last executing test programs:

11m28.392821065s ago: executing program 2 (id=1484):
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
fanotify_init(0x1, 0x800) (async)
r1 = fanotify_init(0x1, 0x800)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x34, 0x800000000004}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x34, 0x800000000004}, &(0x7f0000bbdffc))
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x4b2681, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x314080, 0x4) (async)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x314080, 0x4)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x15e)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)

11m27.890110089s ago: executing program 2 (id=1486):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="00000000000000000012100000000c000180080001"], 0x20}}, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ff00000000020a00a908"], 0x24}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000000)={{0x0, 0x0, 0x80, 0x9}, 0x0, 0x0, 0x7, 0x8}, 0x80, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="64010000", @ANYRES16=r9, @ANYRESHEX=r0], 0x164}}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

11m26.235232945s ago: executing program 2 (id=1488):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48)
memfd_create(0x0, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000020c6000000200000000000000000004000000000000"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f0000000500)={0x9, 0x8001, 0x10}})
listen(r2, 0x3)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8, 0xaa3]})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b160000000000000000020000082c00048028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010000000000140000001100010000000000000000000000000a00"/128], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000007c0)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x5, 0x8000004, 0x7}, {0xffffffff, 0x80000}, {0xffffffff, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0xfffffffe, 0x0, 0x0, 0x1, 0x4, 0x0, 0x2, 0xc})

11m22.553379744s ago: executing program 2 (id=1496):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="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", 0x240}], 0x1}, 0x9cdc2384056b48b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000)
mount(0x0, 0x0, 0x0, 0x208000, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$unix(0x1, 0x1, 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001a00010029bd70000000000081000000000000000000000014000200fc00"], 0x30}}, 0x0)
pwrite64(r4, &(0x7f00000002c0), 0x0, 0x8)

11m19.6463941s ago: executing program 2 (id=1498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000740)={@local, @loopback}, 0xc)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000004c0)={0x4, @vbi={0x41, 0xffffff7f, 0x6, 0x49323159, [0x2, 0x5], [0xffff, 0x5], 0x1}})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff34000480300001800b00010074617267657400002000028008000100534554000c00030002b51112d439c59208000240000000010900010073797a30000000000900020073797a2f00000000140000001100010000000000000000000000000a"], 0x88}}, 0x800)
connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
creat(0x0, 0x133)
open(0x0, 0x0, 0x100)
mknodat(r8, &(0x7f0000005840)='./file1\x00', 0x8, 0x4)
mount$bind(0x0, 0x0, 0x0, 0x21, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x53)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

11m17.71229459s ago: executing program 0 (id=1501):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0)
recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x40045506, 0x0)

11m17.57426544s ago: executing program 2 (id=1502):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000180)=0xbde, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xd8}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3, 0x7}, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)

11m16.335557464s ago: executing program 0 (id=1505):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000001440)={0x2, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4f, 0x4000000, @mcast2, 0x7da8}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee0000000000000000", 0x53}], 0x1)

11m16.024094052s ago: executing program 0 (id=1508):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$sg(0x0, 0x40000000000003, 0x402902)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000b8008000900be950100"], 0x3c}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x28, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x8884)

11m14.933446218s ago: executing program 0 (id=1511):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x8, 0x40, 0xfffffffa, 0x9fc8, {{0x1f, 0x4, 0x0, 0x5, 0x7c, 0x64, 0x0, 0x39, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x0, [{@private=0xa010102, 0x1}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @cipso={0x86, 0x1a, 0x1, [{0x7, 0x6, "f46c58f0"}, {0x2, 0x6, "c6f244c9"}, {0x2, 0x8, "5ba77f3f656d"}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xb8, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x9}, {@remote, 0x7}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x15}]}, @end]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2a, 0x7fff, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0x2, 0xe}, {0xd, 0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xe95}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x99e93fe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "384f2e196b59482167e83404f483981cc810982895d6cfe2a1d62e4ecd54f89d", "4f024f4fd833b1b014109a6e1c7a4505", {"a6fb3a8a714580bff1b15dc41f638c37", "99daf62beb15ac5de8b48182ff263aca"}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x2, 0x4, 0x1000000, 0x0, 0xc08}}, 0x120)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000340)={0xa, {0x3, 0x78, 0x6}}, 0xa)
socket(0x1d, 0x2, 0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000007c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

11m11.827596538s ago: executing program 0 (id=1516):
close(0xffffffffffffffff)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4)
getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r6=>0x0], &(0x7f0000000180)=[<r7=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x8, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x400, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

11m10.877869539s ago: executing program 0 (id=1518):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x28004081)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
keyctl$read(0x2, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)

11m1.834009228s ago: executing program 32 (id=1502):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000180)=0xbde, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xd8}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3, 0x7}, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)

10m55.422816024s ago: executing program 33 (id=1518):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x28004081)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
keyctl$read(0x2, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)

19.460639364s ago: executing program 3 (id=3018):
r0 = dup(0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
syz_io_uring_complete(0x0)
kcmp(r2, r2, 0x1, r0, r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
r7 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x4000000000000006, 0x1, 0x7, 0x9})
pipe(0x0)
mq_getsetattr(r7, &(0x7f0000000100)={0x800, 0x4, 0x9, 0x20000000000009a}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r8, 0x0, 0x0)

18.238765091s ago: executing program 4 (id=3022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, r1, 0x16f44d160841c186, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4000}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x69}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xce8a}, {0x6, 0x11, 0x2}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000400))
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f0, 0x0, 0x708, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd5, 0x6e}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@supported_rates={0x1, 0x6, [{0x18}, {0x30, 0x1}, {0x66, 0x1}, {0x1b}, {0x6, 0x1}, {0x60}]}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x112, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x213}, @device_b, @device_b, @initial, {0x8, 0x1}, @value=@ver_80211n={0x0, 0x8f, 0x3, 0x1, 0x0, 0x1}}, 0xa, @default, 0x4810, @void, @val, @void, @val={0x4, 0x6, {0x1, 0x9, 0x800, 0x6}}, @void, @val={0x5, 0x10, {0x0, 0x6b, 0x6, "24b25e05c126326638063215d1"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x4, 0x0, {0xd35b, 0x1, 0x0, 0x10, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x38000000, 0x1}}, @void, @void, @val={0x76, 0x6, {0x81, 0x3, 0x23, 0x5}}, [{0xdd, 0x50, "8545378abeae7d5141444f5a8c82d13585020fa88efbb0e60569aef1aed3b5bd451fe562ce9e323ddb582673176d608c8a68ab025c172e121921b9c1da52a86e564f983d154dee86fee66ba0f28aa3e2"}, {0xdd, 0x4f, "0ac833313e0156662bfd48087ca4fbbeec000162e83550c9c226af8539308d765fcee0c4f49e863c085c9f69d93b62fd20a1d93d3845b40a1d95970e62fb65f82837d213e8e5ea7cfc1b19b6daf3d4"}]}}, @NL80211_ATTR_BEACON_TAIL={0x69, 0xf, [@dsss={0x3, 0x1, 0xac}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x3}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x2e, 0x7f}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x1, 0x0, {0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x40, 0xa3}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0xba, 0xc4, @broadcast, 0x6, 0x31, 0x2}}, @ibss={0x6, 0x2, 0x8}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x7, 0x8}}, @chsw_timing={0x68, 0x4, {0x3ff, 0x3}}, @ssid={0x0, 0x5, @random="ff13fc55cf"}, @cf={0x4, 0x6, {0x6, 0x7f, 0x9, 0x8}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}, @supported_rates={0x1, 0x3, [{0x4, 0x1}, {0x5}, {0x39, 0x1}]}, @link_id={0x65, 0x12, {@random="9389bf66dc23", @broadcast, @broadcast}}, @random={0xf3, 0xb, "a00488ab2ed9553bd671b6"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20004040}, 0x81)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x735fcd89d7890098, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb007}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x9)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x800000, 0x0)
fadvise64(r7, 0x9, 0x7, 0x1)
r8 = accept$unix(0xffffffffffffffff, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e)
readahead(r8, 0x3, 0xe30)
ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000a80))
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000ac0)="dd2b4472ce00c7aea9523feab2c55aeac8fdc2cf75b52d1f75e18084283397d552c6378a3e3936c8edd3876be4a528b853d213df67df0a76baafd8a489b38d93419af5f61dac6eeb9b55a2f3ea49e0038dad6392b594bc936502e4b8526fda1666c63439b7646943e049f3fc0ba8a8bb721b645c4b2f970ba213ae1539b3dbf0887c8f8f29cff9cb6c77df8204ffbb538d0a6b0d7a3f3b62b9d78f733af90d21d514f1c53b2ae0266ef4463836be9c5991327ffaed461157")
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x42a11804}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8834}, 0x8081)
read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
r11 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002cc0), 0x111000, 0x0)
r12 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r11, 0xc0184800, &(0x7f0000002d40)={0x923, <r13=>r12, 0x2})
ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000002d80)={0x5, 0x0, 0x2, 0x6, 0x8001})
ioctl$KVM_DIRTY_TLB(r13, 0x4010aeaa, &(0x7f0000002dc0)={0xb, 0x934c})
mount$fuse(0x0, &(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40), 0x40000, &(0x7f0000002e80)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}], [{@fowner_lt={'fowner<', r9}}]}})
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f80), 0x1, 0x0)
mount(&(0x7f0000002fc0)=@filename='./file1\x00', &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)='pvfs2\x00', 0x2002, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

17.124915678s ago: executing program 3 (id=3023):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42", 0x240}], 0x1}, 0x9cdc2384056b48b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000)
mount(0x0, 0x0, 0x0, 0x208000, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$unix(0x1, 0x1, 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x30}}, 0x0)
pwrite64(r4, &(0x7f00000002c0), 0x0, 0x8)

15.889081275s ago: executing program 4 (id=3025):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x42474752, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) (fail_nth: 6)

14.372167915s ago: executing program 4 (id=3028):
r0 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
statx(r0, &(0x7f0000000080)='./file1\x00', 0x1000, 0x7ff, &(0x7f0000019300)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
syz_io_uring_setup(0x5e9, &(0x7f0000019480)={0x0, 0x2f28, 0x2, 0x2, 0x20}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @random="438588b1868e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @private=0xa010101}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a59ce92c32642b1ec9fe34818d8ccd82041b700", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"47e93e00", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8)
read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x54)

13.586368452s ago: executing program 4 (id=3030):
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'caif0\x00', {'veth1_macvtap\x00'}, 0x9})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8970, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0xe4}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
iopl(0x3)
r1 = syz_open_dev$dri(&(0x7f0000000700), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa000000, 0x80002000, 0x80000001, 0x0, 0x2, 0x5, 0xd, 0x20000, 0x3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4c6b17dc2872df36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13.214344886s ago: executing program 4 (id=3032):
r0 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x0)
statx(r0, &(0x7f0000000080)='./file1\x00', 0x1000, 0x7ff, &(0x7f0000019300)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setuid(r1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x5e9, &(0x7f0000019480)={0x0, 0x2f28, 0x2, 0x2, 0x20}, 0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000019400)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x50)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8)
socket$l2tp6(0xa, 0x2, 0x73)
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x54)

11.903560337s ago: executing program 3 (id=3035):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
shutdown(0xffffffffffffffff, 0x1)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
listen(r5, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

11.763995947s ago: executing program 4 (id=3037):
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x7, 0x7fff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='jbd2_update_log_tail\x00', r0, 0x0, 0x400000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0xd4c6, 0x200, 0x4003, 0x79})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r5, 0x5603, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x181001, 0x0)
write$vga_arbiter(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="6cb6fd6b206e6f6e65002438f0b8a2219c4effd07aee1a4957f78bbdf7ddce740ccfe73ae3c099cffa36e94abc2194d6e180afbff37fc3d980944dd5be092b2817239a49a83b5c5e92b4f59090ebada53dd4f606e27a4374bd1ecb4be4b6c2a55327f4f98dec8c72d9422f85453c2a99542b2afc36cc6dc66b4515d8b056f9fbbdd9e7d6d9e810a2c83dbfa7e46a706ec11304dda6872794328e734b900cbb5646e055ee2a14e3a4a5c0f10095948742a57d72"], 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)

11.212752763s ago: executing program 5 (id=3038):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x2400e844)
syz_open_procfs(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x600, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e0000000130001", @ANYRES32=r2], 0xe0}], 0x1, 0x0, 0x0, 0x2000c0a0}, 0x20008890)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
open(&(0x7f0000000080)='./bus\x00', 0xf6df8900ba618934, 0x10)
mount(&(0x7f0000000200)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x69000, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r4, &(0x7f0000000000), 0x0)

9.585777548s ago: executing program 3 (id=3042):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.280539227s ago: executing program 6 (id=3045):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="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", 0x240}], 0x1}, 0x9cdc2384056b48b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000)
mount(0x0, 0x0, 0x0, 0x208000, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$unix(0x1, 0x1, 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001a00010029bd70000000000081"], 0x30}}, 0x0)
pwrite64(r4, &(0x7f00000002c0), 0x0, 0x8)

7.292149377s ago: executing program 6 (id=3046):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x8, 0x40, 0xfffffffa, 0x9fc8, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x64, 0x0, 0x39, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x0, [{@private=0xa010102, 0x1}]}, @noop, @cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x13, 0x1, [{0x2, 0x6, "c6f244c9"}, {0x2, 0x7, "5ba77f3f65"}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xb8, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x9}, {@remote, 0x7}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x15}]}, @end]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x54, 0x2e, 0x800, 0x70bd2a, 0x7fff, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0x2, 0xe}, {0xd, 0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xe95}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x99e93fe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "384f2e196b59482167e83404f483981cc810982895d6cfe2a1d62e4ecd54f89d", "4f024f4fd833b1b014109a6e1c7a4505", {"a6fb3a8a714580bff1b15dc41f638c37", "99daf62beb15ac5de8b48182ff263aca"}}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x2, 0x4, 0x1000000, 0x0, 0xc08}}, 0x120)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000340)={0xa, {0x3, 0x78, 0x6}}, 0xa)
socket(0x1d, 0x2, 0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000007c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

7.212764257s ago: executing program 1 (id=3047):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
r2 = semget$private(0x0, 0x4000, 0x0)
r3 = fanotify_init(0x0, 0x400)
r4 = socket(0x1, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16=r3, @ANYRES16=r3, @ANYRES32=r3], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})

7.014679617s ago: executing program 5 (id=3048):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x50)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r1, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3})
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

6.500119489s ago: executing program 3 (id=3049):
socket(0x2, 0x80805, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32], 0x48)
ftruncate(0xffffffffffffffff, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000043000701fefffffff3dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x8000002)

