100)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
unshare(0x2c020400)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', <r7=>0x0, 0x700, 0x700, 0x9, 0x5, {{0x2d, 0x4, 0x2, 0x3, 0xb4, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x56, 0x3, [{0x0, 0x9, "0309f321b83447"}, {0x6, 0x11, "e176c7d1f8a23bff7d160efbd9a130"}, {0x1, 0x12, "8875724f801eed00cf497639e5b06c80"}, {0x6, 0x4, "c600"}, {0x2, 0x12, "a5db90281e9d3af0c77031cf79c7a0ad"}, {0x1, 0xe, "5a1b22833c3abaa5eb0939a3"}]}, @rr={0x7, 0x23, 0xb0, [@multicast1, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2]}, @generic={0x82, 0x8, "eba20d2d29ac"}, @rr={0x7, 0x1b, 0x99, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x80, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1]}, @timestamp_prespec={0x44, 0x4, 0xf2, 0x3, 0x8}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', <r8=>0x0, 0x8000, 0x40, 0x8, 0x9, {{0x23, 0x4, 0x1, 0x7, 0x8c, 0x66, 0x0, 0x7f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@end, @noop, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x7, 0x11, "b95ea809641131c67d0783a9b94692"}, {0x6, 0x8, "6f6b3b8d3535"}, {0x5, 0x3, "f6"}, {0x0, 0x10, "cfdea679cf84951fdd1e75da3186"}]}, @lsrr={0x83, 0x7, 0xbc, [@multicast1]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x1000}]}, @noop, @generic={0x94, 0x6, "d67f2a76"}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x6, 0x9, "498858e56b00b7"}, {0x6, 0xc, "47c4d21f5b6f20ed1492"}, {0x8, 0x4, "46d7"}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000980)=<r9=>0x0, &(0x7f00000009c0)=0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="840000002100000425bd7000fedbdf2520010000000000000000000000000001e00000010000000000000000000000004e2000004e2300000200200033000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="b814000d00fc0000000000000000000000000000010c001c00000000000000000000000000000000d3203fcf6bae277862e608131236cb00c1ef6faa0b7f1525ef91163e1f65cec61a64f458fab22d7623e5fe33159ab62666849ff0acfea18ede4c5583ef040096f80ae5b8756c998820e1d1fbc32ef5ceac19c153b4cd0cf8e936906d10c1c10aa93818501339752f95f4d070d409b59d", @ANYRES32=r8, @ANYBLOB="030000000c001c00", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x84}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r10, 0x0, 0x50, 0x0, &(0x7f0000000300))
r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r11, 0x0, 0x0)
syz_usb_control_io(r11, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)

5.086252274s ago: executing program 0 (id=357):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
close(0xffffffffffffffff)
r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x6)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x2, 0x18}, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x20040084)
socket$netlink(0x10, 0x3, 0x0)

4.331860356s ago: executing program 4 (id=358):
unshare(0x68040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000880)={'filter\x00', 0x0, 0x0, 0x0, [0x800000000000007, 0x2, 0xff7fb5b2, 0x1, 0x5, 0x2]}, &(0x7f0000000000)=0x78)

4.24137537s ago: executing program 2 (id=359):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_connect$midi(0x1, 0x4b, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x8, 0xb0, 0x57, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x0, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x4}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x3, 0x3, [{0x5, 0x1}, {0x8, 0x9}, {0xbe, 0xa}], 0x2}, @ms_header={0x7, 0x24, 0x1, 0x1fe, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3, 0x5}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x8, 0x4, 0x3, 0xff, 0xc8}, 0x23, &(0x7f00000002c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x38, 0x40, 0x5f0}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9a115be4de00816881dd4ce0f34ed593"}]}, 0x2, [{0x89, &(0x7f0000000140)=@string={0x89, 0x3, "983d11f502187f6aa541f44e7ab4e4e284e0f3a3b19fcd536522def3e5d3ff0d41803f8c627e3f9c22fbbdc0f6a81adf3a763083fd6d3d537eb5c909e562d318f3f81490f667d5ab326c5837df4528aa6ee524722c886c6e55c77d552d46ecbdbcde91c72dba98727db7947de84c6eaad909aff839047a94d1e72e5d3b048c270a5b972f32e9f4"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}]})
landlock_create_ruleset(&(0x7f0000000000)={0x4002, 0x2, 0x3, 0x40, 0x2, 0x2}, 0x30, 0x1)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00')
read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x400000000000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48085}, 0x10)
accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

4.115816751s ago: executing program 0 (id=360):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.014093787s ago: executing program 0 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
timer_create(0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan1\x00'})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8c65e06a2b69e7c2}, 0x200000c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
pselect6(0x0, 0x0, &(0x7f00000002c0)={0x8000, 0x7f, 0x8, 0xe13, 0x2, 0x5, 0x4, 0xe5}, &(0x7f0000000300)={0x8, 0x100000001, 0x6, 0x9, 0x7fffffff, 0x6, 0x3}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x394]}, 0x8})
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3.080942466s ago: executing program 0 (id=362):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000003c0)={0x2, 0x8000})
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x63, 0x102, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
r6 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="00170001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fanotify_init(0x200, 0x1)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc})

3.030448521s ago: executing program 3 (id=363):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x23, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2092)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000040))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000008ab21da93e020601080000000000e6fffffffffefd04000780050001"], 0x20}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x3, 0x4000007, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

2.536798168s ago: executing program 4 (id=364):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
setgroups(0x0, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x40, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]})
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x3c0, 0x1e0, 0x690, 0xa0, 0x1003, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x354, 0x20022, 0xfffffffd}, {0xfcef}, {0x4, 0xfffffffc, 0x7fe}, 0x1, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
write$ppp(r0, &(0x7f0000000400)='k\'', 0x2)
r2 = socket$inet6(0xa, 0x802, 0x0)
socket(0x1, 0x803, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
socket$pptp(0x18, 0x1, 0x2)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=r2, @ANYBLOB="f9ffffff08000200020000001400010000000000000000000000000000000001c7c197412673b800e975249f17ccd49fc1ee9a84cbbf"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r8 = syz_ublk_setup_io_uring(0x5f3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x158}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r12=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000003bc0)={0x401, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000900)}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/231, 0xe7}, {&(0x7f0000003a40)=""/83, 0x53}, {&(0x7f0000003ac0)}], &(0x7f0000003b80)=[0xef1c], 0x8}, 0x20)
syz_ublk_setup_queues(r7, r12, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x1, 0x0, r7}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x2, 0x3, 0x9, 0x6, 0x1, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @ldst={0x2, 0x1, 0x1, 0xb, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000340)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000001780)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000027c0)={0x5, 0x0, 0xa, 0x80000000}, 0x10, 0x9ce9, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002800)=[{0x0, 0x2, 0xf, 0xb}, {0x3, 0x3, 0x3, 0x1}, {0x4, 0x3, 0x5, 0x6}, {0x0, 0x3, 0x10, 0x1}, {0x1, 0x1, 0x3, 0x6}, {0x1, 0x4, 0xd, 0x5}], 0x10, 0x3}, 0x94)

2.064374534s ago: executing program 1 (id=365):
setreuid(0x0, 0xee01)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000009bc389bb000000000000000104000000000000"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20)
statx(r0, 0x0, 0x0, 0x8, &(0x7f0000019300))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000001c0)={0x0, 0x3, 0x5, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000440)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000)

1.933651218s ago: executing program 3 (id=366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
r1 = creat(0x0, 0x6a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
memfd_secret(0x80000)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00')
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r2], 0x0)
close(r1)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000001180), 0x0, 0x2)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000011c0)={0xe96, "99376ba269c8e21b83bdce1a17ea9fc18bc7f7643653d8fbb92e7c953dbf728f", 0x5, 0x8, 0x8, 0x3, 0x4, 0x2, 0x1, 0x41b})

1.561188682s ago: executing program 2 (id=367):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x404a004)
recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000340)=""/173, 0xad}], 0x2, &(0x7f0000000440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062baad6304000400"})
connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0)

1.185638785s ago: executing program 4 (id=368):
r0 = fsopen(&(0x7f0000000100)='afs\x00', 0x1)
close(r0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="bc111d9394c5236c71f733f89c844d07d40d90afaa92a79f8092dce7f6663fffb151e24b2ca05b1a23b607b2c97648a91e207fc14a0c4eb733b76f6cee4bec1574f15dcbcee3a603f2e2656145219af1cda55722a0c8c7e47bfeb296c5505394da6cea56bb17a05b83cb601eaadfacc2b1ab38e79490ccfb026fc0a7b9dbfdbc99f0ab04f5c44ddf7e135001e20df4aed103be1282357cb2155f9ea51af863e22c2ace5890ec5b49313db7d8cec0f84c42128c232f2a62a69ed0d743bd902d82a5722d275da1f6d969edf0ebd30f011595b10ea32edc975d299da39470c6690294cc7f2945256c35b00ea0b8900190d6bb1e63", 0xf3, r1)

1.165907413s ago: executing program 4 (id=369):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0xf00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000e00)={0x1, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xfffffffffffffdff})
r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x1, @local, 0x7}]}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000080))

602.467577ms ago: executing program 2 (id=370):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1)

105.023376ms ago: executing program 1 (id=371):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000004c80)={0x0, 0xf3}, &(0x7f0000004d40)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a00020102090401000001020000090401010101020000090501"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0010"])

26.696292ms ago: executing program 2 (id=372):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x26, 0x200000, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x0, "abacd2111104a9fa07558139ede6dc06270ee0b85234bd57f2767d00"})
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10119, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[], 0x50)
mkdir(0x0, 0xe8)
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000a80))
mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1)
lsetxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000300), 0x2, 0x1)
r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r5, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000040)={0x40002019})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x2, 0x5001)

0s ago: executing program 3 (id=373):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0xc0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$P9_RMKNOD(r1, 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x1ff, 0x9})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)

kernel console output (not intermixed with test programs):

