last executing test programs:

21m57.353449704s ago: executing program 2 (id=100):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000880)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019880)=0x80000000000003)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0xa080)
io_uring_setup(0x4c24, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000198c0)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x9)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
lseek(0xffffffffffffffff, 0x100000000, 0x1)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)='4', 0x1}, {&(0x7f0000000100)="a0", 0x1}], 0x2)

21m56.234497772s ago: executing program 2 (id=101):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000019300), 0x0, 0x80)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000019480)={0xfc, 0x7, 0x8, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f00000002c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f00000192c0)=0x7)
readv(0xffffffffffffffff, &(0x7f00000197c0)=[{&(0x7f0000019800)=""/244, 0xf4}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019340)={'geneve0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000019380)={0x0, 0x0, &(0x7f00000193c0)={&(0x7f0000019400)=@newlink={0x68, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f0000000080)=0xffffffff)

21m48.858328216s ago: executing program 2 (id=117):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0x9, 0x8, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0xfffffe98, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x1076014, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe0302, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r6, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x15, r7})

21m47.848459948s ago: executing program 2 (id=119):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000000000010000000000000003000000000200000002"], 0x0, 0x56}, 0x20) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ad000000870000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x6, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) (async)
ioctl$GET_BITMAP_FILE(r2, 0x90000915, &(0x7f0000000500))
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_driver={0x0, 0x1, &(0x7f00000001c0)="507af6f1f3cff4cbe59a7a900513fc2c67a6bacb5528cff5525de26831f476b8b687a73eee341f76089118c6c13da0d978b659ffc0bdd7863d4dad44a601421fc92df492cb9d40d958bbb84a0270617aaa0263885bb9bb2bf523338224ea88db76ddc5f725b684787e14f53a683eb9a3d7cc52c1ab11f2623906db1a386ffa21ac96c4083f335f7ab2c769c1da02b45e9799ea17f6b63cf3b5dde119f14c7756af1559b2858414ffbaedc200b51275c58752982e571c1e65eb565d2fa1d56add2fc55199448b9d482a3fbf6f125c11bd0680bd9eeb4cdab11a28e32188550356c590831e157efd"})

21m41.943820184s ago: executing program 2 (id=133):
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
r0 = syz_open_dev$video(&(0x7f0000000240), 0xd, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x18840, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f000001b7c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a700)=""/4096, 0x1000, 0x1, &(0x7f000001b700)=""/131, 0x83}, &(0x7f000001b800)=0x40)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0)
read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8)
socket(0x11, 0x80a, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ptrace$setopts(0x4200, 0x0, 0xe9, 0x4)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0xa)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, 0x0, 0x20000000)
sendmsg$nl_route_sched(r1, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x3, 0x3, {}, [{0x4c, 0x1, [@m_tunnel_key={0x48, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044808}, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x2, @pix_mp={0x8, 0xe62, 0x32314142, 0x6, 0x2, [{0x7}, {0x7e1, 0x3}, {0x2, 0x2aae}, {0xffffffff, 0x80000000}, {0x6, 0x3ff}, {0x1ff, 0x9}, {0x900, 0x9}, {0x9, 0x7}], 0x7, 0x1f, 0x0, 0x2, 0x1}})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])

21m39.932688778s ago: executing program 2 (id=136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000192c0)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write(r0, &(0x7f0000019580)='=M', 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = dup(r1)
sendmmsg$unix(r2, &(0x7f0000019400)=[{{&(0x7f0000019480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000019500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40840}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x600, 0x0, 0x0)
read$msr(r5, &(0x7f00000002c0)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
write$selinux_user(0xffffffffffffffff, &(0x7f0000019300)=ANY=[], 0x27)
ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000019600)={'pimreg\x00', 0x2000})
setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000019300), 0x4)
sendmsg$kcm(r6, &(0x7f0000019340)={&(0x7f0000019380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x8, 0x3, 0x1, {0xa, 0x4e21, 0x9, @remote, 0x2}}}, 0x80, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d)

21m24.586679665s ago: executing program 32 (id=136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000192c0)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write(r0, &(0x7f0000019580)='=M', 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = dup(r1)
sendmmsg$unix(r2, &(0x7f0000019400)=[{{&(0x7f0000019480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000019500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40840}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x600, 0x0, 0x0)
read$msr(r5, &(0x7f00000002c0)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
write$selinux_user(0xffffffffffffffff, &(0x7f0000019300)=ANY=[], 0x27)
ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000019600)={'pimreg\x00', 0x2000})
setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000019300), 0x4)
sendmsg$kcm(r6, &(0x7f0000019340)={&(0x7f0000019380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x8, 0x3, 0x1, {0xa, 0x4e21, 0x9, @remote, 0x2}}}, 0x80, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d)

29.749957007s ago: executing program 4 (id=3067):
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xac, 0x52, 0x86, 0x20, 0x7aa, 0x2e, 0xe06f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xaa, 0x80, 0x0, 0x95, 0xd1, 0x53, 0x7f}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x1df)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

26.284086944s ago: executing program 4 (id=3073):
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002d00070100000000ffdbdf25017c00001800014227a7948014000600fc0100000000000000000000000000010c25028006000280e51b00009875e54fec158509c3cade932cf5eee6c5c1aa81bfbdc9b31a452a7b98af6732000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2000c010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write(r6, 0x0, 0x0)
r7 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r7, &(0x7f00000007c0)={0x23, 0x2, 0x8}, 0x10)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000840)=0x1, 0x4)
ioctl(r8, 0x89ed, &(0x7f0000000880)='\x00\x00\x00\x00')
close(0xffffffffffffffff)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000900)={0x2, 'lo\x00', 0x3}, 0x18)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000940)={0x2, 'syzkaller0\x00', 0x3}, 0x18)
getsockname$packet(r3, &(0x7f0000000980)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x13)
sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r11, @ANYBLOB="b27e7395d8b1b89e6d7c8398a845bc1b08a09b1f977bd70d793b017fb440bf4d7ebcae300f89"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0)

25.819987931s ago: executing program 4 (id=3074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0006000000080021"], 0x2c}}, 0x0)

25.625816442s ago: executing program 4 (id=3075):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900", <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000840)='wchan\x00')
mount$9p_fd(0x0, &(0x7f0000000880)='.\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 6)

25.32094478s ago: executing program 4 (id=3076):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$rxrpc(0x21, 0x2, 0x2)
syz_open_dev$loop(0x0, 0x2, 0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x140e, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

24.310372465s ago: executing program 4 (id=3082):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000580)=0xb0000)
r1 = landlock_create_ruleset(&(0x7f00000005c0)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000700)={@hyper, 0x1})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x0, 0x0, 0x1}]})
openat(0xffffffffffffff9c, 0x0, 0xc0082, 0x1d8)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx4\x00', 0x1208800, 0x0)
close_range(r2, 0xffffffffffffffff, 0x600000000000000)

7.034922625s ago: executing program 5 (id=3123):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a00)={0x7, 0x0, [{0xa000, 0x96, &(0x7f0000000500)=""/150}, {0x1ffc, 0x94, &(0x7f0000000640)=""/148}, {0x6000, 0x3, &(0x7f0000000700)=""/3}, {0xd000, 0x18, &(0x7f0000000740)=""/24}, {0xeeee8000, 0xaa, &(0x7f0000000780)=""/170}, {0xffff1000, 0xaa, &(0x7f0000000840)=""/170}, {0x2000, 0xdd, &(0x7f0000000900)=""/221}]})
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000b00)={0x0, 0x1e10, 0x4000, 0x2, 0x363, 0x0, r1}, &(0x7f0000001ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf339, 0x0, 0x0, 0x28, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95cd, 0x1000, 0x1, 0xe8, 0x0, r1}, <r4=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd81e, 0x1, 0x2, 0x55, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3189, 0x20, 0x2, 0x16d, 0x0, r1}}], 0x4, &(0x7f0000001e00)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x401}, 0x0, 0x0, '\x00', {0x3, 0xf1a, 0x0, &(0x7f0000002140)=@buf_4k="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"}}, &(0x7f0000001e80))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000240), 0x10106, 0x2, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1)
syz_io_uring_setup(0x6de4, &(0x7f0000000300)={0x0, 0x113a, 0x2, 0x2}, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000380), 0xd, 0x123002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000480)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmmsg$inet6(r0, 0x0, 0x0, 0x24000040)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000004c0)={0x0, 0x3}, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)

6.733622718s ago: executing program 0 (id=3124):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a00)={0x7, 0x0, [{0xa000, 0x96, &(0x7f0000000500)=""/150}, {0x1ffc, 0x94, &(0x7f0000000640)=""/148}, {0x6000, 0x3, &(0x7f0000000700)=""/3}, {0xd000, 0x18, &(0x7f0000000740)=""/24}, {0xeeee8000, 0xaa, &(0x7f0000000780)=""/170}, {0xffff1000, 0xaa, &(0x7f0000000840)=""/170}, {0x2000, 0xdd, &(0x7f0000000900)=""/221}]})
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000b00)={0x0, 0x1e10, 0x4000, 0x2, 0x363, 0x0, r1}, &(0x7f0000001ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf339, 0x0, 0x0, 0x28, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95cd, 0x1000, 0x1, 0xe8, 0x0, r1}, <r4=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd81e, 0x1, 0x2, 0x55, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3189, 0x20, 0x2, 0x16d, 0x0, r1}}], 0x4, &(0x7f0000001e00)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x401}, 0x0, 0x0, '\x00', {0x3, 0xf1a, 0x0, &(0x7f0000002140)=@buf_4k="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"}}, &(0x7f0000001e80))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000240), 0x10106, 0x2, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x1)
syz_io_uring_setup(0x6de4, &(0x7f0000000300)={0x0, 0x113a, 0x2, 0x2}, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000380), 0xd, 0x123002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000480)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmmsg$inet6(r0, 0x0, 0x0, 0x24000040)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000004c0)={0x0, 0x3}, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)

4.473849259s ago: executing program 1 (id=3127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='27', 0x2)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4300010049080000180012800e0001292667a04a6c0077697265677561726400"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x40004)

4.314704775s ago: executing program 1 (id=3128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@bridge_newneigh={0x28, 0x1c, 0xffd, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) (fail_nth: 1)

3.943435939s ago: executing program 1 (id=3129):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$rxrpc(0x21, 0x2, 0x2)
syz_open_dev$loop(0x0, 0x2, 0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x140e, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

3.875241827s ago: executing program 3 (id=3130):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pnp/devices/00:01/options\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/256, 0x100) (fail_nth: 1)

3.634921545s ago: executing program 5 (id=3131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c080003400000003b080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000000000006400000000508000780040001000900010073797a30"], 0x110}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x1)
write$sysctl(r2, &(0x7f0000000300)='7\x00', 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffdfd9ac3aaabb86dd6000000800283afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000bb0e020000000000000000000000f820000001"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d9503080000000000000000", @ANYRES32=r3, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)

3.305141912s ago: executing program 0 (id=3132):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x34, 0x3e})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x2000000000000195, &(0x7f00000005c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000100)={r2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x168, 0x9, 0x168, 0xb, 0x268, 0x250, 0x250, 0x268, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x120, 0x168, 0x0, {0x0, 0x28e}, [@common=@hbh={{0x48}, {0x80c, 0x3, 0xaac5260750e57b83, [0xc, 0x5, 0xe27, 0x9, 0x3, 0x3a3, 0xffff, 0xcd3, 0x6, 0x1, 0x8, 0xd0, 0x0, 0x800, 0x0, 0x3]}}, @common=@inet=@ipcomp={{0x30}, {[0x0, 0x4d2]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, 0x0, 0x0)

3.16166609s ago: executing program 3 (id=3133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
clock_gettime(0x2, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='/\xe6\x8c\x1e\x94\x02', &(0x7f00000000c0)="4857a3a9a9680e75d9ae10dd5ea37d0dbbbfcba4813197b5f1f9e1bf91977f48d3af70fa0c9790cc2c4b9a726084a71bb7dc790e15982660260758c4f7b8330778696a177c95004a24782847b4a6f60000000000", 0x54)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r2 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x8c)
fchdir(r3)
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', 0x101a00, 0x58)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x4c0000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000580)={@remote, 0x10, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000005c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0xc4086)
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x103182, 0x0)

2.672016957s ago: executing program 1 (id=3134):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f)

2.045452237s ago: executing program 5 (id=3135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) (fail_nth: 1)

1.843297812s ago: executing program 0 (id=3136):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi3\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='27', 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001300)=""/4111, 0x26, 0x100f, 0xa}, 0x28)
syz_io_uring_setup(0x45d3, &(0x7f0000000000)={0x0, 0x491d, 0x4, 0x3, 0x321}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0))
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001240)={'pcl818\x00', [0x100, 0x4, 0x302, 0xd, 0xe, 0x15, 0x74, 0x3, 0x2, 0x4, 0xa, 0x1000006c, 0x7, 0x2008, 0x10001, 0x1, 0x2, 0x55, 0x7f, 0x800, 0x89, 0xca9f, 0x1000000, 0x80000000, 0xffffffff, 0x9, 0x6, 0x3529, 0xa6b5, 0x8, 0xfffffffc]})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'c6xdigio\x00', [0x7, 0x5, 0x88c6, 0xe, 0x6, 0x79f0af92, 0xf, 0x1, 0xe, 0x0, 0x7, 0xfffffff8, 0x4, 0x3, 0x401, 0x400, 0x9, 0x3, 0x7ff, 0x8, 0x68000000, 0x1, 0xd, 0xa0d, 0x5, 0xe79d, 0x6, 0x3, 0x0, 0x10001, 0xf25, 0x4]})
ioctl$COMEDI_POLL(r0, 0x640f)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)