6.14639766s ago: executing program 6 (id=3050):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0)
r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r0}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000040))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0x0, r5, &(0x7f00000002c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x4, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1})
io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)

5.632881059s ago: executing program 6 (id=3051):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14000053}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.632559362s ago: executing program 5 (id=3052):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3, 0xae5})
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@empty, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x63, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x7, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.048130527s ago: executing program 1 (id=3053):
dup(0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x4000000000000006, 0x1, 0x7, 0x9})
pipe(0x0)
mq_getsetattr(r3, &(0x7f0000000100)={0x800, 0x4, 0x9, 0x20000000000009a}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

4.76533027s ago: executing program 5 (id=3054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0)

4.129276835s ago: executing program 1 (id=3055):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000002180)={0xd, 0xffffffff, 0x8}, 0xc)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioperm(0x7, 0x81, 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r3, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x2, 0x3}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000100), 0x1003)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$sg(0x0, 0x0, 0x8002)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x149502, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600800a000004001c0004000280e96474dc38b64c5700f141299befe8a22cfb54b83e32d166e5f4b9172d278547e412c1a5da159856cfec2b452b6b04284a5dd5ee9dc909aee1c64ab8904c4231ceaf2dd7c36c4719c71e9deff8716a67c7c5ef090f08092772"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
truncate(&(0x7f0000000040)='./file0\x00', 0x1000000)
close_range(r1, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

4.095499051s ago: executing program 5 (id=3056):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42", 0x240}], 0x1}, 0x9cdc2384056b48b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000)
mount(0x0, 0x0, 0x0, 0x208000, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$unix(0x1, 0x1, 0x0)
setresuid(0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001a00010029bd70000000000081"], 0x30}}, 0x0)
pwrite64(r4, &(0x7f00000002c0), 0x0, 0x8)

3.287693178s ago: executing program 1 (id=3057):
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES8=r1, @ANYBLOB="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"], 0x44}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

2.515476089s ago: executing program 5 (id=3058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x24000004)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
shutdown(r5, 0x1)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
listen(r6, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

2.468293188s ago: executing program 6 (id=3059):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a010800000000000000000500000608000240000000"], 0x4c}}, 0xc050)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6a4e0866e5a71825c5a9c293b0d4c5e84161b964ac42235f39a4b1f1"], 0xfdef)

2.14483193s ago: executing program 1 (id=3060):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0x1, 0x6, 0xfffffffb}, 0x10)
io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}])

1.221725835s ago: executing program 6 (id=3061):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7f, 0xe)
write(r1, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
read$FUSE(r6, &(0x7f0000002500)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
setgroups(0x0, 0x0)
r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r12=>0x0], 0x0, 0x0, 0x0, 0x1})
r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r13, 0x400, 0x1)
openat$dir(0xffffff9c, &(0x7f0000000000)='./file1\x00', 0x101800, 0x20)
fcntl$getflags(r13, 0x401)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r12})

1.093947116s ago: executing program 1 (id=3062):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60c02, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
syz_io_uring_setup(0x5e9, &(0x7f0000000300)={0x0, 0x2f28, 0x10, 0x2, 0x20}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x29fd, 0x84, 0x105}, 0x50)
r4 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000019440), 0x800000000002, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r7, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x54)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b00"/21], 0x30}}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

0s ago: executing program 3 (id=3063):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
r1 = syz_open_dev$radio(0x0, 0x0, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0059091f951b0000850000006d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000380)}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28)
open(&(0x7f0000000280)='./file0\x00', 0x40c800, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x10, 0x2}, 0x10}, 0xffffffffffffffa7)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r7=>0xffffffffffffffff)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x1})
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x5, 0x0, r7, 0x0, &(0x7f0000000140)={0x98092a, 0x9, '\x00', @ptr=0x9}})
ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ef42bf4039261200b56501020301090212000100000000090401"], 0x0)

kernel console output (not intermixed with test programs):