entered promiscuous mode
[   80.127031][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.148933][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.158019][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.193312][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.194966][ T5606] veth0_vlan: entered promiscuous mode
[   80.205481][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.228581][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   80.228597][   T29] audit: type=1400 audit(1783784831.472:152): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.Ws12ZQ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   80.234493][ T5617] veth0_macvtap: entered promiscuous mode
[   80.249263][   T29] audit: type=1400 audit(1783784831.482:153): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   80.289934][   T29] audit: type=1400 audit(1783784831.492:154): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.Ws12ZQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   80.297144][ T5606] veth1_vlan: entered promiscuous mode
[   80.352637][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.358877][ T5620] veth0_vlan: entered promiscuous mode
[   80.368223][   T29] audit: type=1400 audit(1783784831.492:155): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   80.402264][ T5617] veth1_macvtap: entered promiscuous mode
[   80.408144][   T29] audit: type=1400 audit(1783784831.492:156): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.Ws12ZQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   80.421469][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.440307][   T29] audit: type=1400 audit(1783784831.492:157): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.Ws12ZQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   80.454783][ T5606] veth0_macvtap: entered promiscuous mode
[   80.475478][   T29] audit: type=1400 audit(1783784831.542:158): avc:  denied  { unmount } for  pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   80.496518][   T29] audit: type=1400 audit(1783784831.562:159): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   80.523286][ T5616] veth0_vlan: entered promiscuous mode
[   80.525608][   T29] audit: type=1400 audit(1783784831.562:160): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=7045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   80.543307][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.552908][   T29] audit: type=1400 audit(1783784831.572:161): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   80.584301][ T5606] veth1_macvtap: entered promiscuous mode
[   80.622485][ T5616] veth1_vlan: entered promiscuous mode
[   80.631893][ T5620] veth1_vlan: entered promiscuous mode
[   80.650431][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.667942][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.677891][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.692628][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.707121][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.740095][ T5618] Bluetooth: hci1: command tx timeout
[   80.808832][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.820496][ T5618] Bluetooth: hci3: command tx timeout
[   80.826346][ T5611] Bluetooth: hci4: command tx timeout
[   80.826372][ T4926] Bluetooth: hci0: command tx timeout
[   80.832418][   T50] Bluetooth: hci2: command tx timeout
[   80.913688][ T5620] veth0_macvtap: entered promiscuous mode
[   80.950559][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.960874][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.975841][ T5620] veth1_macvtap: entered promiscuous mode
[   81.043743][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.087074][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.130581][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.136260][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.140879][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.157613][ T5616] veth0_macvtap: entered promiscuous mode
[   81.569483][ T5736] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.607390][ T5616] veth1_macvtap: entered promiscuous mode
[   81.620833][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.639775][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.643696][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.655493][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.679229][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.688812][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.698492][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.712775][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.715395][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.728834][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.738732][ T5736] usb 2-1: device descriptor read/64, error -71
[   81.745304][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.745323][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.774166][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.818550][   T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.830598][   T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.868018][   T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.892057][   T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.040452][ T5736] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   82.093890][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.104958][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.233123][ T5814] mmap: syz.2.3 (5814): VmData 37650432 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data.
[   82.265825][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.279413][ T5750] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   82.287044][ T5736] usb 2-1: device descriptor read/64, error -71
[   82.291138][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.339631][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.365142][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.409457][ T5736] usb usb2-port1: attempt power cycle
[   82.418045][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.434376][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.452409][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[   82.474274][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   82.493652][ T5750] usb 5-1: New USB device found, idVendor=0079, idProduct=0001, bcdDevice= 0.00
[   82.515040][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.537130][ T5750] usb 5-1: config 0 descriptor??
[   82.769488][ T5736] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   82.774188][ T5824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   82.827776][   T50] Bluetooth: hci1: command tx timeout
[   82.832237][ T5736] usb 2-1: device descriptor read/8, error -71
[   82.900678][   T50] Bluetooth: hci0: command tx timeout
[   82.906966][ T5618] Bluetooth: hci2: command tx timeout
[   82.913097][ T4926] Bluetooth: hci4: command tx timeout
[   82.913110][ T5611] Bluetooth: hci3: command tx timeout
[   83.205167][ T5736] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   83.362050][ T5736] usb 2-1: device descriptor read/8, error -71
[   83.481116][ T5736] usb usb2-port1: unable to enumerate USB device
[   83.596115][ T5750] usbhid 5-1:0.0: can't add hid device: -71
[   83.596215][ T5750] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   83.612002][ T5823] fuse: Bad value for 'rootmode'
[   83.640908][ T5750] usb 5-1: USB disconnect, device number 2
[   84.089943][ T5843] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   84.562113][ T5854] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.275218][   T29] kauditd_printk_skb: 66 callbacks suppressed
[   85.275235][   T29] audit: type=1400 audit(1783784836.522:228): avc:  denied  { bind } for  pid=5848 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   85.356039][   T29] audit: type=1400 audit(1783784836.522:229): avc:  denied  { node_bind } for  pid=5848 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   85.413992][   T76] Bluetooth: Error in BCSP hdr checksum
[   85.435181][   T29] audit: type=1400 audit(1783784836.532:230): avc:  denied  { connect } for  pid=5848 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   85.500792][   T29] audit: type=1400 audit(1783784836.552:231): avc:  denied  { write } for  pid=5848 comm="syz.4.15" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   85.542355][   T29] audit: type=1400 audit(1783784836.662:232): avc:  denied  { write } for  pid=5852 comm="syz.1.16" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   85.564730][   T29] audit: type=1400 audit(1783784836.672:233): avc:  denied  { connect } for  pid=5852 comm="syz.1.16" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   85.593274][   T29] audit: type=1400 audit(1783784836.672:234): avc:  denied  { name_connect } for  pid=5852 comm="syz.1.16" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   85.627153][   T29] audit: type=1400 audit(1783784836.722:235): avc:  denied  { write } for  pid=5859 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.653976][   T29] audit: type=1400 audit(1783784836.772:236): avc:  denied  { read } for  pid=5859 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   85.700599][ T5728] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.739418][ T5750] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.862991][ T5728] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   85.873434][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.883926][ T5728] usb 4-1: Product: syz
[   85.889278][ T5728] usb 4-1: Manufacturer: syz
[   85.893898][ T5728] usb 4-1: SerialNumber: syz
[   85.899176][ T5750] usb 1-1: Using ep0 maxpacket: 16
[   85.918462][ T5750] usb 1-1: config 222 has an invalid interface number: 31 but max is 0
[   85.925949][ T5728] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   85.948515][ T5750] usb 1-1: config 222 has no interface number 0
[   85.966332][ T5750] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11
[   85.988265][ T5750] usb 1-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024
[   86.001739][   T29] audit: type=1400 audit(1783784837.252:237): avc:  denied  { write } for  pid=5866 comm="syz.4.20" name="usbmon9" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   86.005131][ T5750] usb 1-1: config 222 interface 31 has no altsetting 0
[   86.036108][ T5750] usb 1-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[   86.049885][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.058231][ T5750] usb 1-1: Product: syz
[   86.061950][  T188] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   86.062826][ T5750] usb 1-1: Manufacturer: syz
[   86.076393][ T5750] usb 1-1: SerialNumber: syz
[   86.085121][ T5862] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   86.141464][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'.
[   86.163875][ T5869] erofs (device loop4): cannot find valid erofs superblock
[   86.535452][ T5750] ldusb 1-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[   86.561423][  T805] cfg80211: failed to load regulatory.db
[   86.621565][ T5750] usb 1-1: USB disconnect, device number 2
[   86.698201][ T5750] ldusb 1-1:222.31: LD USB Device #0 now disconnected
[   87.000770][ T5874] netlink: zone id is out of range
[   87.020088][ T5874] netlink: zone id is out of range
[   87.028275][ T5874] netlink: zone id is out of range
[   87.035389][ T5874] netlink: zone id is out of range
[   87.043811][ T5874] netlink: zone id is out of range
[   87.078916][ T5874] netlink: zone id is out of range
[   87.085485][   T10] usb 4-1: USB disconnect, device number 2
[   87.109992][ T5874] netlink: zone id is out of range
[   87.133773][ T5874] netlink: zone id is out of range
[   87.155129][ T5874] netlink: zone id is out of range
[   87.164602][ T5878] =======================================================
[   87.164602][ T5878] WARNING: The mand mount option has been deprecated and
[   87.164602][ T5878]          and is ignored by this kernel. Remove the mand
[   87.164602][ T5878]          option from the mount to silence this warning.
[   87.164602][ T5878] =======================================================
[   87.201140][ T5878] No source specified
[   87.214062][ T5878] overlayfs: overlapping lowerdir path
[   87.460179][ T5618] Bluetooth: hci5: command 0x1003 tx timeout
[   87.467326][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   87.671373][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   87.710591][  T188] usb 4-1: Service connection timeout for: 256
[   87.710857][ T5885] Zero length message leads to an empty skb
[   87.727283][  T188] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[   87.748053][  T188] ath9k_htc: Failed to initialize the device
[   87.757479][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[   88.059142][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   88.244728][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   88.271191][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.302574][   T10] usb 4-1: Product: syz
[   88.322063][   T10] usb 4-1: Manufacturer: syz
[   88.334818][   T10] usb 4-1: SerialNumber: syz
[   88.886229][ T5892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28'.
[   89.673500][   T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   89.702420][ T5728] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   90.089118][   T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   90.429451][   T29] kauditd_printk_skb: 21 callbacks suppressed
[   90.429494][   T29] audit: type=1400 audit(1783784841.672:259): avc:  denied  { create } for  pid=5902 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   90.644168][   T10] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   90.697780][   T29] audit: type=1400 audit(1783784841.712:260): avc:  denied  { open } for  pid=5902 comm="syz.2.31" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   90.724674][   T29] audit: type=1400 audit(1783784841.792:261): avc:  denied  { write } for  pid=5902 comm="syz.2.31" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   90.729406][   T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   90.760172][   T29] audit: type=1400 audit(1783784841.792:262): avc:  denied  { open } for  pid=5902 comm="syz.2.31" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   90.786949][   T29] audit: type=1400 audit(1783784841.802:263): avc:  denied  { ioctl } for  pid=5902 comm="syz.2.31" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[   91.045771][   T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   91.314961][   T10] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[   91.423389][ T5914] fuse: Bad value for 'group_id'
[   91.434419][   T10] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   91.446832][   T29] audit: type=1400 audit(1783784841.842:264): avc:  denied  { ioctl } for  pid=5902 comm="syz.2.31" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   91.471481][ T5914] fuse: Bad value for 'group_id'
[   91.481308][   T10] usb 5-1: Manufacturer: syz
[   91.496603][   T10] usb 5-1: SerialNumber: syz
[   91.540956][   T29] audit: type=1400 audit(1783784842.182:265): avc:  denied  { read append } for  pid=5902 comm="syz.2.31" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   91.660311][   T29] audit: type=1400 audit(1783784842.182:266): avc:  denied  { open } for  pid=5902 comm="syz.2.31" path="/dev/sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   91.686014][   T29] audit: type=1400 audit(1783784842.242:267): avc:  denied  { create } for  pid=5902 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.706529][   T29] audit: type=1400 audit(1783784842.272:268): avc:  denied  { read } for  pid=5902 comm="syz.2.31" path="socket:[8942]" dev="sockfs" ino=8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.777048][ T5917] hfs: can't find a HFS filesystem on dev nullb0
[   91.796054][ T5900] hugetlbfs: syz.4.30 (5900): Using mlock ulimits for SHM_HUGETLB is obsolete
[   91.859636][ T5728] usb 4-1: Service connection timeout for: 256
[   91.865878][ T5728] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[   91.877562][   T10] yealink 5-1:36.0: invalid payload size 0, expected 16
[   91.890802][   T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input5
[   91.946649][ T5728] ath9k_htc: Failed to initialize the device
[   91.989770][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   91.996820][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.004266][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.011196][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.018144][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.025435][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.032691][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.039645][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[   92.046492][    C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[   92.113077][ T5728] usb 4-1: ath9k_htc: USB layer deinitialized
[   92.126242][   T10] usb 5-1: USB disconnect, device number 3
[   92.278258][ T5921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=5921 comm=syz.0.34
[   92.389217][  T188] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   92.539348][  T188] usb 3-1: Using ep0 maxpacket: 16