1.770694861s ago: executing program 3 (id=3137):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x3, 0x3, 0x2, 0xb005, <r1=>0xffffffffffffffff}) (async)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100))
r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f0000000180)=0x9, 0xffffffff)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000001c0)=0x9) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x75, 0xb2, &(0x7f0000000200)="559bf56efe6147c3dccb10ca88fdb94fc4adece81a0195fbb12909ef56d0361d8dc4eb2bf28e3cef258df18efd38e2954d98a847821f5f746e3fa89268af586e99e54d868936e1aaf53667816d4f85dfc4bd3c765a7443af0bf73daf405a52128bb7c28ce68756fad2ca1754d588c7fbd585e9eb9a", &(0x7f0000000280)=""/178, 0x2, 0x0, 0xf7, 0xe, &(0x7f0000000340)="20f5ab07464a5160436dc08cb7ddf2c75287c2fc830394bd135f53bc72e9e28ae88ae1cfba186f076aac316f09f70cc349546e1f3bd3e3bafea4833396d13ecae3feab827be1ec3d9386d7757cf39fb688e7c4f93a52815eff75cede2d594589671cf54e6bab1c5ac0824ff67a9e17367243e6bd9ea265b2265f8e5c7eca89f640d911862bd8418b14c4bc7a1561c521f5cac5608000b4f27d6a73266fbdd9e05a40f584778976a4e2737d48d0f9f77dc3c9898466d917bf178030d12416d1b376d6d05f8aead1fbca8113d5179965de55f48c53f979f16b9623930142eda3dc74970380ebad0f3cbc2444fdc1fdafed8c4fcace0774a4", &(0x7f0000000440)="0a49de5416191e5b25429540ee64", 0x4, 0x0, 0xfffffffb}, 0x50) (async)
syz_btf_id_by_name$bpf_lsm(&(0x7f0000000500)='bpf_lsm_task_getpgid\x00') (async)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x4}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xc2, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x65, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x74ea}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x8}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x62f3}, @generic={0x40, 0x1, 0x8, 0x7, 0xfffff442}, @jmp={0x5, 0x1, 0x7, 0x9, 0x9, 0xc, 0x8}]}, &(0x7f0000000640)='syzkaller\x00', 0xf, 0x33, &(0x7f0000000680)=""/51, 0x60880, 0x40, '\x00', 0x0, @fallback=0x34, r0, 0x8, &(0x7f00000006c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x1, 0x5, 0x10}, 0x10, r5, r0, 0x7, 0x0, &(0x7f0000000a40)=[{0x0, 0x2, 0x3, 0xb}, {0x2, 0x3, 0x10, 0xa}, {0x3, 0x1, 0xb, 0x9e686f9b6e289ffa}, {0x3, 0x1, 0x10, 0x6}, {0x0, 0x5, 0xc, 0x1}, {0x4, 0x3, 0xb, 0x7}, {0x2, 0x1, 0xb, 0xc}], 0x10, 0x9}, 0x94)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000b80)) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000bc0), 0x412001, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000c00)={0x11, 0xf, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x78}, @ra, @ra={0x5, 0x2, 0x100}, @generic={0x0, 0x57, "c8169d36fe860343fb15e91ad5cd3e2327b3e9e5023491bc11787a0fbb4c56d3307d37717107e4b40df952fb30fee167ccac2f33f0451bf16283c3080acec897d16eb0f3f4b73040026b6d496370cf8bb668fba774af68"}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}, 0x88) (async)
read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002d00)={0x50, 0x0, r9, {0x7, 0x2d, 0xffffff7e, 0x400, 0x0, 0xcfab, 0x8, 0x1, 0x0, 0x0, 0x40, 0x9}}, 0x50) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000002d80), r7) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002dc0)={'wg1\x00', <r10=>0x0})
r11 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000002e00)={0x40, r11}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002f00)={'syztnl0\x00', &(0x7f0000002e80)={'syztnl2\x00', <r12=>r10, 0x29, 0x7, 0x9, 0x6, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0x1eaacc73, 0x10001}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002f40)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000031c0)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003180)={&(0x7f0000002f80)={0x1dc, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x64048091}, 0x40004)
syz_emit_ethernet(0x101f, &(0x7f0000003200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}}, {@llc={0x4, {@snap={0xab, 0x1, "2c91", "fac829", 0x80f3, "825ad334fc0274e9d513c704ce9b9c05bd55323ee9a51985ae7653569d8340a2be2d8914ff71c7d3766ed01b7eb3b817cb3839d413055b3a87bd2c81486f5147cdc5fcd3e68e09ca6054731fb928dfaf46b96a697b9db495482a425ce934b9d7a17a4779195e5f4fabbec832f93e5a2d42e1bc52c8ed49eddf4249c7a6410ae599d89a59d060f2ceba5ccd351df5575183ecf20ab7529bb03309e658aac0ac9843eabedaafa5a55c73b7a2038e39e9cf50fda1414672a288747b7768ac18ba3003858869c6c257e0d95f71450ce84a24bd71bca57fe1c34e0e397e72c586bf36f3867b7c0659512f24478b6b161d344bce02d99721b4db1be42789d557106d85f41b6b888ba98c9d18981af6edf757ee4df4366e696926beeec6b4f825e3095a769374a758a97df50ed58dff333c1903a36a82697f92815e0fd9589c08c979b59c71504ccd20fc76999708c944c5c5ea702fd89d07d44144f8167c51f141c846ad6e4fa5f0dc94e2c978902b8100f6fa5197a8e2f9e6fba52afbc5940a172a23fc68021484dc60e41f32d28bc807ec5918eb47fed4bc68c52c73492ee41898d6553cf4164983e2729b47fd9d67a5fd49bb4597f21cbae34805b3e3a130d777701c1cfb445d13405f10e455075a3b0823bb2a489210fbc1980e42f6489d37c18908dd260427f74c59ea6f9ee9f731413aa29a78b99504dcda39d3a876c155024e7b55f00bcacd81f21dc33077b2cafb6784ae72dae36e5e2485cc25f9b6ae6af4de70a6ad7997e2ce4c7f3dbca2b6e840f5cb0426956f31258af660cd7ad5f24b0792c84b89bb71f6c42e1e969e09306677c902b4739b1bc4a01030d3ac83b147444363d59f7bbe1658c01b4bec8d46869ce0ac384a0a6243591dcf2dafc2a2b528daaba754c0b97214fb164448c32ff65c353d151adf16e7a14cb31bfb194fb91f15be2d8cde86c81aa0920257c4c8de8fc0a570b3fd182a9ddda3e7d2207d9ec303beb1517b098e06cee5dce08b04b951d86fc331a7011fa259acfb486521a2fb558319f203ca7cf4db78133ef5884575fae7de56c3a87f63d1c748aaa4c984246175275e3a614f92dcd636b0ab24524b1c97377e6d56f66e942bdd906cfafeec0d18389c3a4f3883f61132e200d327669b15268f3ce5f007caf2034262ecdbc670480b80e79e556c166177eaae20c14ee129eaff65d6561d4e0476a70b8f2481e2518d5eff38335dba071dca0371ff3c7bb2cd3fc53aacdd0cb9402ff5e7bc19118704e2c7007118e61c036ac8c5461fab442a3ad51fc94b6c981f0dc178cb67ad820b361655b07faa16f8e0c004bfe9f8b2c502ce237ede96f183441f0b754cdf65964c48e0e2a22e0925e7c81bce356ce5b7974c213489cc63f0f40aae012254edf3a0918b215274e5740235bf398d435458d55ac8f6ef3e095d2cd6cbde826a113161383543c7606f2eeea7ed85c9bc5391e142826603757e070e281b416f4661f44abecc66dbc39c86189990b629359f29345ed35d7a7a3eaf69a489db048c9f3c1ddb96d05fa5b4e934839c8f763e2add0f5cc1d829158d23ccedfc9b163eecf4b88158f4194ec6b640a27314d3f3bc35fcbd24bd0082b4becc35f7506fe2282b642194862c1bc95bf71735dd881e371d7413ed8a6779b497d85d13cdd8e8f6cee5abcce3f86a0336283e28ef956961f6a652dbf6c1b07dc27b920849024ccd5141c0e47b3ffae2dd118aa5a755f917b0a0af8c39ff725bb8e8897d43a9e014397851be362fa010abb323000a375f6a08d3b6792d6e0690e08e52eede4f4b70e1375c23e29781416121f4b55b9e28dac52e7963d3216a47414f6b46b088886ea40dead18835e8525e9213e26d1ade0a939c4cde6fc087bfe5eb393b8b0cad4f922cffdac739f38d7ca5f1eaffd6ec6af600c65bf9a127ee5e8dfe08c1f0eb65891870ab54b5ff4b3ecef13f47b8ad756a610e77c689452b57233ba15f21eb2c59704bf5a7b412b496bfa05c5deb8508b7674a119c511e1e0cbde3f3fb4dd129b70412695aa1c9f09f45f81e61ae02d3f533bc01e932fce0aa42b862a9d1e7f7c0f6df8638b0c9ce48c5ed9144c4b4190c177b6dc288f83a11d2f947bfb9ddfefa78a120a4201c75c581aed09deeee0b4e0f971a0aa2c8bf1e6c2bef67b8ba6aa01e2967f9d784fe70a19311d7d7021173af5adb0279880585802c6a013a03be270e0f5b06012a902e0a6a3a7b1d6e4005f12e1e5b5598d94769401404c108d2aa25286e31e4a6fcc21aab73c8cf600525edf4f6ca064350ba5371d06c6ae71ecc2f350a22591156dc067a83d27e447d47cb9ad7aeca33075966ea33af8e1aa2c0292e75538a25cb43f0b3f1ca95c11461b743a97022f2c11d3b497b61ea8bc22693fe1a7142050753905a72693a78af3914c6eb936f2eedbd8c429435a09bf68b768bb11a37f8b3214cb5cc369d8d1cf37e1a9d86bb64879a7dbd3d0126eddf7d2eac0299dd5153322908d6cfddf0fa720e652c881ed4b34d23947ba986e4bcf1fadb7b1375a6fee85c951b85d11ab011f3fa1f28a955467902a9dc1424a553523394d51afc5b65170f26d4c0fb52b45fd69a485b785de378b887ade45c31a7b856b0644efb65448c6b6a4b4c642b10a5619f55dc3774878b140989c3143f413c8110d68d4b48a471af08cd6e9444ac4c4592092b8da152a5484c2b0c5bece98a329d230c971d92996c49584d8d99ad3f0d089d36db490ab77d2c3ffd77e4534160920be263b06f670f2548514d5581c2eceef7bc9930649452981c6355a001c7a9bf1aa093bb6cbbaecc8a4ce21506589aee523a5f624fd65cee15ed21c9e78c3e73c251986ffb463ad91a29872ea547c7404854b7fc5d11151d0324a007a8ff8578c0cd520e73f94641f62aab59daefaefbc5ad10555040a0bf3eec6cc8daa6f07932cff1779d0c6794eda0c93db16bcea0565d12376d381156e58d9efa4d2c00f73e6977ed23642689259cd2687fb75071ba0716bb84b1b85bd10306cfcc2fcec8982d6036e4281e25e161c526b2f1965c13501551cd249e190a0772536bba5ba1980a561dcf5c1082c8487a9bf1dab951f878a57064fcd9814e19556043d2677b3981ddd80c2562f1f50e5e7d094035565c1226b36ac2d8e092b2396b21b0f8f61051cdef0d6a0fd56b9aa7d2e7cd61816ee5d49a15d3a6e17b196685d62f861042dc5f2ba640894eb8aaaf362a9ed0e8e4e4435a8d378fb63b04b449543845e2b28a59be50ed6c88873d9d4f40bdc5700b2ffc3fcb003bda7696c6a2e4517a5f16fca6c3779df66cf5dc7a88bc58c18dffed3478121bc9a495148da8bbe017d13933af66699740e726c37e986d5b922d805d3e2a3a46f9a232ab818e5a7a92cc852fae15a3e146d3e0a31db7e0bf29edf04282a7afe6d2fa3a05061878e6856c7710ac7b68dd4a73da065a26b24254a4fd11683a9688e4be66257a2254488a1e9ff4dee9fdd06625cdb2456606a471bd5771f56463202eecb40a4ea0b98a510ce3a85aca2519cba54e26f7e5b8674302229ef3209555b63ae2c686915d196a858e06026633821cfe2f09b214c4e33823471d266ae2246cc84b308e02778b31dbca4794b3c19d5cd8088859350c41273d9e4bbbbd53a28688ecdcde9e17ea7de0119eeb69fa7accc62759acccfa7f40cc99765ff599d38b0b5a17a66215fbcc83df985d2fbe4df5e3ce1c4333f083206025f0300d787fb4440cc7ca2798f2d352fad26bb2248087f0cdde045b7d097557799585fe5643a184c04c6cf85ed1385bbde1ba20b3177ac09b0343b8844786dbca894719b3793430007800a853b339930e74fe8b9fbd110a5a388df9d9a4ba4526b6af639ab62b3829d4821295d46d0aeab8a7da8d82460f4d7930019150e7655cf9f928efc433d5adc17a62a01409dc0d78bcc37da5d87f835c61786b176b63fd337667630d036b188569f5e72c5e72a524f6328f441562d6aaad9843ade18dedf0fbfe76997dee8b41f47ae60437388f6c3ac9286278f12394afc56c786bebc5e538003ca15b47df8edf82fc818f82a9f9a10636222144b5094dd101e5e3b16723f2eb664e0430e88266986b3665d2eb7faf80fae4083b81a9170be45d63de82f61137b2605bfe869380e9adf7688c542058fc9c4cb097613bd528511f5f3849f15acd3b7cbc10d429acff989b19c00f79f0b1b1f3615bf37f116d03e5e0baf04c9f39d1985f43b5dbc7e8736b703f75d4cb5344e08a0bdb478b63d1bec25d4c6c5f57c05f7c80145392a9e716bd5e75097462063a380ddb08e82ca5f4b906ed75b3524b61643fa4fd7eb6c0f6360b57dc1c7437c932d11d5deb6f9a58e9b5e39b895953bd30ca6c244a672395b9c53548bb2118413fcc158227ade2290659d6828cd01fdf9d5ab8a9250ddfd7fdfaf1c74c6b82599f8a5091a2a46534a5d7a0d064842aa3eb6d74440cc55c32c1aef8fbd6b488c3260db942b872d99374041da63d0222816df4185f482ef5613e747d6e5f0cb17e268257335f7b68edc40203b416f2d027580aae079eea241ea23ed0a721191a31608a2c185c9c82b8fc3fb03f86683065376e22bea7a960d738db8c5cfec4ba58882c21ba3744f1e9c3ead4fbd32196e6654b58483fe9340a1a7f3f078d136e3b201783580b16f06df287e8bd2228dc3b6a3985dbb03be0de88c77aec00520f5c6cbe7731f7575a7b3c5cc1073fb72a62015ba5a06f81440763d36d8b7517db99cd7e439c25dbb80afb16be2f70abe64b17ec8e90e5c7c1eb0513d292450976f75e20b61a2191254a3afb2d682eaf7886c4b710ba8789d0c4a64afb9602f3c94005c11822dc50723dbfae9ef4fa4d4e06b2b14eaebd9f7710cb0370586f65659b739088c825b4a7614d0359b56e9cad0dc6061036b65cfcf8706dfca5ba4c14f26c0e14fcd89fd007cf0a61c29288671f61490c92b0c8d2e88be7be60c0814c39a1b9183ac98b07c3b6bbd29e93b02415560fc0a2a3e43c5a76170a2df86f6e477dc6862d719108944264719ad4c88f2a4bf4402f57a4b20a2d0101d96fd41b3e965eb89649b421c19878131a25d1eb6f9f229a3f1a6bc3cbbab1318d5a8497b46edda2310341400665b040cde235775819e2d2d6450cf27569711f339176e51e58f2f476bd8abc7af1f38985e4916bda36021e35d0e2885b5591d84add6678ab57e215fb2922e2b9798ae585f056b1f90a71e66289ffe62c02f5f65a16128e8dd3c834765b9fc87e6aa186fd288e4402f52b39aed5058ba45c3fcba520f1f64d981698b3da1c90a1cf113d6029e5ef0060e05220c234d191b5c80638771b4c8e2c1a8bc504895b46eca88dfc63e302b92db9196068bfed4538332931aa442f4a98ae43201d0cd2015d79cc201fc897c6512cce241795afabd2130c92b3eff9f0b4780c9dcbda5dae49de418841a03953acb91d5f40a98c5a9c25d511dedf2a749bc1dcd1840b5587b68fad04aff16afdffc625e21a384b5b85a5b7cde0517197709c3adeec367ae4fd522e425b6eb15057decea5b29d6945416cdf89d8f4edd799ae34158d2a5dc4b81799170207c97a06fd82857c6d29458de7155a9ccbef7f784e0d0b3e410ae143c1246705fd5da67a61581a3e1d8ace913d33cc079f86a223ac455b3ffa4fc6a089a8fa549977ba05a8d01f3cabe037eccba74054f226f4c178022f703472914054bd0185c522fe407bc849647c9a264a5d01fd61c87e754ab6813f150f213b4991e997ce5852f551a9e5f9"}}}}}, &(0x7f0000004240)={0x1, 0x2, [0xbaa, 0x14b, 0x896, 0x9b2]}) (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000004280)={'\x00', 0x20, 0x7, 0x7, 0x1, 0x8000, <r14=>r1})
fcntl$lock(r2, 0x7, &(0x7f0000004300)={0x2, 0x0, 0x3cb, 0x5, r14})

1.758690715s ago: executing program 1 (id=3138):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(r0, 0x141601)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) (async)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f071, 0x2})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0xfffffd86, &(0x7f00000001c0)={&(0x7f0000000200)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24000094)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000080)="d5", 0xfffffedf)
close(0x3) (async)
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./file2\x00', 0x207)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x0, &(0x7f0000001040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x4, 0x80)
lseek(r4, 0x0, 0x0) (async)
lseek(r4, 0x0, 0x0)

1.531924353s ago: executing program 5 (id=3139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1ff)
mount(&(0x7f00000008c0)=@filename='mtd0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000980)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0)
rmdir(&(0x7f0000000a00)='./file0\x00') (fail_nth: 1)

1.391981657s ago: executing program 0 (id=3140):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x22, 0xbf, {0xbf, 0x7, "6a572b0342c8b982d69c0e7d50cb5c2b299df294635ea4432348ed8964997eed08cf0abfa1cf0c9cd2829ff5f8dba85c4cbaefa5a694c41d7a471a7c21e8b10950a69b13b11e6e9282a51e78cce9cdd424b3b0fca4d2094e9bd9903185da00be147a5a26ed6ce3e606850659593647010f1bcfe269386d60259d13f34f57395fbc803fa696c6edb5e04c615deb0f8c96a56d11aa81af9450bcdc2d94971765805cb25365f8cedd84f1257f063cb20b90d73bbee3b1268f8ccaf4524ec9"}}, &(0x7f0000000180)={0x0, 0x3, 0x74, @string={0x74, 0x3, "1d399b6f53c465cf33348491cf832f4cd06dfc091f7d65042cb45c8ea07478d39cc284a1a91b82ac443300c864611caaf06f28ead5f718d9d1a837af180c2ab8e2ed285ef2cce2fa4617724d427116ff55413fbd9a4191f68d531dba980a07ab16795caa4b0f7870e15734c2583d11de685a"}}}, &(0x7f0000001580)={0x44, &(0x7f0000000240)={0x20, 0x15, 0xd1, "ddfd8fae289c73f1a7340c8351945d1928ff202eb230d88de0e10e8dc944c26ec474b79fc7ca9e3dd675588fa2e53b1306c72d517906537594b117704ec06b9b9c160b6274e727dd7f6361d4d76e92586c3249d0ad66af6c34621d3bd633484d752dd2b2ffb91d6b465b3d0b01255db25993ad9fb8b9491ac294bc67beaf24d79a4075968626a09bf37ce9ac7e6436c5f695cce464a59072a6b5a31ca1d909015487344c273b7e283259d21593fb13621696cf9916acc464f8c86e392c9804a63102a417791d3bca7996f7f564198981cc"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x82}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "f7dba7"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000440)={0x20, 0x83, 0x2, 'ci'}, &(0x7f0000001500)={0x20, 0x84, 0x3, "1520d7"}, &(0x7f0000001540)={0x20, 0x85, 0x3, "b54846"}})
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

845.634559ms ago: executing program 5 (id=3141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1ff)
mount(&(0x7f00000008c0)=@filename='mtd0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000980)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00')
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}], 0x2)
setns(0xc9, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = syz_open_dev$amidi(&(0x7f00000002c0), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000300))
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x10, 0x1002, 0x100, 0x70bd25, 0x25dfdbfe}, 0x10}], 0x58, 0x0, 0x0, 0x4000000}, 0x4048014)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x2, 0x240, [0x0, 0x200000000180, 0x200000000360, 0x200000000390], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x47, 0x16, 'ip_vti0\x00', 'macvlan1\x00', 'veth0_virt_wifi\x00', 'vxcan1\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff], @random="f877ca566c49", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xe0, 0xe0, 0x110, [@quota={{'quota\x00', 0x0, 0x48}, {{0x0, 0x0, 0x3ff, {0xe000000000}}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {0x11, 0x2e, 0x8906, 'macvlan1\x00', 'gretap0\x00', 'bond0\x00', 'veth1\x00', @broadcast, [0xc37fe49ef165bbca, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2b8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@newlink={0x7c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x204a9, 0x4c801}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x7}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x9}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x8}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x9}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008046}, 0x20040844)
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x90002, 0x0)
ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x35)
r8 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x4000, 0xf1d7}}, @nested_vmlaunch={0x12f, 0x18}], 0x80})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
rmdir(&(0x7f0000000a00)='./file0\x00')

845.305931ms ago: executing program 1 (id=3142):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async)
unshare(0x22020600) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x7c010500) (async, rerun: 64)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0022190000000501150025ff090491010901a102750896010e09309102c0"], 0x0}, 0x0) (async, rerun: 64)
r3 = syz_open_dev$hiddev(&(0x7f0000001240), 0x0, 0x0) (rerun: 64)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001280)={0x2, 0x100, 0x80}) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x8000) (async)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b0001010130080904000000010130000a2401010a000010000009040100000102300009040101010102300009050109b0020905f80a25"], 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x14000, 0x8, 0x3, 0x600, 0x6, 0x2}, 0x30, 0x1)
r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x101002)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000001140)={0x7ff, 0x7})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') (async)
write$UHID_INPUT(r6, &(0x7f0000000100)={0x9, {"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", 0xffffffffffffff6c}}, 0x1006) (async)
socket$pppoe(0x18, 0x1, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1, 0x20000000}}}, 0x32) (async)
sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x31, 0x0}}], 0x34000, 0x0) (async)
close(0x3) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

536.07772ms ago: executing program 3 (id=3143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

310.839367ms ago: executing program 3 (id=3144):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

261.692746ms ago: executing program 0 (id=3145):
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
cachestat(r0, &(0x7f00000002c0)={0xc3, 0x7fffffffffffffff}, &(0x7f0000000300), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b05000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

258.309509ms ago: executing program 5 (id=3146):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8e, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x34, 0x3e})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x2000000000000195, &(0x7f00000005c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000100)={r2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x168, 0x9, 0x168, 0xb, 0x268, 0x250, 0x250, 0x268, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x120, 0x168, 0x0, {0x0, 0x28e}, [@common=@hbh={{0x48}, {0x80c, 0x3, 0xaac5260750e57b83, [0xc, 0x5, 0xe27, 0x9, 0x3, 0x3a3, 0xffff, 0xcd3, 0x6, 0x1, 0x8, 0xd0, 0x0, 0x800, 0x0, 0x3]}}, @common=@inet=@ipcomp={{0x30}, {[0x0, 0x4d2]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, 0x0, 0x0)

28.469074ms ago: executing program 0 (id=3147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 3 (id=3148):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
lstat(&(0x7f0000000100)='./cgroup.net/blkio.throttle.write_iops_device\x00', &(0x7f0000000140))
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000540)='7', 0x1)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x64)
connect$netlink(r0, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc)
write(r1, &(0x7f0000000580)='252:0 ', 0x6)

kernel console output (not intermixed with test programs):