root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1123.120922][   T30] audit: type=1400 audit(1767648888.567:43817): avc:  denied  { create } for  pid=16817 comm="syz.3.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1123.228817][   T30] audit: type=1400 audit(1767648888.587:43818): avc:  denied  { write } for  pid=16817 comm="syz.3.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1123.334536][   T30] audit: type=1400 audit(1767648888.667:43819): avc:  denied  { create } for  pid=16820 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1123.418666][   T30] audit: type=1400 audit(1767648888.677:43820): avc:  denied  { prog_load } for  pid=16820 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1123.573812][   T30] audit: type=1400 audit(1767648888.677:43821): avc:  denied  { bpf } for  pid=16820 comm="syz.6.2673" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1123.971820][T16834] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1124.119421][   T30] audit: type=1400 audit(1767648888.687:43822): avc:  denied  { perfmon } for  pid=16820 comm="syz.6.2673" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1124.145711][   T30] audit: type=1400 audit(1767648888.707:43823): avc:  denied  { create } for  pid=16820 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1124.176692][   T30] audit: type=1400 audit(1767648888.717:43824): avc:  denied  { create } for  pid=16820 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1124.351422][T16841] FAULT_INJECTION: forcing a failure.
[ 1124.351422][T16841] name failslab, interval 1, probability 0, space 0, times 0
[ 1124.399602][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.3.2676 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1124.399634][T16841] Tainted: [L]=SOFTLOCKUP
[ 1124.399640][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1124.399651][T16841] Call Trace:
[ 1124.399658][T16841]  <TASK>
[ 1124.399665][T16841]  dump_stack_lvl+0x16c/0x1f0
[ 1124.399700][T16841]  should_fail_ex+0x512/0x640
[ 1124.399728][T16841]  ? __kvmalloc_node_noprof+0x129/0xa40
[ 1124.399754][T16841]  should_failslab+0xc2/0x120
[ 1124.399780][T16841]  __kvmalloc_node_noprof+0x14a/0xa40
[ 1124.399803][T16841]  ? seq_read_iter+0x830/0x12d0
[ 1124.399830][T16841]  ? seq_read_iter+0x830/0x12d0
[ 1124.399850][T16841]  seq_read_iter+0x830/0x12d0
[ 1124.399877][T16841]  ? __lock_acquire+0x436/0x2890
[ 1124.399904][T16841]  seq_read+0x3a3/0x570
[ 1124.399926][T16841]  ? __pfx_seq_read+0x10/0x10
[ 1124.399949][T16841]  ? lock_acquire+0x179/0x330
[ 1124.399972][T16841]  ? __pfx___might_resched+0x10/0x10
[ 1124.399987][T16841]  ? avc_policy_seqno+0x9/0x20
[ 1124.400010][T16841]  ? rw_verify_area+0xcf/0x6c0
[ 1124.400030][T16841]  ? __pfx_seq_read+0x10/0x10
[ 1124.400053][T16841]  vfs_read+0x1e4/0xcf0
[ 1124.400075][T16841]  ? __pfx___mutex_lock+0x10/0x10
[ 1124.400101][T16841]  ? __pfx_vfs_read+0x10/0x10
[ 1124.400128][T16841]  ? __fget_files+0x20e/0x3c0
[ 1124.400158][T16841]  ksys_read+0x12a/0x250
[ 1124.400179][T16841]  ? __pfx_ksys_read+0x10/0x10
[ 1124.400207][T16841]  do_syscall_64+0xcd/0xf80
[ 1124.400232][T16841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.400251][T16841] RIP: 0033:0x7fe135b8f749
[ 1124.400266][T16841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1124.400283][T16841] RSP: 002b:00007fe136a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1124.400300][T16841] RAX: ffffffffffffffda RBX: 00007fe135de6090 RCX: 00007fe135b8f749
[ 1124.400312][T16841] RDX: 0000000000002020 RSI: 0000200000004340 RDI: 0000000000000004
[ 1124.400322][T16841] RBP: 00007fe136a00090 R08: 0000000000000000 R09: 0000000000000000
[ 1124.400332][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1124.400339][T16841] R13: 00007fe135de6128 R14: 00007fe135de6090 R15: 00007ffc10b72128
[ 1124.400354][T16841]  </TASK>
[ 1125.033053][ T7354] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1125.044718][ T7354] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1125.380880][ T6246] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1125.542537][ T6246] usb 2-1: Using ep0 maxpacket: 16
[ 1125.683259][ T6246] usb 2-1: config 16 has an invalid interface number: 185 but max is 0
[ 1125.700474][ T6246] usb 2-1: config 16 has no interface number 0
[ 1125.788755][ T6246] usb 2-1: config 16 interface 185 has no altsetting 0
[ 1126.091677][T16858] syzkaller0: entered promiscuous mode
[ 1126.101276][ T6246] usb 2-1: New USB device found, idVendor=f209, idProduct=a8b3, bcdDevice=4e.e6
[ 1126.120856][T16858] syzkaller0: entered allmulticast mode
[ 1126.126526][ T6246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.190997][ T6246] usb 2-1: Product: syz
[ 1126.202419][ T6246] usb 2-1: Manufacturer: syz
[ 1126.232377][ T6246] usb 2-1: SerialNumber: syz
[ 1126.259907][ T6246] usb 2-1: bad CDC descriptors
[ 1126.277262][T16860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[ 1126.283882][T16860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1126.291685][T16860] vhci_hcd vhci_hcd.0: Device attached
[ 1126.440495][T16865] vhci_hcd: connection closed
[ 1126.440702][ T7354] vhci_hcd vhci_hcd.3: stop threads
[ 1126.467226][ T5941] usb 2-1: USB disconnect, device number 66
[ 1126.477297][ T7354] vhci_hcd vhci_hcd.3: release socket
[ 1126.564521][ T6246] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[ 1126.595960][ T7354] vhci_hcd vhci_hcd.3: disconnect device
[ 1127.171076][ T5825] Bluetooth: hci3: command 0x1003 tx timeout
[ 1127.177606][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1127.271019][   T30] kauditd_printk_skb: 163 callbacks suppressed
[ 1127.271039][   T30] audit: type=1400 audit(1767648893.407:43988): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1127.319140][T16868] overlayfs: failed to clone lowerpath
[ 1127.630903][   T30] audit: type=1400 audit(1767648893.407:43989): avc:  denied  { read write open } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1127.635367][T16873] overlayfs: failed to clone lowerpath
[ 1127.730198][   T30] audit: type=1400 audit(1767648893.407:43990): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1127.761859][   T30] audit: type=1400 audit(1767648893.457:43991): avc:  denied  { mounton } for  pid=16867 comm="syz.6.2684" path="/243/file0" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1127.785783][   T30] audit: type=1400 audit(1767648893.457:43992): avc:  denied  { mount } for  pid=16867 comm="syz.6.2684" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1127.786091][ T5944] libceph: connect (1)[c::]:6789 error -101
[ 1127.882599][ T5944] libceph: mon0 (1)[c::]:6789 connect error
[ 1127.892255][   T30] audit: type=1400 audit(1767648893.457:43993): avc:  denied  { mounton } for  pid=16867 comm="syz.6.2684" path="/243/file0" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1128.935034][   T30] audit: type=1400 audit(1767648893.497:43994): avc:  denied  { create } for  pid=16870 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1128.961632][T16872] ceph: No mds server is up or the cluster is laggy
[ 1128.998538][   T30] audit: type=1400 audit(1767648893.497:43995): avc:  denied  { write } for  pid=16870 comm="syz.5.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1129.087911][   T30] audit: type=1400 audit(1767648893.507:43996): avc:  denied  { read } for  pid=16870 comm="syz.5.2685" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1129.214801][   T30] audit: type=1400 audit(1767648893.507:43997): avc:  denied  { read open } for  pid=16870 comm="syz.5.2685" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1129.284578][T16883] binder: 16881:16883 ioctl c0306201 0 returned -14
[ 1129.334338][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'.
[ 1130.339839][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1130.472363][T16886] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[ 1130.478975][T16886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1130.486544][T16886] vhci_hcd vhci_hcd.0: Device attached
[ 1130.560845][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 1130.571329][   T24] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1130.591056][   T24] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1130.606471][T16893] vhci_hcd: connection closed
[ 1130.606640][ T6909] vhci_hcd vhci_hcd.4: stop threads
[ 1130.621915][   T24] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1130.649291][ T6909] vhci_hcd vhci_hcd.4: release socket
[ 1130.659383][ T6909] vhci_hcd vhci_hcd.4: disconnect device
[ 1130.679252][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1130.696174][   T24] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1130.726458][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.755878][   T24] usb 6-1: config 0 descriptor??
[ 1131.192594][   T24] samsung 0003:0419:0001.0050: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0
[ 1131.677281][ T5957] hid-generic 0002:0004:1000000.0051: unknown main item tag 0x0
[ 1131.719866][ T5957] hid-generic 0002:0004:1000000.0051: unknown main item tag 0x0
[ 1131.752603][  T939] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1131.799591][ T5957] hid-generic 0002:0004:1000000.0051: unknown main item tag 0x0
[ 1131.830694][ T6246] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1131.949374][ T5957] hid-generic 0002:0004:1000000.0051: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1132.115286][  T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1132.176846][  T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1132.240334][  T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1132.304117][  T939] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1132.362171][  T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.419908][ T5957] usb 6-1: USB disconnect, device number 29
[ 1132.490430][   T30] kauditd_printk_skb: 322 callbacks suppressed
[ 1132.490446][   T30] audit: type=1400 audit(1767648898.627:44290): avc:  denied  { create } for  pid=16911 comm="syz.6.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1132.532578][  T939] usb 4-1: config 0 descriptor??
[ 1132.779290][   T30] audit: type=1400 audit(1767648898.697:44291): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1132.888113][   T30] audit: type=1400 audit(1767648898.697:44292): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1133.160918][   T30] audit: type=1400 audit(1767648898.697:44293): avc:  denied  { ioctl } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1133.320999][   T30] audit: type=1400 audit(1767648898.707:44294): avc:  denied  { create } for  pid=16911 comm="syz.6.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1133.351104][   T30] audit: type=1400 audit(1767648898.767:44295): avc:  denied  { execmem } for  pid=16903 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1133.378039][   T30] audit: type=1400 audit(1767648898.767:44296): avc:  denied  { create } for  pid=16903 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1133.400886][   T30] audit: type=1400 audit(1767648898.767:44297): avc:  denied  { connect } for  pid=16903 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1133.424318][T16931] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1133.433075][   T30] audit: type=1400 audit(1767648898.767:44298): avc:  denied  { bind } for  pid=16903 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1133.511185][ T5957] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1133.634654][T16925] ceph: No mds server is up or the cluster is laggy
[ 1133.701066][ T5957] usb 6-1: Using ep0 maxpacket: 32
[ 1133.755189][ T5957] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1133.836335][ T5957] usb 6-1: config 0 has no interface number 0
[ 1133.878255][T16935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1133.941575][ T5957] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1133.962684][T16935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1134.044199][ T5957] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1134.054620][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.070857][ T5957] usb 6-1: Product: syz
[ 1134.075175][ T5957] usb 6-1: Manufacturer: syz
[ 1134.087631][ T5957] usb 6-1: SerialNumber: syz
[ 1134.122216][ T5957] usb 6-1: config 0 descriptor??
[ 1134.154103][T16927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1134.593702][T16940] overlayfs: missing 'lowerdir'
[ 1135.497394][T16924] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1135.653507][T16943] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[ 1135.783535][ T5957] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1135.812058][ T5957] asix 6-1:0.188: probe with driver asix failed with error -71
[ 1135.852278][ T5957] usb 6-1: USB disconnect, device number 30
[ 1136.607710][  T939] usbhid 4-1:0.0: can't add hid device: -71
[ 1136.635493][  T939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1136.680862][  T939] usb 4-1: USB disconnect, device number 65
[ 1137.523469][   T30] kauditd_printk_skb: 213 callbacks suppressed
[ 1137.523510][   T30] audit: type=1400 audit(1767648903.667:44474): avc:  denied  { prog_load } for  pid=16962 comm="syz.1.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1137.646002][   T30] audit: type=1400 audit(1767648903.667:44475): avc:  denied  { ioctl } for  pid=16967 comm="syz.5.2708" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1138.030312][T16972] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1138.036945][T16972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1138.044535][T16972] vhci_hcd vhci_hcd.0: Device attached
[ 1138.052408][T16980] vhci_hcd: connection closed
[ 1138.409741][ T6909] vhci_hcd vhci_hcd.4: stop threads
[ 1138.430851][ T6909] vhci_hcd vhci_hcd.4: release socket
[ 1138.430857][   T30] audit: type=1400 audit(1767648903.677:44476): avc:  denied  { bpf } for  pid=16962 comm="syz.1.2702" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.430893][   T30] audit: type=1400 audit(1767648903.747:44477): avc:  denied  { prog_load } for  pid=16967 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1138.436250][ T6909] vhci_hcd vhci_hcd.4: disconnect device
[ 1138.490938][   T30] audit: type=1400 audit(1767648903.747:44478): avc:  denied  { bpf } for  pid=16967 comm="syz.5.2708" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.536170][   T30] audit: type=1400 audit(1767648903.747:44479): avc:  denied  { perfmon } for  pid=16967 comm="syz.5.2708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.598671][   T30] audit: type=1400 audit(1767648903.747:44480): avc:  denied  { perfmon } for  pid=16967 comm="syz.5.2708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.641548][   T30] audit: type=1400 audit(1767648903.757:44481): avc:  denied  { perfmon } for  pid=16967 comm="syz.5.2708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.668781][   T30] audit: type=1400 audit(1767648903.757:44482): avc:  denied  { perfmon } for  pid=16967 comm="syz.5.2708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1138.755249][   T30] audit: type=1400 audit(1767648903.757:44483): avc:  denied  { perfmon } for  pid=16967 comm="syz.5.2708" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1142.067925][T16992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1142.074440][T16992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1142.082011][T16992] vhci_hcd vhci_hcd.0: Device attached
[ 1142.094095][T17009] vhci_hcd: connection closed
[ 1142.094306][ T6909] vhci_hcd vhci_hcd.3: stop threads
[ 1142.212489][ T6909] vhci_hcd vhci_hcd.3: release socket
[ 1142.218672][ T6909] vhci_hcd vhci_hcd.3: disconnect device
[ 1142.816972][   T30] kauditd_printk_skb: 115 callbacks suppressed
[ 1142.816990][   T30] audit: type=1400 audit(1767648908.957:44599): avc:  denied  { read } for  pid=17003 comm="syz.1.2715" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1142.923529][   T30] audit: type=1400 audit(1767648908.957:44600): avc:  denied  { read open } for  pid=17003 comm="syz.1.2715" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1143.040964][   T30] audit: type=1400 audit(1767648909.047:44601): avc:  denied  { mounton } for  pid=17003 comm="syz.1.2715" path="/530/file0" dev="tmpfs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1143.158553][   T30] audit: type=1400 audit(1767648909.047:44602): avc:  denied  { mount } for  pid=17003 comm="syz.1.2715" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1143.162916][T17012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=17012 comm=syz.5.2716
[ 1143.421082][   T30] audit: type=1400 audit(1767648909.047:44603): avc:  denied  { mounton } for  pid=17003 comm="syz.1.2715" path="/530/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1144.589943][T17024] lo speed is unknown, defaulting to 1000
[ 1144.635743][   T30] audit: type=1400 audit(1767648909.047:44604): avc:  denied  { getattr } for  pid=17003 comm="syz.1.2715" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1144.733426][ T5938] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1144.783931][   T30] audit: type=1400 audit(1767648909.047:44605): avc:  denied  { mount } for  pid=17003 comm="syz.1.2715" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1144.858930][   T30] audit: type=1400 audit(1767648909.057:44606): avc:  denied  { mounton } for  pid=17003 comm="syz.1.2715" path="/530/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1144.894143][ T5938] usb 6-1: device descriptor read/64, error -71
[ 1144.910871][ T5875] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1144.969248][   T30] audit: type=1400 audit(1767648909.057:44607): avc:  denied  { getattr } for  pid=17003 comm="syz.1.2715" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1145.039225][ T5811] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1145.111155][ T5875] usb 5-1: Using ep0 maxpacket: 32
[ 1145.140200][ T5875] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1145.148779][ T5938] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 1145.204138][ T5875] usb 5-1: config 0 has no interface number 0
[ 1145.237897][ T5875] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1145.301034][ T5938] usb 6-1: device descriptor read/64, error -71
[ 1145.308468][ T5875] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1145.375859][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1145.431236][ T5938] usb usb6-port1: attempt power cycle
[ 1145.449148][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.481151][ T5875] usb 5-1: Product: syz
[ 1145.508206][ T5875] usb 5-1: Manufacturer: syz
[ 1145.529038][ T5875] usb 5-1: SerialNumber: syz
[ 1145.576742][ T5875] usb 5-1: config 0 descriptor??
[ 1145.841568][ T5875] appletouch 5-1:0.85: Failed to read mode from device.
[ 1145.861247][ T5875] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[ 1145.904031][ T5875] usb 5-1: USB disconnect, device number 79
[ 1146.953293][T17043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1146.959812][T17043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1146.967453][T17043] vhci_hcd vhci_hcd.0: Device attached
[ 1147.014915][T17048] vhci_hcd: connection closed
[ 1147.022205][T16583] vhci_hcd vhci_hcd.3: stop threads
[ 1147.073333][T16583] vhci_hcd vhci_hcd.3: release socket
[ 1147.078739][T16583] vhci_hcd vhci_hcd.3: disconnect device
[ 1147.885240][   T30] kauditd_printk_skb: 168 callbacks suppressed
[ 1147.885256][   T30] audit: type=1400 audit(1767648914.027:44768): avc:  denied  { read write } for  pid=5829 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.045173][   T30] audit: type=1400 audit(1767648914.027:44769): avc:  denied  { read write open } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.094223][   T30] audit: type=1400 audit(1767648914.027:44770): avc:  denied  { ioctl } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.122281][   T30] audit: type=1400 audit(1767648914.227:44771): avc:  denied  { create } for  pid=17055 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1148.445786][ T5938] libceph: connect (1)[c::]:6789 error -101