[   92.546724][  T188] usb 3-1: unable to get BOS descriptor or descriptor too short
[   92.573568][  T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.599810][  T188] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   92.624363][   T10] usb 4-1: USB disconnect, device number 3
[   92.637985][  T188] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.671481][  T188] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   92.689355][  T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.707835][  T188] usb 3-1: Product: syz
[   92.713784][  T188] usb 3-1: Manufacturer: syz
[   92.718413][  T188] usb 3-1: SerialNumber: syz
[   92.789257][ T5924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5924 comm=syz.3.35
[   93.103622][  T188] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   93.141625][ T5936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   93.148245][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   93.174235][ T5936] vhci_hcd vhci_hcd.0: Device attached
[   93.320771][  T188] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   93.531117][  T805] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[   93.651650][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   94.300548][ T5938] vhci_hcd: connection closed
[   94.410076][ T1159] vhci_hcd vhci_hcd.0: stop threads
[   94.449394][ T1159] vhci_hcd vhci_hcd.0: release socket
[   94.474427][ T1159] vhci_hcd vhci_hcd.0: disconnect device
[   95.656447][  T188] usb 3-1: USB disconnect, device number 2
[   95.941264][   T29] kauditd_printk_skb: 20 callbacks suppressed
[   95.941278][   T29] audit: type=1400 audit(1783784847.192:289): avc:  denied  { write } for  pid=5971 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   95.969534][ T5973] netlink: 84 bytes leftover after parsing attributes in process `syz.2.45'.
[   96.000934][ T5975] netlink: 64 bytes leftover after parsing attributes in process `syz.2.45'.
[   96.616175][   T29] audit: type=1400 audit(1783784847.192:290): avc:  denied  { nlmsg_write } for  pid=5971 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   96.637159][   T29] audit: type=1400 audit(1783784847.422:291): avc:  denied  { listen } for  pid=5963 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   96.678922][   T29] audit: type=1400 audit(1783784847.922:292): avc:  denied  { setopt } for  pid=5978 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   96.734748][   T29] audit: type=1400 audit(1783784847.982:293): avc:  denied  { append } for  pid=5978 comm="syz.0.47" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   96.826793][   T29] audit: type=1400 audit(1783784848.012:294): avc:  denied  { map } for  pid=5978 comm="syz.0.47" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   96.829538][ T5982] netlink: 14 bytes leftover after parsing attributes in process `syz.1.43'.
[   96.887349][   T29] audit: type=1400 audit(1783784848.012:295): avc:  denied  { write execute } for  pid=5978 comm="syz.0.47" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   97.005183][   T29] audit: type=1400 audit(1783784848.032:296): avc:  denied  { create } for  pid=5967 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.166180][   T29] audit: type=1400 audit(1783784848.032:297): avc:  denied  { setopt } for  pid=5967 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   97.188518][   T29] audit: type=1400 audit(1783784848.062:298): avc:  denied  { ioctl } for  pid=5967 comm="syz.1.43" path="socket:[9283]" dev="sockfs" ino=9283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.782873][ T6002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   97.789398][ T6002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   97.828732][ T6002] vhci_hcd vhci_hcd.0: Device attached
[   98.134124][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'.
[   98.209973][ T5728] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[   98.649201][  T805] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   98.660606][ T6003] vhci_hcd: connection closed
[   98.672570][   T13] vhci_hcd vhci_hcd.3: stop threads
[   98.695241][   T13] vhci_hcd vhci_hcd.3: release socket
[   98.701433][   T13] vhci_hcd vhci_hcd.3: disconnect device
[   98.747591][ T6013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   99.861752][ T5735] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  100.501978][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'.
[  100.572067][ T6025] net_ratelimit: 636 callbacks suppressed
[  100.572088][ T6025] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  100.673140][ T5714] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.682896][ T6033] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.59'.
[  100.693974][ T6033] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.59'.
[  100.752753][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'.
[  100.802017][ T5611] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  100.812740][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  100.812769][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  100.812783][ T5611] Workqueue: hci1 hci_rx_work
[  100.812816][ T5611] Call Trace:
[  100.812823][ T5611]  <TASK>
[  100.812831][ T5611]  dump_stack_lvl+0x100/0x190
[  100.812857][ T5611]  sysfs_warn_dup.cold+0x1c/0x28
[  100.812885][ T5611]  sysfs_create_dir_ns+0x24b/0x2b0
[  100.812914][ T5611]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  100.812939][ T5611]  ? find_held_lock+0x2b/0x80
[  100.812966][ T5611]  ? kobject_add_internal+0x25f/0x930
[  100.812985][ T5611]  ? kobject_add_internal+0x25f/0x930
[  100.813006][ T5611]  ? do_raw_spin_unlock+0x145/0x1e0
[  100.813032][ T5611]  kobject_add_internal+0x2c8/0x930
[  100.813056][ T5611]  kobject_add+0x16a/0x1e0
[  100.813076][ T5611]  ? __pfx_kobject_add+0x10/0x10
[  100.813095][ T5611]  ? class_to_subsys+0x10f/0x150
[  100.813124][ T5611]  ? kobject_put+0xb9/0x640
[  100.813141][ T5611]  ? _raw_spin_unlock+0x28/0x50
[  100.813172][ T5611]  device_add+0x294/0x1970
[  100.813195][ T5611]  ? __pfx_dev_set_name+0x10/0x10
[  100.813222][ T5611]  ? __pfx_device_add+0x10/0x10
[  100.813245][ T5611]  ? mgmt_send_event_skb+0x2fb/0x460
[  100.813279][ T5611]  hci_conn_add_sysfs+0x1a3/0x260
[  100.813310][ T5611]  le_conn_complete_evt+0x11eb/0x1f60
[  100.813348][ T5611]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  100.813373][ T5611]  ? hci_event_packet+0x186/0xcd0
[  100.813405][ T5611]  hci_le_conn_complete_evt+0x23c/0x3a0
[  100.813432][ T5611]  ? skb_pull_data+0x15f/0x1e0
[  100.813458][ T5611]  hci_le_meta_evt+0x34a/0x5f0
[  100.813491][ T5611]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  100.813521][ T5611]  hci_event_packet+0x51c/0xcd0
[  100.813547][ T5611]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  100.813577][ T5611]  ? __pfx_hci_event_packet+0x10/0x10
[  100.813608][ T5611]  ? kcov_remote_start+0x384/0x670
[  100.813630][ T5611]  ? lockdep_hardirqs_on+0x78/0x100
[  100.813662][ T5611]  hci_rx_work+0x451/0xfc0
[  100.813693][ T5611]  process_one_work+0xa23/0x1940
[  100.813724][ T5611]  ? __pfx_process_one_work+0x10/0x10
[  100.813750][ T5611]  ? __pfx_hci_rx_work+0x10/0x10
[  100.813792][ T5611]  worker_thread+0x5ef/0xe50
[  100.813821][ T5611]  ? kthread+0x13a/0x450
[  100.813846][ T5611]  ? __pfx_worker_thread+0x10/0x10
[  100.813862][ T5611]  kthread+0x370/0x450
[  100.813888][ T5611]  ? __pfx_kthread+0x10/0x10
[  100.813916][ T5611]  ret_from_fork+0x72b/0xd50
[  100.813941][ T5611]  ? __pfx_ret_from_fork+0x10/0x10
[  100.813966][ T5611]  ? __switch_to+0x800/0x10f0
[  100.813992][ T5611]  ? __pfx_kthread+0x10/0x10
[  100.814021][ T5611]  ret_from_fork_asm+0x1a/0x30
[  100.814061][ T5611]  </TASK>
[  100.814782][ T5611] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  101.090734][ T5611] Bluetooth: hci1: failed to register connection device
[  101.110444][ T5714] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  101.129957][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.167579][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  101.167591][   T29] audit: type=1400 audit(1783784852.412:323): avc:  denied  { read write } for  pid=6041 comm="syz.3.62" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.219604][ T5714] usb 3-1: config 0 descriptor??
[  101.567109][   T29] audit: type=1400 audit(1783784852.412:324): avc:  denied  { open } for  pid=6041 comm="syz.3.62" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  101.645599][   T29] audit: type=1400 audit(1783784852.682:325): avc:  denied  { append } for  pid=6041 comm="syz.3.62" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  101.681429][ T5714] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  101.706677][ T5714] [drm:udl_init] *ERROR* Selecting channel failed
[  101.735378][   T29] audit: type=1400 audit(1783784852.812:326): avc:  denied  { mounton } for  pid=6024 comm="syz.1.56" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  101.764879][   T29] audit: type=1400 audit(1783784852.842:327): avc:  denied  { mount } for  pid=6024 comm="syz.1.56" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  101.842686][ T5714] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  101.895483][ T5714] [drm] Initialized udl on minor 2
[  101.906322][   T29] audit: type=1400 audit(1783784852.862:328): avc:  denied  { append } for  pid=6024 comm="syz.1.56" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  101.938250][ T5714] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  101.948091][ T6051] 9p: Bad value for 'rfdno'
[  102.009582][ T5714] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  102.027190][   T29] audit: type=1400 audit(1783784852.862:329): avc:  denied  { append open } for  pid=6024 comm="syz.1.56" path="/10/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  102.079936][ T5714] usb 3-1: USB disconnect, device number 3
[  102.086254][  T188] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  102.127668][  T188] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  102.156161][   T29] audit: type=1400 audit(1783784852.922:330): avc:  denied  { compute_member } for  pid=6026 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  102.254139][   T29] audit: type=1400 audit(1783784852.932:331): avc:  denied  { mounton } for  pid=6047 comm="syz.0.63" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.346876][   T29] audit: type=1400 audit(1783784853.202:332): avc:  denied  { mounton } for  pid=6047 comm="syz.0.63" path="/12/file1" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  102.641031][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  102.880751][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.921123][ T6068] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  102.953698][ T6069] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  102.960260][ T6069] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  102.968304][ T6068] netlink: 6 bytes leftover after parsing attributes in process `syz.3.69'.
[  102.977041][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.984579][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.077503][ T6069] vhci_hcd vhci_hcd.0: Device attached
[  103.090624][ T5714] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  103.109184][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.127237][ T5714] usb 5-1: config 0 descriptor??
[  103.171713][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.179359][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.229052][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  103.289154][ T5728] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  103.369057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  103.412372][  T805] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  104.428357][ T5714] usbhid 5-1:0.0: can't add hid device: -71
[  104.452190][ T6070] vhci_hcd: connection closed
[  104.456872][ T1164] vhci_hcd vhci_hcd.2: stop threads
[  104.500164][ T1164] vhci_hcd vhci_hcd.2: release socket
[  104.530811][ T1164] vhci_hcd vhci_hcd.2: disconnect device
[  104.674977][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  104.696939][ T5714] usb 5-1: USB disconnect, device number 5
[  104.721489][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[  105.212398][ T5714] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  105.638692][ T6094] sg_write: data in/out 679936/136 bytes for SCSI command 0x0-- guessing data in;
[  105.638692][ T6094]    program syz.1.73 not setting count and/or reply_len properly
[  105.664385][ T5714] usb 5-1: device not accepting address 6, error -71
[  106.142133][ T6097] binder: 6096:6097 ioctl c0306201 200000000080 returned -14
[  106.206946][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  106.206965][   T29] audit: type=1400 audit(1783784857.452:351): avc:  denied  { map } for  pid=6096 comm="syz.2.75" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  106.250330][ T6097] binder: 6096:6097 ioctl c0306201 2000000003c0 returned -14
[  106.409116][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.535769][   T29] audit: type=1400 audit(1783784857.772:352): avc:  denied  { accept } for  pid=6101 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  106.915835][   T29] audit: type=1400 audit(1783784858.162:353): avc:  denied  { mounton } for  pid=6106 comm="syz.2.79" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  106.915895][ T6107] 9p: Could not find request transport: fd��c%"�.����hU���P�����\2��\�/�ά|�@z�����)��7�a�dDf�3IlZL�r��7���v[��@��!"�X �u�U0�LkV�N��0x0000000000000003
[  106.966632][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  106.991307][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  107.009420][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  107.022787][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.032061][   T10] usb 4-1: Product: syz
[  107.036396][   T10] usb 4-1: Manufacturer: syz
[  107.042607][   T10] usb 4-1: SerialNumber: syz
[  107.077505][ T6109] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[  107.184722][ T6109] vlan2: entered allmulticast mode
[  107.190983][ T6109] hsr0: entered allmulticast mode
[  107.300286][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[  107.330673][ T6109] hsr_slave_0: entered allmulticast mode
[  107.452762][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.463312][ T6109] hsr_slave_1: entered allmulticast mode
[  107.480905][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.038148][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  108.131488][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'.
[  108.260985][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.426850][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.579414][  T805] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  108.884933][   T10] usb 4-1: invalid uac2 rates
[  108.933821][ T6113] geneve2: entered promiscuous mode
[  108.946568][   T10] usb 4-1: invalid uac2 rates
[  109.015658][ T6113] geneve2: entered allmulticast mode
[  109.084567][   T10] usb 4-1: failed to enable PITCH for EP 0x82
[  109.105567][   T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  109.230644][   T10] usb 4-1: clock source 0 is not valid, cannot use
[  109.255783][   T10] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[  109.269167][   T10] usb 4-1: 2:1: cannot set freq 791749207 (v2/v3): err -71
[  109.587004][   T29] audit: type=1400 audit(1783784860.702:354): avc:  denied  { read append } for  pid=6125 comm="syz.4.83" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  109.759628][   T29] audit: type=1400 audit(1783784860.702:355): avc:  denied  { open } for  pid=6125 comm="syz.4.83" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  109.784076][   T29] audit: type=1400 audit(1783784860.722:356): avc:  denied  { ioctl } for  pid=6125 comm="syz.4.83" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  109.833447][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[  109.879090][ T5736] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  109.921650][   T10] usb 4-1: USB disconnect, device number 4
[  109.968321][ T6133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  109.974875][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  110.010999][ T5736] usb 5-1: device descriptor read/64, error -71
[  110.013447][ T6133] vhci_hcd vhci_hcd.0: Device attached
[  110.104448][ T6139] netlink: 'syz.2.86': attribute type 7 has an invalid length.
[  110.113055][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'.
[  110.273963][   T29] audit: type=1400 audit(1783784861.372:357): avc:  denied  { name_bind } for  pid=6137 comm="syz.2.86" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  110.410054][ T5736] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  110.430472][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.475244][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[  110.563942][ T5714] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  110.594284][   T29] audit: type=1400 audit(1783784861.372:358): avc:  denied  { append } for  pid=6137 comm="syz.2.86" name="cec0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  110.802869][ T6147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.88'.
[  110.811762][ T5736] usb 5-1: device descriptor read/64, error -71
