last executing test programs:

8.992603022s ago: executing program 1 (id=708):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
pread64(r0, &(0x7f0000000480)=""/42, 0x2a, 0xe772)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1f, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES8=r1, @ANYBLOB="adffa888451104001c0012800c0001006d6163766c616e000c000280080001000800000008004300", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00['], 0x4c}}, 0x8000)
fanotify_init(0x1a, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4044000)
r3 = io_uring_setup(0x1c77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', r2, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket(0x21, 0x2, 0xa)
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000009960300000011004f320102030109021b0001000000000904000001ff01320009050d0353a94cd5bcc97d6d57afec077696644d23bb3fc14f0d6037230073275b08143afdbaaf69609ba4ea47a9e7133c746dfbfbbe4d9c362e5bd1645da192148c904e992677e2957f51fb19870ce8ed1fbe8f362921f456593005fe3a04e7d825b55fbe4ed6386ffd64d6aaaa1e1b1fb08aa14c5360bbf44597fd388e3f533c906c67832a29b87cce2969"], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x6, 0x100000d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00e792ac010026bdf000fcdbdf25040000000c000c000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="8aba94a656aa9942c3c77bad508542985aab7aafe3c36fd88b5310f4ddbd5265816bd1da30addb3cecca9851b310a7361927dc4b1d7f05d21b6cbd18ba05acf4f8a848a9eb1376d9b38d812a8a4dda1b11943fe3f91fee3e3ed9488078abbd06d6721d863486d5542973c114e1f528f2c22cb85242562b8dad7f4fab2a46062892f6ab1f29fbd05ec71ea3c909bb5e879fe247742efc2521c551d6bcf55e48c00710e891c453", 0xa6, 0xffffffffffffffff)

8.300424511s ago: executing program 0 (id=712):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x161080, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201)
close_range(r0, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x1906)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000000c0))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r4, 0x0)
sendto$llc(r4, 0x0, 0x0, 0x4, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

8.201320336s ago: executing program 0 (id=713):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x29, 0x0, @local, @empty}}}})
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'ip6erspan0\x00', 0x8})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}})
r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x5})

8.086295586s ago: executing program 0 (id=714):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000800)=0x3)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
socket$alg(0x26, 0x5, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, r3, 0x0, 0x0, 0x7fff})

7.428691286s ago: executing program 2 (id=717):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0x12, 0xd, {0x4, @esp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xb, [0x10001, 0x5]}, @usr_ip6_spec={@mcast1, @rand_addr=' \x01\x00', 0x9, 0xb8, 0x40}, {0x0, @random="e5090c6769c8", 0x1, 0x1, [0x3, 0x6]}, 0x8000000000000001, 0x7}}})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x2, 0x80805, 0x0)
timer_create(0x2, &(0x7f0000000300)={0x0, 0x1a, 0x7, @thr={&(0x7f00000001c0)="867306", &(0x7f0000000240)="27f8f54821af030b8495da85db0e65230244f421686570aeee88cfbae4fc2ee4621a700a100798319bddc1d98a06c55bba5dc69f4c6c1a375d6c727b2dbef5fc6364ced9f360679325d59bd998aa4f86d924551fa44b79ee8da4b4b9560a7667ec51c9247fd9ed3fdc40c5836392078bab0f6ba41588da3df5932912608be4ca2a10ab863298ee725630c90002931b15fce6f9f262d079eca16d351a"}}, &(0x7f0000000340))
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x881e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x87ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xd, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2300, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x3, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
syz_create_resource$binfmt(0x0)
syz_open_dev$radio(0x0, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$setopts(0x4200, r10, 0x8, 0x100001)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r10, 0x0, 0x4003)
read$msr(r9, &(0x7f000001aa40)=""/102392, 0x18ff8)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

7.028454087s ago: executing program 0 (id=719):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b03010107208c0904000000010120041d000708240a0001ff23000c24030207030004000700810904010000010220090501090002030b040825010000400400090402000001022000090402010101023000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101)
fcntl$setpipe(r0, 0x407, 0x7000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@pci, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xa1f5}, {0x8, 0x15, 0x5}}, {{@pci={{0xffffffffffffff33}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@nsim={{0xfffffffffffffe60}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x47}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x8010)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0)

6.865669721s ago: executing program 3 (id=721):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x80002, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="140b00050038000009000008", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvfrom(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0)

6.404733059s ago: executing program 3 (id=722):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0xa, 0xbffffff3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0x7)
r3 = epoll_create(0x7)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x2004})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0)
write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xff2e)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@my=0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fc6cdfff07"], 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9)

5.725122691s ago: executing program 1 (id=723):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x1f00, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8, 0x1}, {0x8, 0x8}, {0x0, 0x5}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x40000d, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6})

5.535325673s ago: executing program 1 (id=725):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@buf={0xde, &(0x7f0000000140)="29dd39adb5bcf7015c30d5490f3970cfb9a5556ca9805e6108098512cdc5fe7d67fa81d97b49efeb109023c36a49227d2cd246c9cb0281f200e9a1bc913d0acf9646e6d59649a38549dcf6c31f6932ad45a871976e74ad81c883a196fefce1f1c0ba401c83905b65f4a6d1dc1f948b5e9e8cfe908b6c7052f7d94eab0e806023cf40987ce2fa4741e74bd8d833fe20b069de3b53428939f5c8a02e899854363e04326103bbf0d3898531fcc5b7303d06a095ab771891ac59e0dba778393b5e4203a3932edd8ffbd1bb2dddf1467d01c7de0f5ba658c4fe61d0eb5cce9549"})
r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000027c0)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg(r0, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="c995", 0x2}], 0x1}}], 0x1, 0x4000045)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6})
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
listen(r9, 0x5)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r9, 0xffffffffffffffff, 0x400000000000000)

5.146186403s ago: executing program 3 (id=726):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x92c0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x3, 0x0, 0x2, 0x104080})
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x1f}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x75, 0x0, 0x0, @tick=0x1f4, {}, {0x0, 0x7c}, @result={0xe76, 0x81}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})

4.228282231s ago: executing program 3 (id=728):
ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800058008000100756470000c000280080004000080"], 0x2c}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040550726260000000000010902240001000000000904000501030086d5f9cec02a54ce5f010009210c000401222900b4bf22f3c8123bdab6c3e7da060ec7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280"], 0x24}}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x2b43c000)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) (async)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3}) (async)
r9 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_UNLOCK(r9, 0xc)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)

4.177279517s ago: executing program 1 (id=729):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000fc4000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000380)=ANY=[@ANYBLOB="4d000002fef1"])
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
close(0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r3, 0x7}}, 0x48)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={<r5=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)

3.604017201s ago: executing program 0 (id=732):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
setresgid(0x0, 0x0, 0xee01)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200c3, 0x0)
ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0)
socket(0x28, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000a00000000000020ff0100000000000000000000000000010000000000000000000000000000000000f871773439126f0951860b88ffffffffffff120000000000000000000000000000001300000000000000000000000000000000000000000000009e00000000000000000000000000000000000000000000000000b30dead26af066abbb425917000000000000000004000000000001000000000000"], 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040895}, 0x20048840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)