[ 1148.451968][ T5938] libceph: mon0 (1)[c::]:6789 connect error
[ 1148.468996][   T30] audit: type=1400 audit(1767648914.237:44772): avc:  denied  { create } for  pid=17056 comm="syz.3.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1148.561409][   T30] audit: type=1400 audit(1767648914.237:44773): avc:  denied  { write } for  pid=17056 comm="syz.3.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1148.598625][   T30] audit: type=1400 audit(1767648914.267:44774): avc:  denied  { read } for  pid=17056 comm="syz.3.2728" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1148.649074][   T30] audit: type=1400 audit(1767648914.267:44775): avc:  denied  { read open } for  pid=17056 comm="syz.3.2728" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1148.712132][   T30] audit: type=1400 audit(1767648914.327:44776): avc:  denied  { getopt } for  pid=17055 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1148.741412][ T5938] libceph: connect (1)[c::]:6789 error -101
[ 1148.753407][ T5938] libceph: mon0 (1)[c::]:6789 connect error
[ 1148.765647][   T30] audit: type=1400 audit(1767648914.387:44777): avc:  denied  { map_create } for  pid=17056 comm="syz.3.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1148.975736][T17061] ceph: No mds server is up or the cluster is laggy
[ 1151.593553][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1151.600393][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1151.888556][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1151.933145][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1152.735050][T17096] overlayfs: failed to clone lowerpath
[ 1152.751636][T17096] overlayfs: failed to clone lowerpath
[ 1152.761445][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1152.767689][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1152.811141][T17087] ceph: No mds server is up or the cluster is laggy
[ 1152.860371][T17092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[ 1152.866897][T17092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1152.874489][T17092] vhci_hcd vhci_hcd.0: Device attached
[ 1152.904144][T17101] vhci_hcd: connection closed
[ 1152.904557][ T6908] vhci_hcd vhci_hcd.1: stop threads
[ 1152.922384][   T30] kauditd_printk_skb: 155 callbacks suppressed
[ 1152.922399][   T30] audit: type=1400 audit(1767648919.067:44933): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1152.930847][ T6908] vhci_hcd vhci_hcd.1: release socket
[ 1153.184503][ T5938] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[ 1153.260846][   T30] audit: type=1400 audit(1767648919.067:44934): avc:  denied  { read write open } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.280904][ T6908] vhci_hcd vhci_hcd.1: disconnect device
[ 1153.313797][   T30] audit: type=1400 audit(1767648919.067:44935): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.361341][T17100] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1153.367867][T17100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1153.375423][T17100] vhci_hcd vhci_hcd.0: Device attached
[ 1153.383103][T17108] vhci_hcd: connection closed
[ 1153.387212][ T6527] vhci_hcd vhci_hcd.4: stop threads
[ 1153.395851][   T30] audit: type=1400 audit(1767648919.107:44936): avc:  denied  { read } for  pid=17098 comm="syz.4.2738" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1153.410907][ T6527] vhci_hcd vhci_hcd.4: release socket
[ 1153.439671][   T30] audit: type=1400 audit(1767648919.107:44937): avc:  denied  { read open } for  pid=17098 comm="syz.4.2738" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1153.458027][ T6527] vhci_hcd vhci_hcd.4: disconnect device
[ 1153.527677][   T30] audit: type=1400 audit(1767648919.257:44938): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.617884][   T30] audit: type=1400 audit(1767648919.257:44939): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.708911][ T5957] hid-generic 0002:0004:1000000.0052: unknown main item tag 0x0
[ 1153.740854][ T5957] hid-generic 0002:0004:1000000.0052: unknown main item tag 0x0
[ 1153.789784][   T30] audit: type=1400 audit(1767648919.257:44940): avc:  denied  { ioctl } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.817915][ T5957] hid-generic 0002:0004:1000000.0052: unknown main item tag 0x0
[ 1153.936366][ T5957] hid-generic 0002:0004:1000000.0052: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1153.961957][   T30] audit: type=1400 audit(1767648919.647:44941): avc:  denied  { create } for  pid=17113 comm="syz.5.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1154.120882][   T30] audit: type=1400 audit(1767648919.647:44942): avc:  denied  { module_request } for  pid=17113 comm="syz.5.2741" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1155.511955][T17137] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1157.820873][ T5957] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1158.131710][   T30] kauditd_printk_skb: 173 callbacks suppressed
[ 1158.131725][   T30] audit: type=1400 audit(1767648923.327:45116): avc:  denied  { read write } for  pid=5829 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1158.883756][ T5938] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1159.125418][   T30] audit: type=1400 audit(1767648924.317:45117): avc:  denied  { read write open } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1159.748299][   T30] audit: type=1400 audit(1767648924.317:45118): avc:  denied  { ioctl } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1159.830845][   T30] audit: type=1400 audit(1767648924.317:45119): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1160.109156][T17169] binder: 17162:17169 ioctl c0306201 0 returned -14
[ 1160.143728][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2751'.
[ 1160.367483][T17166] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1160.374181][T17166] audit: audit_lost=3878 audit_rate_limit=0 audit_backlog_limit=64
[ 1160.382233][T17166] audit: backlog limit exceeded
[ 1160.393466][T17166] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1160.400094][T17166] audit: audit_lost=3879 audit_rate_limit=0 audit_backlog_limit=64
[ 1160.408063][T17166] audit: backlog limit exceeded
[ 1161.245516][ T5957] hid-generic 0002:0004:1000000.0053: unknown main item tag 0x0
[ 1161.310461][ T5957] hid-generic 0002:0004:1000000.0053: unknown main item tag 0x0
[ 1161.366147][ T5957] hid-generic 0002:0004:1000000.0053: unknown main item tag 0x0
[ 1161.532529][ T5957] hid-generic 0002:0004:1000000.0053: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1162.297637][T17192] trusted_key: encrypted_key: insufficient parameters specified
[ 1163.194267][   T30] kauditd_printk_skb: 245 callbacks suppressed
[ 1163.194285][   T30] audit: type=1400 audit(1767648929.337:45299): avc:  denied  { create } for  pid=17203 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1163.269543][   T30] audit: type=1400 audit(1767648929.337:45300): avc:  denied  { module_request } for  pid=17200 comm="syz.1.2763" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1163.452627][   T30] audit: type=1400 audit(1767648929.377:45301): avc:  denied  { execmem } for  pid=17203 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1163.496705][   T30] audit: type=1400 audit(1767648929.387:45302): avc:  denied  { module_request } for  pid=17194 comm="syz.3.2761" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1163.655945][T17213] hfsplus: unable to find HFS+ superblock
[ 1163.794255][   T30] audit: type=1400 audit(1767648929.487:45303): avc:  denied  { execmem } for  pid=17202 comm="syz.4.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1163.829812][   T30] audit: type=1400 audit(1767648929.597:45304): avc:  denied  { map_create } for  pid=17204 comm="syz.5.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1163.874809][   T30] audit: type=1400 audit(1767648929.597:45305): avc:  denied  { map_read map_write } for  pid=17204 comm="syz.5.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1163.974155][   T30] audit: type=1400 audit(1767648929.717:45306): avc:  denied  { map_create } for  pid=17202 comm="syz.4.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1164.314947][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2761'.
[ 1164.340952][   T30] audit: type=1400 audit(1767648929.727:45307): avc:  denied  { prog_load } for  pid=17202 comm="syz.4.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1164.363500][   T30] audit: type=1400 audit(1767648929.737:45308): avc:  denied  { bpf } for  pid=17202 comm="syz.4.2765" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1165.075595][T17205] overlayfs: failed to clone lowerpath
[ 1165.191024][T17219] overlayfs: failed to clone lowerpath
[ 1165.367563][T17228] hfsplus: unable to find HFS+ superblock
[ 1165.872822][T17230] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1165.879368][T17230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1165.920667][T17230] vhci_hcd vhci_hcd.0: Device attached
[ 1166.022530][T17233] vhci_hcd: connection closed
[ 1166.022778][T16143] vhci_hcd vhci_hcd.3: stop threads
[ 1166.771108][ T6246] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[ 1166.835109][T16143] vhci_hcd vhci_hcd.3: release socket
[ 1166.874454][ T5938] hid-generic 0002:0004:1000000.0054: unknown main item tag 0x0
[ 1166.902831][T16143] vhci_hcd vhci_hcd.3: disconnect device
[ 1166.988543][ T5938] hid-generic 0002:0004:1000000.0054: unknown main item tag 0x0
[ 1167.059617][ T5938] hid-generic 0002:0004:1000000.0054: unknown main item tag 0x0
[ 1167.135085][T17243] program syz.4.2771 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1167.146645][ T5938] hid-generic 0002:0004:1000000.0054: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1167.180280][T17243] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1168.240071][   T30] kauditd_printk_skb: 147 callbacks suppressed
[ 1168.240106][   T30] audit: type=1400 audit(1767648934.367:45456): avc:  denied  { read open } for  pid=17248 comm="syz.3.2775" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1168.360488][   T30] audit: type=1400 audit(1767648934.397:45457): avc:  denied  { prog_load } for  pid=17248 comm="syz.3.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1168.480452][   T30] audit: type=1400 audit(1767648934.397:45458): avc:  denied  { bpf } for  pid=17248 comm="syz.3.2775" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1169.553158][   T30] audit: type=1400 audit(1767648934.397:45459): avc:  denied  { perfmon } for  pid=17248 comm="syz.3.2775" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1169.638802][   T30] audit: type=1400 audit(1767648934.427:45460): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1169.723486][   T30] audit: type=1400 audit(1767648934.427:45461): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1169.841416][   T30] audit: type=1400 audit(1767648934.437:45462): avc:  denied  { ioctl } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1169.910147][T17269] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1169.942982][T17269] audit: audit_lost=3902 audit_rate_limit=0 audit_backlog_limit=64
[ 1169.965653][   T30] audit: type=1400 audit(1767648934.447:45463): avc:  denied  { create } for  pid=17250 comm="syz.1.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1171.283780][T17280] netlink: 'syz.3.2780': attribute type 10 has an invalid length.
[ 1171.398217][T17280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.566941][T17294] hfsplus: unable to find HFS+ superblock
[ 1171.908834][ T5938] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1171.916559][ T6246] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1172.110803][ T5938] usb 6-1: Using ep0 maxpacket: 32
[ 1172.638882][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1172.661547][ T5938] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1172.690895][ T5938] usb 6-1: can't read configurations, error -71
[ 1173.002322][ T6246] hid-generic 0002:0004:1000000.0055: unknown main item tag 0x0
[ 1173.030678][ T6246] hid-generic 0002:0004:1000000.0055: unknown main item tag 0x0
[ 1173.092075][ T6246] hid-generic 0002:0004:1000000.0055: unknown main item tag 0x0
[ 1173.145164][ T6246] hid-generic 0002:0004:1000000.0055: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1173.305229][   T30] kauditd_printk_skb: 266 callbacks suppressed
[ 1173.305240][   T30] audit: type=1400 audit(1767648939.447:45696): avc:  denied  { create } for  pid=17311 comm="syz.4.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1173.485496][   T30] audit: type=1400 audit(1767648939.597:45697): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 1173.601030][   T30] audit: type=1400 audit(1767648939.607:45698): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1173.660109][   T30] audit: type=1400 audit(1767648939.607:45699): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1173.760064][   T30] audit: type=1400 audit(1767648939.607:45700): avc:  denied  { ioctl } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1173.814251][   T30] audit: type=1400 audit(1767648939.617:45701): avc:  denied  { read } for  pid=17311 comm="syz.4.2785" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1174.413925][   T30] audit: type=1400 audit(1767648939.617:45702): avc:  denied  { read open } for  pid=17311 comm="syz.4.2785" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1174.569719][   T30] audit: type=1400 audit(1767648939.617:45703): avc:  denied  { ioctl } for  pid=17311 comm="syz.4.2785" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1174.650863][   T30] audit: type=1400 audit(1767648939.657:45704): avc:  denied  { read } for  pid=17311 comm="syz.4.2785" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1174.720832][   T30] audit: type=1400 audit(1767648939.657:45705): avc:  denied  { read open } for  pid=17311 comm="syz.4.2785" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1176.862567][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.863393][T17368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1178.351421][   T30] kauditd_printk_skb: 195 callbacks suppressed
[ 1178.351437][   T30] audit: type=1400 audit(1767648944.497:45901): avc:  denied  { read } for  pid=17352 comm="syz.5.2790" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1178.423529][   T30] audit: type=1400 audit(1767648944.507:45902): avc:  denied  { read open } for  pid=17352 comm="syz.5.2790" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1178.523009][   T30] audit: type=1400 audit(1767648944.607:45903): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1178.589927][   T30] audit: type=1400 audit(1767648944.627:45904): avc:  denied  { mounton } for  pid=17352 comm="syz.5.2790" path="/252/file0" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1178.710847][   T30] audit: type=1400 audit(1767648944.627:45905): avc:  denied  { mount } for  pid=17352 comm="syz.5.2790" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1178.784611][   T30] audit: type=1400 audit(1767648944.637:45906): avc:  denied  { mounton } for  pid=17352 comm="syz.5.2790" path="/252/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1178.811209][   T30] audit: type=1400 audit(1767648944.637:45907): avc:  denied  { getattr } for  pid=17352 comm="syz.5.2790" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1178.864477][   T30] audit: type=1400 audit(1767648944.637:45908): avc:  denied  { mount } for  pid=17352 comm="syz.5.2790" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1178.922986][   T30] audit: type=1400 audit(1767648944.707:45909): avc:  denied  { mounton } for  pid=17352 comm="syz.5.2790" path="/252/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1178.979770][   T30] audit: type=1400 audit(1767648944.707:45910): avc:  denied  { getattr } for  pid=17352 comm="syz.5.2790" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1180.264182][T17358] netlink: 'syz.6.2797': attribute type 29 has an invalid length.
[ 1180.985371][T17379] lo speed is unknown, defaulting to 1000
[ 1181.061018][ T5941] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[ 1181.295549][ T5941] usb 4-1: config 0 has no interfaces?
[ 1181.316474][ T5941] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[ 1181.778570][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1181.803622][ T5941] usb 4-1: config 0 descriptor??
[ 1182.094317][ T6246] usb 4-1: USB disconnect, device number 67
[ 1183.397448][   T30] kauditd_printk_skb: 138 callbacks suppressed
[ 1183.397464][   T30] audit: type=1400 audit(1767648949.537:46049): avc:  denied  { allowed } for  pid=17409 comm="syz.6.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1183.540250][   T30] audit: type=1400 audit(1767648949.577:46050): avc:  denied  { sqpoll } for  pid=17409 comm="syz.6.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1183.615054][T17411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17411 comm=syz.3.2809
[ 1183.681054][   T30] audit: type=1400 audit(1767648949.577:46051): avc:  denied  { create } for  pid=17409 comm="syz.6.2810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1183.761224][   T30] audit: type=1400 audit(1767648949.577:46052): avc:  denied  { map } for  pid=17409 comm="syz.6.2810" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1183.840866][   T30] audit: type=1400 audit(1767648949.577:46053): avc:  denied  { read write } for  pid=17409 comm="syz.6.2810" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1183.950969][   T30] audit: type=1400 audit(1767648949.597:46054): avc:  denied  { map } for  pid=17409 comm="syz.6.2810" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1184.761147][   T30] audit: type=1400 audit(1767648949.597:46055): avc:  denied  { read write } for  pid=17409 comm="syz.6.2810" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1185.014569][   T30] audit: type=1400 audit(1767648949.637:46056): avc:  denied  { map_create } for  pid=17409 comm="syz.6.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1185.160837][ T5941] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1185.191412][   T30] audit: type=1400 audit(1767648949.637:46057): avc:  denied  { map_read map_write } for  pid=17409 comm="syz.6.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1185.401824][   T30] audit: type=1400 audit(1767648949.637:46058): avc:  denied  { create } for  pid=17409 comm="syz.6.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1185.600908][ T5941] usb 2-1: Using ep0 maxpacket: 16
[ 1185.983915][ T5941] usb 2-1: config 0 has an invalid interface number: 65 but max is 0
[ 1186.000390][ T5941] usb 2-1: config 0 has no interface number 0
[ 1186.692257][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30
[ 1186.714769][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.750815][ T5941] usb 2-1: Product: syz
[ 1186.778348][ T5941] usb 2-1: Manufacturer: syz
[ 1186.795752][ T5941] usb 2-1: SerialNumber: syz
[ 1186.826830][ T5941] usb 2-1: config 0 descriptor??
[ 1186.895811][ T5941] gspca_main: STV06xx-2.14.0 probing 046d:0840
[ 1188.105069][ T5941] gspca_stv06xx: vv6410 sensor detected
[ 1188.412420][   T30] kauditd_printk_skb: 125 callbacks suppressed