 __pfx_dynamic_dname+0x10/0x10
[ 1387.752845][T16563]  ? tomoyo_encode2+0xfb/0x3c0
[ 1387.752865][T16563]  tomoyo_encode2+0xfb/0x3c0
[ 1387.752884][T16563]  tomoyo_encode+0x29/0x50
[ 1387.752899][T16563]  tomoyo_realpath_from_path+0x18c/0x690
[ 1387.752920][T16563]  tomoyo_path_number_perm+0x23c/0x580
[ 1387.752934][T16563]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1387.752950][T16563]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1387.752970][T16563]  ? __lock_acquire+0x5c0/0x1f40
[ 1387.752993][T16563]  ? __fget_files+0x34/0x3d0
[ 1387.753007][T16563]  ? find_held_lock+0x2b/0x80
[ 1387.753019][T16563]  ? hook_file_ioctl_common+0x140/0x440
[ 1387.753034][T16563]  ? __fget_files+0x21f/0x3d0
[ 1387.753050][T16563]  security_file_ioctl+0xd3/0x230
[ 1387.753066][T16563]  __x64_sys_ioctl+0xb7/0x210
[ 1387.753084][T16563]  do_syscall_64+0x123/0x790
[ 1387.753103][T16563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1387.753115][T16563] RIP: 0033:0x7f5d9f59f559
[ 1387.753125][T16563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1387.753136][T16563] RSP: 002b:00007f5da03cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1387.753147][T16563] RAX: ffffffffffffffda RBX: 00007f5d9f825fa0 RCX: 00007f5d9f59f559
[ 1387.753155][T16563] RDX: 0000200000000300 RSI: 00000000000089ee RDI: 0000000000000003
[ 1387.753162][T16563] RBP: 00007f5da03cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1387.753168][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1387.753175][T16563] R13: 00007f5d9f826038 R14: 00007f5d9f825fa0 R15: 00007ffd03e45c38
[ 1387.753191][T16563]  </TASK>
[ 1387.753201][T16563] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1387.782209][   T29] audit: type=1400 audit(2000000621.695:2435): avc:  denied  { ioctl } for  pid=16560 comm="syz.1.2976" path="socket:[53656]" dev="sockfs" ino=53656 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1388.743747][T16565] netlink: 'syz.3.2977': attribute type 11 has an invalid length.
[ 1388.829378][T16576] netlink: 'syz.3.2977': attribute type 11 has an invalid length.
[ 1389.073564][T16197] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1389.753939][   T29] kauditd_printk_skb: 9 callbacks suppressed
[ 1389.753954][   T29] audit: type=1400 audit(2000000623.501:2445): avc:  denied  { name_bind } for  pid=16581 comm="syz.3.2982" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1389.753982][   T29] audit: type=1400 audit(2000000623.501:2446): avc:  denied  { node_bind } for  pid=16581 comm="syz.3.2982" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1389.832446][T16197] usb 2-1: Using ep0 maxpacket: 32
[ 1389.834359][T16197] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1389.835143][T16197] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1389.835159][T16197] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1389.835172][T16197] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1389.836855][T16197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.836870][T16197] usb 2-1: Product: syz
[ 1389.836878][T16197] usb 2-1: Manufacturer: syz
[ 1389.836887][T16197] usb 2-1: SerialNumber: syz
[ 1389.871870][T16197] usb 2-1: config 0 descriptor??
[ 1389.968522][T16586] netlink: 'syz.5.2981': attribute type 1 has an invalid length.
[ 1390.056924][   T29] audit: type=1400 audit(2000000623.819:2447): avc:  denied  { create } for  pid=16588 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1390.078987][   T29] audit: type=1400 audit(2000000623.847:2448): avc:  denied  { setopt } for  pid=16588 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1390.105513][   T29] audit: type=1400 audit(2000000623.866:2449): avc:  denied  { listen } for  pid=16588 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1390.137742][   T29] audit: type=1400 audit(2000000623.894:2450): avc:  denied  { write } for  pid=16588 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1390.162143][   T29] audit: type=1400 audit(2000000623.922:2451): avc:  denied  { accept } for  pid=16588 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1390.193851][T16586] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1390.226979][T16590] FAULT_INJECTION: forcing a failure.
[ 1390.226979][T16590] name failslab, interval 1, probability 0, space 0, times 0
[ 1390.227000][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.4.2984 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1390.227017][T16590] Tainted: [L]=SOFTLOCKUP
[ 1390.227022][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1390.227031][T16590] Call Trace:
[ 1390.227035][T16590]  <TASK>
[ 1390.227041][T16590]  dump_stack_lvl+0x100/0x190
[ 1390.227064][T16590]  should_fail_ex.cold+0x5/0xa
[ 1390.227082][T16590]  should_failslab+0xc2/0x120
[ 1390.227096][T16590]  __kvmalloc_node_noprof+0x113/0x9b0
[ 1390.227116][T16590]  ? __do_sys_setgroups+0x122/0x4b0
[ 1390.227133][T16590]  __do_sys_setgroups+0x122/0x4b0
[ 1390.227149][T16590]  do_syscall_64+0x123/0x790
[ 1390.227169][T16590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.227187][T16590] RIP: 0033:0x7fa933d9f559
[ 1390.227198][T16590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1390.227211][T16590] RSP: 002b:00007fa934c28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[ 1390.227223][T16590] RAX: ffffffffffffffda RBX: 00007fa934025fa0 RCX: 00007fa933d9f559
[ 1390.227232][T16590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1390.227240][T16590] RBP: 00007fa933e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1390.227247][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1390.227254][T16590] R13: 00007fa934026038 R14: 00007fa934025fa0 R15: 00007ffcb7c77bb8
[ 1390.227271][T16590]  </TASK>
[ 1390.349826][   T29] audit: type=1400 audit(2000000624.099:2452): avc:  denied  { ioctl } for  pid=16573 comm="syz.1.2979" path="socket:[53795]" dev="sockfs" ino=53795 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1391.193036][T16197] gs_usb 2-1:0.0: Couldn't send data format (err=-110)
[ 1391.193059][T16197] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110
[ 1391.311217][T16593] bond7: (slave dummy0): Removing an active aggregator
[ 1391.311654][T16593] bond7: (slave dummy0): Releasing backup interface
[ 1391.368473][T16593] bond8: (slave dummy0): Enslaving as a backup interface with an up link
[ 1391.491892][ T6638] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1392.392555][T12786] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1392.419770][ T5732] usb 2-1: USB disconnect, device number 41
[ 1393.558627][T16604] FAULT_INJECTION: forcing a failure.
[ 1393.558627][T16604] name failslab, interval 1, probability 0, space 0, times 0
[ 1393.558648][T16604] CPU: 0 UID: 0 PID: 16604 Comm: syz.4.2986 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1393.558665][T16604] Tainted: [L]=SOFTLOCKUP
[ 1393.558669][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1393.558677][T16604] Call Trace:
[ 1393.558682][T16604]  <TASK>
[ 1393.558687][T16604]  dump_stack_lvl+0x100/0x190
[ 1393.558711][T16604]  should_fail_ex.cold+0x5/0xa
[ 1393.558730][T16604]  should_failslab+0xc2/0x120
[ 1393.558743][T16604]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[ 1393.558761][T16604]  ? zswap_store+0xc81/0x2f90
[ 1393.558780][T16604]  zswap_store+0xc81/0x2f90
[ 1393.558801][T16604]  ? __pfx_zswap_store+0x10/0x10
[ 1393.558814][T16604]  ? lock_acquire+0x1d1/0x380
[ 1393.558830][T16604]  ? do_raw_spin_lock+0x128/0x260
[ 1393.558842][T16604]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1393.558852][T16604]  ? find_held_lock+0x2b/0x80
[ 1393.558873][T16604]  ? swap_writeout+0xdc7/0x1b30
[ 1393.558888][T16604]  ? swap_writeout+0xdc7/0x1b30
[ 1393.558906][T16604]  swap_writeout+0xdcf/0x1b30
[ 1393.558923][T16604]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1393.558943][T16604]  shmem_writeout+0xdef/0x1a50
[ 1393.558965][T16604]  ? __pfx_shmem_writeout+0x10/0x10
[ 1393.558981][T16604]  ? __pfx_invalid_folio_referenced_vma+0x10/0x10
[ 1393.558996][T16604]  ? inode_to_bdi+0x9e/0x160
[ 1393.559009][T16604]  ? folio_clear_dirty_for_io+0x178/0x970
[ 1393.559025][T16604]  shrink_folio_list+0x3a43/0x59c0
[ 1393.559048][T16604]  ? __pfx_shrink_folio_list+0x10/0x10
[ 1393.559062][T16604]  ? folio_batch_move_lru+0x3bd/0xc00
[ 1393.559079][T16604]  ? lru_move_tail+0x18b0/0x1970
[ 1393.559098][T16604]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[ 1393.559121][T16604]  ? isolate_lru_folios+0xb9c/0x11b0
[ 1393.559151][T16604]  ? find_held_lock+0x2b/0x80
[ 1393.559162][T16604]  ? find_held_lock+0x2b/0x80
[ 1393.559174][T16604]  ? shrink_lruvec+0x1138/0x22e0
[ 1393.559189][T16604]  ? shrink_lruvec+0x1138/0x22e0
[ 1393.559207][T16604]  shrink_lruvec+0x11bb/0x22e0
[ 1393.559222][T16604]  ? xa_load+0x149/0x2c0
[ 1393.559243][T16604]  ? __pfx_shrink_lruvec+0x10/0x10
[ 1393.559262][T16604]  ? list_lru_count_one+0x151/0x320
[ 1393.559281][T16604]  ? __lock_acquire+0x5c0/0x1f40
[ 1393.559297][T16604]  ? __lock_acquire+0x5c0/0x1f40
[ 1393.559327][T16604]  ? __pfx___might_resched+0x10/0x10
[ 1393.559340][T16604]  ? page_counter_calculate_protection+0x348/0x730
[ 1393.559361][T16604]  ? shrink_node+0x74f/0x4410
[ 1393.559370][T16604]  shrink_node+0x74f/0x4410
[ 1393.559383][T16604]  ? lock_acquire+0x1d1/0x380
[ 1393.559402][T16604]  ? __pfx_shrink_node+0x10/0x10
[ 1393.559423][T16604]  ? do_try_to_free_pages+0x2da/0x1500
[ 1393.559433][T16604]  do_try_to_free_pages+0x2da/0x1500
[ 1393.559454][T16604]  try_to_free_mem_cgroup_pages+0x2bf/0x840
[ 1393.559467][T16604]  ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10
[ 1393.559487][T16604]  ? page_counter_set_max+0x11e/0x160
[ 1393.559505][T16604]  mem_cgroup_resize_max+0x1b0/0x330
[ 1393.559519][T16604]  mem_cgroup_write+0x1b6/0x2f0
[ 1393.559530][T16604]  ? __pfx_mem_cgroup_write+0x10/0x10
[ 1393.559541][T16604]  ? kernfs_root+0xf8/0x2a0
[ 1393.559560][T16604]  cgroup_file_write+0x1e6/0x8a0
[ 1393.559573][T16604]  ? __pfx_mem_cgroup_write+0x10/0x10
[ 1393.559584][T16604]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1393.559595][T16604]  ? __kmalloc_noprof+0x350/0x840
[ 1393.559616][T16604]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1393.559627][T16604]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1393.559641][T16604]  vfs_write+0x6af/0x1050
[ 1393.559653][T16604]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1393.559667][T16604]  ? __pfx_vfs_write+0x10/0x10
[ 1393.559676][T16604]  ? find_held_lock+0x2b/0x80
[ 1393.559700][T16604]  ksys_write+0x12a/0x250
[ 1393.559710][T16604]  ? __pfx_ksys_write+0x10/0x10
[ 1393.559726][T16604]  do_syscall_64+0x123/0x790
[ 1393.559744][T16604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.559756][T16604] RIP: 0033:0x7fa933d9f559
[ 1393.559766][T16604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1393.559776][T16604] RSP: 002b:00007fa934c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1393.559788][T16604] RAX: ffffffffffffffda RBX: 00007fa934026090 RCX: 00007fa933d9f559
[ 1393.559795][T16604] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000006
[ 1393.559803][T16604] RBP: 00007fa934c07090 R08: 0000000000000000 R09: 0000000000000000
[ 1393.559809][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1393.559816][T16604] R13: 00007fa934026128 R14: 00007fa934026090 R15: 00007ffcb7c77bb8
[ 1393.559833][T16604]  </TASK>
[ 1394.058760][   T29] audit: type=1400 audit(2000000627.570:2453): avc:  denied  { mount } for  pid=16600 comm="syz.4.2986" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 1394.785731][   T29] audit: type=1400 audit(2000000628.243:2454): avc:  denied  { read } for  pid=16602 comm="syz.5.2987" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1396.849366][T16618] xt_hashlimit: size too large, truncated to 1048576
[ 1396.849977][   T29] audit: type=1400 audit(2000000630.179:2455): avc:  denied  { setopt } for  pid=16617 comm="syz.0.2991" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1397.068248][   T29] audit: type=1400 audit(2000000630.376:2456): avc:  denied  { create } for  pid=16617 comm="syz.0.2991" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1397.068281][   T29] audit: type=1400 audit(2000000630.376:2457): avc:  denied  { map } for  pid=16617 comm="syz.0.2991" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1397.068305][   T29] audit: type=1400 audit(2000000630.376:2458): avc:  denied  { read write } for  pid=16617 comm="syz.0.2991" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1397.300452][   T29] audit: type=1400 audit(2000000630.600:2459): avc:  denied  { ioctl } for  pid=16617 comm="syz.0.2991" path="socket:[53899]" dev="sockfs" ino=53899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1397.434622][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1397.434899][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1397.434928][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1397.624192][   T29] audit: type=1400 audit(2000000630.900:2460): avc:  denied  { create } for  pid=16627 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1397.655085][   T29] audit: type=1400 audit(2000000630.928:2461): avc:  denied  { bind } for  pid=16627 comm="syz.3.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1397.655116][   T29] audit: type=1400 audit(2000000630.928:2462): avc:  denied  { name_bind } for  pid=16627 comm="syz.3.2993" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 1397.655141][   T29] audit: type=1400 audit(2000000630.928:2463): avc:  denied  { node_bind } for  pid=16627 comm="syz.3.2993" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 1398.004814][T16631] comedi comedi3: comedi_config --init_data is deprecated
[ 1399.749554][   T29] audit: type=1400 audit(2000000632.892:2464): avc:  denied  { bind } for  pid=16637 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1405.144155][T16661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3002'.
[ 1405.176118][   T29] kauditd_printk_skb: 10 callbacks suppressed
[ 1405.176131][   T29] audit: type=1400 audit(2000000637.971:2475): avc:  denied  { write } for  pid=16660 comm="syz.5.3002" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1405.252485][T16661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3002'.
[ 1405.327242][   T29] audit: type=1400 audit(2000000638.112:2476): avc:  denied  { unmount } for  pid=5629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1405.379434][T16662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2998'.
[ 1406.447522][   T29] audit: type=1400 audit(2000000639.159:2477): avc:  denied  { read } for  pid=16667 comm="syz.4.3004" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1406.447554][   T29] audit: type=1400 audit(2000000639.159:2478): avc:  denied  { open } for  pid=16667 comm="syz.4.3004" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1406.849927][   T29] audit: type=1400 audit(2000000639.524:2479): avc:  denied  { mounton } for  pid=16677 comm="syz.1.3003" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1406.850985][T16678] befs: (nbd1): unable to read superblock
[ 1407.080233][T16681] FAULT_INJECTION: forcing a failure.
[ 1407.080233][T16681] name failslab, interval 1, probability 0, space 0, times 0
[ 1407.080273][T16681] CPU: 0 UID: 0 PID: 16681 Comm: syz.1.3008 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1407.080291][T16681] Tainted: [L]=SOFTLOCKUP
[ 1407.080297][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1407.080305][T16681] Call Trace:
[ 1407.080311][T16681]  <TASK>
[ 1407.080317][T16681]  dump_stack_lvl+0x100/0x190
[ 1407.080342][T16681]  should_fail_ex.cold+0x5/0xa
[ 1407.080362][T16681]  should_failslab+0xc2/0x120
[ 1407.080376][T16681]  __kmalloc_cache_node_noprof+0x94/0x710
[ 1407.080397][T16681]  ? __alloc_workqueue+0xa4f/0x1900
[ 1407.080419][T16681]  __alloc_workqueue+0xa4f/0x1900
[ 1407.080463][T16681]  alloc_workqueue_noprof+0xc7/0x130
[ 1407.080481][T16681]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1407.080501][T16681]  ? __kasan_kmalloc+0xaa/0xb0
[ 1407.080521][T16681]  ? __kmalloc_noprof+0x350/0x840
[ 1407.080540][T16681]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1407.080560][T16681]  ieee80211_register_hw+0x2154/0x45c0
[ 1407.080579][T16681]  ? __pfx_mark_held_locks+0x1/0x10
[ 1407.080601][T16681]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1407.080619][T16681]  ? __pfx___debug_object_init+0x10/0x10
[ 1407.080640][T16681]  ? find_held_lock+0x2b/0x80
[ 1407.080653][T16681]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1407.080673][T16681]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1407.080689][T16681]  ? __hrtimer_setup+0x208/0x330
[ 1407.080704][T16681]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1407.080735][T16681]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1407.080759][T16681]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1407.080776][T16681]  ? trace_kmalloc+0xeb/0x110
[ 1407.080788][T16681]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1407.080810][T16681]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1407.080826][T16681]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1407.080844][T16681]  genl_family_rcv_msg_doit+0x214/0x300
[ 1407.080860][T16681]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1407.080880][T16681]  ? bpf_lsm_capable+0x9/0x10
[ 1407.080891][T16681]  ? security_capable+0x80/0x260
[ 1407.080905][T16681]  ? ns_capable+0xcd/0xf0
[ 1407.080919][T16681]  genl_rcv_msg+0x560/0x800
[ 1407.080935][T16681]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1407.080952][T16681]  ? __lock_acquire+0x5c0/0x1f40
[ 1407.080967][T16681]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1407.080991][T16681]  netlink_rcv_skb+0x159/0x420
[ 1407.081004][T16681]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1407.081019][T16681]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1407.081038][T16681]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1407.081053][T16681]  genl_rcv+0x28/0x40
[ 1407.081065][T16681]  netlink_unicast+0x668/0x950
[ 1407.081081][T16681]  ? __pfx_netlink_unicast+0x10/0x10
[ 1407.081098][T16681]  netlink_sendmsg+0x9ac/0x10c0
[ 1407.081113][T16681]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1407.081130][T16681]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1407.081147][T16681]  ? ____sys_sendmsg+0xa99/0xc30
[ 1407.081161][T16681]  ____sys_sendmsg+0xa99/0xc30
[ 1407.081188][T16681]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1407.081203][T16681]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1407.081228][T16681]  ___sys_sendmsg+0x190/0x1e0
[ 1407.081247][T16681]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1407.081264][T16681]  ? futex_wait+0x11e/0x370
[ 1407.081288][T16681]  ? find_held_lock+0x2b/0x80
[ 1407.081311][T16681]  __sys_sendmsg+0x160/0x210
[ 1407.081323][T16681]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1407.081349][T16681]  do_syscall_64+0x123/0x790
[ 1407.081370][T16681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.081383][T16681] RIP: 0033:0x7f5d9f59f559
[ 1407.081396][T16681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1407.081409][T16681] RSP: 002b:00007f5da03cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1407.081425][T16681] RAX: ffffffffffffffda RBX: 00007f5d9f825fa0 RCX: 00007f5d9f59f559
[ 1407.081436][T16681] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000007