[  111.328098][ T6134] vhci_hcd: connection closed
[  111.336020][   T13] vhci_hcd vhci_hcd.1: stop threads
[  111.365693][ T5736] usb usb5-port1: attempt power cycle
[  111.388235][   T13] vhci_hcd vhci_hcd.1: release socket
[  111.401007][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  111.455379][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.473119][ T6148] bridge0: port 3(bond1) entered blocking state
[  111.486728][ T6148] bridge0: port 3(bond1) entered disabled state
[  111.501314][ T6148] bond1: entered allmulticast mode
[  111.516281][ T6148] bond1: entered promiscuous mode
[  111.533413][ T6148] bridge0: port 3(bond1) entered blocking state
[  111.540955][ T6148] bridge0: port 3(bond1) entered forwarding state
[  111.601714][   T76] bridge0: port 3(bond1) entered disabled state
[  111.630484][   T29] audit: type=1400 audit(1783784862.882:359): avc:  denied  { getattr } for  pid=6155 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  111.658845][ T5735] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  111.700727][ T6160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  111.739127][ T5736] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  111.761035][ T5736] usb 5-1: device descriptor read/8, error -71
[  111.788737][ T6160] overlayfs: missing 'lowerdir'
[  111.800443][ T6162] netlink: zone id is out of range
[  111.809894][ T5735] usb 1-1: device descriptor read/64, error -71
[  111.831571][ T6164] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  111.844518][ T6162] netlink: zone id is out of range
[  111.881705][ T6162] netlink: zone id is out of range
[  111.920415][ T6162] netlink: zone id is out of range
[  111.933569][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[  111.942491][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[  112.046263][ T5736] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  112.069779][ T5736] usb 5-1: device descriptor read/8, error -71
[  112.079571][ T6162] netlink: zone id is out of range
[  112.099586][ T6162] netlink: zone id is out of range
[  112.114841][ T6162] netlink: zone id is out of range
[  112.119381][ T5735] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  112.127056][ T6162] netlink: zone id is out of range
[  112.203536][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[  112.303669][ T5736] usb usb5-port1: unable to enumerate USB device
[  112.579447][ T6162] netlink: zone id is out of range
[  112.604178][ T5735] usb 1-1: device descriptor read/64, error -71
[  112.609157][ T6162] netlink: zone id is out of range
[  112.729887][ T5735] usb usb1-port1: attempt power cycle
[  112.908322][ T6176] 9p: Bad value for 'rfdno'
[  112.934403][   T29] audit: type=1400 audit(1783784864.182:360): avc:  denied  { create } for  pid=6179 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  112.937156][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.97'.
[  112.998710][   T29] audit: type=1400 audit(1783784864.182:361): avc:  denied  { write } for  pid=6179 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  113.018763][  T805] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.066941][   T29] audit: type=1400 audit(1783784864.282:362): avc:  denied  { unlink } for  pid=6170 comm="syz.1.94" name="#1" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  113.109706][ T5735] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  113.150086][ T5735] usb 1-1: device descriptor read/8, error -71
[  113.156385][   T29] audit: type=1400 audit(1783784864.402:363): avc:  denied  { mount } for  pid=6170 comm="syz.1.94" name="/" dev="overlay" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  113.201495][  T805] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  113.211970][  T805] usb 4-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0
[  113.220764][  T805] usb 4-1: Product: syz
[  113.227798][  T805] usb 4-1: config 0 descriptor??
[  113.237748][ T6184] process 'syz.2.98' launched './file0' with NULL argv: empty string added
[  113.247816][  T805] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  113.257316][   T29] audit: type=1400 audit(1783784864.482:364): avc:  denied  { execute } for  pid=6183 comm="syz.2.98" name="file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.269100][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  113.292431][  T805] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  113.316687][   T29] audit: type=1400 audit(1783784864.532:365): avc:  denied  { execute_no_trans } for  pid=6183 comm="syz.2.98" path="/23/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.380617][   T29] audit: type=1400 audit(1783784864.622:366): avc:  denied  { read } for  pid=6189 comm="syz.4.100" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.424950][   T29] audit: type=1400 audit(1783784864.622:367): avc:  denied  { open } for  pid=6189 comm="syz.4.100" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.451363][ T5735] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  113.467051][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  113.477615][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  113.478285][   T29] audit: type=1400 audit(1783784864.632:368): avc:  denied  { ioctl } for  pid=6189 comm="syz.4.100" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.508030][   T10] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  113.515486][ T6172] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  113.534249][ T5735] usb 1-1: device descriptor read/8, error -71
[  113.536004][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.550169][ T6172] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  113.562776][ T6172] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  113.586317][   T10] usb 2-1: Product: syz
[  113.606666][   T10] usb 2-1: Manufacturer: syz
[  113.636002][   T10] usb 2-1: SerialNumber: syz
[  113.672089][   T10] usb 2-1: config 0 descriptor??
[  113.674825][ T5735] usb usb1-port1: unable to enumerate USB device
[  113.758677][ T6173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  113.782121][ T6173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  114.175154][ T6173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  114.187915][ T6173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  114.195764][ T6197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  114.202300][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  114.225005][ T6197] vhci_hcd vhci_hcd.0: Device attached
[  114.489222][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[  114.509155][ T5736] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  114.895243][   T10] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  115.012115][ T6201] vhci_hcd: connection closed
[  115.012755][   T35] vhci_hcd vhci_hcd.2: stop threads
[  115.032277][   T35] vhci_hcd vhci_hcd.2: release socket
[  115.045143][   T35] vhci_hcd vhci_hcd.2: disconnect device
[  115.111071][ T5735] usb 2-1: USB disconnect, device number 6
[  115.690048][ T5714] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  115.771630][ T6229] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[  115.858122][ T6229] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.921998][ T6222] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  115.978340][    T9] usb 4-1: USB disconnect, device number 5
[  116.017497][    T9] ftdi_sio 4-1:0.0: device disconnected
[  116.483366][ T6251] tmpfs: Group quota block hardlimit too large.
[  116.913436][ T6253] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  116.919989][ T6253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  116.967113][ T6253] vhci_hcd vhci_hcd.0: Device attached
[  117.234563][ T6258] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[  117.376638][ T5714] usb 35-1: new high-speed USB device number 3 using vhci_hcd
[  117.393752][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[  117.572488][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  117.572506][   T29] audit: type=1400 audit(1783784868.822:378): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  117.634000][   T10] IPVS: starting estimator thread 0...
[  117.694355][   T29] audit: type=1400 audit(1783784868.902:379): avc:  denied  { sqpoll } for  pid=6265 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  117.791091][ T6254] vhci_hcd: connection closed
[  117.791249][ T6268] IPVS: using max 75 ests per chain, 180000 per kthread
[  117.808462][   T13] vhci_hcd vhci_hcd.1: stop threads
[  117.815339][   T13] vhci_hcd vhci_hcd.1: release socket
[  117.826360][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  117.885658][   T29] audit: type=1400 audit(1783784869.132:380): avc:  denied  { bind } for  pid=6242 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.925205][   T29] audit: type=1400 audit(1783784869.162:381): avc:  denied  { ioctl } for  pid=6242 comm="syz.0.116" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  118.009145][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.164946][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  118.191216][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.219220][   T10] usb 3-1: Product: syz
[  118.226591][   T10] usb 3-1: Manufacturer: syz
[  118.232518][   T10] usb 3-1: SerialNumber: syz
[  118.251330][   T29] audit: type=1400 audit(1783784869.502:382): avc:  denied  { create } for  pid=6280 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  119.086667][ T6293] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[  119.095515][ T6293] netlink: 132 bytes leftover after parsing attributes in process `syz.1.128'.
[  119.164079][   T29] audit: type=1400 audit(1783784870.412:383): avc:  denied  { write } for  pid=6272 comm="syz.2.124" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  119.343237][   T29] audit: type=1400 audit(1783784870.592:384): avc:  denied  { create } for  pid=6298 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.388278][   T29] audit: type=1400 audit(1783784870.612:385): avc:  denied  { bind } for  pid=6298 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.440044][ T6299] 9p: Bad value for 'wfdno'
[  119.444000][   T29] audit: type=1400 audit(1783784870.622:386): avc:  denied  { listen } for  pid=6298 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.486799][   T29] audit: type=1400 audit(1783784870.622:387): avc:  denied  { connect } for  pid=6298 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  119.689128][ T5736] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  119.755681][ T6309] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.856245][ T5735] libceph: connect (1)[c::]:6789 error -101
[  119.895503][ T5735] libceph: mon0 (1)[c::]:6789 connect error
[  119.930546][ T6310] ceph: No mds server is up or the cluster is laggy
[  120.041438][   T10] net_ratelimit: 636 callbacks suppressed
[  120.041462][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  120.176143][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  120.343045][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  120.593206][   T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  120.701098][   T10] usb 3-1: USB disconnect, device number 4
[  122.550858][ T5714] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  122.580331][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  123.614701][ T6355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  123.623627][ T6355] overlayfs: missing 'lowerdir'
[  123.702337][ T6356] mmap: syz.3.145 (6356) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  123.837006][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  123.837044][   T29] audit: type=1400 audit(1783784875.082:396): avc:  denied  { create } for  pid=6353 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  124.458604][ T6371] FAULT_INJECTION: forcing a failure.
[  124.458604][ T6371] name failslab, interval 1, probability 0, space 0, times 1
[  124.544218][   T29] audit: type=1400 audit(1783784875.792:397): avc:  denied  { ioctl } for  pid=6369 comm="syz.2.148" path="socket:[11737]" dev="sockfs" ino=11737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  124.569306][ T6371] CPU: 0 UID: 0 PID: 6371 Comm: syz.2.148 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  124.569341][ T6371] Tainted: [L]=SOFTLOCKUP
[  124.569348][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  124.569361][ T6371] Call Trace:
[  124.569368][ T6371]  <TASK>
[  124.569376][ T6371]  dump_stack_lvl+0x100/0x190
[  124.569407][ T6371]  should_fail_ex.cold+0x5/0xa
[  124.569435][ T6371]  should_failslab+0xc2/0x120
[  124.569460][ T6371]  __kmalloc_noprof+0xfc/0x820
[  124.569480][ T6371]  ? rcu_is_watching+0x12/0xc0
[  124.569510][ T6371]  ? tomoyo_realpath_from_path+0xb6/0x690
[  124.569542][ T6371]  tomoyo_realpath_from_path+0xb6/0x690
[  124.569573][ T6371]  tomoyo_path_number_perm+0x23c/0x580
[  124.569593][ T6371]  ? tomoyo_path_number_perm+0x22e/0x580
[  124.569616][ T6371]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  124.569657][ T6371]  ? find_held_lock+0x2b/0x80
[  124.569679][ T6371]  ? __fget_files+0x215/0x3d0
[  124.569701][ T6371]  ? hook_file_ioctl_common+0x140/0x440
[  124.569715][ T6371]  ? __fget_files+0x215/0x3d0
[  124.569742][ T6371]  ? __fget_files+0x21f/0x3d0
[  124.569767][ T6371]  security_file_ioctl+0xd3/0x230
[  124.569788][ T6371]  __x64_sys_ioctl+0xb7/0x210
[  124.569810][ T6371]  do_syscall_64+0x115/0x870
[  124.569831][ T6371]  ? clear_bhb_loop+0x40/0x90
[  124.569851][ T6371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.569866][ T6371] RIP: 0033:0x7f076319de59
[  124.569880][ T6371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.569894][ T6371] RSP: 002b:00007f07613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.569910][ T6371] RAX: ffffffffffffffda RBX: 00007f0763425fa0 RCX: 00007f076319de59
[  124.569920][ T6371] RDX: 0000200000022a00 RSI: 000000008028640c RDI: 0000000000000004
[  124.569929][ T6371] RBP: 00007f07613f6090 R08: 0000000000000000 R09: 0000000000000000
[  124.569937][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.569946][ T6371] R13: 00007f0763426038 R14: 00007f0763425fa0 R15: 00007ffe54005ab8
[  124.569967][ T6371]  </TASK>
[  124.569974][ T6371] ERROR: Out of memory at tomoyo_realpath_from_path.
[  124.871448][ T5736] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  124.884228][ T6378] SELinux: ebitmap: empty map
[  124.890011][   T29] audit: type=1400 audit(1783784876.132:398): avc:  denied  { load_policy } for  pid=6377 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  124.914731][ T6378] SELinux: failed to load policy
[  125.129135][ T5736] usb 2-1: Using ep0 maxpacket: 16
[  125.146214][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.242325][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'.
[  125.287109][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.329940][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  125.397262][ T5736] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  125.482827][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.530821][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  125.553037][ T5736] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  125.566659][ T5736] usb 2-1: Manufacturer: syz
[  125.578105][ T5736] usb 2-1: config 0 descriptor??
[  125.773673][   T29] audit: type=1400 audit(1783784877.022:399): avc:  denied  { map } for  pid=6400 comm="syz.4.157" path="/30" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  125.879111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  125.891695][   T29] audit: type=1400 audit(1783784877.022:400): avc:  denied  { execute } for  pid=6400 comm="syz.4.157" path="/30" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  126.137246][ T5736] rc_core: IR keymap rc-hauppauge not found
[  126.143446][ T5736] Registered IR keymap rc-empty
[  126.255923][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.279556][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.320556][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  126.361448][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  126.459565][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.517608][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.555526][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.610275][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.653225][ T5735] IPVS: starting estimator thread 0...
[  126.660252][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.699418][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.759885][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.776689][ T6418] IPVS: using max 44 ests per chain, 105600 per kthread
[  126.790172][ T6422] vlan0: entered promiscuous mode
[  126.799630][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.822726][ T6422] vlan0: entered allmulticast mode
[  126.838743][ T6422] veth0_vlan: entered allmulticast mode
[  126.839209][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.889171][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  126.935925][ T5736] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  126.962708][ T5736] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  126.999426][ T5736] usb 2-1: USB disconnect, device number 7