[ 1188.412431][   T30] audit: type=1400 audit(1767648954.557:46184): avc:  denied  { execmem } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1188.476983][   T30] audit: type=1400 audit(1767648954.617:46185): avc:  denied  { module_request } for  pid=17419 comm="syz.1.2813" kmod=6E65746465762D1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1188.554788][   T30] audit: type=1400 audit(1767648954.697:46186): avc:  denied  { prog_load } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1188.628096][   T30] audit: type=1400 audit(1767648954.697:46187): avc:  denied  { bpf } for  pid=17419 comm="syz.1.2813" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1188.681123][   T30] audit: type=1400 audit(1767648954.747:46188): avc:  denied  { sys_module } for  pid=17419 comm="syz.1.2813" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1188.780782][   T30] audit: type=1400 audit(1767648954.757:46189): avc:  denied  { module_request } for  pid=17419 comm="syz.1.2813" kmod=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1188.822563][ T6246] libceph: connect (1)[c::]:6789 error -101
[ 1188.829343][ T6246] libceph: mon0 (1)[c::]:6789 connect error
[ 1188.842802][   T30] audit: type=1400 audit(1767648954.767:46190): avc:  denied  { create } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1188.864139][   T30] audit: type=1400 audit(1767648954.767:46191): avc:  denied  { write } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1188.886719][   T30] audit: type=1400 audit(1767648954.767:46192): avc:  denied  { create } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1188.909999][   T30] audit: type=1400 audit(1767648954.817:46193): avc:  denied  { create } for  pid=17419 comm="syz.1.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1189.041450][T17436] ceph: No mds server is up or the cluster is laggy
[ 1189.708700][ T5941] STV06xx 2-1:0.65: probe with driver STV06xx failed with error -71
[ 1189.873673][ T5941] usb 2-1: USB disconnect, device number 67
[ 1190.333759][T17462] FAULT_INJECTION: forcing a failure.
[ 1190.333759][T17462] name failslab, interval 1, probability 0, space 0, times 0
[ 1190.392003][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.1.2822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1190.392036][T17462] Tainted: [L]=SOFTLOCKUP
[ 1190.392042][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1190.392054][T17462] Call Trace:
[ 1190.392060][T17462]  <TASK>
[ 1190.392067][T17462]  dump_stack_lvl+0x16c/0x1f0
[ 1190.392094][T17462]  should_fail_ex+0x512/0x640
[ 1190.392120][T17462]  ? fs_reclaim_acquire+0xae/0x150
[ 1190.392147][T17462]  should_failslab+0xc2/0x120
[ 1190.392170][T17462]  __kmalloc_noprof+0xeb/0x910
[ 1190.392198][T17462]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1190.392228][T17462]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1190.392250][T17462]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1190.392278][T17462]  ? tomoyo_profile+0x47/0x60
[ 1190.392309][T17462]  tomoyo_path_number_perm+0x245/0x580
[ 1190.392330][T17462]  ? tomoyo_path_number_perm+0x237/0x580
[ 1190.392354][T17462]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1190.392376][T17462]  ? find_held_lock+0x2b/0x80
[ 1190.392429][T17462]  ? find_held_lock+0x2b/0x80
[ 1190.392455][T17462]  ? hook_file_ioctl_common+0x144/0x410
[ 1190.392490][T17462]  ? __fget_files+0x20e/0x3c0
[ 1190.392521][T17462]  security_file_ioctl+0x9b/0x240
[ 1190.392547][T17462]  __x64_sys_ioctl+0xb7/0x210
[ 1190.392571][T17462]  do_syscall_64+0xcd/0xf80
[ 1190.392597][T17462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.392614][T17462] RIP: 0033:0x7fd256b8f749
[ 1190.392629][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1190.392646][T17462] RSP: 002b:00007fd2579f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1190.392664][T17462] RAX: ffffffffffffffda RBX: 00007fd256de5fa0 RCX: 00007fd256b8f749
[ 1190.392676][T17462] RDX: 0000200000000280 RSI: 00000000000007ab RDI: 0000000000000003
[ 1190.392687][T17462] RBP: 00007fd2579f2090 R08: 0000000000000000 R09: 0000000000000000
[ 1190.392698][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1190.392709][T17462] R13: 00007fd256de6038 R14: 00007fd256de5fa0 R15: 00007ffea29dbc18
[ 1190.392735][T17462]  </TASK>
[ 1190.392742][T17462] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1191.902216][ T5941] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[ 1192.120832][ T5941] usb 5-1: device descriptor read/64, error -71
[ 1192.500913][ T5941] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[ 1195.136868][   T30] kauditd_printk_skb: 201 callbacks suppressed
[ 1195.136884][   T30] audit: type=1400 audit(1767648958.817:46395): avc:  denied  { create } for  pid=17495 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1195.225003][   T30] audit: type=1400 audit(1767648958.827:46396): avc:  denied  { allowed } for  pid=17495 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1195.244661][ T5941] usb 5-1: device descriptor read/64, error -71
[ 1195.361072][ T5941] usb usb5-port1: attempt power cycle
[ 1195.418860][   T30] audit: type=1400 audit(1767648958.827:46397): avc:  denied  { allowed } for  pid=17495 comm="syz.3.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1195.465458][   T30] audit: type=1400 audit(1767648958.837:46398): avc:  denied  { create } for  pid=17495 comm="syz.3.2833" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1195.697316][T17508] loop7: detected capacity change from 0 to 8
[ 1195.707275][   T30] audit: type=1400 audit(1767648958.837:46399): avc:  denied  { map } for  pid=17495 comm="syz.3.2833" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1195.927665][   T30] audit: type=1400 audit(1767648958.837:46400): avc:  denied  { read write } for  pid=17495 comm="syz.3.2833" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1196.115065][   T30] audit: type=1400 audit(1767648958.847:46401): avc:  denied  { map } for  pid=17495 comm="syz.3.2833" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1196.216324][   T30] audit: type=1400 audit(1767648958.847:46402): avc:  denied  { read write } for  pid=17495 comm="syz.3.2833" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1196.456112][T17515] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1196.460886][T17519] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1197.134656][T17514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2838'.
[ 1200.196718][   T30] kauditd_printk_skb: 228 callbacks suppressed
[ 1200.196760][   T30] audit: type=1400 audit(1767648966.337:46621): avc:  denied  { write } for  pid=17567 comm="syz.1.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1200.283242][T17558] ceph: No mds server is up or the cluster is laggy
[ 1200.422514][   T30] audit: type=1400 audit(1767648966.447:46622): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1200.524660][   T30] audit: type=1400 audit(1767648966.447:46623): avc:  denied  { read write open } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1200.583780][   T30] audit: type=1400 audit(1767648966.447:46624): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1200.617985][   T30] audit: type=1400 audit(1767648966.517:46625): avc:  denied  { read write } for  pid=5829 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1200.683966][T17572] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[ 1200.690481][T17572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1200.698187][T17572] vhci_hcd vhci_hcd.0: Device attached
[ 1200.723986][T17583] vhci_hcd: connection closed
[ 1200.724158][ T7354] vhci_hcd vhci_hcd.1: stop threads
[ 1200.747504][ T7354] vhci_hcd vhci_hcd.1: release socket
[ 1200.780298][   T30] audit: type=1400 audit(1767648966.517:46626): avc:  denied  { read write open } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1200.780354][ T7354] vhci_hcd vhci_hcd.1: disconnect device
[ 1200.913402][   T30] audit: type=1400 audit(1767648966.517:46627): avc:  denied  { ioctl } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1201.035384][   T30] audit: type=1400 audit(1767648966.797:46628): avc:  denied  { prog_load } for  pid=17564 comm="syz.5.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1201.088099][   T30] audit: type=1400 audit(1767648966.797:46629): avc:  denied  { bpf } for  pid=17564 comm="syz.5.2846" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1201.671195][T17598] hfsplus: unable to find HFS+ superblock
[ 1201.682649][T17597] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1202.400967][ T5938] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1202.585266][T17603] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1202.593475][ T5938] usb 4-1: Using ep0 maxpacket: 8
[ 1202.602289][ T7354] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1202.615177][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1202.637420][ T7354] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1202.655666][ T5938] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1202.678214][ T5938] usb 4-1: string descriptor 0 read error: -22
[ 1202.727902][ T5938] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1202.747296][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.788050][ T5938] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1202.805112][ T5938] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1202.827249][ T5938] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1202.836487][ T5938] usb 4-1: media controller created
[ 1202.891475][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1203.697944][ T6246] libceph: connect (1)[c::]:6789 error -101
[ 1203.706514][ T6246] libceph: mon0 (1)[c::]:6789 connect error
[ 1203.981118][ T6246] libceph: connect (1)[c::]:6789 error -101
[ 1203.996093][ T6246] libceph: mon0 (1)[c::]:6789 connect error
[ 1204.012692][T17617] ceph: No mds server is up or the cluster is laggy
[ 1204.053204][ T5938] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1204.208888][ T5938] usb 4-1: USB disconnect, device number 68
[ 1204.715816][ T5825] Bluetooth: hci3: command 0x1003 tx timeout
[ 1204.768130][T17636] overlayfs: failed to clone upperpath
[ 1204.792879][T17640] netlink: 'syz.3.2863': attribute type 4 has an invalid length.
[ 1205.358279][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1205.364859][ T5875] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1205.366790][   T30] kauditd_printk_skb: 258 callbacks suppressed
[ 1205.366804][   T30] audit: type=1400 audit(1767648970.687:46871): avc:  denied  { create } for  pid=17628 comm="syz.6.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1205.585890][ T5875] usb 2-1: Using ep0 maxpacket: 32
[ 1205.596704][   T30] audit: type=1400 audit(1767648970.857:46872): avc:  denied  { setopt } for  pid=17628 comm="syz.6.2860" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1205.675717][ T5875] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 1205.685139][ T5875] usb 2-1: config 0 has no interface number 0
[ 1205.721105][ T5875] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1205.726324][   T30] audit: type=1400 audit(1767648970.887:46873): avc:  denied  { connect } for  pid=17628 comm="syz.6.2860" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1205.753282][ T5875] usb 2-1: config 0 interface 85 has no altsetting 0
[ 1205.885268][   T30] audit: type=1400 audit(1767648970.887:46874): avc:  denied  { prog_load } for  pid=17628 comm="syz.6.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1205.886147][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1205.925859][T17647] netlink: 'syz.6.2864': attribute type 29 has an invalid length.
[ 1205.935719][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.946839][T17647] netlink: 'syz.6.2864': attribute type 29 has an invalid length.
[ 1205.956677][ T5875] usb 2-1: Product: syz
[ 1205.975682][T17647] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2864'.
[ 1205.978105][   T30] audit: type=1400 audit(1767648970.887:46875): avc:  denied  { bpf } for  pid=17628 comm="syz.6.2860" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1205.987696][ T5875] usb 2-1: Manufacturer: syz
[ 1206.025560][T17647] unsupported nla_type 58
[ 1206.043738][   T30] audit: type=1400 audit(1767648970.887:46876): avc:  denied  { perfmon } for  pid=17628 comm="syz.6.2860" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.045338][ T5875] usb 2-1: SerialNumber: syz
[ 1206.065005][T17632] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1206.075894][T17632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1206.083454][T17632] vhci_hcd vhci_hcd.0: Device attached
[ 1206.103111][T17650] vhci_hcd: connection closed
[ 1206.103497][ T6909] vhci_hcd vhci_hcd.5: stop threads
[ 1206.107529][   T30] audit: type=1400 audit(1767648970.887:46877): avc:  denied  { perfmon } for  pid=17628 comm="syz.6.2860" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.135243][   T30] audit: type=1400 audit(1767648970.887:46878): avc:  denied  { perfmon } for  pid=17628 comm="syz.6.2860" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.141656][ T6909] vhci_hcd vhci_hcd.5: release socket
[ 1206.158684][   T30] audit: type=1400 audit(1767648970.887:46879): avc:  denied  { perfmon } for  pid=17628 comm="syz.6.2860" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.189662][ T6909] vhci_hcd vhci_hcd.5: disconnect device
[ 1206.200269][ T5875] usb 2-1: config 0 descriptor??
[ 1206.221580][ T5944] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1206.231313][   T30] audit: type=1400 audit(1767648970.897:46880): avc:  denied  { perfmon } for  pid=17628 comm="syz.6.2860" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1206.391164][ T5944] usb 4-1: Using ep0 maxpacket: 8
[ 1206.401639][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[ 1206.426727][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1206.451746][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1206.491636][ T5944] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[ 1206.502116][ T5944] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[ 1206.583385][ T5944] usb 4-1: Product: syz
[ 1206.620847][ T5944] usb 4-1: Manufacturer: syz
[ 1206.625839][ T5944] usb 4-1: SerialNumber: syz
[ 1206.661922][ T5944] usb 4-1: config 0 descriptor??
[ 1206.692302][ T5944] smsusb:smsusb_probe: board id=2, interface number 0
[ 1206.729865][ T5875] appletouch 2-1:0.85: Failed to read mode from device.
[ 1206.769252][ T5944] smsusb:smsusb_probe: Device initialized with return code -19
[ 1206.785443][ T5875] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[ 1206.813205][ T5875] usb 2-1: USB disconnect, device number 68
[ 1207.350065][T17675] trusted_key: encrypted_key: insufficient parameters specified
[ 1207.767267][ T5944] usb 4-1: USB disconnect, device number 69
[ 1209.082123][T17694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'.
[ 1209.121139][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'.
[ 1209.140843][ T6246] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1209.371679][ T6246] usb 6-1: Using ep0 maxpacket: 32
[ 1209.419216][ T6246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1209.498720][ T6246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.570956][ T6246] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1209.622860][ T6246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.691965][ T6246] usb 6-1: config 0 descriptor??
[ 1210.410413][   T30] kauditd_printk_skb: 282 callbacks suppressed
[ 1210.410431][   T30] audit: type=1400 audit(1767648976.547:47163): avc:  denied  { read } for  pid=17692 comm="syz.1.2876" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1210.647678][   T30] audit: type=1400 audit(1767648976.707:47164): avc:  denied  { read write } for  pid=5829 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1210.806156][   T30] audit: type=1400 audit(1767648976.707:47165): avc:  denied  { read write open } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1210.841745][ T6246] ft260 0003:0403:6030.0056: unknown main item tag 0x7
[ 1210.961784][   T30] audit: type=1400 audit(1767648976.717:47166): avc:  denied  { read open } for  pid=17692 comm="syz.1.2876" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1211.126090][ T6246] ft260 0003:0403:6030.0056: failed to retrieve chip version
[ 1211.176229][ T6246] ft260 0003:0403:6030.0056: probe with driver ft260 failed with error -5
[ 1211.192409][   T30] audit: type=1400 audit(1767648976.717:47167): avc:  denied  { allowed } for  pid=17708 comm="syz.6.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1211.241154][   T30] audit: type=1400 audit(1767648976.717:47168): avc:  denied  { create } for  pid=17708 comm="syz.6.2879" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1211.309952][   T30] audit: type=1400 audit(1767648976.717:47169): avc:  denied  { map } for  pid=17708 comm="syz.6.2879" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1211.365115][   T30] audit: type=1400 audit(1767648976.727:47170): avc:  denied  { ioctl } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1211.461745][   T30] audit: type=1400 audit(1767648976.737:47171): avc:  denied  { ioctl } for  pid=17684 comm="syz.5.2873" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1211.587638][   T30] audit: type=1400 audit(1767648976.737:47172): avc:  denied  { ioctl } for  pid=17684 comm="syz.5.2873" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1211.891837][T17713] ceph: No mds server is up or the cluster is laggy
[ 1212.730255][T17740] netlink: 'syz.4.2886': attribute type 2 has an invalid length.
[ 1212.891160][T17737] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[ 1212.897679][T17737] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1212.905230][T17737] vhci_hcd vhci_hcd.0: Device attached
[ 1212.912861][T17743] vhci_hcd: connection closed
[ 1212.914543][  T136] vhci_hcd vhci_hcd.1: stop threads
[ 1212.935769][ T5875] usb 6-1: USB disconnect, device number 36
[ 1212.979112][  T136] vhci_hcd vhci_hcd.1: release socket
[ 1213.012668][  T136] vhci_hcd vhci_hcd.1: disconnect device
[ 1215.476438][   T30] kauditd_printk_skb: 164 callbacks suppressed
[ 1215.476456][   T30] audit: type=1400 audit(1767648981.427:47337): avc:  denied  { mounton } for  pid=17757 comm="syz.3.2893" path="/576/file0" dev="tmpfs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1215.646134][   T30] audit: type=1400 audit(1767648981.427:47338): avc:  denied  { mount } for  pid=17757 comm="syz.3.2893" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1215.765274][   T30] audit: type=1400 audit(1767648981.527:47339): avc:  denied  { mounton } for  pid=17757 comm="syz.3.2893" path="/576/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1216.560534][   T30] audit: type=1400 audit(1767648981.527:47340): avc:  denied  { getattr } for  pid=17757 comm="syz.3.2893" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1216.586864][   T30] audit: type=1400 audit(1767648981.527:47341): avc:  denied  { mount } for  pid=17757 comm="syz.3.2893" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1216.861326][   T30] audit: type=1400 audit(1767648981.567:47342): avc:  denied  { mounton } for  pid=17757 comm="syz.3.2893" path="/576/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1216.973544][   T30] audit: type=1400 audit(1767648981.567:47343): avc:  denied  { getattr } for  pid=17757 comm="syz.3.2893" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1217.069609][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'.
[ 1217.245053][   T30] audit: type=1400 audit(1767648981.567:47344): avc:  denied  { mount } for  pid=17757 comm="syz.3.2893" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1217.312213][T17770] veth0: entered promiscuous mode
[ 1217.350480][   T30] audit: type=1400 audit(1767648981.657:47345): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1217.440882][   T30] audit: type=1400 audit(1767648981.687:47346): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1217.504357][T17776] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2896'.
[ 1217.672587][T17778] Can't find ip_set type hash