[ 1407.081451][T16681] RBP: 00007f5d9f636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1407.081458][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1407.081466][T16681] R13: 00007f5d9f826038 R14: 00007f5d9f825fa0 R15: 00007ffd03e45c38
[ 1407.081485][T16681]  </TASK>
[ 1407.775513][   T29] audit: type=1400 audit(2000000640.394:2480): avc:  denied  { create } for  pid=16686 comm="syz.4.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1407.802768][T16687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3009'.
[ 1407.803054][   T29] audit: type=1400 audit(2000000640.422:2481): avc:  denied  { write } for  pid=16686 comm="syz.4.3009" path="socket:[54274]" dev="sockfs" ino=54274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1407.898001][   T29] audit: type=1400 audit(2000000640.506:2482): avc:  denied  { setopt } for  pid=16689 comm="syz.5.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1407.930645][ T5635] Bluetooth: hci5: unexpected event for opcode 0x2062
[ 1407.963202][T16688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3001'.
[ 1408.064536][T16696] netlink: 'syz.4.3011': attribute type 1 has an invalid length.
[ 1408.376873][T16696] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1408.408159][T16696] bond12: (slave dummy0): Removing an active aggregator
[ 1408.408475][T16696] bond12: (slave dummy0): Releasing backup interface
[ 1408.436881][T16696] bond13: (slave dummy0): Enslaving as a backup interface with an up link
[ 1408.509499][ T6638] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1408.568977][   T29] audit: type=1400 audit(2000000641.142:2483): avc:  denied  { unlink } for  pid=16705 comm="syz.3.3012" name="#14" dev="tmpfs" ino=3374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1408.611950][T16706] overlay: filesystem on ./file0 not supported as upperdir
[ 1408.634016][   T29] audit: type=1400 audit(2000000641.199:2484): avc:  denied  { watch } for  pid=16705 comm="syz.3.3012" path="/598/file0" dev="overlay" ino=3370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1408.682518][ T6638] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1409.293950][ T2270] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[ 1409.853429][ T2270] usb 4-1: not running at top speed; connect to a high speed hub
[ 1409.853452][ T2270] usb 4-1: New USB device found: idVendor=19d2, idProduct=2003, bcdDevice=5.a4
[ 1409.886921][ T2270] usb 4-1: config 5 has an invalid interface number: 178 but max is 0
[ 1409.886940][ T2270] usb 4-1: config 5 has no interface number 0
[ 1409.886963][ T2270] usb 4-1: config 5 interface 178 altsetting 12 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 1409.886979][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0x8, skipping
[ 1409.886993][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0xF, skipping
[ 1409.887005][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0x5, skipping
[ 1409.887017][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0x4, skipping
[ 1409.887028][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0x5, skipping
[ 1409.887040][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has an endpoint descriptor with address 0x97, changing to 0x87
[ 1409.887053][ T2270] usb 4-1: config 5 interface 178 altsetting 12 endpoint 0x87 has invalid maxpacket 47480, setting to 64
[ 1409.887067][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has a duplicate endpoint with address 0xB, skipping
[ 1409.887080][ T2270] usb 4-1: config 5 interface 178 altsetting 12 endpoint 0x8D has invalid maxpacket 7848, setting to 64
[ 1409.887094][ T2270] usb 4-1: config 5 interface 178 altsetting 12 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1409.887107][ T2270] usb 4-1: config 5 interface 178 altsetting 12 has 18 endpoint descriptors, different from the interface descriptor's value: 16
[ 1409.887121][ T2270] usb 4-1: config 5 interface 178 has no altsetting 0
[ 1410.027245][ T2270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.027266][ T2270] usb 4-1: Product: syz
[ 1410.027275][ T2270] usb 4-1: Manufacturer: syz
[ 1410.027284][ T2270] usb 4-1: SerialNumber: syz
[ 1410.075324][T16706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1410.075517][T16706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1410.075611][T16706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1410.115330][T16711] netlink: 'syz.5.3014': attribute type 10 has an invalid length.
[ 1412.163722][T16723] FAULT_INJECTION: forcing a failure.
[ 1412.163722][T16723] name failslab, interval 1, probability 0, space 0, times 0
[ 1412.163752][T16723] CPU: 0 UID: 0 PID: 16723 Comm: syz.5.3019 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1412.163771][T16723] Tainted: [L]=SOFTLOCKUP
[ 1412.163776][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1412.163785][T16723] Call Trace:
[ 1412.163789][T16723]  <TASK>
[ 1412.163795][T16723]  dump_stack_lvl+0x100/0x190
[ 1412.163819][T16723]  should_fail_ex.cold+0x5/0xa
[ 1412.163838][T16723]  should_failslab+0xc2/0x120
[ 1412.163851][T16723]  __kmalloc_cache_node_noprof+0x94/0x710
[ 1412.163871][T16723]  ? __alloc_workqueue+0xa4f/0x1900
[ 1412.163893][T16723]  __alloc_workqueue+0xa4f/0x1900
[ 1412.163918][T16723]  alloc_workqueue_noprof+0xc7/0x130
[ 1412.163935][T16723]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1412.163953][T16723]  ? __kasan_kmalloc+0xaa/0xb0
[ 1412.163971][T16723]  ? __kmalloc_noprof+0x350/0x840
[ 1412.163987][T16723]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1412.164007][T16723]  ieee80211_register_hw+0x2154/0x45c0
[ 1412.164026][T16723]  ? __pfx_mark_held_locks+0x1/0x10
[ 1412.164046][T16723]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1412.164064][T16723]  ? __pfx___debug_object_init+0x10/0x10
[ 1412.164090][T16723]  ? find_held_lock+0x2b/0x80
[ 1412.164104][T16723]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1412.164125][T16723]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1412.164140][T16723]  ? __hrtimer_setup+0x208/0x330
[ 1412.164154][T16723]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1412.164184][T16723]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1412.164207][T16723]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1412.164224][T16723]  ? trace_kmalloc+0xeb/0x110
[ 1412.164236][T16723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1412.164258][T16723]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1412.164272][T16723]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1412.164290][T16723]  genl_family_rcv_msg_doit+0x214/0x300
[ 1412.164306][T16723]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1412.164326][T16723]  ? bpf_lsm_capable+0x9/0x10
[ 1412.164337][T16723]  ? security_capable+0x80/0x260
[ 1412.164351][T16723]  ? ns_capable+0xcd/0xf0
[ 1412.164365][T16723]  genl_rcv_msg+0x560/0x800
[ 1412.164381][T16723]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1412.164395][T16723]  ? __lock_acquire+0x5c0/0x1f40
[ 1412.164410][T16723]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1412.164433][T16723]  netlink_rcv_skb+0x159/0x420
[ 1412.164445][T16723]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1412.164460][T16723]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1412.164480][T16723]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1412.164494][T16723]  genl_rcv+0x28/0x40
[ 1412.164506][T16723]  netlink_unicast+0x668/0x950
[ 1412.164521][T16723]  ? __pfx_netlink_unicast+0x10/0x10
[ 1412.164537][T16723]  netlink_sendmsg+0x9ac/0x10c0
[ 1412.164553][T16723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1412.164569][T16723]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1412.164589][T16723]  ? ____sys_sendmsg+0xa99/0xc30
[ 1412.164602][T16723]  ____sys_sendmsg+0xa99/0xc30
[ 1412.164615][T16723]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1412.164629][T16723]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1412.164652][T16723]  ___sys_sendmsg+0x190/0x1e0
[ 1412.164668][T16723]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1412.164683][T16723]  ? futex_wait+0x11e/0x370
[ 1412.164705][T16723]  ? find_held_lock+0x2b/0x80
[ 1412.164728][T16723]  __sys_sendmsg+0x160/0x210
[ 1412.164741][T16723]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1412.164762][T16723]  do_syscall_64+0x123/0x790
[ 1412.164781][T16723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1412.164794][T16723] RIP: 0033:0x7f4c2659f559
[ 1412.164806][T16723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1412.164818][T16723] RSP: 002b:00007f4c27414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1412.164831][T16723] RAX: ffffffffffffffda RBX: 00007f4c26825fa0 RCX: 00007f4c2659f559
[ 1412.164839][T16723] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000007
[ 1412.164847][T16723] RBP: 00007f4c26636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1412.164854][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1412.164861][T16723] R13: 00007f4c26826038 R14: 00007f4c26825fa0 R15: 00007ffe403aa848
[ 1412.164880][T16723]  </TASK>
[ 1412.598572][   T29] audit: type=1400 audit(2000000644.912:2485): avc:  denied  { unmount } for  pid=16029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1412.757505][ T2270] option 4-1:5.178: GSM modem (1-port) converter detected
[ 1412.785902][ T2270] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1412.851430][ T2270] usb 4-1: USB disconnect, device number 48
[ 1412.909077][ T2270] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1412.909532][ T2270] option 4-1:5.178: device disconnected
[ 1413.967275][   T29] audit: type=1400 audit(2000000646.184:2486): avc:  denied  { write } for  pid=16737 comm="syz.1.3024" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[ 1414.022606][   T29] audit: type=1400 audit(2000000646.240:2487): avc:  denied  { read } for  pid=5281 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 1414.095886][ T5732] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1414.119465][   T29] audit: type=1400 audit(2000000646.324:2488): avc:  denied  { search } for  pid=5281 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1414.148745][T16739] can0: slcan on ttyS3.
[ 1414.156515][   T29] audit: type=1400 audit(2000000646.371:2489): avc:  denied  { search } for  pid=5281 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1414.184677][   T29] audit: type=1400 audit(2000000646.390:2490): avc:  denied  { search } for  pid=5281 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1414.184714][   T29] audit: type=1400 audit(2000000646.390:2491): avc:  denied  { read } for  pid=5281 comm="dhcpcd" name="n47" dev="tmpfs" ino=4232 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1414.184738][   T29] audit: type=1400 audit(2000000646.390:2492): avc:  denied  { open } for  pid=5281 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=4232 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1414.184762][   T29] audit: type=1400 audit(2000000646.390:2493): avc:  denied  { getattr } for  pid=5281 comm="dhcpcd" path="/run/udev/data/n47" dev="tmpfs" ino=4232 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1414.287089][T16739] netlink: 132732 bytes leftover after parsing attributes in process `syz.1.3024'.
[ 1414.306857][ T5732] usb 6-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00
[ 1414.309432][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1414.309449][ T5732] usb 6-1: Product: syz
[ 1414.309458][ T5732] usb 6-1: Manufacturer: syz
[ 1414.602962][T16197] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1414.639172][   T29] audit: type=1400 audit(2000000646.820:2494): avc:  denied  { read } for  pid=16747 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1414.779269][T16197] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00
[ 1414.780166][T16197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1414.780180][T16197] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1414.794124][T16197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1414.794141][T16197] usb 2-1: SerialNumber: syz
[ 1414.890982][T10236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1414.905877][T10236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1414.907667][T10236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1414.910170][T10236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1414.910633][T10236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1415.013639][ T5732] scsi host1: uas
[ 1415.041117][T16197] usb 2-1: skipping empty audio interface (v1)
[ 1415.183697][    C0] usb 6-1: stat urb: no pending cmd for uas-tag 0
[ 1415.262924][T16197] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1415.286727][T16197] usb 2-1: USB disconnect, device number 42
[ 1415.434647][    C0] usb 6-1: cmd cmplt err -71
[ 1415.435772][ T5732] usb 6-1: USB disconnect, device number 37
[ 1415.455460][ T5732] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[ 1415.455494][ T5732] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00
[ 1416.502164][T16707] udevd[16707]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1417.189632][ T5635] Bluetooth: hci3: command tx timeout
[ 1417.446930][ T5635] Bluetooth: hci5: command 0x0406 tx timeout
[ 1417.447143][T10236] Bluetooth: hci5: Opcode 0x206a failed: -110
[ 1417.849361][T16737] can0 (unregistered): slcan off ttyS3.
[ 1417.974433][T16768] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1417.974433][T16768] 
[ 1417.974449][T16768] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1417.974483][T16768] CIFS: Attempting to mount //127.0.0.1/share
[ 1418.007148][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1418.007161][   T29] audit: type=1400 audit(2000000649.935:2498): avc:  denied  { write } for  pid=16746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1418.007193][   T29] audit: type=1400 audit(2000000649.935:2499): avc:  denied  { add_name } for  pid=16746 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1418.007217][   T29] audit: type=1400 audit(2000000649.935:2500): avc:  denied  { create } for  pid=16746 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1418.007240][   T29] audit: type=1400 audit(2000000649.935:2501): avc:  denied  { write } for  pid=16746 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1418.007272][   T29] audit: type=1400 audit(2000000649.935:2502): avc:  denied  { append } for  pid=16746 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1418.260493][T16777] FAULT_INJECTION: forcing a failure.
[ 1418.260493][T16777] name failslab, interval 1, probability 0, space 0, times 0
[ 1418.260515][T16777] CPU: 0 UID: 0 PID: 16777 Comm: syz.5.3027 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1418.260533][T16777] Tainted: [L]=SOFTLOCKUP
[ 1418.260538][T16777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1418.260546][T16777] Call Trace:
[ 1418.260551][T16777]  <TASK>
[ 1418.260556][T16777]  dump_stack_lvl+0x100/0x190
[ 1418.260586][T16777]  should_fail_ex.cold+0x5/0xa
[ 1418.260605][T16777]  should_failslab+0xc2/0x120
[ 1418.260620][T16777]  __kmalloc_cache_node_noprof+0x94/0x710
[ 1418.260639][T16777]  ? __alloc_workqueue+0xa4f/0x1900
[ 1418.260659][T16777]  __alloc_workqueue+0xa4f/0x1900
[ 1418.260682][T16777]  alloc_workqueue_noprof+0xc7/0x130
[ 1418.260699][T16777]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1418.260717][T16777]  ? __kasan_kmalloc+0xaa/0xb0
[ 1418.260735][T16777]  ? __kmalloc_noprof+0x350/0x840
[ 1418.260752][T16777]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1418.260772][T16777]  ieee80211_register_hw+0x2154/0x45c0
[ 1418.260791][T16777]  ? __pfx_mark_held_locks+0x1/0x10
[ 1418.260811][T16777]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1418.260828][T16777]  ? __pfx___debug_object_init+0x10/0x10
[ 1418.260847][T16777]  ? find_held_lock+0x2b/0x80
[ 1418.260860][T16777]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1418.260879][T16777]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1418.260895][T16777]  ? __hrtimer_setup+0x208/0x330
[ 1418.260909][T16777]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1418.260941][T16777]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1418.260965][T16777]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1418.260982][T16777]  ? trace_kmalloc+0xeb/0x110
[ 1418.260994][T16777]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1418.261017][T16777]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1418.261036][T16777]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1418.261054][T16777]  genl_family_rcv_msg_doit+0x214/0x300
[ 1418.261070][T16777]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1418.261090][T16777]  ? bpf_lsm_capable+0x9/0x10
[ 1418.261101][T16777]  ? security_capable+0x80/0x260
[ 1418.261115][T16777]  ? ns_capable+0xcd/0xf0
[ 1418.261129][T16777]  genl_rcv_msg+0x560/0x800
[ 1418.261145][T16777]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1418.261158][T16777]  ? __lock_acquire+0x5c0/0x1f40
[ 1418.261173][T16777]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1418.261197][T16777]  netlink_rcv_skb+0x159/0x420
[ 1418.261209][T16777]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1418.261224][T16777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1418.261243][T16777]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1418.261257][T16777]  genl_rcv+0x28/0x40
[ 1418.261269][T16777]  netlink_unicast+0x668/0x950
[ 1418.261294][T16777]  ? __pfx_netlink_unicast+0x10/0x10
[ 1418.261312][T16777]  netlink_sendmsg+0x9ac/0x10c0
[ 1418.261333][T16777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1418.261351][T16777]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1418.261369][T16777]  ? ____sys_sendmsg+0xa99/0xc30
[ 1418.261384][T16777]  ____sys_sendmsg+0xa99/0xc30
[ 1418.261397][T16777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1418.261411][T16777]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1418.261434][T16777]  ___sys_sendmsg+0x190/0x1e0
[ 1418.261450][T16777]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1418.261465][T16777]  ? futex_wait+0x11e/0x370
[ 1418.261488][T16777]  ? find_held_lock+0x2b/0x80
[ 1418.261511][T16777]  __sys_sendmsg+0x160/0x210
[ 1418.261523][T16777]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1418.261544][T16777]  do_syscall_64+0x123/0x790
[ 1418.261563][T16777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1418.261576][T16777] RIP: 0033:0x7f4c2659f559
[ 1418.261588][T16777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1418.261600][T16777] RSP: 002b:00007f4c27414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1418.261613][T16777] RAX: ffffffffffffffda RBX: 00007f4c26825fa0 RCX: 00007f4c2659f559
[ 1418.261621][T16777] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000008
[ 1418.261629][T16777] RBP: 00007f4c26636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1418.261637][T16777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1418.261645][T16777] R13: 00007f4c26826038 R14: 00007f4c26825fa0 R15: 00007ffe403aa848
[ 1418.261663][T16777]  </TASK>
[ 1418.612907][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3028'.
[ 1418.834552][T16786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3028'.