[  127.129134][ T5714] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.142806][ T6435] xt_hashlimit: overflow, try lower: 6/0
[  127.717010][ T5608] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.118163][   T29] audit: type=1400 audit(1783784878.642:401): avc:  denied  { setopt } for  pid=6434 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  128.386870][ T5714] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  128.713770][   T29] audit: type=1400 audit(1783784879.742:402): avc:  denied  { watch } for  pid=6441 comm="syz.1.166" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  128.758495][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.761365][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.793841][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.808352][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  128.857438][ T5714] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  128.866785][ T5608] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.870945][   T29] audit: type=1400 audit(1783784879.742:403): avc:  denied  { watch_sb watch_reads } for  pid=6441 comm="syz.1.166" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  128.923320][ T5608] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  128.925425][ T6446] geneve2: entered promiscuous mode
[  128.932711][ T5608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.937934][ T5714] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  128.946893][ T5608] usb 3-1: SerialNumber: syz
[  128.971481][ T5714] usb 1-1: Manufacturer: syz
[  129.012904][ T5714] usb 1-1: config 0 descriptor??
[  129.036410][ T6446] geneve2: entered allmulticast mode
[  129.066078][   T29] audit: type=1326 audit(1783784880.292:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.1.168" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff99a59de59 code=0x0
[  129.196651][   T29] audit: type=1800 audit(1783784880.442:405): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.169" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  129.255946][ T5608] usb 3-1: 0:2 : does not exist
[  129.271333][ T5608] usb 3-1: unit 5 not found!
[  129.327159][ T5608] usb 3-1: USB disconnect, device number 5
[  129.399801][ T5728] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  129.412680][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.443918][ T5714] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  129.528785][ T5714] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  129.571317][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  129.582398][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.594770][ T5728] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  129.604205][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.616378][ T5728] usb 2-1: Product: syz
[  129.626420][ T5728] usb 2-1: Manufacturer: syz
[  129.631347][ T5728] usb 2-1: SerialNumber: syz
[  129.678377][ T5728] usb 2-1: config 0 descriptor??
[  129.705071][ T5728] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22
[  129.766366][ T6465] bridge0: port 4(vlan2) entered blocking state
[  129.814590][ T6465] bridge0: port 4(vlan2) entered disabled state
[  129.842638][   T29] audit: type=1400 audit(1783784881.092:406): avc:  denied  { ioctl } for  pid=6464 comm="syz.3.172" path="socket:[11857]" dev="sockfs" ino=11857 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.881818][ T6465] vlan2: entered allmulticast mode
[  129.894485][ T6465] geneve0: entered allmulticast mode
[  129.917080][ T6465] vlan2: entered promiscuous mode
[  129.946734][ T6465] geneve0: entered promiscuous mode
[  130.006133][ T5728] IPVS: starting estimator thread 0...
[  130.013798][   T29] audit: type=1400 audit(1783784881.262:407): avc:  denied  { unmount } for  pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  130.091970][   T29] audit: type=1400 audit(1783784881.262:408): avc:  denied  { getopt } for  pid=6464 comm="syz.3.172" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.140205][ T6473] IPVS: using max 45 ests per chain, 108000 per kthread
[  131.486418][ T6480] misc userio: Begin command sent, but we're already running
[  131.811943][ T5735] usb 1-1: reset high-speed USB device number 7 using dummy_hcd
[  131.831414][ T6483] netlink: 120 bytes leftover after parsing attributes in process `syz.2.175'.
[  132.323509][ T6494] Bluetooth: MGMT ver 1.23
[  132.331359][ T6494] Bluetooth: hci0: unsupported parameter 255
[  132.337716][ T6494] Bluetooth: hci0: unsupported parameter 255
[  132.517750][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.531082][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  132.643740][ T5736] usb 2-1: USB disconnect, device number 8
[  132.752447][   T29] audit: type=1400 audit(1783784883.992:409): avc:  denied  { create } for  pid=6496 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  132.753775][ T5608] usb 1-1: USB disconnect, device number 7
[  132.879663][   T29] audit: type=1400 audit(1783784884.062:410): avc:  denied  { setopt } for  pid=6496 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  134.208996][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'.
[  134.442857][ T6528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  134.449421][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  134.963994][ T6528] vhci_hcd vhci_hcd.0: Device attached
[  135.206139][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'.
[  135.220065][   T29] audit: type=1400 audit(1783784886.392:411): avc:  denied  { ioctl } for  pid=6531 comm="syz.2.187" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  135.270600][   T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  135.346515][ T6537] netlink: 14 bytes leftover after parsing attributes in process `syz.2.187'.
[  135.547621][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.556326][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.829092][ T5608] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  135.941098][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.969464][ T5608] usb 4-1: device descriptor read/64, error -71
[  135.993899][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.042408][   T29] audit: type=1400 audit(1783784887.292:412): avc:  denied  { read } for  pid=6560 comm="syz.0.190" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  136.043655][ T6561] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  136.154481][ T6561] audit: out of memory in audit_log_start
[  136.159528][   T29] audit: type=1400 audit(1783784887.292:413): avc:  denied  { open } for  pid=6560 comm="syz.0.190" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  136.280592][ T5608] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  136.401211][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[  136.420724][ T5608] usb 4-1: device descriptor read/64, error -71
[  136.561037][ T5608] usb usb4-port1: attempt power cycle
[  136.582649][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.607520][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.635958][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.645989][ T6529] vhci_hcd: connection reset by peer
[  136.662339][ T1164] vhci_hcd vhci_hcd.4: stop threads
[  136.672362][ T1164] vhci_hcd vhci_hcd.4: release socket
[  136.681404][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.694180][ T1164] vhci_hcd vhci_hcd.4: disconnect device
[  136.939243][ T5608] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  136.981194][ T5608] usb 4-1: device descriptor read/8, error -71
[  137.002329][   T29] audit: type=1400 audit(1783784888.252:414): avc:  denied  { create } for  pid=6581 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.026261][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[  137.035616][   T29] audit: type=1400 audit(1783784888.252:415): avc:  denied  { ioctl } for  pid=6581 comm="syz.1.196" path="socket:[11966]" dev="sockfs" ino=11966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.101741][   T29] audit: type=1400 audit(1783784888.272:416): avc:  denied  { write } for  pid=6581 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.240338][ T5608] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  137.279860][ T5608] usb 4-1: device descriptor read/8, error -71
[  137.399421][ T5608] usb usb4-port1: unable to enumerate USB device
[  138.786423][   T29] audit: type=1400 audit(1783784890.032:417): avc:  denied  { append } for  pid=6606 comm="syz.3.202" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  139.398919][ T6613] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.257365][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.265217][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.409403][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  140.786241][   T29] audit: type=1400 audit(1783784892.032:418): avc:  denied  { ioctl } for  pid=6626 comm="syz.1.207" path="socket:[12076]" dev="sockfs" ino=12076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  140.851467][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.866832][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.878175][ T6638] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  140.884711][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  140.905088][ T6638] vhci_hcd vhci_hcd.0: Device attached
[  141.652773][ T6639] vhci_hcd: connection closed
[  141.653140][   T82] vhci_hcd vhci_hcd.4: stop threads
[  141.669125][   T10] usb 41-1: device descriptor read/64, error -110
[  141.704412][   T82] vhci_hcd vhci_hcd.4: release socket
[  141.743073][   T82] vhci_hcd vhci_hcd.4: disconnect device
[  141.849188][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  142.012423][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'.
[  142.024178][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.054974][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.078805][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.216810][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.305627][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.419076][ T6552] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.493929][   T29] audit: type=1400 audit(1783784893.742:419): avc:  denied  { connect } for  pid=6655 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  142.769140][ T6552] usb 1-1: Using ep0 maxpacket: 16
[  142.927980][ T6552] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.958806][ T6552] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.025140][ T6552] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.099303][ T6552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.158409][ T6552] usb 1-1: Product: syz
[  143.211186][ T6552] usb 1-1: Manufacturer: syz
[  143.272400][ T6552] usb 1-1: SerialNumber: syz
[  143.565536][ T6552] usb 1-1: 0:2 : does not exist
[  143.585429][ T6552] usb 1-1: unit 6 not found!
[  143.980001][ T6665] team0 (unregistering): Port device team_slave_0 removed
[  144.013363][ T6665] team0 (unregistering): Port device team_slave_1 removed
[  144.034356][   T29] audit: type=1400 audit(1783784895.282:420): avc:  denied  { write } for  pid=6652 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  146.383889][ T6552] usb 1-1: USB disconnect, device number 8
[  146.937878][ T6703] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  146.944414][ T6703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  147.003096][   T29] audit: type=1400 audit(1783784898.252:421): avc:  denied  { create } for  pid=6697 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  147.050353][ T6703] vhci_hcd vhci_hcd.0: Device attached
[  147.139139][ T5608] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  147.198570][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  147.493149][ T6550] usb 35-1: new high-speed USB device number 4 using vhci_hcd
[  147.594376][ T5608] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  147.670080][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.703529][ T5608] usb 5-1: Product: syz
[  147.798848][ T5608] usb 5-1: Manufacturer: syz
[  147.869201][   T29] audit: type=1400 audit(1783784899.072:422): avc:  denied  { ioctl } for  pid=6714 comm="syz.3.226" path="socket:[13058]" dev="sockfs" ino=13058 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  148.037221][ T5608] usb 5-1: SerialNumber: syz
[  148.042242][   T29] audit: type=1400 audit(1783784899.092:423): avc:  denied  { accept } for  pid=6714 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  148.087536][ T5608] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  148.110003][ T5736] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  148.123359][ T6704] vhci_hcd: connection reset by peer
[  148.139196][   T12] vhci_hcd vhci_hcd.1: stop threads
[  148.150682][   T12] vhci_hcd vhci_hcd.1: release socket
[  148.174466][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  148.306675][ T6552] usb 5-1: USB disconnect, device number 12
[  148.423641][   T29] audit: type=1400 audit(1783784899.672:424): avc:  denied  { read } for  pid=6722 comm="syz.2.228" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  148.506424][   T29] audit: type=1400 audit(1783784899.712:425): avc:  denied  { open } for  pid=6722 comm="syz.2.228" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  148.683775][   T29] audit: type=1400 audit(1783784899.912:426): avc:  denied  { watch_sb } for  pid=6727 comm="syz.4.230" path="/47" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  148.894094][ T6737] warning: `syz.3.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  149.003365][ T6738] Device name cannot be null; rc = [-22]
[  149.089262][ T5801] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  149.140904][ T5736] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  149.162583][ T5736] ath9k_htc: Failed to initialize the device
[  149.250661][ T5801] usb 3-1: config index 0 descriptor too short (expected 8192, got 18)
[  149.362564][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.373399][ T5801] usb 3-1: config 0 has no interfaces?
[  149.376714][ T6552] usb 5-1: ath9k_htc: USB layer deinitialized
[  149.381015][ T5801] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  149.391691][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.394192][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.408970][ T5801] usb 3-1: Product: syz
[  149.413275][ T5801] usb 3-1: Manufacturer: syz
[  149.417923][ T5801] usb 3-1: SerialNumber: syz
[  149.430554][ T5801] usb 3-1: config 0 descriptor??
[  150.101454][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  150.109567][ T5611] Bluetooth: hci5: command 0x1003 tx timeout
[  150.805034][ T5801] usb 3-1: USB disconnect, device number 6
[  150.872206][ T6756] evm: overlay not supported
[  150.940995][ T6762] overlayfs: missing 'lowerdir'
[  151.070549][ T5736] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  151.229369][ T5736] usb 1-1: Using ep0 maxpacket: 16
[  151.246633][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  151.274944][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  151.369734][ T5736] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  151.380853][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.389158][ T5736] usb 1-1: Product: syz
[  151.394167][ T5736] usb 1-1: Manufacturer: syz
[  151.398771][ T5736] usb 1-1: SerialNumber: syz
[  151.407133][ T5736] usb 1-1: config 0 descriptor??
[  151.415163][ T5736] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  151.424631][ T5736] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  152.258603][ T5736] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  152.421461][ T6760] fuse: Bad value for 'group_id'
[  152.426563][ T6760] fuse: Bad value for 'group_id'
[  152.436177][ T5736] em28xx 1-1:0.0: Config register raw data: 0x3e
[  152.510045][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'.
[  152.875450][ T5736] em28xx 1-1:0.0: I2S Audio (3 sample rate(s))
[  152.900109][ T5736] em28xx 1-1:0.0: No AC97 audio processor
[  152.919196][ T6550] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  153.173920][ T5736] usb 1-1: USB disconnect, device number 9
[  154.837337][   T29] audit: type=1326 audit(1783784906.082:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.4.250" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b62d9de59 code=0x0
[  154.952775][   T29] audit: type=1400 audit(1783784906.152:428): avc:  denied  { create } for  pid=6803 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  155.428097][ T6813] vxfs: unable to read disk superblock at 1
[  155.435388][ T6813] vxfs: unable to read disk superblock at 8
[  155.441430][ T6813] vxfs: can't find superblock.
[  155.488818][ T6816] FAULT_INJECTION: forcing a failure.
[  155.488818][ T6816] name failslab, interval 1, probability 0, space 0, times 0
[  155.508316][   T29] audit: type=1400 audit(1783784906.272:429): avc:  denied  { bind } for  pid=6806 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  155.532122][ T6812] ip6gre1: entered allmulticast mode
[  155.562138][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.1.255 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.562158][ T6816] Tainted: [L]=SOFTLOCKUP
[  155.562162][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  155.562169][ T6816] Call Trace:
[  155.562173][ T6816]  <TASK>