[ 1217.716033][T17764] veth0: left promiscuous mode
[ 1218.313520][T17792] FAULT_INJECTION: forcing a failure.
[ 1218.313520][T17792] name failslab, interval 1, probability 0, space 0, times 0
[ 1218.393157][T17792] CPU: 1 UID: 0 PID: 17792 Comm: syz.1.2902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1218.393190][T17792] Tainted: [L]=SOFTLOCKUP
[ 1218.393196][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1218.393208][T17792] Call Trace:
[ 1218.393214][T17792]  <TASK>
[ 1218.393222][T17792]  dump_stack_lvl+0x16c/0x1f0
[ 1218.393251][T17792]  should_fail_ex+0x512/0x640
[ 1218.393278][T17792]  ? fs_reclaim_acquire+0xae/0x150
[ 1218.393306][T17792]  should_failslab+0xc2/0x120
[ 1218.393331][T17792]  __kmalloc_noprof+0xeb/0x910
[ 1218.393361][T17792]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1218.393391][T17792]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1218.393415][T17792]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1218.393443][T17792]  ? tomoyo_profile+0x47/0x60
[ 1218.393472][T17792]  tomoyo_path_number_perm+0x245/0x580
[ 1218.393498][T17792]  ? tomoyo_path_number_perm+0x237/0x580
[ 1218.393522][T17792]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1218.393544][T17792]  ? find_held_lock+0x2b/0x80
[ 1218.393588][T17792]  ? find_held_lock+0x2b/0x80
[ 1218.393613][T17792]  ? hook_file_ioctl_common+0x144/0x410
[ 1218.393643][T17792]  ? __fget_files+0x20e/0x3c0
[ 1218.393670][T17792]  security_file_ioctl+0x9b/0x240
[ 1218.393693][T17792]  __x64_sys_ioctl+0xb7/0x210
[ 1218.393716][T17792]  do_syscall_64+0xcd/0xf80
[ 1218.393738][T17792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.393756][T17792] RIP: 0033:0x7fd256b8f749
[ 1218.393771][T17792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1218.393788][T17792] RSP: 002b:00007fd2579f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1218.393805][T17792] RAX: ffffffffffffffda RBX: 00007fd256de5fa0 RCX: 00007fd256b8f749
[ 1218.393817][T17792] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003
[ 1218.393829][T17792] RBP: 00007fd2579f2090 R08: 0000000000000000 R09: 0000000000000000
[ 1218.393840][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1218.393850][T17792] R13: 00007fd256de6038 R14: 00007fd256de5fa0 R15: 00007ffea29dbc18
[ 1218.393876][T17792]  </TASK>
[ 1218.393885][T17792] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1219.767587][T17807] xt_hashlimit: max too large, truncated to 1048576
[ 1220.482095][   T30] kauditd_printk_skb: 273 callbacks suppressed
[ 1220.482110][   T30] audit: type=1400 audit(1767648986.627:47620): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1220.570831][   T30] audit: type=1400 audit(1767648986.627:47621): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1220.869432][   T30] audit: type=1400 audit(1767648986.627:47622): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.056943][   T30] audit: type=1400 audit(1767648986.627:47623): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.080900][   T30] audit: type=1400 audit(1767648986.627:47624): avc:  denied  { bpf } for  pid=17812 comm="syz.5.2907" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.571240][   T30] audit: type=1400 audit(1767648986.627:47625): avc:  denied  { bpf } for  pid=17812 comm="syz.5.2907" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.637509][   T30] audit: type=1400 audit(1767648986.627:47626): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.717578][   T30] audit: type=1400 audit(1767648986.627:47627): avc:  denied  { bpf } for  pid=17812 comm="syz.5.2907" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.790065][   T30] audit: type=1400 audit(1767648986.627:47628): avc:  denied  { perfmon } for  pid=17812 comm="syz.5.2907" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.869792][   T30] audit: type=1400 audit(1767648986.627:47629): avc:  denied  { bpf } for  pid=17812 comm="syz.5.2907" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1221.895803][T17831] (syz.4.2912,17831,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1221.966948][T17816] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1221.973465][T17816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1221.981024][T17816] vhci_hcd vhci_hcd.0: Device attached
[ 1222.019998][T17831] (syz.4.2912,17831,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1222.037781][T17825] loop7: detected capacity change from 0 to 7
[ 1222.059023][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.068951][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.077536][T17832] vhci_hcd: connection closed
[ 1222.078783][   T60] vhci_hcd vhci_hcd.3: stop threads
[ 1222.099894][   T60] vhci_hcd vhci_hcd.3: release socket
[ 1222.110851][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.120438][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.131365][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.137436][   T60] vhci_hcd vhci_hcd.3: disconnect device
[ 1222.141416][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.141740][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.164473][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.172704][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.172724][ T6246] vhci_hcd vhci_hcd.3: vhci_device speed not set
[ 1222.182335][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.196757][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.206332][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.229739][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.239352][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.247426][T17825] ldm_validate_partition_table(): Disk read failed.
[ 1222.255333][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.264926][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.278142][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.287766][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.295886][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1222.305482][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1222.315169][T17825] Dev loop7: unable to read RDB block 0
[ 1222.350915][T17825]  loop7: unable to read partition table
[ 1222.357098][T17825] loop7: partition table beyond EOD, truncated
[ 1222.396145][T17825] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1225.965700][   T30] kauditd_printk_skb: 210 callbacks suppressed
[ 1225.965714][   T30] audit: type=1400 audit(1767648991.717:47840): avc:  denied  { create } for  pid=17867 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1226.000859][   T30] audit: type=1400 audit(1767648991.747:47841): avc:  denied  { write } for  pid=17867 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1226.130692][   T30] audit: type=1400 audit(1767648991.757:47842): avc:  denied  { prog_load } for  pid=17867 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1226.179742][   T30] audit: type=1400 audit(1767648991.767:47843): avc:  denied  { bpf } for  pid=17867 comm="syz.6.2921" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1226.221226][   T30] audit: type=1400 audit(1767648991.777:47844): avc:  denied  { perfmon } for  pid=17867 comm="syz.6.2921" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1226.360689][   T30] audit: type=1400 audit(1767648992.397:47845): avc:  denied  { execmem } for  pid=17878 comm="syz.3.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1226.791585][   T30] audit: type=1400 audit(1767648992.587:47846): avc:  denied  { map_create } for  pid=17878 comm="syz.3.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1226.865437][   T30] audit: type=1400 audit(1767648992.597:47847): avc:  denied  { prog_load } for  pid=17878 comm="syz.3.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1226.896513][   T30] audit: type=1400 audit(1767648992.597:47848): avc:  denied  { bpf } for  pid=17878 comm="syz.3.2922" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1226.923226][   T30] audit: type=1400 audit(1767648992.617:47849): avc:  denied  { perfmon } for  pid=17878 comm="syz.3.2922" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1227.210816][ T5938] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[ 1227.536245][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1227.642741][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1227.673076][ T5938] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[ 1227.710389][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.744035][ T5938] usb 2-1: config 0 descriptor??
[ 1227.801103][T17891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1227.807645][T17891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1227.815285][T17891] vhci_hcd vhci_hcd.0: Device attached
[ 1227.830415][T17900] vhci_hcd: connection closed
[ 1227.833351][T15021] vhci_hcd vhci_hcd.4: stop threads
[ 1227.848613][T15021] vhci_hcd vhci_hcd.4: release socket
[ 1227.868955][T15021] vhci_hcd vhci_hcd.4: disconnect device
[ 1227.977638][T17877] lo speed is unknown, defaulting to 1000
[ 1228.177444][ T5938] usbhid 2-1:0.0: can't add hid device: -71
[ 1228.203914][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2927'.
[ 1228.235051][ T5938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1228.285706][ T5938] usb 2-1: USB disconnect, device number 69
[ 1229.141741][T17927] tmpfs: Bad value for 'mpol'
[ 1231.022505][   T30] kauditd_printk_skb: 256 callbacks suppressed
[ 1231.022522][   T30] audit: type=1400 audit(1767648997.167:48106): avc:  denied  { create } for  pid=17951 comm="syz.6.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1231.081878][   T30] audit: type=1400 audit(1767648997.207:48107): avc:  denied  { read write } for  pid=17952 comm="syz.5.2941" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1231.134940][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'.
[ 1231.143628][   T30] audit: type=1400 audit(1767648997.207:48108): avc:  denied  { read write open } for  pid=17952 comm="syz.5.2941" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1231.169996][T17954] can: request_module (can-proto-4) failed.
[ 1231.178726][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'.
[ 1231.276985][   T30] audit: type=1400 audit(1767648997.207:48109): avc:  denied  { ioctl } for  pid=17952 comm="syz.5.2941" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1231.582649][   T30] audit: type=1400 audit(1767648997.207:48110): avc:  denied  { create } for  pid=17952 comm="syz.5.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1231.602363][   T30] audit: type=1400 audit(1767648997.207:48111): avc:  denied  { module_request } for  pid=17952 comm="syz.5.2941" kmod="can-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1231.656483][   T30] audit: type=1400 audit(1767648997.217:48112): avc:  denied  { ioctl } for  pid=17951 comm="syz.6.2940" path="socket:[62684]" dev="sockfs" ino=62684 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1231.731476][   T30] audit: type=1400 audit(1767648997.227:48113): avc:  denied  { create } for  pid=17951 comm="syz.6.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1231.792805][   T30] audit: type=1400 audit(1767648997.247:48114): avc:  denied  { connect } for  pid=17951 comm="syz.6.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1231.839272][   T30] audit: type=1400 audit(1767648997.247:48115): avc:  denied  { name_connect } for  pid=17951 comm="syz.6.2940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[ 1235.328860][T18006] lo speed is unknown, defaulting to 1000
[ 1236.217137][   T30] kauditd_printk_skb: 272 callbacks suppressed
[ 1236.217156][   T30] audit: type=1400 audit(1767649002.347:48388): avc:  denied  { mounton } for  pid=17992 comm="syz.4.2951" path="/582/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1236.253959][T18003] overlayfs: failed to clone lowerpath
[ 1236.353457][T18003] overlayfs: failed to clone lowerpath
[ 1236.437223][   T30] audit: type=1400 audit(1767649002.347:48389): avc:  denied  { getattr } for  pid=17992 comm="syz.4.2951" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1236.568483][   T30] audit: type=1400 audit(1767649002.347:48390): avc:  denied  { mount } for  pid=17992 comm="syz.4.2951" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1236.661106][   T30] audit: type=1400 audit(1767649002.397:48391): avc:  denied  { prog_load } for  pid=18002 comm="syz.6.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1237.049519][   T30] audit: type=1400 audit(1767649002.397:48392): avc:  denied  { bpf } for  pid=18002 comm="syz.6.2953" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1237.156284][   T30] audit: type=1400 audit(1767649002.397:48393): avc:  denied  { perfmon } for  pid=18002 comm="syz.6.2953" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1237.266772][T18022] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1237.288858][   T30] audit: type=1400 audit(1767649002.397:48394): avc:  denied  { mounton } for  pid=18002 comm="syz.6.2953" path="/309/file0" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1237.340817][T18022] audit: audit_lost=3924 audit_rate_limit=0 audit_backlog_limit=64
[ 1237.383443][T18022] audit: backlog limit exceeded
[ 1238.294348][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.441584][T18031] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1238.531076][T18032] sch_tbf: burst 2895 is lower than device lo mtu (65550) !
[ 1238.723387][T18036] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1238.729908][T18036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1238.737744][T18036] vhci_hcd vhci_hcd.0: Device attached
[ 1238.753499][T18041] vhci_hcd: connection closed
[ 1238.753744][   T60] vhci_hcd vhci_hcd.4: stop threads
[ 1238.778570][   T60] vhci_hcd vhci_hcd.4: release socket
[ 1238.795249][   T60] vhci_hcd vhci_hcd.4: disconnect device
[ 1238.811030][ T5944] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1239.001539][ T5944] usb 4-1: Using ep0 maxpacket: 32
[ 1239.036381][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1239.084093][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1239.125379][ T5944] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1239.345136][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.381484][ T5944] usb 4-1: config 0 descriptor??
[ 1239.942459][ T5944] ft260 0003:0403:6030.0057: unknown main item tag 0x7
[ 1240.621281][ T5941] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[ 1240.674390][ T5944] ft260 0003:0403:6030.0057: failed to retrieve chip version
[ 1240.691919][ T5944] ft260 0003:0403:6030.0057: probe with driver ft260 failed with error -5
[ 1240.812284][ T5941] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 1240.823860][ T5941] usb 2-1: config 0 has no interface number 0
[ 1240.836861][ T5941] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1240.850688][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.864037][ T5941] usb 2-1: Product: syz
[ 1240.870206][ T5941] usb 2-1: Manufacturer: syz
[ 1240.882198][ T5941] usb 2-1: SerialNumber: syz
[ 1240.924908][ T5941] usb 2-1: config 0 descriptor??
[ 1240.934398][ T5941] hub 2-1:0.132: bad descriptor, ignoring hub
[ 1240.940596][ T5941] hub 2-1:0.132: probe with driver hub failed with error -5
[ 1240.950974][ T5944] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1240.951051][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input42
[ 1241.110897][ T5944] usb 5-1: Using ep0 maxpacket: 8
[ 1241.119102][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1241.131646][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1241.143985][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1241.155507][ T5944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1241.176595][ T5944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1241.189101][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.203191][T18054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1241.212868][T18054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1241.231431][   T30] kauditd_printk_skb: 297 callbacks suppressed
[ 1241.231450][   T30] audit: type=1400 audit(1767649007.377:48686): avc:  denied  { execmem } for  pid=18053 comm="syz.1.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1241.423592][   T30] audit: type=1400 audit(1767649007.567:48687): avc:  denied  { read } for  pid=18053 comm="syz.1.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1241.438349][ T5944] usb 5-1: GET_CAPABILITIES returned 0