[ 1418.981817][   T29] audit: type=1400 audit(2000000650.880:2503): avc:  denied  { write } for  pid=16789 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1419.027306][   T29] audit: type=1400 audit(2000000650.908:2504): avc:  denied  { remove_name } for  pid=16789 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1419.055062][   T29] audit: type=1400 audit(2000000650.955:2505): avc:  denied  { unlink } for  pid=16789 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1419.212747][   T29] audit: type=1400 audit(2000000651.095:2506): avc:  denied  { ioctl } for  pid=16795 comm="syz.1.3031" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54714 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1419.255411][   T29] audit: type=1400 audit(2000000651.142:2507): avc:  denied  { create } for  pid=16794 comm="syz.5.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1419.277634][T16798] FAULT_INJECTION: forcing a failure.
[ 1419.277634][T16798] name failslab, interval 1, probability 0, space 0, times 0
[ 1419.277654][T16798] CPU: 0 UID: 0 PID: 16798 Comm: syz.5.3030 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1419.277669][T16798] Tainted: [L]=SOFTLOCKUP
[ 1419.277673][T16798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1419.277681][T16798] Call Trace:
[ 1419.277685][T16798]  <TASK>
[ 1419.277690][T16798]  dump_stack_lvl+0x100/0x190
[ 1419.277713][T16798]  should_fail_ex.cold+0x5/0xa
[ 1419.277731][T16798]  should_failslab+0xc2/0x120
[ 1419.277744][T16798]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[ 1419.277762][T16798]  ? sidtab_sid2str_get+0x84/0x670
[ 1419.277781][T16798]  ? sidtab_sid2str_get+0x17a/0x670
[ 1419.277800][T16798]  kmemdup_noprof+0x29/0x60
[ 1419.277813][T16798]  sidtab_sid2str_get+0x17a/0x670
[ 1419.277832][T16798]  security_sid_to_context_core+0x373/0x700
[ 1419.277851][T16798]  avc_audit_post_callback+0x1aa/0x910
[ 1419.277872][T16798]  ? __pfx_avc_audit_post_callback+0x10/0x10
[ 1419.277888][T16798]  ? skb_put+0x138/0x180
[ 1419.277903][T16798]  ? audit_log_n_string+0x2ac/0x5b0
[ 1419.277924][T16798]  ? __pfx_avc_audit_post_callback+0x10/0x10
[ 1419.277941][T16798]  common_lsm_audit+0x23f/0x2b0
[ 1419.277958][T16798]  ? __pfx_common_lsm_audit+0x10/0x10
[ 1419.277979][T16798]  slow_avc_audit+0x186/0x210
[ 1419.277992][T16798]  ? __pfx_slow_avc_audit+0x10/0x10
[ 1419.278008][T16798]  ? find_held_lock+0x2b/0x80
[ 1419.278020][T16798]  ? avc_has_extended_perms+0x33a/0x10b0
[ 1419.278031][T16798]  ? avc_has_extended_perms+0x33a/0x10b0
[ 1419.278045][T16798]  avc_has_extended_perms+0xada/0x10b0
[ 1419.278062][T16798]  ? __pfx_avc_has_extended_perms+0x10/0x10
[ 1419.278076][T16798]  ? kasan_quarantine_put+0x104/0x240
[ 1419.278095][T16798]  ? find_held_lock+0x2b/0x80
[ 1419.278106][T16798]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1419.278125][T16798]  ? tomoyo_path_number_perm+0x188/0x580
[ 1419.278142][T16798]  ? __pfx_futex_wait+0x10/0x10
[ 1419.278162][T16798]  ? __lock_acquire+0x5c0/0x1f40
[ 1419.278179][T16798]  ioctl_has_perm.constprop.0.isra.0+0x373/0x530
[ 1419.278198][T16798]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1419.278216][T16798]  ? __fget_files+0x34/0x3d0
[ 1419.278237][T16798]  ? selinux_file_ioctl+0x1e0/0x290
[ 1419.278252][T16798]  selinux_file_ioctl+0x1e0/0x290
[ 1419.278275][T16798]  security_file_ioctl+0xfb/0x230
[ 1419.278291][T16798]  __x64_sys_ioctl+0xb7/0x210
[ 1419.278310][T16798]  do_syscall_64+0x123/0x790
[ 1419.278331][T16798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1419.278343][T16798] RIP: 0033:0x7f4c2659f559
[ 1419.278354][T16798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1419.278364][T16798] RSP: 002b:00007f4c273f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1419.278375][T16798] RAX: ffffffffffffffda RBX: 00007f4c26826090 RCX: 00007f4c2659f559
[ 1419.278383][T16798] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000007
[ 1419.278390][T16798] RBP: 00007f4c26636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1419.278397][T16798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1419.278404][T16798] R13: 00007f4c26826128 R14: 00007f4c26826090 R15: 00007ffe403aa848
[ 1419.278421][T16798]  </TASK>
[ 1419.417168][ T5635] Bluetooth: hci3: command tx timeout
[ 1419.797682][T16768] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1419.833737][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'.
[ 1419.840254][T16750] rxe_eth0 speed is unknown, defaulting to 1000
[ 1419.911266][T16808] netlink: 141 bytes leftover after parsing attributes in process `syz.5.3032'.
[ 1420.055060][T16793] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1420.055189][T16793] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1420.055270][T16793] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1420.055318][T16793] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1420.143769][T16793] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1420.143825][T16793] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1420.213825][T16793] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1420.267715][T16793] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1420.267756][T16793] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1420.304924][T16793] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1420.336805][T16813] comedi comedi3: comedi_config --init_data is deprecated
[ 1420.588702][T16822] FAULT_INJECTION: forcing a failure.
[ 1420.588702][T16822] name failslab, interval 1, probability 0, space 0, times 0
[ 1420.588725][T16822] CPU: 0 UID: 0 PID: 16822 Comm: syz.1.3035 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1420.588742][T16822] Tainted: [L]=SOFTLOCKUP
[ 1420.588747][T16822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1420.588755][T16822] Call Trace:
[ 1420.588759][T16822]  <TASK>
[ 1420.588764][T16822]  dump_stack_lvl+0x100/0x190
[ 1420.588789][T16822]  should_fail_ex.cold+0x5/0xa
[ 1420.588809][T16822]  should_failslab+0xc2/0x120
[ 1420.588822][T16822]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1420.588840][T16822]  ? do_getname+0x35/0x390
[ 1420.588859][T16822]  do_getname+0x35/0x390
[ 1420.588876][T16822]  do_sys_openat2+0xc3/0x1d0
[ 1420.588892][T16822]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1420.588906][T16822]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1420.588928][T16822]  __x64_sys_openat+0x12d/0x210
[ 1420.588943][T16822]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1420.588964][T16822]  do_syscall_64+0x123/0x790
[ 1420.588982][T16822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1420.588995][T16822] RIP: 0033:0x7f5d9f55fd8e
[ 1420.589006][T16822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1420.589018][T16822] RSP: 002b:00007f5da03caea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1420.589030][T16822] RAX: ffffffffffffffda RBX: 00007f5da03cd6c0 RCX: 00007f5d9f55fd8e
[ 1420.589040][T16822] RDX: 0000000000000002 RSI: 00007f5d9f635eb2 RDI: ffffffffffffff9c
[ 1420.589048][T16822] RBP: 00007f5d9f636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1420.589054][T16822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[ 1420.589061][T16822] R13: 0000200000000240 R14: 0000000000000000 R15: 00007ffd03e45c38
[ 1420.589079][T16822]  </TASK>
[ 1420.644533][ T2270] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1420.961222][ T2270] usb 6-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00
[ 1420.974312][ T2270] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1420.974361][ T2270] usb 6-1: config 1 interface 2 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA
[ 1420.974376][ T2270] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0xA has invalid maxpacket 21149, setting to 1024
[ 1420.974391][ T2270] usb 6-1: config 1 interface 2 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 1420.974405][ T2270] usb 6-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1420.974427][ T2270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.276844][ T2270] usb 6-1: invalid MIDI in EP 0
[ 1421.315453][ T2270] snd-ua101 6-1:1.0: probe with driver snd-ua101 failed with error -22
[ 1421.430812][T16750] virt_wifi0 speed is unknown, defaulting to 1000
[ 1421.516296][ T2270] usb 6-1: USB disconnect, device number 38
[ 1421.719033][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[ 1421.926114][T16197] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1422.087803][T16197] usb 2-1: Using ep0 maxpacket: 16
[ 1422.090853][T16197] usb 2-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1422.096324][T16197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1422.125230][T16197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.125248][T16197] usb 2-1: Product: syz
[ 1422.125257][T16197] usb 2-1: Manufacturer: syz
[ 1422.125265][T16197] usb 2-1: SerialNumber: syz
[ 1422.126722][T16197] usb 2-1: config 0 descriptor??
[ 1422.128361][T16197] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1422.128376][T16197] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1422.183101][T16197] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1422.236495][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1422.377117][ T5635] Bluetooth: hci5: command 0x0406 tx timeout
[ 1422.493050][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1422.493094][ T5635] Bluetooth: hci3: command 0x0419 tx timeout
[ 1422.533330][T16852] FAULT_INJECTION: forcing a failure.
[ 1422.533330][T16852] name failslab, interval 1, probability 0, space 0, times 0
[ 1422.533353][T16852] CPU: 0 UID: 0 PID: 16852 Comm: syz.0.3040 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1422.533371][T16852] Tainted: [L]=SOFTLOCKUP
[ 1422.533378][T16852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1422.533386][T16852] Call Trace:
[ 1422.533391][T16852]  <TASK>
[ 1422.533397][T16852]  dump_stack_lvl+0x100/0x190
[ 1422.533423][T16852]  should_fail_ex.cold+0x5/0xa
[ 1422.533443][T16852]  should_failslab+0xc2/0x120
[ 1422.533457][T16852]  __kmalloc_cache_node_noprof+0x94/0x710
[ 1422.533478][T16852]  ? __alloc_workqueue+0xa4f/0x1900
[ 1422.533498][T16852]  __alloc_workqueue+0xa4f/0x1900
[ 1422.533521][T16852]  alloc_workqueue_noprof+0xc7/0x130
[ 1422.533538][T16852]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1422.533556][T16852]  ? __kasan_kmalloc+0xaa/0xb0
[ 1422.533574][T16852]  ? __kmalloc_noprof+0x350/0x840
[ 1422.533591][T16852]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1422.533612][T16852]  ieee80211_register_hw+0x2154/0x45c0
[ 1422.533631][T16852]  ? __pfx_mark_held_locks+0x1/0x10
[ 1422.533653][T16852]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1422.533670][T16852]  ? __pfx___debug_object_init+0x10/0x10
[ 1422.533690][T16852]  ? find_held_lock+0x2b/0x80
[ 1422.533702][T16852]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1422.533722][T16852]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1422.533737][T16852]  ? __hrtimer_setup+0x208/0x330
[ 1422.533752][T16852]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1422.533781][T16852]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1422.533812][T16852]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1422.533831][T16852]  ? trace_kmalloc+0xeb/0x110
[ 1422.533845][T16852]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1422.533872][T16852]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1422.533909][T16852]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1422.533932][T16852]  genl_family_rcv_msg_doit+0x214/0x300
[ 1422.533949][T16852]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1422.533969][T16852]  ? bpf_lsm_capable+0x9/0x10
[ 1422.533979][T16852]  ? security_capable+0x80/0x260
[ 1422.533994][T16852]  ? ns_capable+0xcd/0xf0
[ 1422.534008][T16852]  genl_rcv_msg+0x560/0x800
[ 1422.534024][T16852]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1422.534038][T16852]  ? __lock_acquire+0x5c0/0x1f40
[ 1422.534052][T16852]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1422.534076][T16852]  netlink_rcv_skb+0x159/0x420
[ 1422.534088][T16852]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1422.534107][T16852]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1422.534126][T16852]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1422.534140][T16852]  genl_rcv+0x28/0x40
[ 1422.534152][T16852]  netlink_unicast+0x668/0x950
[ 1422.534167][T16852]  ? __pfx_netlink_unicast+0x10/0x10
[ 1422.534184][T16852]  netlink_sendmsg+0x9ac/0x10c0
[ 1422.534200][T16852]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1422.534217][T16852]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1422.534234][T16852]  ? ____sys_sendmsg+0xa99/0xc30
[ 1422.534248][T16852]  ____sys_sendmsg+0xa99/0xc30
[ 1422.534261][T16852]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1422.534275][T16852]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1422.534298][T16852]  ___sys_sendmsg+0x190/0x1e0
[ 1422.534314][T16852]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1422.534329][T16852]  ? futex_wait+0x11e/0x370
[ 1422.534351][T16852]  ? find_held_lock+0x2b/0x80
[ 1422.534376][T16852]  __sys_sendmsg+0x160/0x210
[ 1422.534389][T16852]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1422.534411][T16852]  do_syscall_64+0x123/0x790
[ 1422.534430][T16852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.534443][T16852] RIP: 0033:0x7fa9b3b9f559
[ 1422.534454][T16852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.534467][T16852] RSP: 002b:00007fa9b49c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1422.534479][T16852] RAX: ffffffffffffffda RBX: 00007fa9b3e25fa0 RCX: 00007fa9b3b9f559
[ 1422.534488][T16852] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000007
[ 1422.534496][T16852] RBP: 00007fa9b3c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1422.534504][T16852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1422.534511][T16852] R13: 00007fa9b3e26038 R14: 00007fa9b3e25fa0 R15: 00007ffdae606858
[ 1422.534529][T16852]  </TASK>
[ 1424.725215][T10236] Bluetooth: hci5: command 0x0406 tx timeout
[ 1424.725243][T10236] Bluetooth: hci3: command 0x0419 tx timeout
[ 1424.725260][T10236] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1425.336793][   T29] kauditd_printk_skb: 38 callbacks suppressed
[ 1425.336806][   T29] audit: type=1400 audit(2000000656.829:2546): avc:  denied  { unlink } for  pid=16029 comm="syz-executor" name="file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1425.341216][T15712] usb 2-1: USB disconnect, device number 43
[ 1425.542390][T16757] udevd[16757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1425.767231][   T29] audit: type=1400 audit(2000000657.231:2547): avc:  denied  { read } for  pid=16869 comm="syz.0.3045" name="usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1425.794645][   T29] audit: type=1400 audit(2000000657.259:2548): avc:  denied  { open } for  pid=16869 comm="syz.0.3045" path="/dev/usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1425.825135][T16868] comedi comedi3: comedi_config --init_data is deprecated
[ 1425.882480][   T29] audit: type=1400 audit(2000000657.334:2549): avc:  denied  { setopt } for  pid=16869 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1425.884669][   T29] audit: type=1400 audit(2000000657.334:2550): avc:  denied  { ioctl } for  pid=16869 comm="syz.0.3045" path="/dev/usbmon3" dev="devtmpfs" ino=724 ioctlcmd=0xc020662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1425.977929][   T29] audit: type=1400 audit(2000000657.428:2551): avc:  denied  { read write } for  pid=16873 comm="syz.5.3046" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1425.977962][   T29] audit: type=1400 audit(2000000657.428:2552): avc:  denied  { open } for  pid=16873 comm="syz.5.3046" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1426.039105][T15712] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1426.087720][T16538] bridge_slave_1: left allmulticast mode
[ 1426.087850][T16538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.192239][T15712] usb 2-1: Using ep0 maxpacket: 32
[ 1426.196604][T15712] usb 2-1: New USB device found: idVendor=041e, idProduct=3f02, bcdDevice=0.40
[ 1426.197536][T15712] usb 2-1: config 1 has an invalid interface number: 43 but max is 2
[ 1426.197553][T15712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1426.197565][T15712] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1426.197578][T15712] usb 2-1: config 1 has no interface number 1
[ 1426.197598][T15712] usb 2-1: config 1 interface 43 has no altsetting 0
[ 1426.236515][T15712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.236532][T15712] usb 2-1: Product: syz
[ 1426.236543][T15712] usb 2-1: Manufacturer: syz
[ 1426.236551][T15712] usb 2-1: SerialNumber: syz
[ 1426.939451][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1426.939478][ T5635] Bluetooth: hci3: command 0x0419 tx timeout
[ 1427.515249][T16886] FAULT_INJECTION: forcing a failure.
[ 1427.515249][T16886] name failslab, interval 1, probability 0, space 0, times 0
[ 1427.515268][T16886] CPU: 0 UID: 0 PID: 16886 Comm: syz.4.3047 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1427.515284][T16886] Tainted: [L]=SOFTLOCKUP
[ 1427.515291][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1427.515298][T16886] Call Trace:
[ 1427.515303][T16886]  <TASK>
[ 1427.515309][T16886]  dump_stack_lvl+0x100/0x190
[ 1427.515333][T16886]  should_fail_ex.cold+0x5/0xa
[ 1427.515352][T16886]  should_failslab+0xc2/0x120
[ 1427.515365][T16886]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1427.515383][T16886]  ? alloc_empty_file+0x5b/0x1c0
[ 1427.515401][T16886]  alloc_empty_file+0x5b/0x1c0
[ 1427.515416][T16886]  path_openat+0xd6/0x23f0
[ 1427.515432][T16886]  ? __pfx_path_openat+0x10/0x10
[ 1427.515450][T16886]  do_file_open+0x20e/0x430
[ 1427.515465][T16886]  ? __pfx_do_file_open+0x10/0x10
[ 1427.515490][T16886]  ? _raw_spin_unlock+0x28/0x50
[ 1427.515511][T16886]  ? alloc_fd+0x471/0x7a0
[ 1427.515532][T16886]  do_sys_openat2+0x163/0x1d0
[ 1427.515548][T16886]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1427.515562][T16886]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1427.515585][T16886]  __x64_sys_openat+0x12d/0x210
[ 1427.515602][T16886]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1427.515624][T16886]  do_syscall_64+0x123/0x790
[ 1427.515642][T16886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.515655][T16886] RIP: 0033:0x7fa933d5fd8e
[ 1427.515665][T16886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1427.515677][T16886] RSP: 002b:00007fa934be3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1427.515688][T16886] RAX: ffffffffffffffda RBX: 00007fa934be66c0 RCX: 00007fa933d5fd8e
[ 1427.515696][T16886] RDX: 0000000000000002 RSI: 00007fa933e35eb2 RDI: ffffffffffffff9c
[ 1427.515704][T16886] RBP: 00007fa933e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1427.515710][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[ 1427.515718][T16886] R13: 0000200000000240 R14: 0000000000000000 R15: 00007ffcb7c77bb8
[ 1427.515734][T16886]  </TASK>
[ 1427.802182][   T29] audit: type=1400 audit(2000000659.130:2553): avc:  denied  { name_bind } for  pid=16862 comm="syz.1.3043" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1427.944027][   T12] IPVS: starting estimator thread 0...
[ 1428.029878][T16893] IPVS: using max 69 ests per chain, 165600 per kthread
[ 1428.293211][   T29] audit: type=1400 audit(2000000659.588:2554): avc:  denied  { write } for  pid=16871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1428.345524][T16538] bond3 (unregistering): (slave bridge1): Releasing backup interface
[ 1428.378680][T16538] bond1 (unregistering): Released all slaves
[ 1428.415810][T16538] bond2 (unregistering): Released all slaves
[ 1428.448428][T16538] bond3 (unregistering): Released all slaves