[  155.562178][ T6816]  dump_stack_lvl+0x100/0x190
[  155.562199][ T6816]  should_fail_ex.cold+0x5/0xa
[  155.562216][ T6816]  should_failslab+0xc2/0x120
[  155.562230][ T6816]  __kmalloc_noprof+0xfc/0x820
[  155.562241][ T6816]  ? rcu_is_watching+0x12/0xc0
[  155.562257][ T6816]  ? tomoyo_realpath_from_path+0xb6/0x690
[  155.562277][ T6816]  tomoyo_realpath_from_path+0xb6/0x690
[  155.562296][ T6816]  tomoyo_path_number_perm+0x23c/0x580
[  155.562310][ T6816]  ? tomoyo_path_number_perm+0x22e/0x580
[  155.562324][ T6816]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  155.562354][ T6816]  ? find_held_lock+0x2b/0x80
[  155.562370][ T6816]  ? __fget_files+0x215/0x3d0
[  155.562386][ T6816]  ? hook_file_ioctl_common+0x140/0x440
[  155.562396][ T6816]  ? __fget_files+0x215/0x3d0
[  155.562415][ T6816]  ? __fget_files+0x21f/0x3d0
[  155.562435][ T6816]  security_file_ioctl+0xd3/0x230
[  155.562450][ T6816]  __x64_sys_ioctl+0xb7/0x210
[  155.562466][ T6816]  do_syscall_64+0x115/0x870
[  155.562483][ T6816]  ? clear_bhb_loop+0x40/0x90
[  155.562496][ T6816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.562508][ T6816] RIP: 0033:0x7ff99a59de59
[  155.562518][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.562528][ T6816] RSP: 002b:00007ff99b406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.562539][ T6816] RAX: ffffffffffffffda RBX: 00007ff99a825fa0 RCX: 00007ff99a59de59
[  155.562546][ T6816] RDX: 0000200000000540 RSI: 0000000040505331 RDI: 0000000000000003
[  155.562552][ T6816] RBP: 00007ff99b406090 R08: 0000000000000000 R09: 0000000000000000
[  155.562559][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.562565][ T6816] R13: 00007ff99a826038 R14: 00007ff99a825fa0 R15: 00007fff54785408
[  155.562579][ T6816]  </TASK>
[  155.562590][ T6816] ERROR: Out of memory at tomoyo_realpath_from_path.
[  155.876055][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.889195][ T6821] loop4: detected capacity change from 0 to 2640
[  155.931375][ T6819] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  155.959287][ T6823] Illegal XDP return value 960437954 on prog  (id 39) dev N/A, expect packet loss!
[  155.972482][ T6819] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  156.010392][ T6819] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  156.041710][ T6819] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  156.079426][ T6819] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  156.106971][   T29] audit: type=1400 audit(1783784907.352:430): avc:  denied  { write } for  pid=6818 comm="syz.0.256" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  156.139735][ T6819] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  156.163810][ T6819] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  156.188312][ T6819] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  156.198015][ T6819] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  156.213044][ T6819] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  156.309753][ T6837] netlink: 'syz.1.260': attribute type 8 has an invalid length.
[  156.455101][ T6842] fuse: Bad value for 'fd'
[  156.473507][   T29] audit: type=1326 audit(1783784907.722:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.263" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f076319de59 code=0x0
[  157.105715][   T29] audit: type=1400 audit(1783784908.252:432): avc:  denied  { shutdown } for  pid=6836 comm="syz.3.262" lport=54817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.127438][   T29] audit: type=1400 audit(1783784908.262:433): avc:  denied  { setattr } for  pid=6838 comm="syz.2.263" path="/dev/mixer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  157.373445][   T29] audit: type=1400 audit(1783784908.532:434): avc:  denied  { read } for  pid=6836 comm="syz.3.262" lport=54817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  157.734746][ T6850] overlayfs: missing 'lowerdir'
[  157.775527][ T6850] netlink: 'syz.4.265': attribute type 8 has an invalid length.
[  158.159081][ T5735] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  158.329091][ T5735] usb 1-1: Using ep0 maxpacket: 16
[  158.335376][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.347259][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.358451][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  158.368252][ T5735] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  158.378144][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.391911][ T5735] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  158.401146][ T5735] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.411482][ T5735] usb 1-1: Manufacturer: syz
[  158.418771][ T5735] usb 1-1: config 0 descriptor??
[  158.449687][ T6550] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  158.469265][ T6552] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  158.609140][ T6550] usb 5-1: Using ep0 maxpacket: 8
[  158.616208][ T6550] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.627517][ T6550] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  158.648461][ T6552] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  158.666185][ T6550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.677990][ T6552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.697685][ T6550] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  158.708166][ T6552] usb 4-1: config 0 descriptor??
[  158.723835][ T6550] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  158.725406][ T5735] rc_core: IR keymap rc-hauppauge not found
[  158.732662][ T6550] usb 5-1: Product: syz
[  158.763353][ T5735] Registered IR keymap rc-empty
[  158.768617][ T6550] usb 5-1: Manufacturer: syz
[  158.782858][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.788880][ T6550] usb 5-1: SerialNumber: syz
[  158.809454][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.809633][ T6550] usb 5-1: config 0 descriptor??
[  158.834206][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  158.872468][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  158.887042][   T29] audit: type=1400 audit(1783784910.132:435): avc:  denied  { read } for  pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2886 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.910346][ T6550] rc_core: IR keymap rc-imon-rsc not found
[  158.911193][   T29] audit: type=1400 audit(1783784910.132:436): avc:  denied  { open } for  pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2886 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.918362][ T6550] Registered IR keymap rc-empty
[  158.945873][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.951807][ T6550] rc rc1: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  158.969177][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.985595][ T6550] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input11
[  158.999138][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.019183][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.043202][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  159.059298][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.089394][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.129130][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.189345][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.237283][   T10] usb 3-1: Using ep0 maxpacket: 32
[  159.249423][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.347876][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  159.700134][ T6877] o2cb: This node has not been configured.
[  159.768628][ T6877] o2cb: Cluster check failed. Fix errors before retrying.
[  159.830260][ T6877] (syz.3.269,6877,1):user_dlm_register:674 ERROR: status = -22
[  159.842483][ T5735] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  159.867943][ T5735] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  159.883948][ T6877] (syz.3.269,6877,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2"
[  159.884323][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.005732][ T5735] usb 1-1: USB disconnect, device number 10
[  160.109281][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  160.295864][ T6552] ath6kl: Failed to submit usb control message: -110
[  160.364031][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.947592][   T10] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config
[  161.148890][ T6552] ath6kl: unable to send the bmi data to the device: -110
[  161.164596][ T6552] ath6kl: Unable to send get target info: -110
[  161.172756][   T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  161.181945][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.190179][   T10] usb 3-1: Product: syz
[  161.195148][   T10] usb 3-1: Manufacturer: syz
[  161.211043][ T6552] ath6kl: Failed to init ath6kl core: -110
[  161.223705][   T10] usb 3-1: SerialNumber: syz
[  161.233837][ T6552] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110
[  161.264201][   T10] usb 3-1: config 0 descriptor??
[  161.302142][   T10] cdc_ether 3-1:0.0: missing cdc header descriptor
[  161.372316][   T10] usb 3-1: unsupported MDLM descriptors
[  161.658984][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.733131][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.806708][ T6552] usb 5-1: USB disconnect, device number 13
[  161.827933][   T10] usb 3-1: USB disconnect, device number 7
[  161.870859][ T6558] usb 4-1: USB disconnect, device number 10
[  161.934205][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  161.934221][   T29] audit: type=1400 audit(1783784913.182:442): avc:  denied  { nlmsg_read } for  pid=6884 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  162.041469][ T6889] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 !
[  162.059990][ T6889] netlink: 92 bytes leftover after parsing attributes in process `syz.0.278'.
[  162.190091][   T29] audit: type=1400 audit(1783784913.442:443): avc:  denied  { map } for  pid=6891 comm="syz.0.279" path="socket:[13644]" dev="sockfs" ino=13644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  162.239092][ T6552] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  162.326823][ T5736] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  162.649791][ T6552] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  162.663754][ T6552] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  162.681068][ T6552] usb 5-1: config 150 has no interface number 0
[  162.699646][ T6552] usb 5-1: config 150 interface 204 has no altsetting 0
[  162.715130][ T6552] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  162.726135][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.730918][ T5736] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.736560][ T6552] usb 5-1: Product: syz
[  162.757234][ T6552] usb 5-1: Manufacturer: syz
[  162.762128][ T5736] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  162.764101][ T5736] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f00, bcdDevice= 0.40
[  162.771874][ T6552] usb 5-1: SerialNumber: syz
[  162.784450][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.804273][ T5736] usb 2-1: Product: syz
[  162.810499][ T5736] usb 2-1: Manufacturer: syz
[  162.815379][ T5736] usb 2-1: SerialNumber: syz
[  163.039262][ T5735] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  163.181462][ T6552] xr_serial 5-1:150.204: skipping garbage
[  163.205641][ T6552] xr_serial 5-1:150.204: xr_serial converter detected
[  163.267289][ T6900] all: renamed from lo
[  163.271688][ T5735] usb 4-1: Using ep0 maxpacket: 32
[  163.554739][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.590284][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.632218][ T5736] usb 2-1: USB disconnect, device number 9
[  163.643701][ T5735] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  163.686400][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.723800][ T5735] usb 4-1: config 0 descriptor??
[  163.726746][ T6903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.741912][ T5735] hub 4-1:0.0: USB hub found
[  164.063038][ T5735] hub 4-1:0.0: 29 ports detected
[  164.121705][ T5735] hub 4-1:0.0: insufficient power available to use all downstream ports
[  164.928035][ T6552] usb 5-1: xr_serial converter now attached to ttyUSB0
[  165.008749][   T29] audit: type=1400 audit(1783784916.252:444): avc:  denied  { setopt } for  pid=6915 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  165.035644][ T6917] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  165.159081][ T5736] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  165.309072][ T5736] usb 2-1: Using ep0 maxpacket: 16
[  165.666014][ T6552] usb 5-1: USB disconnect, device number 14
[  165.825463][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[  165.860660][ T6552] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  165.870212][   T29] audit: type=1400 audit(1783784917.112:445): avc:  denied  { connect } for  pid=6919 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  165.892735][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.903756][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.915524][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  165.935246][ T5736] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  165.945407][ T6552] xr_serial 5-1:150.204: device disconnected
[  165.946148][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.966853][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  165.984150][ T5736] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  165.994524][ T5736] usb 2-1: Manufacturer: syz
[  166.013991][ T5735] usb 4-1: USB disconnect, device number 11
[  166.064505][   T29] audit: type=1400 audit(1783784917.312:446): avc:  denied  { write } for  pid=6923 comm="syz.2.288" name="file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  166.064653][ T5736] usb 2-1: config 0 descriptor??
[  166.103325][ T6925] SELinux:  Context  is not valid (left unmapped).
[  166.124405][   T29] audit: type=1400 audit(1783784917.312:447): avc:  denied  { open } for  pid=6923 comm="syz.2.288" path="/64/file0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  166.180615][   T29] audit: type=1400 audit(1783784917.312:448): avc:  denied  { ioctl } for  pid=6923 comm="syz.2.288" path="/64/file0" dev="tmpfs" ino=357 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  166.230502][   T29] audit: type=1400 audit(1783784917.362:449): avc:  denied  { relabelto } for  pid=6923 comm="syz.2.288" name="blkio.bfq.io_serviced" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=""
[  166.257925][   T29] audit: type=1400 audit(1783784917.362:450): avc:  denied  { associate } for  pid=6923 comm="syz.2.288" name="blkio.bfq.io_serviced" dev="tmpfs" ino=356 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=""
[  166.343563][   T29] audit: type=1400 audit(1783784917.412:451): avc:  denied  { unlink } for  pid=5617 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=""
[  166.371007][ T6550] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  166.539749][ T6550] usb 1-1: Using ep0 maxpacket: 32
[  166.556922][ T6550] usb 1-1: unable to get BOS descriptor or descriptor too short
[  166.559096][ T5736] rc_core: IR keymap rc-hauppauge not found
[  166.573064][ T6550] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  166.581387][ T5736] Registered IR keymap rc-empty
[  166.581707][ T6550] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  166.591566][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  166.595419][ T6550] usb 1-1: config 14 has no interface number 0
[  166.610521][ T6550] usb 1-1: config 14 has no interface number 1
[  166.616997][ T6550] usb 1-1: config 14 interface 228 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  166.647886][ T6550] usb 1-1: config 14 interface 57 has no altsetting 0
[  166.655178][ T6550] usb 1-1: config 14 interface 228 has no altsetting 0
[  166.673890][ T6550] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  166.720546][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.813850][ T6550] usb 1-1: Product: syz
[  166.872190][ T6550] usb 1-1: Manufacturer: syz
[  166.930350][ T6550] usb 1-1: SerialNumber: syz
[  166.960253][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  166.994263][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  167.010351][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12
[  167.029654][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.049251][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.069305][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.099195][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.119144][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.139245][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.160884][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.201258][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.220857][ T5735] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  167.234189][   T29] audit: type=1400 audit(1783784918.482:452): avc:  denied  { bind } for  pid=6948 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  167.257191][   T29] audit: type=1400 audit(1783784918.482:453): avc:  denied  { name_bind } for  pid=6948 comm="syz.3.296" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  167.305277][   T29] audit: type=1400 audit(1783784918.502:454): avc:  denied  { node_bind } for  pid=6948 comm="syz.3.296" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  167.319153][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.349463][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.379304][   T29] audit: type=1400 audit(1783784918.582:455): avc:  denied  { ioctl } for  pid=6948 comm="syz.3.296" path="socket:[14505]" dev="sockfs" ino=14505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  167.407487][ T5736] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  167.427396][ T5736] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  167.427807][ T6955] FAULT_INJECTION: forcing a failure.