[ 1241.443792][   T30] audit: type=1400 audit(1767649007.567:48688): avc:  denied  { create } for  pid=18053 comm="syz.1.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1241.449627][ T5944] usbtmc 5-1:16.0: can't read capabilities
[ 1241.479665][   T30] audit: type=1400 audit(1767649007.567:48689): avc:  denied  { module_request } for  pid=18053 comm="syz.1.2964" kmod="net-pf-2-proto-9-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1241.513399][   T30] audit: type=1400 audit(1767649007.567:48690): avc:  denied  { ioctl } for  pid=18066 comm="syz.4.2965" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1241.542003][   T30] audit: type=1400 audit(1767649007.567:48691): avc:  denied  { ioctl } for  pid=18066 comm="syz.4.2965" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1241.569887][   T30] audit: type=1400 audit(1767649007.657:48692): avc:  denied  { create } for  pid=18053 comm="syz.1.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1241.594794][   T30] audit: type=1400 audit(1767649007.687:48693): avc:  denied  { module_request } for  pid=18053 comm="syz.1.2964" kmod="net-pf-2-proto-9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1241.668706][   T30] audit: type=1400 audit(1767649007.807:48694): avc:  denied  { write } for  pid=18066 comm="syz.4.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1241.690499][   T30] audit: type=1400 audit(1767649007.807:48695): avc:  denied  { read write } for  pid=18066 comm="syz.4.2965" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1242.339134][ T5938] usb 4-1: USB disconnect, device number 70
[ 1242.801167][ T6246] usb 2-1: USB disconnect, device number 70
[ 1243.411558][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1243.912538][ T5944] usb 5-1: USB disconnect, device number 83
[ 1245.512067][ T5938] libceph: connect (1)[c::]:6789 error -101
[ 1245.518229][ T5938] libceph: mon0 (1)[c::]:6789 connect error
[ 1246.159452][  T939] libceph: connect (1)[c::]:6789 error -101
[ 1246.202432][  T939] libceph: mon0 (1)[c::]:6789 connect error
[ 1246.268943][   T30] kauditd_printk_skb: 146 callbacks suppressed
[ 1246.268954][   T30] audit: type=1400 audit(1767649012.407:48842): avc:  denied  { create } for  pid=18117 comm="syz.5.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1246.476133][T18094] ceph: No mds server is up or the cluster is laggy
[ 1246.521276][   T30] audit: type=1400 audit(1767649012.497:48843): avc:  denied  { read write } for  pid=5829 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1246.564522][   T30] audit: type=1400 audit(1767649012.497:48844): avc:  denied  { read write open } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1246.645370][   T30] audit: type=1400 audit(1767649012.497:48845): avc:  denied  { ioctl } for  pid=5829 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1246.794135][   T30] audit: type=1400 audit(1767649012.597:48846): avc:  denied  { allowed } for  pid=18117 comm="syz.5.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1246.831126][   T30] audit: type=1400 audit(1767649012.597:48847): avc:  denied  { create } for  pid=18117 comm="syz.5.2979" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1247.126098][   T30] audit: type=1400 audit(1767649012.597:48848): avc:  denied  { map } for  pid=18117 comm="syz.5.2979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1247.203561][   T30] audit: type=1400 audit(1767649012.637:48849): avc:  denied  { read write } for  pid=18117 comm="syz.5.2979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1247.284964][   T30] audit: type=1400 audit(1767649012.647:48850): avc:  denied  { map } for  pid=18117 comm="syz.5.2979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1247.371726][   T30] audit: type=1400 audit(1767649012.647:48851): avc:  denied  { read write } for  pid=18117 comm="syz.5.2979" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1251.306351][   T30] kauditd_printk_skb: 149 callbacks suppressed
[ 1251.306367][   T30] audit: type=1400 audit(1767649017.447:49001): avc:  denied  { create } for  pid=18170 comm="syz.5.2992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1251.476785][T18172] FAULT_INJECTION: forcing a failure.
[ 1251.476785][T18172] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.489569][T18172] CPU: 0 UID: 0 PID: 18172 Comm: syz.5.2992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1251.489591][T18172] Tainted: [L]=SOFTLOCKUP
[ 1251.489595][T18172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1251.489602][T18172] Call Trace:
[ 1251.489606][T18172]  <TASK>
[ 1251.489610][T18172]  dump_stack_lvl+0x16c/0x1f0
[ 1251.489629][T18172]  should_fail_ex+0x512/0x640
[ 1251.489647][T18172]  ? fs_reclaim_acquire+0xae/0x150
[ 1251.489664][T18172]  should_failslab+0xc2/0x120
[ 1251.489679][T18172]  __kmalloc_noprof+0xeb/0x910
[ 1251.489697][T18172]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1251.489717][T18172]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1251.489732][T18172]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1251.489749][T18172]  ? tomoyo_profile+0x47/0x60
[ 1251.489767][T18172]  tomoyo_path_number_perm+0x245/0x580
[ 1251.489779][T18172]  ? tomoyo_path_number_perm+0x237/0x580
[ 1251.489794][T18172]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1251.489808][T18172]  ? find_held_lock+0x2b/0x80
[ 1251.489839][T18172]  ? find_held_lock+0x2b/0x80
[ 1251.489855][T18172]  ? hook_file_ioctl_common+0x144/0x410
[ 1251.489876][T18172]  ? __fget_files+0x20e/0x3c0
[ 1251.489895][T18172]  security_file_ioctl+0x9b/0x240
[ 1251.489910][T18172]  __x64_sys_ioctl+0xb7/0x210
[ 1251.489925][T18172]  do_syscall_64+0xcd/0xf80
[ 1251.489946][T18172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.489957][T18172] RIP: 0033:0x7f80e298f749
[ 1251.489967][T18172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1251.489978][T18172] RSP: 002b:00007f80e37d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1251.489989][T18172] RAX: ffffffffffffffda RBX: 00007f80e2be5fa0 RCX: 00007f80e298f749
[ 1251.489996][T18172] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006
[ 1251.490003][T18172] RBP: 00007f80e37d2090 R08: 0000000000000000 R09: 0000000000000000
[ 1251.490009][T18172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1251.490016][T18172] R13: 00007f80e2be6038 R14: 00007f80e2be5fa0 R15: 00007ffc5d261c68
[ 1251.490031][T18172]  </TASK>
[ 1251.490035][T18172] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1251.826796][   T30] audit: type=1400 audit(1767649017.447:49002): avc:  denied  { read write } for  pid=18171 comm="syz.3.2993" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1251.860834][ T5941] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1251.939485][   T30] audit: type=1400 audit(1767649017.447:49003): avc:  denied  { read write open } for  pid=18171 comm="syz.3.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1252.042423][ T5941] usb 4-1: Using ep0 maxpacket: 32
[ 1252.053706][   T30] audit: type=1400 audit(1767649017.447:49004): avc:  denied  { ioctl } for  pid=18171 comm="syz.3.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1252.121983][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1252.174547][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1252.195606][   T30] audit: type=1400 audit(1767649017.447:49005): avc:  denied  { ioctl } for  pid=18171 comm="syz.3.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1252.240551][ T5941] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1252.302118][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.342620][   T30] audit: type=1400 audit(1767649017.487:49006): avc:  denied  { read } for  pid=18170 comm="syz.5.2992" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1252.376216][ T5941] usb 4-1: config 0 descriptor??
[ 1252.479047][   T30] audit: type=1400 audit(1767649017.487:49007): avc:  denied  { read open } for  pid=18170 comm="syz.5.2992" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1253.318421][T18181] overlayfs: failed to clone lowerpath
[ 1253.340809][   T30] audit: type=1400 audit(1767649017.517:49008): avc:  denied  { ioctl } for  pid=18171 comm="syz.3.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1253.371502][T18181] overlayfs: failed to clone lowerpath
[ 1253.551166][   T30] audit: type=1400 audit(1767649017.517:49009): avc:  denied  { ioctl } for  pid=18171 comm="syz.3.2993" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1253.641207][   T30] audit: type=1400 audit(1767649017.607:49010): avc:  denied  { setopt } for  pid=18157 comm="syz.1.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1253.672322][ T5941] ft260 0003:0403:6030.0058: unknown main item tag 0x7
[ 1253.866971][ T5941] ft260 0003:0403:6030.0058: failed to retrieve chip version
[ 1253.875530][ T5941] ft260 0003:0403:6030.0058: probe with driver ft260 failed with error -32
[ 1253.963095][ T5941] usb 4-1: USB disconnect, device number 71
[ 1254.184694][T18192] binder: 18185:18192 ioctl c0306201 0 returned -14
[ 1254.253128][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'.
[ 1254.400926][ T5941] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1254.590854][ T5941] usb 2-1: Using ep0 maxpacket: 32
[ 1254.720104][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1254.783046][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1254.869789][ T5941] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1254.942710][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1255.025906][ T5941] usb 2-1: config 0 descriptor??
[ 1255.550856][ T6246] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1255.720845][ T6246] usb 5-1: Using ep0 maxpacket: 16
[ 1255.749397][ T5941] ft260 0003:0403:6030.0059: unknown main item tag 0x7
[ 1255.769360][ T6246] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1255.781663][ T6246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.792979][ T6246] usb 5-1: Product: syz
[ 1255.797633][ T6246] usb 5-1: Manufacturer: syz
[ 1255.802847][ T6246] usb 5-1: SerialNumber: syz
[ 1255.954013][ T5941] ft260 0003:0403:6030.0059: failed to retrieve chip version
[ 1255.971092][ T5941] ft260 0003:0403:6030.0059: probe with driver ft260 failed with error -32
[ 1256.005628][ T5941] usb 2-1: USB disconnect, device number 71
[ 1256.116888][ T6246] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1256.159915][ T6246] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1256.200654][ T6246] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1256.229576][ T6246] usb 5-1: media controller created
[ 1256.295315][ T6246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1256.317723][   T30] kauditd_printk_skb: 242 callbacks suppressed
[ 1256.317735][   T30] audit: type=1400 audit(1767649022.457:49253): avc:  denied  { read append } for  pid=18184 comm="syz.4.2994" name="i2c-1" dev="devtmpfs" ino=3489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1256.408786][   T30] audit: type=1400 audit(1767649022.457:49254): avc:  denied  { ioctl open } for  pid=18184 comm="syz.4.2994" path="/dev/i2c-1" dev="devtmpfs" ino=3489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1256.470023][   T30] audit: type=1400 audit(1767649022.497:49255): avc:  denied  { ioctl } for  pid=18184 comm="syz.4.2994" path="/dev/i2c-1" dev="devtmpfs" ino=3489 ioctlcmd=0x707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1256.539378][   T30] audit: type=1400 audit(1767649022.497:49256): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1256.601911][   T30] audit: type=1400 audit(1767649022.497:49257): avc:  denied  { read write open } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1256.652007][ T6246] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1256.691406][   T30] audit: type=1400 audit(1767649022.497:49258): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1256.763033][   T30] audit: type=1400 audit(1767649022.497:49259): avc:  denied  { prog_load } for  pid=18184 comm="syz.4.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1256.820131][   T30] audit: type=1400 audit(1767649022.507:49260): avc:  denied  { bpf } for  pid=18184 comm="syz.4.2994" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1256.963853][   T30] audit: type=1400 audit(1767649022.507:49261): avc:  denied  { perfmon } for  pid=18184 comm="syz.4.2994" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1256.987885][   T30] audit: type=1400 audit(1767649022.507:49262): avc:  denied  { perfmon } for  pid=18184 comm="syz.4.2994" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1257.556961][ T6246] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1257.599163][ T6246] usb 5-1: USB disconnect, device number 84
[ 1258.602499][T18237] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1258.673397][T18242] netlink: 'syz.6.3012': attribute type 13 has an invalid length.
[ 1261.613374][   T30] kauditd_printk_skb: 152 callbacks suppressed
[ 1261.613393][   T30] audit: type=1400 audit(1767649026.837:49415): avc:  denied  { execmem } for  pid=18257 comm="syz.3.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1261.710821][   T30] audit: type=1400 audit(1767649027.007:49416): avc:  denied  { read } for  pid=18257 comm="syz.3.3018" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1261.840832][   T30] audit: type=1400 audit(1767649027.007:49417): avc:  denied  { read open } for  pid=18257 comm="syz.3.3018" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1261.930822][   T30] audit: type=1400 audit(1767649027.167:49418): avc:  denied  { mounton } for  pid=18257 comm="syz.3.3018" path="/597/file0" dev="tmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1262.221038][   T30] audit: type=1400 audit(1767649027.187:49419): avc:  denied  { mount } for  pid=18257 comm="syz.3.3018" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1262.752422][   T30] audit: type=1400 audit(1767649027.237:49420): avc:  denied  { mounton } for  pid=18257 comm="syz.3.3018" path="/597/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1262.776177][   T30] audit: type=1400 audit(1767649027.247:49421): avc:  denied  { getattr } for  pid=18257 comm="syz.3.3018" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1262.806822][T18278] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1262.813380][T18278] audit: audit_lost=3927 audit_rate_limit=0 audit_backlog_limit=64
[ 1262.821270][T18278] audit: backlog limit exceeded
[ 1263.060814][ T6246] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1263.194007][T18288] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1263.231703][ T6246] usb 2-1: Using ep0 maxpacket: 16
[ 1263.260032][ T6246] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1263.315661][ T6246] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1263.429990][ T5938] hid-generic 0002:0004:1000000.005A: unknown main item tag 0x0
[ 1263.505049][ T5938] hid-generic 0002:0004:1000000.005A: unknown main item tag 0x0
[ 1263.597596][ T5938] hid-generic 0002:0004:1000000.005A: unknown main item tag 0x0
[ 1264.054722][ T5938] hid-generic 0002:0004:1000000.005A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1264.334062][ T6246] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1264.346985][ T6246] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1264.353684][ T6246] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1264.362837][ T6246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1264.374320][ T6246] usb 2-1: config 0 descriptor??
[ 1264.824784][ T6246] samsung 0003:0419:0001.005B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0
[ 1266.431948][ T5944] usb 2-1: USB disconnect, device number 72
[ 1266.740766][   T30] kauditd_printk_skb: 230 callbacks suppressed
[ 1266.740779][   T30] audit: type=1400 audit(1767649032.687:49625): avc:  denied  { create } for  pid=18310 comm="syz.4.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1266.944449][   T30] audit: type=1400 audit(1767649032.937:49626): avc:  denied  { read write } for  pid=5813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1267.050316][T18321] xt_hashlimit: max too large, truncated to 1048576