[ 1428.457572][   T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1428.457676][T16197] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1428.505906][T16538] bond4 (unregistering): Released all slaves
[ 1428.537605][T16538] bond5 (unregistering): Released all slaves
[ 1428.572325][T16538] bond6 (unregistering): Released all slaves
[ 1428.583619][   T29] audit: type=1400 audit(2000000659.860:2555): avc:  denied  { write } for  pid=16905 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1428.627410][T16538] bond0 (unregistering): Released all slaves
[ 1428.628643][T16197] usb 1-1: Using ep0 maxpacket: 16
[ 1428.647881][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1428.647924][   T10] usb 6-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[ 1428.648582][T16197] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1428.648887][   T10] usb 6-1: config 12 has an invalid interface number: 99 but max is 0
[ 1428.648901][   T10] usb 6-1: config 12 has no interface number 0
[ 1428.648917][   T10] usb 6-1: config 12 interface 99 has no altsetting 0
[ 1428.703084][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.703101][   T10] usb 6-1: Product: syz
[ 1428.703110][   T10] usb 6-1: Manufacturer: syz
[ 1428.703119][   T10] usb 6-1: SerialNumber: syz
[ 1428.712010][T16197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1428.741401][T16197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.741418][T16197] usb 1-1: Product: syz
[ 1428.741427][T16197] usb 1-1: Manufacturer: syz
[ 1428.741435][T16197] usb 1-1: SerialNumber: syz
[ 1428.744220][T16197] usb 1-1: config 0 descriptor??
[ 1428.796403][T16197] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1428.796426][T16197] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1428.834024][T16538] bond7 (unregistering): Released all slaves
[ 1428.869221][T16538] bond8 (unregistering): Released all slaves
[ 1428.924790][T16538] bond9 (unregistering): Released all slaves
[ 1428.956080][T16538] bond10 (unregistering): Released all slaves
[ 1429.011161][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1429.064982][T16750] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.065037][T16750] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1429.065166][T16750] bridge_slave_0: entered allmulticast mode
[ 1429.066437][T16750] bridge_slave_0: entered promiscuous mode
[ 1429.108637][T16750] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.108727][T16750] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1429.108855][T16750] bridge_slave_1: entered allmulticast mode
[ 1429.136523][T16750] bridge_slave_1: entered promiscuous mode
[ 1429.168807][T10236] Bluetooth: hci3: command 0x0419 tx timeout
[ 1429.199852][T16197] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1429.244810][T16538] tipc: Left network mode
[ 1429.246537][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1429.286003][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1429.403755][T16750] team0: Port device team_slave_0 added
[ 1429.432378][T16750] team0: Port device team_slave_1 added
[ 1429.530082][T15712] usb 2-1: BAAD MICROPHONE c_chmask mismatch
[ 1429.552084][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1429.552096][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1429.552110][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1429.614681][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1429.614693][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1429.614707][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1429.670885][T16197] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1429.670906][T16197] em28xx 1-1:0.0: board has no eeprom
[ 1429.825043][T15712] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1429.891514][T15712] usb 2-1: USB disconnect, device number 44
[ 1429.985473][T16750] hsr_slave_0: entered promiscuous mode
[ 1429.986062][T16750] hsr_slave_1: entered promiscuous mode
[ 1429.986917][T16750] debugfs: 'hsr0' already exists in 'hsr'
[ 1429.986929][T16750] Cannot create hsr debugfs directory
[ 1430.020439][T16197] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1430.020491][T16197] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1430.021060][ T1665] em28xx 1-1:0.0: Binding DVB extension
[ 1430.064655][T16707] udevd[16707]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1430.385464][T16197] usb 1-1: USB disconnect, device number 49
[ 1430.386383][T16197] em28xx 1-1:0.0: Disconnecting em28xx
[ 1430.608917][ T1665] em28xx 1-1:0.0: Registering input extension
[ 1430.706449][T16197] em28xx 1-1:0.0: Closing input extension
[ 1430.965367][   T10] usb 6-1: no audio or video endpoints found
[ 1430.995157][   T10] usb 6-1: USB disconnect, device number 39
[ 1431.201003][   T29] audit: type=1400 audit(2000000662.310:2556): avc:  denied  { write } for  pid=16910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1431.317057][T16933] FAULT_INJECTION: forcing a failure.
[ 1431.317057][T16933] name failslab, interval 1, probability 0, space 0, times 0
[ 1431.317080][T16933] CPU: 0 UID: 0 PID: 16933 Comm: syz.0.3054 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1431.317099][T16933] Tainted: [L]=SOFTLOCKUP
[ 1431.317104][T16933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1431.317113][T16933] Call Trace:
[ 1431.317117][T16933]  <TASK>
[ 1431.317122][T16933]  dump_stack_lvl+0x100/0x190
[ 1431.317146][T16933]  should_fail_ex.cold+0x5/0xa
[ 1431.317166][T16933]  should_failslab+0xc2/0x120
[ 1431.317181][T16933]  __kmalloc_cache_node_noprof+0x94/0x710
[ 1431.317201][T16933]  ? __alloc_workqueue+0xa4f/0x1900
[ 1431.317223][T16933]  __alloc_workqueue+0xa4f/0x1900
[ 1431.317247][T16933]  alloc_workqueue_noprof+0xc7/0x130
[ 1431.317263][T16933]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1431.317282][T16933]  ? __kasan_kmalloc+0xaa/0xb0
[ 1431.317299][T16933]  ? __kmalloc_noprof+0x350/0x840
[ 1431.317316][T16933]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1431.317336][T16933]  ieee80211_register_hw+0x2154/0x45c0
[ 1431.317354][T16933]  ? __pfx_mark_held_locks+0x1/0x10
[ 1431.317375][T16933]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1431.317391][T16933]  ? __pfx___debug_object_init+0x10/0x10
[ 1431.317410][T16933]  ? find_held_lock+0x2b/0x80
[ 1431.317423][T16933]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1431.317442][T16933]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1431.317458][T16933]  ? __hrtimer_setup+0x208/0x330
[ 1431.317473][T16933]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1431.317503][T16933]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1431.317527][T16933]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1431.317544][T16933]  ? trace_kmalloc+0xeb/0x110
[ 1431.317556][T16933]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1431.317578][T16933]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1431.317593][T16933]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1431.317611][T16933]  genl_family_rcv_msg_doit+0x214/0x300
[ 1431.317627][T16933]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1431.317647][T16933]  ? bpf_lsm_capable+0x9/0x10
[ 1431.317657][T16933]  ? security_capable+0x80/0x260
[ 1431.317672][T16933]  ? ns_capable+0xcd/0xf0
[ 1431.317686][T16933]  genl_rcv_msg+0x560/0x800
[ 1431.317702][T16933]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1431.317715][T16933]  ? __lock_acquire+0x5c0/0x1f40
[ 1431.317730][T16933]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1431.317753][T16933]  netlink_rcv_skb+0x159/0x420
[ 1431.317765][T16933]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1431.317780][T16933]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1431.317800][T16933]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1431.317814][T16933]  genl_rcv+0x28/0x40
[ 1431.317826][T16933]  netlink_unicast+0x668/0x950
[ 1431.317841][T16933]  ? __pfx_netlink_unicast+0x10/0x10
[ 1431.317858][T16933]  netlink_sendmsg+0x9ac/0x10c0
[ 1431.317873][T16933]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1431.317890][T16933]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1431.317907][T16933]  ? ____sys_sendmsg+0xa99/0xc30
[ 1431.317921][T16933]  ____sys_sendmsg+0xa99/0xc30
[ 1431.317934][T16933]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1431.317948][T16933]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1431.317970][T16933]  ___sys_sendmsg+0x190/0x1e0
[ 1431.317986][T16933]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1431.318001][T16933]  ? futex_wait+0x11e/0x370
[ 1431.318024][T16933]  ? find_held_lock+0x2b/0x80
[ 1431.318053][T16933]  __sys_sendmsg+0x160/0x210
[ 1431.318067][T16933]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1431.318089][T16933]  do_syscall_64+0x123/0x790
[ 1431.318109][T16933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1431.318122][T16933] RIP: 0033:0x7fa9b3b9f559
[ 1431.318134][T16933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1431.318146][T16933] RSP: 002b:00007fa9b49c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1431.318159][T16933] RAX: ffffffffffffffda RBX: 00007fa9b3e25fa0 RCX: 00007fa9b3b9f559
[ 1431.318168][T16933] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000007
[ 1431.318176][T16933] RBP: 00007fa9b3c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1431.318183][T16933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1431.318191][T16933] R13: 00007fa9b3e26038 R14: 00007fa9b3e25fa0 R15: 00007ffdae606858
[ 1431.318209][T16933]  </TASK>
[ 1431.958530][T16197] em28xx: Freeing device
[ 1432.070612][   T29] audit: type=1400 audit(2000000663.115:2557): avc:  denied  { write } for  pid=16936 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1433.552567][T16947] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1433.667548][   T29] audit: type=1400 audit(2000000664.621:2558): avc:  denied  { bind } for  pid=16953 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1433.758070][   T29] audit: type=1400 audit(2000000664.696:2559): avc:  denied  { create } for  pid=16953 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1433.779940][   T29] audit: type=1400 audit(2000000664.724:2560): avc:  denied  { setopt } for  pid=16953 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1433.811393][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3060'.
[ 1433.811410][T16958] nbd: must specify at least one socket
[ 1433.920188][T16960] FAULT_INJECTION: forcing a failure.
[ 1433.920188][T16960] name failslab, interval 1, probability 0, space 0, times 0
[ 1433.921208][T16960] CPU: 0 UID: 0 PID: 16960 Comm: syz.1.3061 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1433.921230][T16960] Tainted: [L]=SOFTLOCKUP
[ 1433.921235][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1433.921244][T16960] Call Trace:
[ 1433.921249][T16960]  <TASK>
[ 1433.921255][T16960]  dump_stack_lvl+0x100/0x190
[ 1433.921281][T16960]  should_fail_ex.cold+0x5/0xa
[ 1433.921299][T16960]  should_failslab+0xc2/0x120
[ 1433.921312][T16960]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1433.921330][T16960]  ? do_getname+0x35/0x390
[ 1433.921348][T16960]  do_getname+0x35/0x390
[ 1433.921365][T16960]  do_sys_openat2+0xc3/0x1d0
[ 1433.921385][T16960]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1433.921400][T16960]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1433.921424][T16960]  __x64_sys_openat+0x12d/0x210
[ 1433.921440][T16960]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1433.921465][T16960]  do_syscall_64+0x123/0x790
[ 1433.921484][T16960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1433.921497][T16960] RIP: 0033:0x7f5d9f55fd8e
[ 1433.921509][T16960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1433.921520][T16960] RSP: 002b:00007f5da0388ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1433.921532][T16960] RAX: ffffffffffffffda RBX: 00007f5da038b6c0 RCX: 00007f5d9f55fd8e
[ 1433.921540][T16960] RDX: 0000000000000002 RSI: 00007f5d9f635eb2 RDI: ffffffffffffff9c
[ 1433.921547][T16960] RBP: 00007f5d9f636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1433.921554][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[ 1433.921561][T16960] R13: 0000200000000240 R14: 0000000000000000 R15: 00007ffd03e45c38
[ 1433.921577][T16960]  </TASK>
[ 1433.945603][   T29] audit: type=1400 audit(2000000664.855:2561): avc:  denied  { create } for  pid=16953 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1434.088939][   T29] audit: type=1400 audit(2000000665.004:2562): avc:  denied  { setopt } for  pid=16953 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1434.224571][   T12] smbdirect: ib_dev[syz1] removed
[ 1434.277812][T16963] kvm: user requested TSC rate below hardware speed
[ 1434.294162][T16538] team0 (unregistering): Port device team_slave_1 removed
[ 1434.363798][T16538] team0 (unregistering): Port device team_slave_0 removed
[ 1434.460651][T10236] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1434.470479][   T29] audit: type=1400 audit(2000000665.369:2563): avc:  denied  { watch_reads } for  pid=16964 comm="syz.4.3063" path="/604" dev="tmpfs" ino=3424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1434.498264][   T29] audit: type=1400 audit(2000000665.397:2564): avc:  denied  { append } for  pid=16964 comm="syz.4.3063" name="cec0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1434.524267][   T29] audit: type=1400 audit(2000000665.416:2565): avc:  denied  { read write } for  pid=16964 comm="syz.4.3063" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1434.649364][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1434.657543][T16958] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1434.684386][T16967] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[ 1434.733310][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3063'.
[ 1435.070717][T16538] IPVS: stop unused estimator thread 0...
[ 1437.433543][T16750] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1437.455051][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1437.455712][T16750] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1437.489797][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1437.490329][T16750] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1437.535260][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1437.547925][T16750] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1437.564923][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1437.590871][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1437.590883][   T29] audit: type=1400 audit(2000000668.288:2567): avc:  denied  { write } for  pid=16979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1437.839071][T16750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1437.885342][   T29] audit: type=1400 audit(2000000668.559:2568): avc:  denied  { write } for  pid=17004 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1437.918067][T16750] 8021q: adding VLAN 0 to HW filter on device team0
[ 1437.955841][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1437.955900][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1437.978330][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1437.978386][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1438.098354][T16750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1439.622820][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[ 1439.622838][T17030] nbd: must specify at least one socket
[ 1439.663610][   T29] audit: type=1400 audit(2000000670.224:2569): avc:  denied  { setopt } for  pid=17029 comm="syz.4.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1439.706208][T17034] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[ 1439.709483][T17030] IPVS: stopping backup sync thread 17034 ...
[ 1440.092274][   T29] audit: type=1400 audit(2000000670.626:2570): avc:  denied  { write } for  pid=17011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1440.146797][T17028] tipc: New replicast peer: 172.20.20.187
[ 1440.151072][T17028] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1440.216508][T17053] FAULT_INJECTION: forcing a failure.
[ 1440.216508][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1440.216529][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.4.3075 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1440.216546][T17053] Tainted: [L]=SOFTLOCKUP
[ 1440.216552][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1440.216560][T17053] Call Trace:
[ 1440.216564][T17053]  <TASK>
[ 1440.216570][T17053]  dump_stack_lvl+0x100/0x190
[ 1440.216592][T17053]  should_fail_ex.cold+0x5/0xa
[ 1440.216610][T17053]  strncpy_from_user+0x3b/0x2d0
[ 1440.216627][T17053]  do_getname+0x78/0x390
[ 1440.216645][T17053]  user_path_at+0x26/0x60
[ 1440.216657][T17053]  __x64_sys_mount+0x1fb/0x310
[ 1440.216674][T17053]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1440.216694][T17053]  do_syscall_64+0x123/0x790
[ 1440.216712][T17053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.216724][T17053] RIP: 0033:0x7fa933d9f559
[ 1440.216734][T17053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1440.216745][T17053] RSP: 002b:00007fa934c28028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1440.216757][T17053] RAX: ffffffffffffffda RBX: 00007fa934025fa0 RCX: 00007fa933d9f559
[ 1440.216764][T17053] RDX: 00002000000008c0 RSI: 0000200000000880 RDI: 0000000000000000
[ 1440.216771][T17053] RBP: 00007fa934c28090 R08: 0000200000000900 R09: 0000000000000000
[ 1440.216779][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1440.216785][T17053] R13: 00007fa934026038 R14: 00007fa934025fa0 R15: 00007ffcb7c77bb8
[ 1440.216801][T17053]  </TASK>
[ 1440.535541][T16750] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1440.593568][   T29] audit: type=1400 audit(2000000671.094:2571): avc:  denied  { write } for  pid=17055 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1440.635867][   T29] audit: type=1400 audit(2000000671.131:2572): avc:  denied  { load_policy } for  pid=17023 comm="syz.5.3070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1440.910837][   T29] audit: type=1400 audit(2000000671.384:2573): avc:  denied  { ioctl } for  pid=17063 comm="syz.0.3078" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1440.962648][T17048] SELinux:  policydb string length 0 does not match expected length 8
[ 1440.982676][T17048] SELinux: failed to load policy
[ 1441.001916][   T29] audit: type=1400 audit(2000000671.477:2574): avc:  denied  { getopt } for  pid=17023 comm="syz.5.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1441.109207][T17070] comedi comedi3: comedi_config --init_data is deprecated
[ 1441.109931][T17067] pim6reg: entered allmulticast mode
[ 1441.110252][T16750] veth0_vlan: entered promiscuous mode
[ 1441.183968][T16750] veth1_vlan: entered promiscuous mode
[ 1441.276994][T16750] veth0_macvtap: entered promiscuous mode
[ 1441.286055][T16750] veth1_macvtap: entered promiscuous mode
[ 1441.308339][   T29] audit: type=1400 audit(2000000671.767:2575): avc:  denied  { write } for  pid=17073 comm="syz.1.3080" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1441.377123][T16750] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1441.402749][T17075] openvswitch: netlink: IP tunnel dst address not specified
[ 1441.414024][T16750] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1441.483171][T17075] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[ 1441.483224][T17075] [U] J"�e:��"