[  167.427807][ T6955] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  167.479123][   T29] audit: type=1400 audit(1783784918.582:456): avc:  denied  { module_request } for  pid=6948 comm="syz.3.296" kmod="netdev-pimreg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  167.520566][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.4.297 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.520596][ T6955] Tainted: [L]=SOFTLOCKUP
[  167.520601][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  167.520611][ T6955] Call Trace:
[  167.520617][ T6955]  <TASK>
[  167.520624][ T6955]  dump_stack_lvl+0x100/0x190
[  167.520651][ T6955]  should_fail_ex.cold+0x5/0xa
[  167.520674][ T6955]  _copy_from_user+0x2e/0xd0
[  167.520694][ T6955]  kstrtouint_from_user+0xd6/0x1d0
[  167.520718][ T6955]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  167.520740][ T6955]  ? __lock_acquire+0x49f/0x1a40
[  167.520770][ T6955]  proc_fail_nth_write+0x83/0x220
[  167.520794][ T6955]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  167.520824][ T6955]  vfs_write+0x2aa/0x1050
[  167.520851][ T6955]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  167.520878][ T6955]  ? __pfx_vfs_write+0x10/0x10
[  167.520902][ T6955]  ? __fget_files+0x215/0x3d0
[  167.520935][ T6955]  ? __fget_files+0x21f/0x3d0
[  167.520969][ T6955]  ksys_write+0x12a/0x250
[  167.520993][ T6955]  ? __pfx_ksys_write+0x10/0x10
[  167.521025][ T6955]  do_syscall_64+0x115/0x870
[  167.521049][ T6955]  ? clear_bhb_loop+0x40/0x90
[  167.521069][ T6955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.521084][ T6955] RIP: 0033:0x7f5b62d5e68e
[  167.521107][ T6955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  167.521123][ T6955] RSP: 002b:00007f5b63b9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  167.521141][ T6955] RAX: ffffffffffffffda RBX: 00007f5b63b9c6c0 RCX: 00007f5b62d5e68e
[  167.521152][ T6955] RDX: 0000000000000001 RSI: 00007f5b63b9c0a0 RDI: 0000000000000004
[  167.521168][ T6955] RBP: 00007f5b63b9c090 R08: 0000000000000000 R09: 0000000000000000
[  167.521178][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.521188][ T6955] R13: 00007f5b63026038 R14: 00007f5b63025fa0 R15: 00007ffc406f34a8
[  167.521213][ T6955]  </TASK>
[  167.570854][ T5735] usb 3-1: device descriptor read/64, error -71
[  167.766455][ T5736] usb 2-1: USB disconnect, device number 10
[  168.039251][ T5735] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  168.174110][ T6965] tmpfs: Bad value for 'mpol'
[  168.181613][ T6550] legousbtower 1-1:14.57: interrupt endpoints not found
[  168.190827][ T5735] usb 3-1: device descriptor read/64, error -71
[  168.207399][ T6550] legousbtower 1-1:14.228: interrupt endpoints not found
[  168.222402][   T29] audit: type=1400 audit(1783784919.472:457): avc:  denied  { read } for  pid=6948 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  168.259697][ T6550] usb 1-1: USB disconnect, device number 11
[  168.313814][   T29] audit: type=1400 audit(1783784919.562:458): avc:  denied  { associate } for  pid=6967 comm="syz.1.300" name="blkio.bfq.io_serviced" dev="tmpfs" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=""
[  168.344467][ T5735] usb usb3-port1: attempt power cycle
[  168.541200][ T6973] netlink: 'syz.1.302': attribute type 49 has an invalid length.
[  168.564957][ T6975] xt_hashlimit: size too large, truncated to 1048576
[  168.578967][ T6973] bond0: (slave bond_slave_0): Releasing backup interface
[  168.655337][   T29] audit: type=1400 audit(1783784919.902:459): avc:  denied  { getopt } for  pid=6971 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  168.944438][ T5735] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  168.959663][ T5735] usb 3-1: device descriptor read/8, error -71
[  168.979186][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  169.100869][ T5736] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  169.119332][   T29] audit: type=1400 audit(1783784920.372:460): avc:  denied  { read } for  pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  169.157014][ T6973] bond_slave_0: entered promiscuous mode
[  169.180691][ T6973] bond_slave_0: entered allmulticast mode
[  169.219259][ T5735] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  169.240519][ T5735] usb 3-1: device descriptor read/8, error -71
[  169.293814][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short
[  169.304065][ T5736] usb 4-1: not running at top speed; connect to a high speed hub
[  169.312846][ T5736] usb 4-1: config 8 has an invalid interface number: 66 but max is 1
[  169.321389][ T5736] usb 4-1: config 8 has an invalid interface number: 106 but max is 1
[  169.334645][   T29] audit: type=1400 audit(1783784920.582:461): avc:  denied  { search } for  pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  169.356223][ T5735] usb usb3-port1: unable to enumerate USB device
[  169.366124][ T5736] usb 4-1: config 8 has no interface number 0
[  169.373117][ T5736] usb 4-1: config 8 has no interface number 1
[  169.381039][ T5736] usb 4-1: config 8 interface 66 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85
[  169.393194][ T5736] usb 4-1: config 8 interface 66 has no altsetting 0
[  169.402705][ T5736] usb 4-1: config 8 interface 106 has no altsetting 0
[  169.413309][ T5736] usb 4-1: New USB device found, idVendor=05da, idProduct=00a0, bcdDevice=31.ac
[  169.449100][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.467446][ T5736] usb 4-1: Product: syz
[  169.471929][ T5736] usb 4-1: Manufacturer: syz
[  169.488841][ T5736] usb 4-1: SerialNumber: syz
[  169.606653][ T6985] capability: warning: `syz.0.305' uses deprecated v2 capabilities in a way that may be insecure
[  169.780439][ T5736] usb 4-1: expecting 3 got 2 endpoints! Bailing out.
[  169.915132][ T5736] usb 4-1: expecting 3 got 0 endpoints! Bailing out.
[  169.941775][ T5736] usb 4-1: USB disconnect, device number 12
[  170.027133][ T6998] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 6998 comm: syz.4.306)
[  170.053773][ T6998] tmpfs: Bad value for 'mpol'
[  170.877028][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'.
[  171.708758][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[  172.581119][   T29] kauditd_printk_skb: 84 callbacks suppressed
[  172.581130][   T29] audit: type=1400 audit(1783784923.832:546): avc:  denied  { bind } for  pid=7033 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  172.656112][   T29] audit: type=1400 audit(1783784923.852:547): avc:  denied  { setopt } for  pid=7033 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  172.708131][   T29] audit: type=1400 audit(1783784923.892:548): avc:  denied  { getopt } for  pid=7057 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  172.754354][   T29] audit: type=1400 audit(1783784923.892:549): avc:  denied  { write } for  pid=7027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  172.866716][   T29] audit: type=1400 audit(1783784923.992:550): avc:  denied  { write } for  pid=7067 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  172.889038][ T6550] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  173.071018][ T6550] usb 1-1: unable to get BOS descriptor or descriptor too short
[  173.080184][ T6550] usb 1-1: config 1 has an invalid interface number: 255 but max is 1
[  173.091423][ T6550] usb 1-1: config 1 has no interface number 1
[  173.104466][ T6550] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  173.127564][ T6550] usb 1-1: config 1 interface 0 has no altsetting 0
[  173.147578][ T6550] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  173.165460][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.183069][ T6550] usb 1-1: Product: syz
[  173.196581][ T7074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7074 comm=syz.4.320
[  173.257151][ T6550] usb 1-1: Manufacturer: syz
[  173.265992][ T6550] usb 1-1: SerialNumber: syz
[  173.407532][   T29] audit: type=1400 audit(1783784924.652:551): avc:  denied  { bind } for  pid=7076 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  173.427322][ T7077] netlink: 'syz.1.321': attribute type 4 has an invalid length.
[  173.455677][ T7077] netlink: 'syz.1.321': attribute type 4 has an invalid length.
[  173.486283][ T6550] smsusb:smsusb_probe: board id=8, interface number 0
[  173.527595][ T6550] smsusb:smsusb_probe: board id=8, interface number 255
[  173.558344][ T6550] usb 1-1: USB disconnect, device number 12
[  174.350175][ T7080] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.812706][   T29] audit: type=1400 audit(1783784926.842:552): avc:  denied  { write } for  pid=7099 comm="syz.2.329" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.002415][   T29] audit: type=1400 audit(1783784926.952:553): avc:  denied  { remove_name } for  pid=7099 comm="syz.2.329" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.241330][   T29] audit: type=1400 audit(1783784927.012:554): avc:  denied  { unlink } for  pid=7099 comm="syz.2.329" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  176.679053][ T6558] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.059334][ T6558] usb 4-1: Using ep0 maxpacket: 8
[  177.097822][ T6558] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  177.125020][ T6558] usb 4-1: config 0 has no interface number 0
[  177.160669][   T29] audit: type=1400 audit(1783784928.402:555): avc:  denied  { bind } for  pid=7122 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  177.163763][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.336'.
[  177.188161][ T6558] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  177.576386][ T6558] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  177.713141][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  177.713154][   T29] audit: type=1400 audit(1783784928.892:559): avc:  denied  { append } for  pid=7125 comm="syz.2.337" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  177.776319][ T6558] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  177.807401][ T6558] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  177.818844][ T6558] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  177.837493][ T6558] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  177.848308][ T6558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.858478][ T6558] usb 4-1: Product: syz
[  177.867306][ T6558] usb 4-1: Manufacturer: syz
[  177.874194][ T6558] usb 4-1: SerialNumber: syz
[  177.903440][ T6558] usb 4-1: config 0 descriptor??
[  177.911475][   T29] audit: type=1400 audit(1783784929.162:560): avc:  denied  { connect } for  pid=7131 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.194564][ T7112] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.332'.
[  178.212081][ T6558] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  178.246173][   T29] audit: type=1400 audit(1783784929.492:561): avc:  denied  { read } for  pid=7134 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  178.492636][ T6558] usb 4-1: USB disconnect, device number 13
[  178.531741][   T29] audit: type=1400 audit(1783784929.782:562): avc:  denied  { write } for  pid=7135 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  178.628285][ T7142] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  178.839111][ T5735] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  178.992244][ T5735] usb 3-1: Using ep0 maxpacket: 32
[  179.024677][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.042268][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.052816][ T5735] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  179.064211][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.137029][   T29] audit: type=1400 audit(1783784930.382:563): avc:  denied  { connect } for  pid=7157 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.274626][ T5735] usb 3-1: config 0 descriptor??
[  179.292917][   T29] audit: type=1400 audit(1783784930.412:564): avc:  denied  { write } for  pid=7157 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  179.294718][ T5735] hub 3-1:0.0: USB hub found
[  179.638191][ T5735] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  179.668441][   T29] audit: type=1400 audit(1783784930.582:565): avc:  denied  { accept } for  pid=7159 comm="syz.3.348" path="socket:[14103]" dev="sockfs" ino=14103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  180.212817][ T7146] input: syz1 as /devices/virtual/input/input13
[  180.472966][ T7171] netlink: zone id is out of range
[  180.487228][ T5735] usbhid 3-1:0.0: can't add hid device: -71
[  180.540920][ T7171] netlink: zone id is out of range
[  180.558495][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  180.592065][ T7172] netlink: 'syz.4.350': attribute type 2 has an invalid length.
[  180.670113][ T7171] netlink: zone id is out of range
[  180.808785][ T7171] netlink: zone id is out of range
[  180.816240][ T5735] usb 3-1: USB disconnect, device number 12
[  180.926524][ T7171] netlink: zone id is out of range
[  181.011559][ T7171] netlink: zone id is out of range
[  181.106838][ T7171] netlink: zone id is out of range
[  181.226007][ T7171] netlink: zone id is out of range
[  181.308095][ T7171] netlink: zone id is out of range
[  181.324765][ T7171] netlink: zone id is out of range
[  181.524480][   T29] audit: type=1400 audit(1783784932.752:566): avc:  denied  { lock } for  pid=7181 comm="syz.0.354" path="socket:[14275]" dev="sockfs" ino=14275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  181.870123][ T5735] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  182.017982][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'.
[  182.120499][ T5735] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  182.131066][ T5735] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  182.140329][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.147697][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[  182.160305][ T5735] usb 4-1: config 0 descriptor??
[  182.629310][ T7179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.640415][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.356'.
[  182.933276][ T5608] usb 4-1: USB disconnect, device number 14
[  182.979276][ T5735] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  183.049301][ T5736] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  183.146389][ T5735] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  183.164189][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.546663][   T29] audit: type=1400 audit(1783784934.792:567): avc:  denied  { getopt } for  pid=7194 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  183.595859][ T5736] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  183.840578][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.854694][ T5736] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  183.865044][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.881695][ T5736] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  183.917164][ T5735] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.926508][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.953821][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.987817][ T5735] usb 2-1: config 0 descriptor??
[  184.203586][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.224986][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.234118][ T5735] usbhid 2-1:0.0: can't add hid device: -71
[  184.255451][ T5735] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  184.303736][ T5735] usb 2-1: USB disconnect, device number 11
[  184.340030][ T7216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.363'.
[  184.357610][ T5736] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  184.386562][ T5736] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14
[  184.518877][ T5736] input: failed to attach handler kbd to device input14, error: -5
[  184.539896][   T29] audit: type=1400 audit(1783784935.782:568): avc:  denied  { create } for  pid=7214 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  184.868094][   T29] audit: type=1400 audit(1783784936.112:569): avc:  denied  { append } for  pid=7226 comm="syz.4.364" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  184.922273][ T5736] usb 3-1: USB disconnect, device number 13
[  184.971520][   T29] audit: type=1400 audit(1783784936.112:570): avc:  denied  { write } for  pid=7207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.486456][   T29] audit: type=1400 audit(1783784936.702:571): avc:  denied  { write } for  pid=7231 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  185.709325][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  185.879111][    T9] usb 4-1: Using ep0 maxpacket: 16