3.572732777s ago: executing program 2 (id=733):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r1=>0x0, 0x9, 0x5, 0x2491, 0x5, 0x9}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0x401}, 0x8) (async)
r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60)
accept$nfc_llcp(r2, 0x0, &(0x7f0000000180))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0x3, 0x7357, 0xffff, 0x3}, 0x8) (rerun: 32)
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000240)=0x1) (async, rerun: 32)
r3 = socket$inet6_sctp(0xa, 0xe, 0x84) (rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={<r4=>r1, 0x48, &(0x7f0000000280)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, @in6={0xa, 0x4e20, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f0000000340)=0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0}, &(0x7f00000003c0)=0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, r5}, 0xc) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r3, {0x30d}}, './file0\x00'})
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000480)='westwood', 0x8) (async)
write(r6, &(0x7f00000004c0)="6d76a09ca61564d2e1f759692fb5ff1a80932b78cfb2d4fc56d24000c594fbbe1d60367a3e6285b40cee6eefe38edf38b05f5061f3655142da8db536909ed95ce2bb4472d9bf543386d01e04c1feb6abff76707e3219f331517fd6687adf717a3a5870e1cca9a7ce9444de8ee83d21b174e8c5f6816434cf999a5cdad8897478b2dc5c59654abade500972cff08682661419139a60a0de0a4f6e8c54403abbb5e06995adf952c9", 0xa7)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000580)={r4, 0x4}, 0x8) (async)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000005c0)={0x2, @pix_mp={0x0, 0xe, 0x55595659, 0x0, 0x4, [{0x9bff, 0x73da}, {0x80000000, 0x7}, {0x3, 0x3}, {0x9, 0x81}, {0x3, 0x6}, {0x9, 0x7}, {0x7, 0x101}, {0x7, 0x8}], 0x6e, 0x7f, 0x2, 0x1, 0x7}}) (async)
r7 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x100000001, 0x1010c0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000001700)={&(0x7f0000000700)=""/4096, 0x111d000, 0x0, 0xfffff001, 0x2}, 0x20) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000001740)=@assoc_value={r4, 0x2}, 0x8) (rerun: 32)
r8 = getpgrp(0x0)
sched_setaffinity(r8, 0x8, &(0x7f0000001780)=0x7) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001800)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0xc014}, 0x20000000) (async)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40011)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r7)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x38, r10, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_usb_connect$uac1(0x2, 0xcf, &(0x7f0000001b40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x6, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2e}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x4, 0x7], 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x6, 0x6, "d883"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x0, "92dd"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0x6, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x4, "4fef", "6ece99"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x2, "d583"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x4, 0xf4, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x8000, 0x0, "e0bc6b66cd"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x10, 0x52, "0384"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0xc5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xb6, 0x1, {0x7, 0x25, 0x1, 0xc, 0x4}}}}}}}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x250, 0xa, 0x44, 0x46, 0x40, 0x7}, 0x31, &(0x7f0000001c80)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x7, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0xc5, 0x8, 0x2432}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f68c458d24d363a0955d7cca5ddaa657"}]}, 0x4, [{0x52, &(0x7f0000001cc0)=@string={0x52, 0x3, "a8cfe10e923fca090ac245bfef4d1a20c4fd4d132aca9f3203472808ea1e745f6d2f94d5a7cf8a12ab85228b1ae452b413d95dc577f9cd1bb3e71fe6e9678a46040ac241a165731832d0f15462e4eede"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x44d}}, {0x2d, &(0x7f0000001d80)=@string={0x2d, 0x3, "1d1d3f548fbb0de0c024748c5046224526a8309e2dd8511adee678a4abb22b96ad535939a0fafa8462a935"}}, {0xfc, &(0x7f0000001dc0)=@string={0xfc, 0x3, "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"}}]}) (async, rerun: 64)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000001f80)) (rerun: 64)

3.21707107s ago: executing program 4 (id=734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
sendto$inet6(r1, &(0x7f00000000c0)="49db3edee8d4b180bab511ab9e91ad6b969f1bf26644d1517083c9e474f1b46b4e316fc1212f3e806931377424ce037efb2bb9f651b22ec542fa326597869b495116bba16314a6e76dbdc9fbf2ea2eb82b8ac7ed48d1e2796382b2e149ec197b5d25912602103450531891b02418012b637a43ff29355ec4a8a9019d55c384c335f6e57a73f5fb9667b4fcd3f535b99ff7a2eeee87", 0x95, 0x2, &(0x7f0000000180)={0xa, 0x4e23, 0xc969, @mcast1, 0x6}, 0x1c)

3.004635636s ago: executing program 2 (id=735):
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0xc0103)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a00", 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a7fdad88900a0000140012800b0001006272696467650000040002800a000100aaaaaaaaaabbddff"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
recvfrom(r4, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0)

2.919872507s ago: executing program 3 (id=736):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000100)=0x3ff, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0xfdef)
sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
accept4(r7, 0x0, 0x0, 0x0)

2.771959919s ago: executing program 4 (id=737):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
timer_create(0xb, 0x0, &(0x7f0000000380)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+60000000}, {0x0, 0x989680}}, &(0x7f0000000300))
close(r1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8000000000000001, 0x8b}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000100000000b702000014000000b703008500000005000000bca900000000000035090100013800002c00000000000000f8ff00000000b5090000c0ba961371f95fd126f13cbb18b0f1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000000000000000000000000000000000aa02cd493feeb7f6dc60a5f45c80e5abf324d152d968afafc6a889fc3f6cb8edec61a4a01fc7a967163a45a7b1e6a7140484a39465", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ftruncate(r9, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r9, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000000c0)={[&(0x7f0000000100)=':,!\x00', &(0x7f0000000680)=',^^#&+i*\x00', &(0x7f0000000000)=',^^#&+i*\x00', &(0x7f0000000080)='\x00']}, 0x0)

2.536075483s ago: executing program 3 (id=738):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000540)={0x80, 0x0, 0x101, 0xc64, 0x3, 0xb, &(0x7f0000000440)="3eef91"})
r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf", @ANYRES8=r0, @ANYRESOCT=r1], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "140022ebffffffff"}}}}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
read(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac3(r2, &(0x7f0000000880)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x19, {0x19, 0x22, "e53d948c75c1e1546061db74a9dc1fd9abc2853f75f382"}}, &(0x7f0000000780)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "d515c499b7cf8933f1d9038f8c9c38bdb2b767408d7ef0be20747b723d3ea6a54ff24ce38bf686007d4017b59101e8289c1de22ec640f8eddd995b795f508e9dcb013d92ae9722b4501b107b5a56b74f70086d8b9182d155fe7b5faa22e08971d41a9e608ab559deb3d15adc410346cdef080482724c80a427dd84d920d6319be0663fb27b2c21013b8d9b98be7b76bf12e643d421c2db29e74a2d6eec1a3b7a0f278338a1bf3ed43cdb9dd16e96535aeed21e5b5d69cfebd088deb498c090a07bad8cdebafb58574c"}}}, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x18, 0xf0, "7bc31c9cfbb0cb763518ca9a955cdfdbfc107c1d5ebc03be5df52deacd45d9f2ff49a685e26e6efb7cf047bc35c8d26d9f83ede426af3e18da49b09272db21a2d90d753604cdae3af0244c04bcc3a20673663ee5158b2da9cc9ad6956c207173d1eb7ccdf2da85215d80a7875d2b5a627df601983af40c9104ae6b989e560a331237925cf32ce64cebefa5bb1cb2b291f20c9e86f96744d0214cadb3cfc2b0a1ae9fca8709ad6b1b6ddd7c451da50e52d8524e0201dd50ef1de77c54458664f83af44ba55dec80697f5577ad196aa47fc93c87e1496f58b9450fc9597601ecb93004abbf6dfa6d8776279e7f67f33390"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x1, 'D'}, &(0x7f0000000a80)=ANY=[@ANYBLOB="6b95000075"], &(0x7f0000000ac0)={0x20, 0x83, 0x2, "8b22"}, &(0x7f0000000b00)={0x20, 0x84, 0x4, "c2973dc8"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "e3f7ea"}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_pidfd_open(0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xba, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0xd, 0x60, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f904cb3b1d5e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe073, 0x3ff, 0xd7}, {0x6, 0x24, 0x1a, 0x2, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x6, 0x3}, @obex={0x5, 0x24, 0x15, 0x8}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x2, 0x0, 0x5, 0xfffb, 0x1}, @mdlm_detail={0x28, 0x24, 0x13, 0xa, "27356be610e644b1a258ad7475c42816ed7b09ecc414070b5662a50b353cbd1dfce668f0"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x4, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x15, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x58, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x5, 0x7, 0x6, 0x40, 0xf7}, 0x5a, &(0x7f0000000080)={0x5, 0xf, 0x5a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4064d0e2d53be17020db51af375bd080"}, @ss_container_id={0x14, 0x10, 0x4, 0x72, "6cc4564eed6b0bcd161b1e4bcb45288d"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "93e09715f731a8b901c5ecf52c2ec1c4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x5, 0xb, 0x2, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xa, 0x8, 0x7, 0x5e}]}, 0x5, [{0xed, &(0x7f00000002c0)=@string={0xed, 0x3, "69863e542bd91681fa66f4b5cd5f6dfddafdd57a308439a57a0ce76c25f968f16b6906a59a5c6503ae9e0be54e44a0ed6b7a59a338f56eb2bd2da64621f6f5cc19b611ae76c42583b47fcdca1d8011f47839c9bdb13932ebbf360cf70f2f1004d6d236e984fb2ce25aae594f328633d8b1a06c0d50c7b19f3bf717ce844b5c1ecf5070364247c5108905cfa46b29b5f05d5b01f7f81a01b0239f9fa4a9474f163b38a5c6420b8258b0a6a9b50e34c0f1dc77a8717a0876f0c790986d307be2ad112ab43ce53fae2cb3ad60a4f39b788ff9357e88bf1dd1c9f1d92318ed7ffc1f4569995021cc7866209096"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x813}}, {0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "406c956915c824d2ec7593ad94eba61ed8e9ed5d86b936f69f3bf856ddfcdd679e580450050467784a6090fca2d989f7630298a241535336e0aca30dc1b4190f218d1a9b1a14d21359a8f9c2dcfeae6e322cd0b9130f37bd5d1688eb0a8342452bc91fae54ec8f51045c6178f47580c4a10fba6c8df3304579d48ee7db647b50b1c2cf8f5b977eeb3f482c9c3cfd13bba1999332b41fcecc9d1977847b14de0bd71c6bf29537554b144527006f3a49877d0799ad40c33bdfb423"}}, {0x47, &(0x7f0000000580)=@string={0x47, 0x3, "d337528ed96a97ae5615a08ce08cd1a9da235877ce47b5e074df47b17d0ed34a6ad050e8ab04deb89b3326cf5d06605dfafe41e9cd2ad34f494f7db41871c6d783915c9c18"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x180c}}]})