[ 1441.621004][   T29] audit: type=1326 audit(2000000672.057:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17078 comm="syz.4.3082" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa933d9f559 code=0x0
[ 1441.659651][ T6186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.660242][ T6186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.687753][ T6638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.687905][ T6638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.868569][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.868586][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1442.017411][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1442.017426][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1442.287034][T17075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3080'.
[ 1442.335669][T16197] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1442.473348][T16197] usb 1-1: device descriptor read/64, error -71
[ 1442.522777][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[ 1442.579637][T17100] team0 (unregistering): Port device team_slave_0 removed
[ 1442.634853][T17100] team0 (unregistering): Port device team_slave_1 removed
[ 1442.729785][T16197] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1443.015825][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 1443.015837][   T29] audit: type=1400 audit(2000000673.358:2579): avc:  denied  { create } for  pid=17102 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1443.015864][   T29] audit: type=1400 audit(2000000673.358:2580): avc:  denied  { bind } for  pid=17102 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1443.015887][   T29] audit: type=1400 audit(2000000673.358:2581): avc:  denied  { accept } for  pid=17102 comm="syz.5.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1443.016240][T16197] usb 1-1: device descriptor read/64, error -71
[ 1443.126158][T16197] usb usb1-port1: attempt power cycle
[ 1443.264078][T15712] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1443.280913][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1443.299102][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1443.299892][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1443.301273][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1443.333501][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1443.402989][T15712] usb 6-1: device descriptor read/64, error -71
[ 1443.489489][T16197] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1443.512702][T16197] usb 1-1: device descriptor read/8, error -71
[ 1443.584610][   T29] audit: type=1400 audit(2000000673.891:2582): avc:  denied  { ioctl } for  pid=17113 comm="syz.1.3087" path="/47/my_configfs/target/dbroot" dev="configfs" ino=56594 ioctlcmd=0x80106f05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 1443.844234][T15712] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1443.884060][T16197] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1443.917062][T16197] usb 1-1: device descriptor read/8, error -71
[ 1444.045040][T16197] usb usb1-port1: unable to enumerate USB device
[ 1444.098355][T15712] usb 6-1: device descriptor read/64, error -71
[ 1444.216388][T15712] usb usb6-port1: attempt power cycle
[ 1444.541988][  T190] IPVS: starting estimator thread 0...
[ 1444.676229][T15712] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1444.708459][T17123] IPVS: using max 69 ests per chain, 165600 per kthread
[ 1444.711400][T15712] usb 6-1: device descriptor read/8, error -71
[ 1445.017386][T15712] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1445.039706][T15712] usb 6-1: device descriptor read/8, error -71
[ 1445.160331][T15712] usb usb6-port1: unable to enumerate USB device
[ 1445.179391][T17128] comedi comedi3: comedi_config --init_data is deprecated
[ 1445.332341][   T29] audit: type=1400 audit(2000000675.528:2583): avc:  denied  { create } for  pid=17130 comm="syz.3.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1445.391059][   T29] audit: type=1400 audit(2000000675.574:2584): avc:  denied  { sys_admin } for  pid=17130 comm="syz.3.3090" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 1445.654232][ T5635] Bluetooth: hci2: command tx timeout
[ 1446.180134][T17146] FAULT_INJECTION: forcing a failure.
[ 1446.180134][T17146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1446.180156][T17146] CPU: 0 UID: 0 PID: 17146 Comm: syz.5.3094 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1446.180172][T17146] Tainted: [L]=SOFTLOCKUP
[ 1446.180177][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1446.180184][T17146] Call Trace:
[ 1446.180189][T17146]  <TASK>
[ 1446.180194][T17146]  dump_stack_lvl+0x100/0x190
[ 1446.180216][T17146]  should_fail_ex.cold+0x5/0xa
[ 1446.180238][T17146]  _copy_from_user+0x2e/0xd0
[ 1446.180253][T17146]  j1939_sk_setsockopt+0x689/0x800
[ 1446.180267][T17146]  ? __pfx_j1939_sk_setsockopt+0x10/0x10
[ 1446.180278][T17146]  ? __fget_files+0x215/0x3d0
[ 1446.180296][T17146]  ? selinux_socket_setsockopt+0x6a/0x80
[ 1446.180313][T17146]  ? __pfx_j1939_sk_setsockopt+0x10/0x10
[ 1446.180326][T17146]  do_sock_setsockopt+0xf3/0x1d0
[ 1446.180342][T17146]  __sys_setsockopt+0x195/0x220
[ 1446.180362][T17146]  __x64_sys_setsockopt+0xbd/0x160
[ 1446.180378][T17146]  ? do_syscall_64+0xae/0x790
[ 1446.180394][T17146]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1446.180410][T17146]  do_syscall_64+0x123/0x790
[ 1446.180428][T17146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.180439][T17146] RIP: 0033:0x7f4c2659f559
[ 1446.180450][T17146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1446.180461][T17146] RSP: 002b:00007f4c27414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1446.180472][T17146] RAX: ffffffffffffffda RBX: 00007f4c26825fa0 RCX: 00007f4c2659f559
[ 1446.180480][T17146] RDX: 0000000000000003 RSI: 000000000000006b RDI: 0000000000000003
[ 1446.180487][T17146] RBP: 00007f4c27414090 R08: 0000000000000004 R09: 0000000000000000
[ 1446.180494][T17146] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[ 1446.180508][T17146] R13: 00007f4c26826038 R14: 00007f4c26825fa0 R15: 00007ffe403aa848
[ 1446.180525][T17146]  </TASK>
[ 1446.551418][T17109] rxe_eth0 speed is unknown, defaulting to 1000
[ 1446.695739][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1446.760454][T17150] FAULT_INJECTION: forcing a failure.
[ 1446.760454][T17150] name failslab, interval 1, probability 0, space 0, times 0
[ 1446.760478][T17150] CPU: 0 UID: 0 PID: 17150 Comm: syz.0.3095 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1446.760496][T17150] Tainted: [L]=SOFTLOCKUP
[ 1446.760502][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1446.760509][T17150] Call Trace:
[ 1446.760521][T17150]  <TASK>
[ 1446.760526][T17150]  dump_stack_lvl+0x100/0x190
[ 1446.760552][T17150]  should_fail_ex.cold+0x5/0xa
[ 1446.760571][T17150]  should_failslab+0xc2/0x120
[ 1446.760584][T17150]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1446.760603][T17150]  ? __d_alloc+0x34/0xad0
[ 1446.760621][T17150]  __d_alloc+0x34/0xad0
[ 1446.760638][T17150]  d_alloc_pseudo+0x1c/0xc0
[ 1446.760650][T17150]  alloc_file_pseudo+0x118/0x290
[ 1446.760666][T17150]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1446.760681][T17150]  ? alloc_fd+0x471/0x7a0
[ 1446.760698][T17150]  sock_alloc_file+0x50/0x210
[ 1446.760712][T17150]  __sys_socket+0x1c0/0x260
[ 1446.760727][T17150]  ? __pfx___sys_socket+0x10/0x10
[ 1446.760746][T17150]  __x64_sys_socket+0x72/0xb0
[ 1446.760762][T17150]  do_syscall_64+0x123/0x790
[ 1446.760781][T17150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.760793][T17150] RIP: 0033:0x7fa9b3b9f559
[ 1446.760804][T17150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1446.760816][T17150] RSP: 002b:00007fa9b49a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1446.760828][T17150] RAX: ffffffffffffffda RBX: 00007fa9b3e26090 RCX: 00007fa9b3b9f559
[ 1446.760836][T17150] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 1446.760843][T17150] RBP: 00007fa9b3c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1446.760850][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1446.760857][T17150] R13: 00007fa9b3e26128 R14: 00007fa9b3e26090 R15: 00007ffdae606858
[ 1446.760874][T17150]  </TASK>
[ 1447.161309][   T29] audit: type=1400 audit(2000000677.239:2585): avc:  denied  { read } for  pid=17162 comm="syz.3.3098" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1447.185046][   T29] audit: type=1400 audit(2000000677.268:2586): avc:  denied  { open } for  pid=17162 comm="syz.3.3098" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1447.357410][T17165] FAULT_INJECTION: forcing a failure.
[ 1447.357410][T17165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1447.357432][T17165] CPU: 0 UID: 0 PID: 17165 Comm: syz.3.3098 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1447.357454][T17165] Tainted: [L]=SOFTLOCKUP
[ 1447.357459][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1447.357466][T17165] Call Trace:
[ 1447.357470][T17165]  <TASK>
[ 1447.357476][T17165]  dump_stack_lvl+0x100/0x190
[ 1447.357498][T17165]  should_fail_ex.cold+0x5/0xa
[ 1447.357517][T17165]  _copy_to_user+0x32/0xd0
[ 1447.357531][T17165]  simple_read_from_buffer+0xcb/0x170
[ 1447.357547][T17165]  proc_fail_nth_read+0x1af/0x230
[ 1447.357563][T17165]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1447.357578][T17165]  ? rw_verify_area+0xce/0x6d0
[ 1447.357599][T17165]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1447.357613][T17165]  vfs_read+0x1e4/0xb40
[ 1447.357624][T17165]  ? lock_acquire+0x1d1/0x380
[ 1447.357639][T17165]  ? __fget_files+0x34/0x3d0
[ 1447.357652][T17165]  ? __pfx_vfs_read+0x10/0x10
[ 1447.357668][T17165]  ? find_held_lock+0x2b/0x80
[ 1447.357680][T17165]  ? __fget_files+0x215/0x3d0
[ 1447.357696][T17165]  ? __fget_files+0x21f/0x3d0
[ 1447.357714][T17165]  ksys_read+0x12a/0x250
[ 1447.357724][T17165]  ? __pfx_ksys_read+0x10/0x10
[ 1447.357739][T17165]  do_syscall_64+0x123/0x790
[ 1447.357758][T17165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1447.357770][T17165] RIP: 0033:0x7f0467b5fd8e
[ 1447.357781][T17165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1447.357791][T17165] RSP: 002b:00007f0465dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1447.357805][T17165] RAX: ffffffffffffffda RBX: 00007f0465dd56c0 RCX: 00007f0467b5fd8e
[ 1447.357812][T17165] RDX: 000000000000000f RSI: 00007f0465dd50a0 RDI: 0000000000000004
[ 1447.357819][T17165] RBP: 00007f0465dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1447.357826][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1447.357832][T17165] R13: 00007f0467e26128 R14: 00007f0467e26090 R15: 00007fffd59777c8
[ 1447.357849][T17165]  </TASK>
[ 1448.315177][ T5635] Bluetooth: hci2: command tx timeout
[ 1448.454620][   T29] audit: type=1400 audit(2000000678.446:2587): avc:  denied  { ioctl } for  pid=17171 comm="syz.0.3100" path="socket:[56857]" dev="sockfs" ino=56857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1450.463819][ T5635] Bluetooth: hci2: command tx timeout
[ 1450.654655][T12786] bond1 (unregistering): Released all slaves
[ 1450.702165][T12786] bond2 (unregistering): Released all slaves
[ 1450.746661][T12786] bond3 (unregistering): Released all slaves
[ 1450.794828][T12786] bond4 (unregistering): Released all slaves
[ 1450.831878][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'.
[ 1450.847799][T12786] bond5 (unregistering): Released all slaves
[ 1450.863912][   T29] audit: type=1400 audit(2000000680.700:2588): avc:  denied  { write } for  pid=17187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1450.916674][T12786] bond6 (unregistering): Released all slaves
[ 1450.928300][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3102'.
[ 1450.970822][T12786] bond7 (unregistering): Released all slaves
[ 1451.024460][T12786] bond8 (unregistering): Released all slaves
[ 1451.066429][T12786] bond9 (unregistering): Released all slaves
[ 1451.107963][T12786] bond0 (unregistering): Released all slaves
[ 1451.152381][T12786] bond10 (unregistering): Released all slaves
[ 1451.185155][T12786] bond11 (unregistering): Released all slaves
[ 1451.203476][   T29] audit: type=1400 audit(2000000681.018:2589): avc:  denied  { write } for  pid=17209 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1451.245371][T12786] bond12 (unregistering): Released all slaves
[ 1451.289002][T12786] bond13 (unregistering): (slave dummy0): Removing an active aggregator
[ 1451.289339][T12786] bond13 (unregistering): (slave dummy0): Releasing backup interface
[ 1451.320958][T12786] bond13 (unregistering): Released all slaves
[ 1451.586693][T17212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3105'.
[ 1451.789843][T17203] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1451.832280][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1452.776266][ T5635] Bluetooth: hci2: command tx timeout
[ 1454.308639][T16197] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1454.467745][T16197] usb 1-1: Using ep0 maxpacket: 16
[ 1454.473580][T16197] usb 1-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[ 1454.475937][T16197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1454.481537][T16197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.481554][T16197] usb 1-1: Product: syz
[ 1454.481563][T16197] usb 1-1: Manufacturer: syz
[ 1454.481572][T16197] usb 1-1: SerialNumber: syz
[ 1454.534416][T16197] usb 1-1: config 0 descriptor??
[ 1454.615404][T16197] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1454.788336][T16197] usb 1-1: USB disconnect, device number 54
[ 1454.799796][ T5867] usb 1-1: Failed to submit usb control message: -71
[ 1454.799817][ T5867] usb 1-1: unable to send the bmi data to the device: -71
[ 1454.799827][ T5867] usb 1-1: unable to get target info from device
[ 1454.799835][ T5867] usb 1-1: could not get target info (-71)
[ 1454.799857][ T5867] usb 1-1: could not probe fw (-71)
[ 1455.122870][   T29] audit: type=1400 audit(2000000684.685:2590): avc:  denied  { write } for  pid=17230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.448183][T12786] hsr_slave_0: left promiscuous mode
[ 1455.458856][T12786] hsr_slave_1: left promiscuous mode
[ 1455.477587][   T29] audit: type=1400 audit(2000000685.022:2591): avc:  denied  { write } for  pid=17255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1455.731145][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'.
[ 1455.731166][T17261] nbd: must specify at least one socket
[ 1455.814263][   T29] audit: type=1400 audit(2000000685.331:2592): avc:  denied  { audit_read } for  pid=17265 comm="syz.1.3110" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1456.198555][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1456.222974][T17278] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[ 1456.298280][T17109] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1456.298929][T17109] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1456.299007][T17109] bridge_slave_0: entered allmulticast mode
[ 1456.323038][T17109] bridge_slave_0: entered promiscuous mode
[ 1456.346859][T17109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1456.346913][T17109] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1456.347025][T17109] bridge_slave_1: entered allmulticast mode
[ 1456.347953][T17109] bridge_slave_1: entered promiscuous mode
[ 1456.481266][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1456.500144][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1456.616425][T12786] IPVS: stop unused estimator thread 0...
[ 1456.642653][T17109] team0: Port device team_slave_0 added
[ 1456.666300][T17109] team0: Port device team_slave_1 added
[ 1456.754898][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1456.754910][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1456.754924][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1456.805644][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1456.805655][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1456.805673][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1456.866489][T17287] comedi comedi3: comedi_config --init_data is deprecated
[ 1456.866840][T17286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3117'.
[ 1457.037045][   T29] audit: type=1400 audit(2000000686.481:2593): avc:  denied  { write } for  pid=17294 comm="syz.1.3120" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1457.095121][T17109] hsr_slave_0: entered promiscuous mode
[ 1457.105209][T17109] hsr_slave_1: entered promiscuous mode
[ 1457.186815][T17305] FAULT_INJECTION: forcing a failure.
[ 1457.186815][T17305] name failslab, interval 1, probability 0, space 0, times 0
[ 1457.186837][T17305] CPU: 0 UID: 0 PID: 17305 Comm: syz.5.3121 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1457.186855][T17305] Tainted: [L]=SOFTLOCKUP
[ 1457.186860][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1457.186869][T17305] Call Trace:
[ 1457.186874][T17305]  <TASK>
[ 1457.186880][T17305]  dump_stack_lvl+0x100/0x190
[ 1457.186904][T17305]  should_fail_ex.cold+0x5/0xa
[ 1457.186924][T17305]  should_failslab+0xc2/0x120
[ 1457.186937][T17305]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1457.186953][T17305]  ? __alloc_workqueue+0xc54/0x1900
[ 1457.186974][T17305]  __alloc_workqueue+0xc54/0x1900
[ 1457.186998][T17305]  alloc_workqueue_noprof+0xc7/0x130
[ 1457.187015][T17305]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[ 1457.187033][T17305]  ? __kasan_kmalloc+0xaa/0xb0
[ 1457.187051][T17305]  ? __kmalloc_noprof+0x350/0x840
[ 1457.187068][T17305]  ? ieee80211_register_hw+0x16c0/0x45c0
[ 1457.187089][T17305]  ieee80211_register_hw+0x2154/0x45c0
[ 1457.187107][T17305]  ? __pfx_mark_held_locks+0x1/0x10
[ 1457.187130][T17305]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1457.187147][T17305]  ? __pfx___debug_object_init+0x10/0x10
[ 1457.187166][T17305]  ? find_held_lock+0x2b/0x80
[ 1457.187179][T17305]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1457.187198][T17305]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1457.187212][T17305]  ? __hrtimer_setup+0x208/0x330
[ 1457.187227][T17305]  mac80211_hwsim_new_radio+0x2b01/0x66f0
[ 1457.187259][T17305]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1457.187285][T17305]  hwsim_new_radio_nl+0xc6b/0x13f0
[ 1457.187301][T17305]  ? trace_kmalloc+0xeb/0x110
[ 1457.187314][T17305]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1457.187336][T17305]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[ 1457.187350][T17305]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[ 1457.187372][T17305]  genl_family_rcv_msg_doit+0x214/0x300
[ 1457.187387][T17305]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1457.187407][T17305]  ? bpf_lsm_capable+0x9/0x10
[ 1457.187426][T17305]  ? security_capable+0x80/0x260
[ 1457.187441][T17305]  ? ns_capable+0xcd/0xf0
[ 1457.187457][T17305]  genl_rcv_msg+0x560/0x800
[ 1457.187474][T17305]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1457.187489][T17305]  ? __lock_acquire+0x5c0/0x1f40
[ 1457.187504][T17305]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1457.187528][T17305]  netlink_rcv_skb+0x159/0x420
[ 1457.187540][T17305]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1457.187555][T17305]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1457.187575][T17305]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1457.187589][T17305]  genl_rcv+0x28/0x40
[ 1457.187601][T17305]  netlink_unicast+0x668/0x950
[ 1457.187616][T17305]  ? __pfx_netlink_unicast+0x10/0x10
[ 1457.187633][T17305]  netlink_sendmsg+0x9ac/0x10c0
[ 1457.187649][T17305]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1457.187665][T17305]  ? selinux_socket_sendmsg+0x198/0x2f0
[ 1457.187682][T17305]  ? ____sys_sendmsg+0xa99/0xc30
[ 1457.187695][T17305]  ____sys_sendmsg+0xa99/0xc30
[ 1457.187708][T17305]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1457.187723][T17305]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1457.187745][T17305]  ___sys_sendmsg+0x190/0x1e0
[ 1457.187761][T17305]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1457.187776][T17305]  ? futex_wait+0x11e/0x370
[ 1457.187798][T17305]  ? find_held_lock+0x2b/0x80
[ 1457.187822][T17305]  __sys_sendmsg+0x160/0x210
[ 1457.187837][T17305]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1457.187859][T17305]  do_syscall_64+0x123/0x790
[ 1457.187878][T17305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.187891][T17305] RIP: 0033:0x7f4c2659f559