[  185.897446][    T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  185.914089][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.939828][    T9] usb 4-1: config 0 has no interface number 0
[  186.007733][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  186.023081][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.035642][    T9] usb 4-1: Product: syz
[  186.043342][    T9] usb 4-1: Manufacturer: syz
[  186.048357][    T9] usb 4-1: SerialNumber: syz
[  186.103031][    T9] usb 4-1: config 0 descriptor??
[  186.347944][    T9] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  186.372037][    T9] uvcvideo 4-1:0.105: No valid video chain found.
[  186.491554][    T9] usb 4-1: USB disconnect, device number 15
[  186.909452][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.059126][    C0] ==================================================================
[  187.067309][    C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  187.076699][    C0] Read of size 1 at addr ffff8880374b0010 by task syz-executor/5620
[  187.084689][    C0] 
[  187.087014][    C0] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  187.087041][    C0] Tainted: [L]=SOFTLOCKUP
[  187.087047][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  187.087059][    C0] Call Trace:
[  187.087065][    C0]  <IRQ>
[  187.087072][    C0]  dump_stack_lvl+0x100/0x190
[  187.087097][    C0]  print_report+0x13d/0x4b0
[  187.087121][    C0]  ? __virt_addr_valid+0x239/0x430
[  187.087143][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  187.087166][    C0]  kasan_report+0xdf/0x1c0
[  187.087189][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  187.087215][    C0]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  187.087239][    C0]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  187.087263][    C0]  llc_conn_state_process+0x3ec/0x1480
[  187.087292][    C0]  llc_conn_tmr_common_cb+0x2d4/0x880
[  187.087312][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  187.087337][    C0]  call_timer_fn+0x19a/0x610
[  187.087355][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  187.087375][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  187.087399][    C0]  ? mark_held_locks+0x40/0x70
[  187.087420][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  187.087443][    C0]  __run_timers+0x757/0xb00
[  187.087465][    C0]  ? __pfx___run_timers+0x10/0x10
[  187.087487][    C0]  ? ktime_get+0x9f/0x320
[  187.087505][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  187.087528][    C0]  run_timer_base+0x114/0x190
[  187.087547][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  187.087567][    C0]  run_timer_softirq+0x1a/0x50
[  187.087584][    C0]  handle_softirqs+0x1ea/0x9b0
[  187.087607][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  187.087627][    C0]  ? _raw_spin_unlock+0x28/0x50
[  187.087648][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  187.087675][    C0]  __irq_exit_rcu+0x162/0x210
[  187.087695][    C0]  irq_exit_rcu+0x9/0x30
[  187.087715][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  187.087745][    C0]  </IRQ>
[  187.087751][    C0]  <TASK>
[  187.087757][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  187.087776][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  187.087797][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b 39 b9 f5 cc
[  187.087815][    C0] RSP: 0018:ffffc90002e17448 EFLAGS: 00000293
[  187.087832][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff82867838
[  187.087843][    C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88807980a540
[  187.087855][    C0] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000001
[  187.087866][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ec81150
[  187.087877][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  187.087891][    C0]  ? page_table_check_set+0x408/0x930
[  187.087914][    C0]  page_table_check_set+0x408/0x930
[  187.087936][    C0]  __page_table_check_ptes_set+0x27a/0x4e0
[  187.087957][    C0]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  187.087977][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  187.088002][    C0]  copy_page_range+0x2197/0x5b20
[  187.088037][    C0]  ? mas_wr_store_entry+0xa1/0x1e80
[  187.088056][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  187.088083][    C0]  ? __pfx___might_resched+0x10/0x10
[  187.088104][    C0]  ? dup_mmap+0xcfe/0x21b0
[  187.088124][    C0]  ? down_write+0x146/0x1f0
[  187.088151][    C0]  ? up_write+0x2e5/0x5c0
[  187.088173][    C0]  dup_mmap+0xd44/0x21b0
[  187.088197][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  187.088218][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  187.088242][    C0]  ? __lock_acquire+0x49f/0x1a40
[  187.088261][    C0]  ? find_held_lock+0x2b/0x80
[  187.088284][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  187.088314][    C0]  copy_process+0x4588/0x8030
[  187.088342][    C0]  ? __pfx_copy_process+0x10/0x10
[  187.088364][    C0]  ? do_raw_spin_lock+0x128/0x260
[  187.088391][    C0]  kernel_clone+0x176/0x9d0
[  187.088414][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  187.088439][    C0]  ? find_held_lock+0x2b/0x80
[  187.088464][    C0]  ? __might_fault+0xc5/0x140
[  187.088491][    C0]  __do_sys_clone+0xd9/0x120
[  187.088512][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[  187.088543][    C0]  do_syscall_64+0x115/0x870
[  187.088568][    C0]  ? clear_bhb_loop+0x40/0x90
[  187.088587][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.088604][    C0] RIP: 0033:0x7f5a7c7c68d2
[  187.088619][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  187.088636][    C0] RSP: 002b:00007ffffb910970 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  187.088652][    C0] RAX: ffffffffffffffda RBX: 00007ffffb910970 RCX: 00007f5a7c7c68d2
[  187.088664][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  187.088675][    C0] RBP: 00007ffffb910afc R08: 0000000000000000 R09: 0000000000000001
[  187.088686][    C0] R10: 00005555761047d0 R11: 0000000000000246 R12: 0000000000000001
[  187.088696][    C0] R13: 00000000000927c0 R14: 000000000002da3e R15: 00007ffffb910b50
[  187.088713][    C0]  </TASK>
[  187.088720][    C0] 
[  187.585555][    C0] Allocated by task 7251:
[  187.589863][    C0]  kasan_save_stack+0x30/0x50
[  187.594519][    C0]  kasan_save_track+0x14/0x30
[  187.599181][    C0]  __kasan_kmalloc+0xaa/0xb0
[  187.603752][    C0]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  187.609113][    C0]  llc_sap_open+0x120/0x3b0
[  187.613597][    C0]  llc_ui_autobind.isra.0+0x2ae/0x580
[  187.618958][    C0]  llc_ui_connect+0x582/0xdb0
[  187.623623][    C0]  __sys_connect_file+0x141/0x1a0
[  187.628713][    C0]  __sys_connect+0x141/0x170
[  187.633281][    C0]  __x64_sys_connect+0x72/0xb0
[  187.638020][    C0]  do_syscall_64+0x115/0x870
[  187.642590][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.648466][    C0] 
[  187.650858][    C0] Freed by task 5615:
[  187.654818][    C0]  kasan_save_stack+0x30/0x50
[  187.659478][    C0]  kasan_save_track+0x14/0x30
[  187.664135][    C0]  kasan_save_free_info+0x3b/0x70
[  187.669145][    C0]  __kasan_slab_free+0x5f/0x80
[  187.673887][    C0]  __rcu_free_sheaf_prepare+0x5d/0x2f0
[  187.679341][    C0]  rcu_free_sheaf+0x1a/0xe0
[  187.683844][    C0]  rcu_core+0x5a2/0x10d0
[  187.688073][    C0]  handle_softirqs+0x1ea/0x9b0
[  187.692818][    C0]  do_softirq+0xac/0xe0
[  187.696949][    C0]  __local_bh_enable_ip+0xf8/0x120
[  187.702032][    C0]  __alloc_skb+0x5db/0x710
[  187.706438][    C0]  alloc_skb_with_frags+0xdd/0x760
[  187.711527][    C0]  sock_alloc_send_pskb+0x801/0x980
[  187.716702][    C0]  unix_dgram_sendmsg+0x3c7/0x1810
[  187.721798][    C0]  sock_write_iter+0x53a/0x5b0
[  187.726552][    C0]  vfs_write+0x6ac/0x1050
[  187.730856][    C0]  ksys_write+0x1f8/0x250
[  187.735171][    C0]  do_syscall_64+0x115/0x870
[  187.739749][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.745623][    C0] 
[  187.747921][    C0] The buggy address belongs to the object at ffff8880374b0000
[  187.747921][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  187.761963][    C0] The buggy address is located 16 bytes inside of
[  187.761963][    C0]  freed 2048-byte region [ffff8880374b0000, ffff8880374b0800)
[  187.775726][    C0] 
[  187.778020][    C0] The buggy address belongs to the physical page:
[  187.784399][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880374b3000 pfn:0x374b0
[  187.794436][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  187.802909][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  187.811376][    C0] page_type: f5(slab)
[  187.815328][    C0] raw: 00fff00000000240 ffff88813fe22000 ffffea0000cbe410 ffffea0001e79810
[  187.823887][    C0] raw: ffff8880374b3000 0000000800080005 00000000f5000000 0000000000000000
[  187.832449][    C0] head: 00fff00000000240 ffff88813fe22000 ffffea0000cbe410 ffffea0001e79810
[  187.841098][    C0] head: ffff8880374b3000 0000000800080005 00000000f5000000 0000000000000000
[  187.849741][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  187.858390][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  187.867050][    C0] page dumped because: kasan: bad access detected
[  187.873456][    C0] page_owner tracks the page as allocated
[  187.879141][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5617, tgid 5617 (syz-executor), ts 77085254129, free_ts 56521400271
[  187.899860][    C0]  post_alloc_hook+0xfd/0x120
[  187.904517][    C0]  get_page_from_freelist+0xf48/0x3530
[  187.909959][    C0]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  187.915829][    C0]  new_slab+0xa2/0x650
[  187.919872][    C0]  refill_objects+0xe3/0x410
[  187.924433][    C0]  __pcs_replace_empty_main+0x376/0x680
[  187.929959][    C0]  __kmalloc_cache_noprof+0x479/0x6c0
[  187.935313][    C0]  batadv_hard_if_event+0x14bf/0x3870
[  187.940675][    C0]  notifier_call_chain+0x99/0x3f0
[  187.945691][    C0]  call_netdevice_notifiers_info+0xbe/0x110
[  187.951569][    C0]  register_netdevice+0x1998/0x25a0
[  187.956750][    C0]  veth_newlink+0x44a/0xa00
[  187.961224][    C0]  rtnl_newlink+0x1499/0x2380
[  187.965873][    C0]  rtnetlink_rcv_msg+0x95e/0xe90
[  187.970893][    C0]  netlink_rcv_skb+0x159/0x420
[  187.975643][    C0]  netlink_unicast+0x585/0x850
[  187.980386][    C0] page last free pid 5464 tgid 5464 stack trace:
[  187.986694][    C0]  __free_frozen_pages+0x79f/0x1090
[  187.991885][    C0]  qlist_free_all+0x47/0xf0
[  187.996366][    C0]  kasan_quarantine_reduce+0x1a0/0x1f0
[  188.001802][    C0]  __kasan_slab_alloc+0x69/0x90
[  188.006631][    C0]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  188.012056][    C0]  do_getname+0x35/0x390
[  188.016270][    C0]  vfs_fstatat+0xd0/0xe0
[  188.020490][    C0]  __do_sys_newfstatat+0x9d/0x120
[  188.025482][    C0]  do_syscall_64+0x115/0x870
[  188.030046][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.035909][    C0] 
[  188.038204][    C0] Memory state around the buggy address:
[  188.043808][    C0]  ffff8880374aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.051837][    C0]  ffff8880374aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  188.059866][    C0] >ffff8880374b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.067893][    C0]                          ^
[  188.072465][    C0]  ffff8880374b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.080515][    C0]  ffff8880374b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.088568][    C0] ==================================================================
[  188.096711][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.103892][    C0] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  188.114897][    C0] Tainted: [L]=SOFTLOCKUP
[  188.119196][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  188.129231][    C0] Call Trace:
[  188.132488][    C0]  <IRQ>
[  188.135316][    C0]  dump_stack_lvl+0x100/0x190
[  188.139985][    C0]  vpanic+0x552/0x970
[  188.143941][    C0]  ? __pfx_vpanic+0x10/0x10
[  188.148413][    C0]  ? mark_held_locks+0x40/0x70
[  188.153154][    C0]  ? irqentry_exit+0x24d/0xa00
[  188.157911][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  188.164511][    C0]  panic+0xd1/0xe0
[  188.168220][    C0]  ? __pfx_panic+0x10/0x10
[  188.172618][    C0]  ? check_panic_on_warn+0x1f/0x90
[  188.177721][    C0]  check_panic_on_warn.cold+0x19/0x34
[  188.183071][    C0]  end_report.part.0+0x3a/0x90
[  188.187814][    C0]  kasan_report.cold+0xe/0x18
[  188.192487][    C0]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  188.199061][    C0]  llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470
[  188.205464][    C0]  ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10
[  188.212375][    C0]  llc_conn_state_process+0x3ec/0x1480
[  188.217818][    C0]  llc_conn_tmr_common_cb+0x2d4/0x880
[  188.223160][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  188.228767][    C0]  call_timer_fn+0x19a/0x610
[  188.233330][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  188.238424][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  188.244045][    C0]  ? mark_held_locks+0x40/0x70
[  188.248786][    C0]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  188.254392][    C0]  __run_timers+0x757/0xb00
[  188.258886][    C0]  ? __pfx___run_timers+0x10/0x10
[  188.263971][    C0]  ? ktime_get+0x9f/0x320
[  188.268273][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[  188.273270][    C0]  run_timer_base+0x114/0x190
[  188.277938][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  188.283125][    C0]  run_timer_softirq+0x1a/0x50
[  188.287884][    C0]  handle_softirqs+0x1ea/0x9b0
[  188.292646][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  188.297919][    C0]  ? _raw_spin_unlock+0x28/0x50
[  188.302745][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  188.308361][    C0]  __irq_exit_rcu+0x162/0x210
[  188.313013][    C0]  irq_exit_rcu+0x9/0x30
[  188.317248][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  188.322859][    C0]  </IRQ>
[  188.325777][    C0]  <TASK>
[  188.328771][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  188.334728][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  188.340075][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b 39 b9 f5 cc
[  188.359659][    C0] RSP: 0018:ffffc90002e17448 EFLAGS: 00000293
[  188.365880][    C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff82867838
[  188.373826][    C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88807980a540
[  188.381769][    C0] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000001
[  188.389719][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801ec81150
[  188.397668][    C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  188.405625][    C0]  ? page_table_check_set+0x408/0x930
[  188.410985][    C0]  page_table_check_set+0x408/0x930
[  188.416157][    C0]  __page_table_check_ptes_set+0x27a/0x4e0
[  188.421938][    C0]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  188.428241][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  188.433775][    C0]  copy_page_range+0x2197/0x5b20
[  188.438716][    C0]  ? mas_wr_store_entry+0xa1/0x1e80
[  188.443891][    C0]  ? __pfx_copy_page_range+0x10/0x10
[  188.449189][    C0]  ? __pfx___might_resched+0x10/0x10
[  188.454465][    C0]  ? dup_mmap+0xcfe/0x21b0
[  188.458863][    C0]  ? down_write+0x146/0x1f0
[  188.463353][    C0]  ? up_write+0x2e5/0x5c0
[  188.467771][    C0]  dup_mmap+0xd44/0x21b0
[  188.472004][    C0]  ? __pfx_dup_mmap+0x10/0x10
[  188.476660][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  188.482446][    C0]  ? __lock_acquire+0x49f/0x1a40
[  188.487367][    C0]  ? find_held_lock+0x2b/0x80
[  188.492020][    C0]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  188.497892][    C0]  copy_process+0x4588/0x8030
[  188.502550][    C0]  ? __pfx_copy_process+0x10/0x10
[  188.507548][    C0]  ? do_raw_spin_lock+0x128/0x260
[  188.512563][    C0]  kernel_clone+0x176/0x9d0
[  188.517040][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  188.522045][    C0]  ? find_held_lock+0x2b/0x80
[  188.526706][    C0]  ? __might_fault+0xc5/0x140
[  188.531362][    C0]  __do_sys_clone+0xd9/0x120
[  188.535926][    C0]  ? __pfx___do_sys_clone+0x10/0x10
[  188.541102][    C0]  do_syscall_64+0x115/0x870
[  188.545677][    C0]  ? clear_bhb_loop+0x40/0x90
[  188.550340][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.556214][    C0] RIP: 0033:0x7f5a7c7c68d2
[  188.560608][    C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  188.580362][    C0] RSP: 002b:00007ffffb910970 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  188.588748][    C0] RAX: ffffffffffffffda RBX: 00007ffffb910970 RCX: 00007f5a7c7c68d2
[  188.596691][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  188.604638][    C0] RBP: 00007ffffb910afc R08: 0000000000000000 R09: 0000000000000001
[  188.612605][    C0] R10: 00005555761047d0 R11: 0000000000000246 R12: 0000000000000001
[  188.620558][    C0] R13: 00000000000927c0 R14: 000000000002da3e R15: 00007ffffb910b50
[  188.628522][    C0]  </TASK>
[  188.631736][    C0] Kernel Offset: disabled
[  188.636034][    C0] Rebooting in 86400 seconds..