2.411590816s ago: executing program 4 (id=739):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cstat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x49)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x4, 0x3}, 0x9}}, 0x18)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

2.296996727s ago: executing program 4 (id=740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
setresgid(0x0, 0x0, 0xee01)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200c3, 0x0)
ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0)
socket(0x28, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000a00000000000020ff0100000000000000000000000000010000000000000000000000000000000000f871773439126f0951860b88ffffffffffff120000000000000000000000000000001300000000000000000000000000000000000000000000009e00000000000000000000000000000000000000000000000000b30dead26af066abbb4259170000000000000000040000000000010000000000"], 0x90)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040895}, 0x20048840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)

1.600427672s ago: executing program 2 (id=741):
socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x101080)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$kcm(0x10, 0x2, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x4}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

1.466612559s ago: executing program 2 (id=742):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0x1a1, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
timer_create(0x3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a400000005000000060000000000000b000000000500000000000002010000000e00000002000004810000000b00000001000000400000000e000000ffffffff0a0000000200000000000007000000000a0000000000000c010000000e0000000000001202000000000000000700000d0000000009000000030000000700000003"], &(0x7f0000000340)=""/170, 0xc1, 0xaa, 0x0, 0x917}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @remote}}}, 0x108)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_getoverrun(0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x1, 0x0, 0x0, 0x1, 0x9, 0xe, 0x3, 0x3, 0x2, 0x6, 0xfff, 0x3ff, 0x10000, 0x0, 0x10, 0x10, {0x1, 0xfffffc00}, 0xa4, 0x5}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x109, 0x0, 0x2080, {0x10000, 0x20000, {}, 0x0, 0xa68c}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d7d84cfb4207da500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})

1.159975485s ago: executing program 0 (id=743):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b"], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYBLOB="07ec10"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0500330006000000080034"], 0x2c}}, 0x200048c0)
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r5=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4000)
setresuid(r7, r7, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f0000001600)=@acquire={0x2dc, 0x17, 0x400, 0x70bd2c, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4d6, 0xcd}, @in6=@mcast1, {@in=@multicast2, @in6=@local, 0x4e20, 0x0, 0x4e22, 0x0, 0x8, 0x0, 0x20, 0x32, r3, r5}, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x3, 0x4e20, 0xfff, 0xa, 0x20, 0x0, 0x73, 0x0, r6}, {0x970, 0x400000000000, 0x1, 0x8, 0x670, 0x2951, 0x6cedc1ee, 0x3}, {0x1, 0x4, 0x5, 0x6}, 0x6, 0x6e6bb9, 0x1, 0x1, 0x2, 0x2}, 0x8, 0xf4, 0x9, 0x70bd27}, [@srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @etimer_thresh={0x8, 0xc, 0xddf2}, @tfcpad={0x8, 0x16, 0x8}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e21, 0x3, 0x4e23, 0x2, 0xa, 0x20, 0xa0, 0x5e, 0x0, r7}, {0xc3, 0x9, 0x8, 0x8, 0x6, 0x10001, 0xbf6, 0x55b}, {0x100, 0x2d, 0x1, 0x4}, 0x4, 0x6e6bb6, 0x741c66cf3899b0ae, 0x0, 0x2, 0x3}}, @migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@remote, 0x33, 0x3, 0x0, 0x4, 0x2, 0xa}]}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@mcast2, 0x3500, 0x2, 0x0, 0x60, 0x80000000, 0x8}]}, @offload={0xc, 0x1c, {0x0, 0x3}}, @proto={0x5, 0x19, 0x3c}, @srcaddr={0x14, 0xd, @in=@loopback}, @address_filter={0x28, 0x1a, {@in6=@remote, @in6=@private2, 0xa, 0xab, 0x3}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x44800}, 0x40)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x10, 0x1, 0x0, 0xffd, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xb, 0x0, 0x301, 0xf8, 0x0, 0x0, 0x0, 0x1}})
socket(0xa, 0x80000, 0x4)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000080)=0x15)

775.69444ms ago: executing program 4 (id=744):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0a}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "864acf85d193521d18e58dc742"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xc0000000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000240)={0x1000, 0xcd5077973116b149, 0x8, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x52424752})

647.556752ms ago: executing program 1 (id=745):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000540))
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={<r3=>r0, &(0x7f0000000080)='&-\x00', 0x0, &(0x7f00000000c0)={@align=0x3, {0x1ff, 0xb87, 0x81, 0x8000000000000000}}, 0xe6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x92a})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r4=>0x0, 0x2b, 0x6, 0x2, 0xfffffff9, 0x8, @loopback, @local, 0x8000, 0x8000, 0x70, 0x6}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x22, 0x0, r3, 0x80000000, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "66c2cb1ee683f8a3183e2c7aa52c2047"})

504.796875ms ago: executing program 4 (id=746):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0xb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$rds(0x15, 0x5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000900"/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a19fe95e10e19e00399da26f", 0x0, 0x8, 0x21, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
r7 = socket(0x22, 0x3, 0x20000)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x8002)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r9, 0x0, 0x0)

320.033µs ago: executing program 2 (id=747):
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r1, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020001000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x40000)
close(0x3)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10)