[ 1457.187903][T17305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1457.187914][T17305] RSP: 002b:00007f4c27414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1457.187928][T17305] RAX: ffffffffffffffda RBX: 00007f4c26825fa0 RCX: 00007f4c2659f559
[ 1457.187937][T17305] RDX: 0000000004080040 RSI: 0000200000000640 RDI: 0000000000000007
[ 1457.187945][T17305] RBP: 00007f4c26636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1457.187952][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1457.187960][T17305] R13: 00007f4c26826038 R14: 00007f4c26825fa0 R15: 00007ffe403aa848
[ 1457.187979][T17305]  </TASK>
[ 1457.366745][T16197] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[ 1457.594868][T16197] usb 2-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1457.701002][T16197] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1457.701027][T16197] usb 2-1: Product: syz
[ 1457.701036][T16197] usb 2-1: Manufacturer: syz
[ 1457.701045][T16197] usb 2-1: SerialNumber: syz
[ 1457.706278][T16197] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1458.254538][   T29] audit: type=1400 audit(2000000687.613:2594): avc:  denied  { write } for  pid=17283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1458.662116][   T29] audit: type=1400 audit(2000000687.997:2595): avc:  denied  { write } for  pid=17318 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1459.147234][ T5732] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1459.321376][ T5732] usb 6-1: Using ep0 maxpacket: 16
[ 1459.321850][ T5732] usb 6-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1459.325330][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1459.327693][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.327723][ T5732] usb 6-1: Product: syz
[ 1459.327732][ T5732] usb 6-1: Manufacturer: syz
[ 1459.327741][ T5732] usb 6-1: SerialNumber: syz
[ 1459.337331][ T5732] usb 6-1: config 0 descriptor??
[ 1459.364484][T15712] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1459.392701][ T5732] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1459.392730][ T5732] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1459.427567][ T5732] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1459.524893][T15712] usb 1-1: Using ep0 maxpacket: 16
[ 1459.525908][T15712] usb 1-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1459.526759][T15712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1459.528338][T15712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.528352][T15712] usb 1-1: Product: syz
[ 1459.528361][T15712] usb 1-1: Manufacturer: syz
[ 1459.528369][T15712] usb 1-1: SerialNumber: syz
[ 1459.611770][T15712] usb 1-1: config 0 descriptor??
[ 1459.614522][T15712] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1459.614538][T15712] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1459.903079][T15712] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1460.071571][T16197] vp7045: USB control message 'out' went wrong.
[ 1460.071585][T16197] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1460.071604][T16197] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1460.729025][   T29] audit: type=1400 audit(2000000689.923:2596): avc:  denied  { write } for  pid=17325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1460.944029][T16197] usb 2-1: USB disconnect, device number 45
[ 1460.987275][T17344] bond0: option arp_interval: invalid value (u���y�-�`2��4~N����l��a�	4)
[ 1460.987305][T17344] bond0: option arp_interval: allowed values 0 - 2147483647
[ 1461.008677][   T29] audit: type=1400 audit(2000000690.167:2597): avc:  denied  { write } for  pid=17345 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1461.039558][T17109] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1461.055403][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1461.056943][T17109] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1461.087389][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1461.097793][T17109] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1461.118300][T17344] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3126'.
[ 1461.129934][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1461.143691][T17109] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1461.163205][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1461.177026][T17344] netlink: 'syz.3.3126': attribute type 4 has an invalid length.
[ 1461.377271][T17109] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1461.378075][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'.
[ 1461.426380][T17109] 8021q: adding VLAN 0 to HW filter on device team0
[ 1461.466199][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1461.466273][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1461.491264][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1461.491321][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1461.547722][T17362] FAULT_INJECTION: forcing a failure.
[ 1461.547722][T17362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1461.547744][T17362] CPU: 0 UID: 0 PID: 17362 Comm: syz.1.3128 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1461.547760][T17362] Tainted: [L]=SOFTLOCKUP
[ 1461.547764][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1461.547771][T17362] Call Trace:
[ 1461.547776][T17362]  <TASK>
[ 1461.547783][T17362]  dump_stack_lvl+0x100/0x190
[ 1461.547805][T17362]  should_fail_ex.cold+0x5/0xa
[ 1461.547823][T17362]  _copy_from_user+0x2e/0xd0
[ 1461.547836][T17362]  copy_msghdr_from_user+0x9f/0x4c0
[ 1461.547853][T17362]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1461.547871][T17362]  ? lock_acquire+0x1d1/0x380
[ 1461.547886][T17362]  ? get_pid_task+0x2a/0x250
[ 1461.547898][T17362]  ___sys_sendmsg+0x106/0x1e0
[ 1461.547913][T17362]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1461.547928][T17362]  ? get_pid_task+0x106/0x250
[ 1461.547944][T17362]  ? find_held_lock+0x2b/0x80
[ 1461.547966][T17362]  __sys_sendmsg+0x160/0x210
[ 1461.547978][T17362]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1461.547998][T17362]  do_syscall_64+0x123/0x790
[ 1461.548024][T17362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.548036][T17362] RIP: 0033:0x7f5d9f59f559
[ 1461.548046][T17362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1461.548056][T17362] RSP: 002b:00007f5da03cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1461.548068][T17362] RAX: ffffffffffffffda RBX: 00007f5d9f825fa0 RCX: 00007f5d9f59f559
[ 1461.548075][T17362] RDX: 0000000004040040 RSI: 0000200000000600 RDI: 0000000000000003
[ 1461.548082][T17362] RBP: 00007f5da03cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1461.548089][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1461.548096][T17362] R13: 00007f5d9f826038 R14: 00007f5d9f825fa0 R15: 00007ffd03e45c38
[ 1461.548112][T17362]  </TASK>
[ 1461.886222][   T29] audit: type=1400 audit(2000000691.009:2598): avc:  denied  { unmount } for  pid=16750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1462.110688][ T1665] usb 6-1: USB disconnect, device number 44
[ 1462.122652][T17374] FAULT_INJECTION: forcing a failure.
[ 1462.122652][T17374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1462.122677][T17374] CPU: 0 UID: 0 PID: 17374 Comm: syz.3.3130 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1462.122693][T17374] Tainted: [L]=SOFTLOCKUP
[ 1462.122697][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1462.122705][T17374] Call Trace:
[ 1462.122709][T17374]  <TASK>
[ 1462.122715][T17374]  dump_stack_lvl+0x100/0x190
[ 1462.122744][T17374]  should_fail_ex.cold+0x5/0xa
[ 1462.122763][T17374]  _copy_to_user+0x32/0xd0
[ 1462.122777][T17374]  simple_read_from_buffer+0xcb/0x170
[ 1462.122792][T17374]  proc_fail_nth_read+0x1af/0x230
[ 1462.122808][T17374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1462.122823][T17374]  ? rw_verify_area+0xce/0x6d0
[ 1462.122839][T17374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1462.122853][T17374]  vfs_read+0x1e4/0xb40
[ 1462.122864][T17374]  ? lock_acquire+0x1d1/0x380
[ 1462.122879][T17374]  ? __fget_files+0x34/0x3d0
[ 1462.122899][T17374]  ? __pfx_vfs_read+0x10/0x10
[ 1462.122915][T17374]  ? find_held_lock+0x2b/0x80
[ 1462.122927][T17374]  ? __fget_files+0x215/0x3d0
[ 1462.122942][T17374]  ? __fget_files+0x21f/0x3d0
[ 1462.122960][T17374]  ksys_read+0x12a/0x250
[ 1462.122970][T17374]  ? __pfx_ksys_read+0x10/0x10
[ 1462.122986][T17374]  do_syscall_64+0x123/0x790
[ 1462.123005][T17374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.123017][T17374] RIP: 0033:0x7f0467b5fd8e
[ 1462.123027][T17374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1462.123038][T17374] RSP: 002b:00007f0465dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1462.123049][T17374] RAX: ffffffffffffffda RBX: 00007f0465dd56c0 RCX: 00007f0467b5fd8e
[ 1462.123057][T17374] RDX: 000000000000000f RSI: 00007f0465dd50a0 RDI: 0000000000000005
[ 1462.123064][T17374] RBP: 00007f0465dd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1462.123071][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1462.123078][T17374] R13: 00007f0467e26128 R14: 00007f0467e26090 R15: 00007fffd59777c8
[ 1462.123095][T17374]  </TASK>
[ 1462.454893][T16197] usb 1-1: USB disconnect, device number 55
[ 1463.118559][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1463.118837][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1463.118868][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1463.601825][T17379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3131'.
[ 1463.728362][T17381] netlink: 'syz.0.3132': attribute type 10 has an invalid length.
[ 1463.732864][T17381] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1463.766663][   T29] audit: type=1400 audit(2000000692.767:2599): avc:  denied  { write } for  pid=17354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1463.798409][T17381] ip6t_hbh: unknown flags 83
[ 1463.800465][   T29] audit: type=1400 audit(2000000692.805:2600): avc:  denied  { mount } for  pid=17383 comm="syz.3.3133" name="/" dev="ramfs" ino=57858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1463.970467][T17391] FAULT_INJECTION: forcing a failure.
[ 1463.970467][T17391] name failslab, interval 1, probability 0, space 0, times 0
[ 1463.970489][T17391] CPU: 0 UID: 0 PID: 17391 Comm: syz.5.3135 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1463.970505][T17391] Tainted: [L]=SOFTLOCKUP
[ 1463.970510][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1463.970517][T17391] Call Trace:
[ 1463.970522][T17391]  <TASK>
[ 1463.970526][T17391]  dump_stack_lvl+0x100/0x190
[ 1463.970550][T17391]  should_fail_ex.cold+0x5/0xa
[ 1463.970569][T17391]  should_failslab+0xc2/0x120
[ 1463.970582][T17391]  __kmalloc_noprof+0xfc/0x840
[ 1463.970600][T17391]  ? kernfs_fop_write_iter+0x26a/0x5f0
[ 1463.970616][T17391]  kernfs_fop_write_iter+0x26a/0x5f0
[ 1463.970631][T17391]  vfs_write+0x6af/0x1050
[ 1463.970643][T17391]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1463.970657][T17391]  ? __pfx_vfs_write+0x10/0x10
[ 1463.970666][T17391]  ? find_held_lock+0x2b/0x80
[ 1463.970690][T17391]  ksys_write+0x12a/0x250
[ 1463.970708][T17391]  ? __pfx_ksys_write+0x10/0x10
[ 1463.970724][T17391]  do_syscall_64+0x123/0x790
[ 1463.970743][T17391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1463.970755][T17391] RIP: 0033:0x7f4c2659f559
[ 1463.970765][T17391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1463.970776][T17391] RSP: 002b:00007f4c27414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1463.970788][T17391] RAX: ffffffffffffffda RBX: 00007f4c26825fa0 RCX: 00007f4c2659f559
[ 1463.970795][T17391] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000004
[ 1463.970802][T17391] RBP: 00007f4c27414090 R08: 0000000000000000 R09: 0000000000000000
[ 1463.970809][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1463.970815][T17391] R13: 00007f4c26826038 R14: 00007f4c26825fa0 R15: 00007ffe403aa848
[ 1463.970832][T17391]  </TASK>
[ 1464.274564][T17397] comedi comedi3: comedi_config --init_data is deprecated
[ 1464.311514][   T29] audit: type=1400 audit(2000000693.282:2601): avc:  denied  { write } for  pid=17394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1464.371709][T17398] selinux_netlink_send: 55 callbacks suppressed
[ 1464.371724][T17398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17398 comm=syz.3.3137
[ 1464.415265][T17408] jffs2: notice: (17408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found.
[ 1464.451637][   T29] audit: type=1400 audit(2000000693.403:2602): avc:  denied  { write } for  pid=17405 comm="syz.5.3139" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1464.500814][   T29] audit: type=1400 audit(2000000693.459:2603): avc:  denied  { create } for  pid=17400 comm="syz.1.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1464.501141][   T29] audit: type=1400 audit(2000000693.459:2604): avc:  denied  { write } for  pid=17400 comm="syz.1.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1464.545825][   T29] audit: type=1400 audit(2000000693.506:2605): avc:  denied  { add_name } for  pid=17405 comm="syz.5.3139" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1464.582258][T17412] FAULT_INJECTION: forcing a failure.
[ 1464.582258][T17412] name failslab, interval 1, probability 0, space 0, times 0
[ 1464.582280][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.5.3139 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1464.582296][T17412] Tainted: [L]=SOFTLOCKUP
[ 1464.582300][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1464.582310][T17412] Call Trace:
[ 1464.582314][T17412]  <TASK>
[ 1464.582320][T17412]  dump_stack_lvl+0x100/0x190
[ 1464.582342][T17412]  should_fail_ex.cold+0x5/0xa
[ 1464.582360][T17412]  should_failslab+0xc2/0x120
[ 1464.582373][T17412]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1464.582391][T17412]  ? do_getname+0x35/0x390
[ 1464.582409][T17412]  do_getname+0x35/0x390
[ 1464.582426][T17412]  __x64_sys_rmdir+0x36/0x70
[ 1464.582440][T17412]  do_syscall_64+0x123/0x790
[ 1464.582458][T17412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1464.582470][T17412] RIP: 0033:0x7f4c2659f559
[ 1464.582480][T17412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1464.582492][T17412] RSP: 002b:00007f4c273f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 1464.582503][T17412] RAX: ffffffffffffffda RBX: 00007f4c26826090 RCX: 00007f4c2659f559
[ 1464.582511][T17412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000a00
[ 1464.582518][T17412] RBP: 00007f4c273f3090 R08: 0000000000000000 R09: 0000000000000000
[ 1464.582525][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1464.582532][T17412] R13: 00007f4c26826128 R14: 00007f4c26826090 R15: 00007ffe403aa848
[ 1464.582548][T17412]  </TASK>
[ 1465.005807][T17423] jffs2: notice: (17423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found.
[ 1465.045676][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1465.341857][T16197] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1465.502089][T16197] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[ 1465.505838][T16197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1465.505859][T16197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1465.505872][T16197] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1465.505895][T16197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1465.575007][T16197] usb 2-1: config 0 descriptor??
[ 1465.644906][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1465.680310][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1466.899509][   T29] kauditd_printk_skb: 6 callbacks suppressed
[ 1466.899522][   T29] audit: type=1400 audit(2000000695.695:2612): avc:  denied  { ioctl } for  pid=17421 comm="syz.1.3142" path="socket:[57954]" dev="sockfs" ino=57954 ioctlcmd=0x80085502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1466.956303][T16197] usbhid 2-1:0.0: can't add hid device: -71
[ 1466.956369][T16197] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1466.958113][T17451] netlink: 'syz.5.3146': attribute type 10 has an invalid length.
[ 1466.958286][T17422] refcount_t: addition on 0; use-after-free.
[ 1466.958588][T17422] ------------[ cut here ]------------
[ 1466.958593][T17422] kernel BUG at lib/refcount.c:34!
[ 1466.958617][T17422] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 1467.002778][T17422] CPU: 0 UID: 0 PID: 17422 Comm: syz.1.3142 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1467.013771][T17422] Tainted: [L]=SOFTLOCKUP
[ 1467.018067][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 1467.028101][T17422] RIP: 0010:refcount_warn_saturate.cold+0x12/0x14
[ 1467.034508][T17422] Code: 89 ea be 01 00 00 00 48 c7 c7 40 b2 c3 90 e8 0a 5a 01 00 e9 32 ab 02 04 e8 60 6a d7 00 48 c7 c7 e0 49 81 8c e8 84 7f eb ff 90 <0f> 0b e8 4c 6a d7 00 48 c7 c7 80 4a 81 8c e8 70 7f eb ff 90 0f 0b
[ 1467.054094][T17422] RSP: 0018:ffffc900043efcb8 EFLAGS: 00010086
[ 1467.060143][T17422] RAX: 000000000000002a RBX: ffff88802d0fe870 RCX: 0000000000000000
[ 1467.068101][T17422] RDX: 000000000000002a RSI: ffffffff81ec0cc9 RDI: fffff5200087df88
[ 1467.076065][T17422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1467.084016][T17422] R10: ffffffff8fef6eeb R11: 0000000000000001 R12: 0000000000000000
[ 1467.091959][T17422] R13: dffffc0000000000 R14: ffff88802d0fe2c8 R15: ffffc900043efd18
[ 1467.099902][T17422] FS:  00007f5da03cd6c0(0000) GS:ffff888122482000(0000) knlGS:0000000000000000
[ 1467.108805][T17422] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1467.115358][T17422] CR2: 0000001b3260bff8 CR3: 0000000075e6d000 CR4: 00000000003526f0
[ 1467.123306][T17422] DR0: 0000000000000000 DR1: 6085f59d27ae5551 DR2: 0000000000000000
[ 1467.131265][T17422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1467.139216][T17422] Call Trace:
[ 1467.142471][T17422]  <TASK>
[ 1467.145376][T17422]  sync_timeline_signal+0x6d9/0x8a0
[ 1467.150552][T17422]  ? __pfx_sync_timeline_signal+0x10/0x10
[ 1467.156244][T17422]  sw_sync_ioctl+0x7b4/0x13f0
[ 1467.160895][T17422]  ? __fget_files+0x34/0x3d0
[ 1467.165459][T17422]  ? __pfx_sw_sync_ioctl+0x10/0x10
[ 1467.170565][T17422]  ? selinux_file_ioctl+0x1e0/0x290
[ 1467.175747][T17422]  ? selinux_file_ioctl+0x1e7/0x290
[ 1467.180923][T17422]  ? __pfx_sw_sync_ioctl+0x10/0x10
[ 1467.186009][T17422]  __x64_sys_ioctl+0x18e/0x210
[ 1467.190751][T17422]  do_syscall_64+0x123/0x790
[ 1467.195320][T17422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1467.201190][T17422] RIP: 0033:0x7f5d9f59f559
[ 1467.205577][T17422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1467.225153][T17422] RSP: 002b:00007f5da03cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1467.233537][T17422] RAX: ffffffffffffffda RBX: 00007f5d9f825fa0 RCX: 00007f5d9f59f559
[ 1467.241487][T17422] RDX: 0000200000000080 RSI: 0000000040045701 RDI: 0000000000000003
[ 1467.249440][T17422] RBP: 00007f5d9f636b20 R08: 0000000000000000 R09: 0000000000000000
[ 1467.257383][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1467.265334][T17422] R13: 00007f5d9f826038 R14: 00007f5d9f825fa0 R15: 00007ffd03e45c38
[ 1467.273285][T17422]  </TASK>
[ 1467.276302][T17422] Modules linked in:
[ 1467.280209][T17422] ---[ end trace 0000000000000000 ]---
[ 1467.285634][T17422] RIP: 0010:refcount_warn_saturate.cold+0x12/0x14
[ 1467.285657][T17422] Code: 89 ea be 01 00 00 00 48 c7 c7 40 b2 c3 90 e8 0a 5a 01 00 e9 32 ab 02 04 e8 60 6a d7 00 48 c7 c7 e0 49 81 8c e8 84 7f eb ff 90 <0f> 0b e8 4c 6a d7 00 48 c7 c7 80 4a 81 8c e8 70 7f eb ff 90 0f 0b
[ 1467.285668][T17422] RSP: 0018:ffffc900043efcb8 EFLAGS: 00010086
[ 1467.285677][T17422] RAX: 000000000000002a RBX: ffff88802d0fe870 RCX: 0000000000000000
[ 1467.285684][T17422] RDX: 000000000000002a RSI: ffffffff81ec0cc9 RDI: fffff5200087df88
[ 1467.285691][T17422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1467.285698][T17422] R10: ffffffff8fef6eeb R11: 0000000000000001 R12: 0000000000000000
[ 1467.285705][T17422] R13: dffffc0000000000 R14: ffff88802d0fe2c8 R15: ffffc900043efd18
[ 1467.285712][T17422] FS:  00007f5da03cd6c0(0000) GS:ffff888122482000(0000) knlGS:0000000000000000
[ 1467.285723][T17422] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1467.285730][T17422] CR2: 0000001b3260bff8 CR3: 0000000075e6d000 CR4: 00000000003526f0
[ 1467.285737][T17422] DR0: 0000000000000000 DR1: 6085f59d27ae5551 DR2: 0000000000000000
[ 1467.285744][T17422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1467.285752][T17422] Kernel panic - not syncing: Fatal exception
[ 1467.402795][T17422] Kernel Offset: disabled
[ 1467.407095][T17422] Rebooting in 86400 seconds..