[ 1267.112095][   T30] audit: type=1400 audit(1767649032.937:49627): avc:  denied  { read write open } for  pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1267.247509][   T30] audit: type=1400 audit(1767649032.937:49628): avc:  denied  { ioctl } for  pid=5813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1267.377609][   T30] audit: type=1400 audit(1767649033.017:49629): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1267.590814][   T30] audit: type=1400 audit(1767649033.087:49630): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1267.741641][T18336] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1267.748203][T18336] audit: audit_lost=3937 audit_rate_limit=0 audit_backlog_limit=64
[ 1267.756190][T18336] audit: backlog limit exceeded
[ 1267.979897][   T30] audit: type=1400 audit(1767649033.087:49631): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1268.261166][T18335] sp0: Synchronizing with TNC
[ 1268.331267][T18335] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[ 1268.446498][T18337] [U] �`
[ 1269.133341][T18349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1269.145923][T18349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1269.156071][T18349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1269.178627][T18349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1269.195480][T18349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1269.244939][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1269.252369][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1269.259559][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1269.267195][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1269.275079][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1269.657415][ T6246] libceph: connect (1)[c::]:6789 error -101
[ 1269.684459][ T6246] libceph: mon0 (1)[c::]:6789 connect error
[ 1269.890922][ T5944] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1269.946342][ T6246] libceph: connect (1)[c::]:6789 error -101
[ 1269.987051][ T6246] libceph: mon0 (1)[c::]:6789 connect error
[ 1270.061238][ T5944] usb 4-1: Using ep0 maxpacket: 32
[ 1270.167852][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.256444][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1270.303016][ T5944] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1270.326428][ T6558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1270.343486][T18342] ceph: No mds server is up or the cluster is laggy
[ 1270.372258][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.436429][ T5944] usb 4-1: config 0 descriptor??
[ 1270.633379][T18345] lo speed is unknown, defaulting to 1000
[ 1270.900308][T18367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3045'.
[ 1271.317105][ T5944] ft260 0003:0403:6030.005C: unknown main item tag 0x7
[ 1271.341756][T18349] Bluetooth: hci3: command tx timeout
[ 1271.415898][ T5944] ft260 0003:0403:6030.005C: failed to retrieve chip version
[ 1271.491022][ T5944] ft260 0003:0403:6030.005C: probe with driver ft260 failed with error -5
[ 1271.648338][ T6246] usb 4-1: USB disconnect, device number 72
[ 1271.667628][ T6558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1271.793649][   T30] kauditd_printk_skb: 251 callbacks suppressed
[ 1271.793666][   T30] audit: type=1400 audit(1767649037.937:49871): avc:  denied  { bpf } for  pid=18369 comm="syz.6.3046" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1271.903812][   T30] audit: type=1400 audit(1767649037.937:49872): avc:  denied  { read write } for  pid=12155 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1271.971001][ T6558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.005501][   T30] audit: type=1400 audit(1767649037.937:49873): avc:  denied  { read write open } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1272.102220][   T30] audit: type=1400 audit(1767649037.937:49874): avc:  denied  { ioctl } for  pid=12155 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1272.135011][ T6558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.262517][   T30] audit: type=1400 audit(1767649037.987:49875): avc:  denied  { create } for  pid=18369 comm="syz.6.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1272.403831][   T30] audit: type=1400 audit(1767649038.007:49876): avc:  denied  { create } for  pid=18369 comm="syz.6.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1272.533641][   T30] audit: type=1400 audit(1767649038.017:49877): avc:  denied  { allowed } for  pid=18369 comm="syz.6.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1272.648049][   T30] audit: type=1400 audit(1767649038.017:49878): avc:  denied  { create } for  pid=18369 comm="syz.6.3046" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1272.784003][   T30] audit: type=1400 audit(1767649038.017:49879): avc:  denied  { map } for  pid=18369 comm="syz.6.3046" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1272.821387][ T6558] bridge_slave_1: left allmulticast mode
[ 1272.849185][T18390] xt_hashlimit: max too large, truncated to 1048576
[ 1272.858976][ T6558] bridge_slave_1: left promiscuous mode
[ 1272.900297][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.925474][   T30] audit: type=1400 audit(1767649038.017:49880): avc:  denied  { read write } for  pid=18369 comm="syz.6.3046" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1272.953316][ T6558] bridge_slave_0: left allmulticast mode
[ 1272.983711][ T6558] bridge_slave_0: left promiscuous mode
[ 1272.990756][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1273.413975][T18349] Bluetooth: hci3: command tx timeout
[ 1273.531138][ T6558] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1273.611756][ T6558] dvmrp0 (unregistering): left allmulticast mode
[ 1273.681080][ T6558] dvmrp8 (unregistering): left allmulticast mode
[ 1274.805970][ T6558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1274.859291][ T6558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1274.881177][ T6558] bond0 (unregistering): Released all slaves
[ 1275.503711][T18349] Bluetooth: hci3: command tx timeout
[ 1275.714029][T18418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'.
[ 1276.171759][ T6558] bond1 (unregistering): Released all slaves
[ 1276.202910][T18413] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3056'.
[ 1276.280480][T18345] chnl_net:caif_netlink_parms(): no params data found
[ 1276.331839][ T6558] tipc: Left network mode
[ 1277.172481][   T30] kauditd_printk_skb: 229 callbacks suppressed
[ 1277.215809][   T30] audit: type=1400 audit(1767649042.967:50068): avc:  denied  { create } for  pid=18423 comm="syz.6.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1277.298723][   T30] audit: type=1400 audit(1767649042.987:50069): avc:  denied  { write } for  pid=18423 comm="syz.6.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1277.349695][   T30] audit: type=1400 audit(1767649042.997:50070): avc:  denied  { prog_load } for  pid=18423 comm="syz.6.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1277.370798][   T30] audit: type=1400 audit(1767649043.007:50071): avc:  denied  { bpf } for  pid=18423 comm="syz.6.3059" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1277.391573][   T30] audit: type=1400 audit(1767649043.007:50072): avc:  denied  { perfmon } for  pid=18423 comm="syz.6.3059" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1277.420926][   T30] audit: type=1400 audit(1767649043.327:50073): avc:  denied  { create } for  pid=18420 comm="syz.5.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1277.444039][   T30] audit: type=1400 audit(1767649043.487:50074): avc:  denied  { read write } for  pid=18430 comm="syz.1.3060" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1277.468109][   T30] audit: type=1400 audit(1767649043.487:50075): avc:  denied  { read write open } for  pid=18430 comm="syz.1.3060" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1277.496048][T18345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1277.504864][T18345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1277.545141][   T30] audit: type=1400 audit(1767649043.487:50076): avc:  denied  { create } for  pid=18430 comm="syz.1.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1277.584080][T18349] Bluetooth: hci3: command tx timeout
[ 1277.600918][T18345] bridge_slave_0: entered allmulticast mode
[ 1277.615307][T18345] bridge_slave_0: entered promiscuous mode
[ 1277.640807][   T30] audit: type=1400 audit(1767649043.487:50077): avc:  denied  { shutdown } for  pid=18430 comm="syz.1.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1277.702653][T18345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1277.728338][T18345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1277.745967][T18345] bridge_slave_1: entered allmulticast mode
[ 1277.766206][T18345] bridge_slave_1: entered promiscuous mode
[ 1278.739114][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'.
[ 1278.801986][ T6558] ------------[ cut here ]------------
[ 1278.807444][ T6558] Have pending ack frames!
[ 1278.811882][ T6558] WARNING: net/mac80211/main.c:1712 at ieee80211_free_ack_frame+0x14/0x30, CPU#1: kworker/u8:40/6558
[ 1278.822770][ T6558] Modules linked in:
[ 1278.826878][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: kworker/u8:40 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1278.838023][ T6558] Tainted: [L]=SOFTLOCKUP
[ 1278.842346][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1278.852466][ T6558] Workqueue: netns cleanup_net
[ 1278.857223][ T6558] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30
[ 1278.863571][ T6558] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 c3 38 dc f6 48 8d 3d 8c 93 b5 05 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 28 fe 5d fe 31 c0
[ 1278.883277][ T6558] RSP: 0018:ffffc9001b7b7820 EFLAGS: 00010293
[ 1278.889338][ T6558] RAX: 0000000000000000 RBX: ffff8880773f88c0 RCX: ffffffff8b6d8d03
[ 1278.897346][ T6558] RDX: ffff88802c7f24c0 RSI: ffffffff8ae2afed RDI: ffffffff90984380
[ 1278.905309][ T6558] RBP: ffff888055e463f0 R08: 0000000000000007 R09: 000000007fffffff
[ 1278.913279][ T6558] R10: 0000000000000001 R11: 0000000000002ba1 R12: dffffc0000000000
[ 1278.921248][ T6558] R13: ffffffff8ae2afe0 R14: 0000000080000000 R15: 0000000000000000
[ 1278.929192][ T6558] FS:  0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000
[ 1278.938171][ T6558] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1278.944751][ T6558] CR2: 0000555561da3608 CR3: 00000000423e7000 CR4: 00000000003526f0
[ 1278.952724][ T6558] Call Trace:
[ 1278.955977][ T6558]  <TASK>
[ 1278.958880][ T6558]  idr_for_each+0x143/0x270
[ 1278.963383][ T6558]  ? __pfx_idr_for_each+0x10/0x10
[ 1278.968380][ T6558]  ? kfree+0x2f8/0x6e0
[ 1278.972445][ T6558]  ieee80211_free_hw+0x59/0x1d0
[ 1278.977276][ T6558]  hwsim_exit_net+0x7d9/0x1590
[ 1278.982040][ T6558]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1278.987216][ T6558]  ? ip_vs_sync_net_cleanup+0x72/0xb0
[ 1278.992629][ T6558]  ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[ 1278.998325][ T6558]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1279.003528][ T6558]  ops_undo_list+0x2ee/0xab0
[ 1279.008096][ T6558]  ? __pfx_ops_undo_list+0x10/0x10
[ 1279.013209][ T6558]  ? cleanup_net+0x347/0x830
[ 1279.017772][ T6558]  ? idr_destroy+0x62/0x2e0
[ 1279.022265][ T6558]  cleanup_net+0x41b/0x830
[ 1279.026656][ T6558]  ? __pfx_cleanup_net+0x10/0x10
[ 1279.031590][ T6558]  ? rcu_is_watching+0x12/0xc0
[ 1279.036329][ T6558]  process_one_work+0x9ba/0x1b20
[ 1279.041265][ T6558]  ? __pfx_process_one_work+0x10/0x10
[ 1279.046626][ T6558]  ? assign_work+0x1a0/0x250
[ 1279.051208][ T6558]  worker_thread+0x6c8/0xf10
[ 1279.055778][ T6558]  ? __pfx_worker_thread+0x10/0x10
[ 1279.060889][ T6558]  kthread+0x3c5/0x780
[ 1279.064932][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.069495][ T6558]  ? rcu_is_watching+0x12/0xc0
[ 1279.074310][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.078874][ T6558]  ret_from_fork+0x983/0xb10
[ 1279.083537][ T6558]  ? __pfx_ret_from_fork+0x10/0x10
[ 1279.088624][ T6558]  ? __switch_to+0x7af/0x10d0
[ 1279.093302][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.097868][ T6558]  ret_from_fork_asm+0x1a/0x30
[ 1279.102629][ T6558]  </TASK>
[ 1279.105622][ T6558] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1279.112873][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: kworker/u8:40 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1279.123947][ T6558] Tainted: [L]=SOFTLOCKUP
[ 1279.128238][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1279.138266][ T6558] Workqueue: netns cleanup_net
[ 1279.143008][ T6558] Call Trace:
[ 1279.146272][ T6558]  <TASK>
[ 1279.149174][ T6558]  dump_stack_lvl+0x3d/0x1f0
[ 1279.153740][ T6558]  vpanic+0x640/0x6f0
[ 1279.157695][ T6558]  ? ieee80211_free_ack_frame+0x14/0x30
[ 1279.163224][ T6558]  panic+0xca/0xd0
[ 1279.166928][ T6558]  ? __pfx_panic+0x10/0x10
[ 1279.171334][ T6558]  ? check_panic_on_warn+0x1f/0xb0
[ 1279.176416][ T6558]  check_panic_on_warn+0xab/0xb0
[ 1279.181328][ T6558]  __warn+0x108/0x3c0
[ 1279.185284][ T6558]  __report_bug+0x2a0/0x520
[ 1279.189756][ T6558]  ? ieee80211_free_ack_frame+0x14/0x30
[ 1279.195277][ T6558]  ? __pfx___report_bug+0x10/0x10
[ 1279.200272][ T6558]  ? kfree+0x2f8/0x6e0
[ 1279.204308][ T6558]  ? kfree_const+0x55/0x60
[ 1279.208694][ T6558]  ? kobject_put+0x213/0x6f0
[ 1279.213258][ T6558]  ? ieee80211_free_ack_frame+0xd/0x30
[ 1279.218690][ T6558]  ? idr_for_each+0x113/0x270
[ 1279.223344][ T6558]  report_bug_entry+0xe1/0x290
[ 1279.228080][ T6558]  ? ieee80211_free_ack_frame+0x14/0x30
[ 1279.233601][ T6558]  handle_bug+0x18a/0x260
[ 1279.237907][ T6558]  exc_invalid_op+0x17/0x50
[ 1279.242390][ T6558]  asm_exc_invalid_op+0x1a/0x20
[ 1279.247211][ T6558] RIP: 0010:ieee80211_free_ack_frame+0x14/0x30
[ 1279.253336][ T6558] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 c3 38 dc f6 48 8d 3d 8c 93 b5 05 <67> 48 0f b9 3a ba 02 00 00 00 48 89 de 31 ff e8 28 fe 5d fe 31 c0
[ 1279.272917][ T6558] RSP: 0018:ffffc9001b7b7820 EFLAGS: 00010293
[ 1279.278955][ T6558] RAX: 0000000000000000 RBX: ffff8880773f88c0 RCX: ffffffff8b6d8d03
[ 1279.286897][ T6558] RDX: ffff88802c7f24c0 RSI: ffffffff8ae2afed RDI: ffffffff90984380
[ 1279.294841][ T6558] RBP: ffff888055e463f0 R08: 0000000000000007 R09: 000000007fffffff
[ 1279.302784][ T6558] R10: 0000000000000001 R11: 0000000000002ba1 R12: dffffc0000000000
[ 1279.310736][ T6558] R13: ffffffff8ae2afe0 R14: 0000000080000000 R15: 0000000000000000
[ 1279.318691][ T6558]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[ 1279.324739][ T6558]  ? idr_for_each+0x113/0x270
[ 1279.329398][ T6558]  ? ieee80211_free_ack_frame+0xd/0x30
[ 1279.334833][ T6558]  idr_for_each+0x143/0x270
[ 1279.339311][ T6558]  ? __pfx_idr_for_each+0x10/0x10
[ 1279.344313][ T6558]  ? kfree+0x2f8/0x6e0
[ 1279.348356][ T6558]  ieee80211_free_hw+0x59/0x1d0
[ 1279.353184][ T6558]  hwsim_exit_net+0x7d9/0x1590
[ 1279.357930][ T6558]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1279.363103][ T6558]  ? ip_vs_sync_net_cleanup+0x72/0xb0
[ 1279.368451][ T6558]  ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[ 1279.374142][ T6558]  ? __pfx_hwsim_exit_net+0x10/0x10
[ 1279.379316][ T6558]  ops_undo_list+0x2ee/0xab0
[ 1279.383882][ T6558]  ? __pfx_ops_undo_list+0x10/0x10
[ 1279.388967][ T6558]  ? cleanup_net+0x347/0x830
[ 1279.393527][ T6558]  ? idr_destroy+0x62/0x2e0
[ 1279.398002][ T6558]  cleanup_net+0x41b/0x830
[ 1279.402392][ T6558]  ? __pfx_cleanup_net+0x10/0x10
[ 1279.407304][ T6558]  ? rcu_is_watching+0x12/0xc0
[ 1279.412041][ T6558]  process_one_work+0x9ba/0x1b20
[ 1279.416958][ T6558]  ? __pfx_process_one_work+0x10/0x10
[ 1279.422307][ T6558]  ? assign_work+0x1a0/0x250
[ 1279.426871][ T6558]  worker_thread+0x6c8/0xf10
[ 1279.431453][ T6558]  ? __pfx_worker_thread+0x10/0x10
[ 1279.436539][ T6558]  kthread+0x3c5/0x780
[ 1279.440583][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.445144][ T6558]  ? rcu_is_watching+0x12/0xc0
[ 1279.449878][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.454439][ T6558]  ret_from_fork+0x983/0xb10
[ 1279.459036][ T6558]  ? __pfx_ret_from_fork+0x10/0x10
[ 1279.464137][ T6558]  ? __switch_to+0x7af/0x10d0
[ 1279.468800][ T6558]  ? __pfx_kthread+0x10/0x10
[ 1279.473372][ T6558]  ret_from_fork_asm+0x1a/0x30
[ 1279.478124][ T6558]  </TASK>
[ 1279.481390][ T6558] Kernel Offset: disabled
[ 1279.485688][ T6558] Rebooting in 86400 seconds..