0s ago: executing program 1 (id=748):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"})
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x3, 0x6, &(0x7f0000000000)="e00dd4af4f42186bd4baae700db366c82568d3f71becbb2ce598aec92258e8f83df7f1162787e67c19468728f9ae55a90be9a7c3a6383b88f5619f835ebcb4a502d682ba0b9c2ff8fb9592996984b46d7c8de1d0293fbdcb71bcaabb673d9c8b9ce12d90397a0d7e684392dd01f5f5aa76aae56014bea7e8e8f89b91293edc40c175a33e3e470b58d85f9c726b23b0941cb7552cbd4d842ff6d61cbf7791f9f5783cc892cb298872747165e0992e0217357f19b9e3d2471627644e5be2e5c9f33279e6e8e95bd9c199e328884c0032a3671ec8"})

kernel console output (not intermixed with test programs):

80 R15: 00007ffc49773168
[  135.992156][ T6922]  </TASK>
[  136.236357][    T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  136.261594][    T9] usb 2-1: USB disconnect, device number 3
[  136.276136][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  136.287922][    T9] kobil_sct 2-1:2.45: device disconnected
[  136.526199][   T30] audit: type=1400 audit(1779733643.355:479): avc:  denied  { accept } for  pid=6909 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  136.529726][ T6925] xt_nfacct: accounting object `syz1' does not exist
[  136.582598][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.591546][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.221668][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  137.281594][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  137.354538][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[  137.391899][    T9] usb 5-1: Using ep0 maxpacket: 8
[  137.861094][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  137.862383][ T5725] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  137.881666][    T9] usb 5-1: config 8 has an invalid interface number: 24 but max is 0
[  137.897868][ T5725] imon 1-1:0.0: unable to initialize intf0, err -19
[  137.900150][    T9] usb 5-1: config 8 has no interface number 0
[  137.905145][ T5725] imon:imon_probe: failed to initialize context!
[  137.919257][  T821] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  137.933822][ T5725] imon 1-1:0.0: unable to register, err -19
[  137.937556][    T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024
[  137.955395][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short
[  137.970533][    T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  137.971259][ T5725] usb 1-1: USB disconnect, device number 4
[  137.995584][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.003060][    T9] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  138.016386][ T5718] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  138.061121][ T5718] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.065937][    T9] usb 5-1: config 8 interface 24 has no altsetting 0
[  138.144879][ T5718] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  138.144976][    T9] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  138.154323][  T821] usb 4-1: Using ep0 maxpacket: 8
[  138.168438][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.189281][  T821] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  138.247434][ T5718] usb 2-1: Product: syz
[  138.319168][ T6939] openvswitch: netlink: Key type 233 is out of range max 32
[  138.326613][ T5718] usb 2-1: Manufacturer: syz
[  138.326687][ T5718] usb 2-1: SerialNumber: syz
[  138.331118][  T821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.331194][  T821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.331270][  T821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.331356][  T821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.331462][  T821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  138.363649][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.380513][  T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.554291][    T9] usb 5-1: Product: syz
[  138.567106][    T9] usb 5-1: Manufacturer: syz
[  138.582308][    T9] usb 5-1: SerialNumber: syz
[  138.609471][ T6928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  138.802355][ T5718] usb 2-1: USB disconnect, device number 4
[  138.902451][    T9] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  138.945648][    T9] vmk80xx 5-1:8.24: probe with driver vmk80xx failed with error -22
[  138.964653][    T9] usb 5-1: USB disconnect, device number 11
[  138.983849][   T30] audit: type=1400 audit(1779733645.815:480): avc:  denied  { mounton } for  pid=6949 comm="syz.0.282" path="/57/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  139.096089][   T30] audit: type=1400 audit(1779733645.925:481): avc:  denied  { write } for  pid=6949 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  139.267253][ T6955] syz_tun: entered allmulticast mode
[  139.277418][   T30] audit: type=1400 audit(1779733646.095:482): avc:  denied  { create } for  pid=6954 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  139.299331][ T6954] syz_tun: left allmulticast mode
[  139.325604][   T30] audit: type=1400 audit(1779733646.095:483): avc:  denied  { write } for  pid=6954 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  139.354015][ T6956] usbtmc 4-1:16.0: simple usb_control_msg returned 0
[  139.369789][   T30] audit: type=1400 audit(1779733646.105:484): avc:  denied  { ioctl } for  pid=6954 comm="syz.1.283" path="socket:[14907]" dev="sockfs" ino=14907 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  139.455651][   T30] audit: type=1400 audit(1779733646.175:485): avc:  denied  { write } for  pid=6931 comm="syz.3.277" name="usbtmc0" dev="devtmpfs" ino=2870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  139.620452][ T5725] usb 4-1: USB disconnect, device number 5
[  139.701786][ T5346] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  139.901637][ T5346] usb 3-1: Using ep0 maxpacket: 16
[  139.908480][ T5346] usb 3-1: config index 0 descriptor too short (expected 52, got 36)
[  139.917054][ T5346] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  139.926748][ T5346] usb 3-1: config 0 has no interface number 0
[  139.933016][ T5346] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  139.943049][ T5346] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  139.954756][ T5346] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  139.963915][ T5346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.972130][ T5346] usb 3-1: Product: syz
[  139.976318][ T5346] usb 3-1: Manufacturer: syz
[  139.980883][ T5346] usb 3-1: SerialNumber: syz
[  139.987287][ T5346] usb 3-1: config 0 descriptor??
[  139.995058][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.005357][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.101626][ T5718] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  140.215411][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.222833][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.251609][ T5718] usb 5-1: Using ep0 maxpacket: 32
[  140.258132][ T5718] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  140.266200][ T5718] usb 5-1: config 0 has no interface number 0
[  140.282565][ T5718] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.302845][ T5718] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.314180][ T5718] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  140.324594][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.434073][ T5718] usb 5-1: config 0 descriptor??
[  140.463173][   T30] audit: type=1400 audit(1779733647.295:486): avc:  denied  { create } for  pid=6957 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  140.632044][   T30] audit: type=1400 audit(1779733647.445:487): avc:  denied  { create } for  pid=6967 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  141.480980][ T5346] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  141.487007][   T30] audit: type=1400 audit(1779733647.445:488): avc:  denied  { write } for  pid=6967 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  141.814351][ T5346] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  141.827121][ T5346] asix 3-1:0.251: probe with driver asix failed with error -71
[  141.859750][ T5346] usb 3-1: USB disconnect, device number 7
[  142.023236][ T5718] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0001/input/input8
[  142.368860][ T6970] infiniband syz1: set active
[  142.373729][ T6970] infiniband syz1: added veth1_vlan
[  142.381761][ T6970] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  142.383547][ T6970] infiniband syz1: Couldn't open port 1
[  142.397759][ T6970] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  142.413679][ T6970] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  142.430831][ T6970] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  142.451224][ T6974] syz.1.288 (6974): drop_caches: 2
[  142.468554][ T6970] RDS/IB: syz1: added
[  142.473130][ T6970] smc: adding ib device syz1 with port count 1
[  142.479447][ T6970] smc:    ib device syz1 port 1 has no pnetid
[  143.040464][ T5718] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1
[  143.734148][ T5718] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  143.789628][ T6996] FAULT_INJECTION: forcing a failure.
[  143.789628][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.811809][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.2.293 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  143.811838][ T6996] Tainted: [L]=SOFTLOCKUP
[  143.811843][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  143.811853][ T6996] Call Trace:
[  143.811858][ T6996]  <TASK>
[  143.811865][ T6996]  dump_stack_lvl+0x100/0x190
[  143.811890][ T6996]  should_fail_ex.cold+0x5/0xa
[  143.811912][ T6996]  _copy_from_user+0x2e/0xd0
[  143.811938][ T6996]  move_addr_to_kernel+0x65/0x170
[  143.811964][ T6996]  __sys_sendto+0x1c9/0x4b0
[  143.811982][ T6996]  ? __pfx___sys_sendto+0x10/0x10
[  143.812016][ T6996]  ? ksys_write+0x1ac/0x250
[  143.812036][ T6996]  ? __pfx_ksys_write+0x10/0x10
[  143.812058][ T6996]  __x64_sys_sendto+0xe0/0x1c0
[  143.812073][ T6996]  ? do_syscall_64+0x90/0x860
[  143.812098][ T6996]  ? lockdep_hardirqs_on+0x78/0x100
[  143.812124][ T6996]  do_syscall_64+0x10b/0x860
[  143.812147][ T6996]  ? clear_bhb_loop+0x40/0x90
[  143.812168][ T6996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.812184][ T6996] RIP: 0033:0x7f458d19ce59
[  143.812200][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.812215][ T6996] RSP: 002b:00007f458e058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  143.812233][ T6996] RAX: ffffffffffffffda RBX: 00007f458d415fa0 RCX: 00007f458d19ce59
[  143.812243][ T6996] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  143.812253][ T6996] RBP: 00007f458e058090 R08: 000020000005ffe4 R09: 000000000000001c
[  143.812271][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.812279][ T6996] R13: 00007f458d416038 R14: 00007f458d415fa0 R15: 00007ffce829c638
[  143.812302][ T6996]  </TASK>
[  144.089008][   T30] audit: type=1400 audit(1779733650.915:489): avc:  denied  { connect } for  pid=7003 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  144.377592][ T7002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7002 comm=syz.0.294
[  144.391890][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  144.544072][   T24] usb 3-1: device descriptor read/64, error -71
[  144.578006][   T30] audit: type=1400 audit(1779733651.405:490): avc:  denied  { read } for  pid=7009 comm="syz.4.298" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  144.643121][   T30] audit: type=1400 audit(1779733651.405:491): avc:  denied  { open } for  pid=7009 comm="syz.4.298" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  144.706076][   T30] audit: type=1400 audit(1779733651.445:492): avc:  denied  { ioctl } for  pid=7009 comm="syz.4.298" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  144.784485][   T30] audit: type=1400 audit(1779733651.465:493): avc:  denied  { write } for  pid=7009 comm="syz.4.298" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  144.811630][ T5346] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  144.830716][ T7005] dlm: non-version read from control device 145
[  144.837090][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  144.973188][ T5346] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.984603][ T5346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  144.991591][   T24] usb 3-1: device descriptor read/64, error -71
[  145.001109][ T5346] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  145.014644][ T5346] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  145.025505][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.046152][ T5346] hub 1-1:1.0: bad descriptor, ignoring hub
[  145.052648][ T5346] hub 1-1:1.0: probe with driver hub failed with error -5
[  145.060826][ T5346] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  145.133429][   T24] usb usb3-port1: attempt power cycle
[  145.268259][  T821] usb 5-1: USB disconnect, device number 12
[  145.563349][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  145.668835][   T24] usb 3-1: device descriptor read/8, error -71
[  145.683279][ T7010] macsec1: entered promiscuous mode
[  145.701853][ T7010] bridge0: entered promiscuous mode
[  145.863929][ T5346] usb 1-1: USB disconnect, device number 5
[  145.951859][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  145.983429][   T24] usb 3-1: device descriptor read/8, error -71
[  146.129695][   T24] usb usb3-port1: unable to enumerate USB device
[  146.296592][ T7027] fuse: Bad value for 'user_id'
[  146.322361][ T7027] fuse: Bad value for 'user_id'
[  146.857393][ T7033] syz_tun: entered allmulticast mode
[  146.906428][ T7027] capability: warning: `syz.1.301' uses deprecated v2 capabilities in a way that may be insecure
[  147.546035][ T7028] syz_tun: left allmulticast mode
[  147.565874][ T7027] capability: warning: `syz.1.301' uses 32-bit capabilities (legacy support in use)
[  147.606510][   T30] audit: type=1400 audit(1779733654.435:494): avc:  denied  { ioctl } for  pid=7026 comm="syz.1.301" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  147.651032][ T7040] netlink: 'syz.0.305': attribute type 13 has an invalid length.
[  147.695793][ T7040] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  147.732411][ T7040] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[  147.754062][ T7040] netlink: 280 bytes leftover after parsing attributes in process `syz.0.305'.
[  147.805133][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[  148.021662][  T804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.116505][ T7045] xt_time: invalid argument - start or stop time greater than 23:59:59
[  148.192678][  T804] usb 4-1: Using ep0 maxpacket: 8
[  148.214935][  T804] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  148.245526][  T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.279899][  T804] usb 4-1: config 0 has no interface number 0
[  148.292754][  T804] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  148.316679][  T804] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.349334][  T804] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  148.369557][  T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.397727][  T804] usb 4-1: config 0 descriptor??
[  148.420853][  T804] ldusb 4-1:0.55: Interrupt in endpoint not found
[  148.441591][  T821] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  148.627933][  T821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.641756][  T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.660418][  T821] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  148.664404][   T30] audit: type=1400 audit(1779733655.495:495): avc:  denied  { ioctl } for  pid=7041 comm="syz.3.304" path="socket:[15190]" dev="sockfs" ino=15190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  148.672578][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.702538][  T821] usb 1-1: Product: syz
[  148.706726][  T821] usb 1-1: Manufacturer: syz
[  148.711359][  T821] usb 1-1: SerialNumber: syz
[  149.008648][   T24] usb 4-1: USB disconnect, device number 6
[  149.247184][   T30] audit: type=1400 audit(1779733656.045:496): avc:  denied  { name_bind } for  pid=7052 comm="syz.0.308" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  149.285605][ T7062] syz_tun: entered allmulticast mode
[  150.091447][ T7060] syz_tun: left allmulticast mode
[  151.133666][   T30] audit: type=1400 audit(1779733657.955:497): avc:  denied  { create } for  pid=7074 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  151.135730][ T7076] Cannot find map_set index 135 as target
[  151.382496][ T7083] trusted_key: syz.3.314 sent an empty control message without MSG_MORE.
[  152.174180][  T821] usb 1-1: USB disconnect, device number 6
[  152.227750][   T30] audit: type=1400 audit(1779733659.055:498): avc:  denied  { read write } for  pid=7094 comm="syz.1.319" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  152.368557][ T7097] openvswitch: netlink: Key type 233 is out of range max 32
[  152.511851][   T30] audit: type=1400 audit(1779733659.085:499): avc:  denied  { open } for  pid=7094 comm="syz.1.319" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  152.737339][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.377899][ T7119] syzkaller0: entered promiscuous mode
[  153.389164][ T7119] syzkaller0: entered allmulticast mode
[  153.610407][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'.
[  153.646952][ T7126] openvswitch: netlink: Key 4 has unexpected len 4 expected 12
[  153.728863][   T30] audit: type=1400 audit(1779733660.555:500): avc:  denied  { create } for  pid=7127 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  154.299749][   T30] audit: type=1400 audit(1779733660.785:501): avc:  denied  { setopt } for  pid=7127 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  155.596802][ T7108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  155.961600][  T804] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  156.303644][  T804] usb 1-1: Using ep0 maxpacket: 8
[  156.349141][  T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.394812][  T804] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  156.430925][  T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.445232][  T804] usb 1-1: config 0 descriptor??
[  156.500895][  T804] gspca_main: vc032x-2.14.0 probing 046d:0892
[  156.663088][ T7148] syz.4.331 (7148): drop_caches: 2
[  156.761560][ T5620] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.934758][ T5620] usb 3-1: config 27 has an invalid descriptor of length 205, skipping remainder of the config
[  156.934798][ T5620] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  156.934816][ T5620] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.934837][ T5620] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.934855][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.976614][ T5620] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  156.979505][ T5620] usb 3-1: invalid MIDI out EP 0
[  157.775112][   T30] audit: type=1400 audit(1779733664.585:502): avc:  denied  { bind } for  pid=7138 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  158.127358][  T804] gspca_vc032x: reg_r err -110
[  158.137195][  T804] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  158.274044][ T7158] openvswitch: netlink: Key type 233 is out of range max 32
[  158.542855][ T5620] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  158.648790][ T7173] syz_tun: entered allmulticast mode
[  158.697442][ T5620] usb 3-1: USB disconnect, device number 12
[  159.121700][   T30] audit: type=1400 audit(1779733665.695:503): avc:  denied  { mounton } for  pid=7176 comm="syz.3.336" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  159.299818][  T804] usb 1-1: USB disconnect, device number 7
[  159.767412][   T30] audit: type=1400 audit(1779733666.595:504): avc:  denied  { write } for  pid=7184 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  160.107882][ T7191] netlink: 136 bytes leftover after parsing attributes in process `syz.3.338'.
[  160.145022][ T7191] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  160.567558][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'.
[  161.781304][  T804] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  161.902203][  T804] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  162.074970][ T7222] fido_id[7222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  162.181555][ T7229] FAULT_INJECTION: forcing a failure.
[  162.181555][ T7229] name failslab, interval 1, probability 0, space 0, times 0
[  162.196887][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.1.348 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  162.196917][ T7229] Tainted: [L]=SOFTLOCKUP
[  162.196923][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  162.196932][ T7229] Call Trace:
[  162.196937][ T7229]  <TASK>
[  162.196943][ T7229]  dump_stack_lvl+0x100/0x190
[  162.196969][ T7229]  should_fail_ex.cold+0x5/0xa
[  162.196990][ T7229]  ? tomoyo_realpath_from_path+0xb6/0x690
[  162.197015][ T7229]  should_failslab+0xc2/0x120
[  162.197034][ T7229]  __kmalloc_noprof+0xe0/0x850
[  162.197058][ T7229]  ? kfree+0x1dd/0x6c0
[  162.197083][ T7229]  tomoyo_realpath_from_path+0xb6/0x690
[  162.197114][ T7229]  tomoyo_path_number_perm+0x23c/0x580
[  162.197133][ T7229]  ? tomoyo_path_number_perm+0x22e/0x580
[  162.197154][ T7229]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  162.197198][ T7229]  ? find_held_lock+0x2b/0x80
[  162.197215][ T7229]  ? __fget_files+0x215/0x3d0
[  162.197236][ T7229]  ? hook_file_ioctl_common+0x149/0x410
[  162.197252][ T7229]  ? __fget_files+0x215/0x3d0
[  162.197278][ T7229]  ? __fget_files+0x21f/0x3d0
[  162.197304][ T7229]  security_file_ioctl+0xd3/0x230
[  162.197329][ T7229]  __x64_sys_ioctl+0xb7/0x210
[  162.197349][ T7229]  do_syscall_64+0x10b/0x860
[  162.197373][ T7229]  ? clear_bhb_loop+0x40/0x90
[  162.197396][ T7229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.197413][ T7229] RIP: 0033:0x7fa5e9b9ce59
[  162.197428][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.197444][ T7229] RSP: 002b:00007fa5ea9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  162.197462][ T7229] RAX: ffffffffffffffda RBX: 00007fa5e9e15fa0 RCX: 00007fa5e9b9ce59
[  162.197473][ T7229] RDX: 0000200000000240 RSI: 000000000000541b RDI: 0000000000000004
[  162.197484][ T7229] RBP: 00007fa5ea9bf090 R08: 0000000000000000 R09: 0000000000000000
[  162.197495][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.197504][ T7229] R13: 00007fa5e9e16038 R14: 00007fa5e9e15fa0 R15: 00007ffe25565058
[  162.197529][ T7229]  </TASK>
[  162.197587][ T7229] ERROR: Out of memory at tomoyo_realpath_from_path.
[  162.564018][   T30] audit: type=1400 audit(1779733669.395:505): avc:  denied  { remount } for  pid=7232 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  162.638450][   T30] audit: type=1400 audit(1779733669.465:506): avc:  denied  { write } for  pid=7232 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  162.881567][  T821] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  163.486260][   T30] audit: type=1400 audit(1779733669.985:507): avc:  denied  { read } for  pid=7239 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  163.564293][   T30] audit: type=1400 audit(1779733670.385:508): avc:  denied  { write } for  pid=7247 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  163.586794][  T821] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  163.602335][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.610407][  T821] usb 2-1: Product: syz
[  163.619433][  T821] usb 2-1: Manufacturer: syz
[  163.641760][  T821] usb 2-1: SerialNumber: syz
[  163.990176][   T30] audit: type=1400 audit(1779733670.765:509): avc:  denied  { read write } for  pid=7250 comm="syz.4.357" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  164.819181][   T30] audit: type=1400 audit(1779733670.765:510): avc:  denied  { open } for  pid=7250 comm="syz.4.357" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  165.030814][ T7264] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.047381][ T7265] gfs2: error -5 reading superblock
[  165.065364][ T7262] syz.0.358 uses obsolete (PF_INET,SOCK_PACKET)
[  165.355483][   T30] audit: type=1400 audit(1779733670.765:511): avc:  denied  { ioctl } for  pid=7250 comm="syz.4.357" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  165.849221][   T30] audit: type=1400 audit(1779733670.945:512): avc:  denied  { bind } for  pid=7235 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.885921][   T30] audit: type=1400 audit(1779733670.945:513): avc:  denied  { setopt } for  pid=7235 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.908388][   T30] audit: type=1400 audit(1779733671.845:514): avc:  denied  { unlink } for  pid=7261 comm="syz.0.358" name="#1" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  165.962471][  T821] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  165.993164][  T821] usb 2-1: USB disconnect, device number 5
[  166.538575][ T7287] xt_time: invalid argument - start or stop time greater than 23:59:59
[  167.264868][ T7304] openvswitch: netlink: Key type 233 is out of range max 32
[  167.999252][   T30] audit: type=1400 audit(1779733674.825:515): avc:  denied  { create } for  pid=7312 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.509828][ T7314] FAULT_INJECTION: forcing a failure.
[  168.509828][ T7314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.523078][ T7314] CPU: 0 UID: 0 PID: 7314 Comm: syz.3.373 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.523104][ T7314] Tainted: [L]=SOFTLOCKUP
[  168.523108][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  168.523114][ T7314] Call Trace:
[  168.523119][ T7314]  <TASK>
[  168.523123][ T7314]  dump_stack_lvl+0x100/0x190
[  168.523141][ T7314]  should_fail_ex.cold+0x5/0xa
[  168.523156][ T7314]  _copy_from_user+0x2e/0xd0
[  168.523174][ T7314]  copy_msghdr_from_user+0x9f/0x4f0
[  168.523190][ T7314]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  168.523208][ T7314]  ? __schedule+0x325e/0x67a0
[  168.523222][ T7314]  ? __schedule+0x325e/0x67a0
[  168.523239][ T7314]  ___sys_sendmsg+0x106/0x1e0
[  168.523260][ T7314]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.523282][ T7314]  ? find_held_lock+0x2b/0x80
[  168.523301][ T7314]  __sys_sendmmsg+0x205/0x430
[  168.523315][ T7314]  ? __pfx___sys_sendmmsg+0x10/0x10
[  168.523331][ T7314]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  168.523356][ T7314]  ? fput+0x79/0x100
[  168.523370][ T7314]  ? ksys_write+0x1ac/0x250
[  168.523382][ T7314]  ? __pfx_ksys_write+0x10/0x10
[  168.523396][ T7314]  __x64_sys_sendmmsg+0x9c/0x100
[  168.523408][ T7314]  ? lockdep_hardirqs_on+0x78/0x100
[  168.523423][ T7314]  do_syscall_64+0x10b/0x860
[  168.523439][ T7314]  ? clear_bhb_loop+0x40/0x90
[  168.523451][ T7314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.523462][ T7314] RIP: 0033:0x7f7b8059ce59
[  168.523471][ T7314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.523482][ T7314] RSP: 002b:00007f7b814ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  168.523492][ T7314] RAX: ffffffffffffffda RBX: 00007f7b80816090 RCX: 00007f7b8059ce59
[  168.523499][ T7314] RDX: 0000000000000001 RSI: 0000200000003e40 RDI: 0000000000000003
[  168.523505][ T7314] RBP: 00007f7b814ad090 R08: 0000000000000000 R09: 0000000000000000
[  168.523511][ T7314] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  168.523517][ T7314] R13: 00007f7b80816128 R14: 00007f7b80816090 R15: 00007fff2656f1a8
[  168.523530][ T7314]  </TASK>
[  169.126477][   T30] audit: type=1400 audit(1779733675.325:516): avc:  denied  { ioctl } for  pid=7312 comm="syz.3.373" path="socket:[16059]" dev="sockfs" ino=16059 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.229357][   T30] audit: type=1400 audit(1779733675.325:517): avc:  denied  { bind } for  pid=7312 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.290257][   T30] audit: type=1400 audit(1779733675.335:518): avc:  denied  { connect } for  pid=7312 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.840711][ T7322] openvswitch: netlink: Key type 233 is out of range max 32
[  171.071579][  T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  171.264799][  T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.302199][  T804] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  171.320132][  T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.373959][  T804] usb 1-1: config 0 descriptor??
[  171.384141][  T804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  171.432625][ T7354] tmpfs: Bad value for 'mpol'
[  172.480795][ T5718] usb 1-1: USB disconnect, device number 8
[  173.291009][ T7381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.390'.
[  174.443208][  T804] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  175.024115][  T804] usb 1-1: Using ep0 maxpacket: 16
[  175.154589][  T804] usb 1-1: unable to get BOS descriptor or descriptor too short
[  175.221858][ T7403] xt_time: invalid argument - start or stop time greater than 23:59:59
[  175.253495][  T804] usb 1-1: config 9 has an invalid descriptor of length 90, skipping remainder of the config
[  175.289777][  T804] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  175.319104][  T804] usb 1-1: string descriptor 0 read error: -22
[  175.332643][  T804] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  175.355406][  T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.867447][ T7405] openvswitch: netlink: Key type 233 is out of range max 32
[  175.934097][ T7414] netlink: 76 bytes leftover after parsing attributes in process `syz.3.398'.
[  176.952040][  T821] usb 1-1: USB disconnect, device number 9
[  176.975851][   T30] audit: type=1400 audit(1779733683.795:519): avc:  denied  { setopt } for  pid=7413 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  177.015802][ T7415] netlink: 27 bytes leftover after parsing attributes in process `syz.1.399'.
[  177.357074][   T30] audit: type=1400 audit(1779733684.115:520): avc:  denied  { ioctl } for  pid=7416 comm="syz.3.400" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  177.580593][ T7429] netlink: 220 bytes leftover after parsing attributes in process `syz.1.403'.
[  177.624162][ T7429] NCSI netlink: No device for ifindex 1674659768
[  178.098153][ T7440] misc userio: Invalid payload size
[  178.156450][   T30] audit: type=1400 audit(1779733684.925:521): avc:  denied  { read } for  pid=7437 comm="syz.0.406" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  178.669602][   T30] audit: type=1400 audit(1779733684.925:522): avc:  denied  { open } for  pid=7437 comm="syz.0.406" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  178.925952][   T30] audit: type=1400 audit(1779733684.935:523): avc:  denied  { ioctl } for  pid=7437 comm="syz.0.406" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  180.118216][ T7463] openvswitch: netlink: Key type 233 is out of range max 32
[  180.336115][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[  180.368188][ T7464] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  180.633423][ T5618] Bluetooth: hci4: command 0x0406 tx timeout
[  180.634765][ T5624] Bluetooth: hci3: command 0x0406 tx timeout
[  180.639481][ T5618] Bluetooth: hci2: command 0x0406 tx timeout
[  180.652456][ T5627] Bluetooth: hci0: command 0x0406 tx timeout
[  180.711581][ T4931] Bluetooth: hci1: command 0x0406 tx timeout
[  180.903450][   T30] audit: type=1400 audit(1779733687.725:524): avc:  denied  { create } for  pid=7467 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  181.006460][   T30] audit: type=1400 audit(1779733687.725:525): avc:  denied  { ioctl } for  pid=7467 comm="syz.3.414" path="socket:[17444]" dev="sockfs" ino=17444 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  181.055207][   T30] audit: type=1400 audit(1779733687.785:526): avc:  denied  { read append } for  pid=7476 comm="syz.0.415" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.113391][   T30] audit: type=1400 audit(1779733687.785:527): avc:  denied  { open } for  pid=7476 comm="syz.0.415" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.410790][ T7492] hugetlbfs: syz.0.415 (7492): Using mlock ulimits for SHM_HUGETLB is obsolete
[  181.802988][ T7477] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  181.839371][ T7477] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  181.950877][   T30] audit: type=1400 audit(1779733688.775:528): avc:  denied  { call } for  pid=7495 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  181.987821][ T7477] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  182.026331][ T7477] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  182.035324][   T30] audit: type=1400 audit(1779733688.775:529): avc:  denied  { transfer } for  pid=7495 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  182.097091][   T30] audit: type=1400 audit(1779733688.895:530): avc:  denied  { setopt } for  pid=7497 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  182.119325][ T7477] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.141109][ T7477] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  182.289509][   T30] audit: type=1400 audit(1779733689.115:531): avc:  denied  { bind } for  pid=7497 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  182.321946][   T30] audit: type=1400 audit(1779733689.135:532): avc:  denied  { write } for  pid=7497 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  182.746394][ T7477] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  182.761910][ T7477] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  182.810915][ T7477] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  182.841101][ T7477] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  183.034142][   T30] audit: type=1400 audit(1779733689.815:533): avc:  denied  { module_request } for  pid=7509 comm="syz.2.421" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  183.191828][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  183.408218][   T30] audit: type=1400 audit(1779733690.235:534): avc:  denied  { write } for  pid=7520 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  183.452651][ T7522] SELinux:  policydb magic number 0x80000000 does not match expected magic number 0xf97cff8c
[  183.481142][   T30] audit: type=1400 audit(1779733690.275:535): avc:  denied  { load_policy } for  pid=7520 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  183.513109][ T7522] SELinux: failed to load policy
[  183.662293][   T30] audit: type=1400 audit(1779733690.495:536): avc:  denied  { setopt } for  pid=7530 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  183.863486][   T30] audit: type=1400 audit(1779733690.695:537): avc:  denied  { ioctl } for  pid=7533 comm="syz.4.428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  183.864472][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'.
[  184.080978][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  184.102102][ T5623] Bluetooth: hci1: command 0x0406 tx timeout
[  184.166409][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  184.423005][    T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  184.560269][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.692936][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  184.821681][ T5623] Bluetooth: hci4: command 0x0406 tx timeout
[  184.856648][ T7548] FAULT_INJECTION: forcing a failure.
[  184.856648][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.883348][ T5623] Bluetooth: hci3: command 0x0406 tx timeout
[  185.016087][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.4.430 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  185.016116][ T7548] Tainted: [L]=SOFTLOCKUP
[  185.016122][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.016131][ T7548] Call Trace:
[  185.016137][ T7548]  <TASK>
[  185.016155][ T7548]  dump_stack_lvl+0x100/0x190
[  185.016183][ T7548]  should_fail_ex.cold+0x5/0xa
[  185.016208][ T7548]  _copy_to_user+0x32/0xd0
[  185.016238][ T7548]  simple_read_from_buffer+0xcb/0x170
[  185.016263][ T7548]  proc_fail_nth_read+0x1af/0x230
[  185.016285][ T7548]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  185.016306][ T7548]  ? vfs_read+0x15d/0xb30
[  185.016326][ T7548]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  185.016345][ T7548]  vfs_read+0x1e4/0xb30
[  185.016368][ T7548]  ? __pfx_vfs_read+0x10/0x10
[  185.016386][ T7548]  ? __fget_files+0x215/0x3d0
[  185.016414][ T7548]  ? __fget_files+0x21f/0x3d0
[  185.016443][ T7548]  ksys_read+0x12a/0x250
[  185.016462][ T7548]  ? __pfx_ksys_read+0x10/0x10
[  185.016479][ T7548]  ? exit_to_user_mode_loop+0xe2/0x4f0
[  185.016506][ T7548]  ? rcu_is_watching+0x12/0xc0
[  185.016535][ T7548]  do_syscall_64+0x10b/0x860
[  185.016561][ T7548]  ? clear_bhb_loop+0x40/0x90
[  185.016583][ T7548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.016601][ T7548] RIP: 0033:0x7fa42815d68e
[  185.016616][ T7548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  185.016633][ T7548] RSP: 002b:00007fa42908cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  185.016653][ T7548] RAX: ffffffffffffffda RBX: 00007fa42908d6c0 RCX: 00007fa42815d68e
[  185.016664][ T7548] RDX: 000000000000000f RSI: 00007fa42908d0a0 RDI: 0000000000000003
[  185.016674][ T7548] RBP: 00007fa42908d090 R08: 0000000000000000 R09: 0000000000000000
[  185.016684][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.016694][ T7548] R13: 00007fa428416128 R14: 00007fa428416090 R15: 00007ffc49773168
[  185.016719][ T7548]  </TASK>
[  185.021446][    T9] usb 4-1: config 0 descriptor??
[  185.296201][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  185.692633][ T7550] openvswitch: netlink: Key type 233 is out of range max 32
[  185.951604][  T821] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  186.090909][ T7566] openvswitch: netlink: Key type 233 is out of range max 32
[  186.231627][ T5623] Bluetooth: hci1: command 0x0406 tx timeout
[  186.236198][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  186.299534][  T821] usb 1-1: unable to get BOS descriptor or descriptor too short
[  186.575126][  T821] usb 1-1: unable to read config index 0 descriptor/start: -61
[  186.623478][  T821] usb 1-1: can't read configurations, error -61
[  186.787186][ T7567] syz.2.435 (7567): drop_caches: 2
[  186.824327][  T821] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  186.871753][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  186.961619][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  187.209598][ T7582] syz.1.438 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  187.224995][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'.
[  187.235707][ T7582] ubi31: attaching mtd0
[  187.243502][ T7582] ubi31: scanning is finished
[  187.248250][ T7582] ubi31: empty MTD device detected
[  187.634184][   T30] audit: type=1400 audit(1779733694.195:538): avc:  denied  { bind } for  pid=7578 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  187.688899][ T7582] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  187.696541][ T7582] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  187.703859][ T7582] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  187.710878][ T7582] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  187.719558][ T7582] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  187.726444][ T7582] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  187.734662][ T7582] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2473527435
[  187.744839][ T7582] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  187.755944][ T7584] ubi31: background thread "ubi_bgt31d" started, PID 7584
[  188.105605][   T30] audit: type=1326 audit(1779733694.935:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  188.194556][   T30] audit: type=1326 audit(1779733694.935:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  188.308169][   T30] audit: type=1326 audit(1779733694.935:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  188.490722][   T30] audit: type=1326 audit(1779733694.935:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  188.720696][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  188.755002][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  188.892048][   T30] audit: type=1326 audit(1779733694.985:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  189.017929][   T30] audit: type=1400 audit(1779733694.995:544): avc:  denied  { accept } for  pid=7585 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  189.117289][   T30] audit: type=1326 audit(1779733695.005:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  189.245029][   T30] audit: type=1326 audit(1779733695.005:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  189.364781][   T30] audit: type=1326 audit(1779733695.005:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.2.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7ffc0000
[  189.394646][ T7601] ipvlan1: Caught tx_queue_len zero misconfig
[  189.475133][ T7602] openvswitch: netlink: Key type 233 is out of range max 32
[  189.658337][    T9] usb 4-1: Cannot read MAC address
[  189.682788][    T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  189.862869][    T9] usb 4-1: USB disconnect, device number 7
[  189.960997][ T7609] misc userio: Invalid payload size
[  190.914885][   T50] Bluetooth: hci4: unexpected event for opcode 0x0000
[  191.638857][ T7632] xt_hashlimit: size too large, truncated to 1048576
[  192.797978][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  192.797988][   T30] audit: type=1400 audit(2000000000.800:588): avc:  denied  { ioctl } for  pid=7647 comm="syz.2.456" path="socket:[18727]" dev="sockfs" ino=18727 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  193.093430][ T7656] openvswitch: netlink: Key type 233 is out of range max 32
[  193.328993][ T7657] netlink: 'syz.1.458': attribute type 10 has an invalid length.
[  193.386612][ T7657] team0: Port device dummy0 added
[  193.541785][ T7659] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  194.953834][   T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  194.962700][   T50] Bluetooth: hci4: Injecting HCI hardware error event
[  194.973727][   T50] Bluetooth: hci4: hardware error 0x00
[  195.426160][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'.
[  196.620421][ T7705] openvswitch: netlink: Key type 233 is out of range max 32
[  196.791052][   T30] audit: type=1400 audit(2000000004.790:589): avc:  denied  { write } for  pid=7700 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  197.037673][   T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  197.171379][ T5346] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  197.278537][ T7713] Scaler: =================  START STATUS  =================
[  197.287800][ T7713] Scaler: ==================  END STATUS  ==================
[  197.345711][ T5346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.369391][ T5346] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  197.383614][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.503718][ T5346] usb 5-1: Product: syz
[  197.991863][ T5346] usb 5-1: Manufacturer: syz
[  197.996752][ T5346] usb 5-1: SerialNumber: syz
[  198.375444][ T7727] tmpfs: Bad value for 'mpol'
[  198.684274][ T5346] usb 5-1: config 0 descriptor??
[  198.700955][ T7734] bridge_slave_0: left allmulticast mode
[  198.700983][ T7734] bridge_slave_0: left promiscuous mode
[  198.704638][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.705373][ T5346] powermate 5-1:0.0: probe with driver powermate failed with error -22
[  199.114181][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.170349][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.581543][ T5346] usb 5-1: USB disconnect, device number 13
[  200.170974][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[  200.694450][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'.
[  201.216038][ T7764] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[  201.360715][ T7765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.483'.
[  201.478988][ T7767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=7767 comm=syz.4.485
[  201.587099][   T30] audit: type=1400 audit(2000000009.590:590): avc:  denied  { execute } for  pid=7766 comm="syz.4.485" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  201.749018][ T7771] FAULT_INJECTION: forcing a failure.
[  201.749018][ T7771] name failslab, interval 1, probability 0, space 0, times 0
[  201.762102][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.484 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  201.762131][ T7771] Tainted: [L]=SOFTLOCKUP
[  201.762136][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  201.762146][ T7771] Call Trace:
[  201.762152][ T7771]  <TASK>
[  201.762158][ T7771]  dump_stack_lvl+0x100/0x190
[  201.762183][ T7771]  should_fail_ex.cold+0x5/0xa
[  201.762206][ T7771]  ? fib_trie_table+0xf3/0x2a0
[  201.762227][ T7771]  should_failslab+0xc2/0x120
[  201.762245][ T7771]  __kmalloc_noprof+0xe0/0x850
[  201.762277][ T7771]  fib_trie_table+0xf3/0x2a0
[  201.762300][ T7771]  fib_trie_unmerge+0xb5/0xbd0
[  201.762325][ T7771]  ? fib_newrule+0x180a/0x1ed0
[  201.762346][ T7771]  ? trace_kmalloc+0xe3/0x110
[  201.762363][ T7771]  ? __kasan_kmalloc+0xaa/0xb0
[  201.762379][ T7771]  ? __pfx_fib_trie_unmerge+0x10/0x10
[  201.762401][ T7771]  ? __pfx___mutex_lock+0x10/0x10
[  201.762427][ T7771]  fib_unmerge+0xee/0x510
[  201.762452][ T7771]  ? __pfx_fib_nl2rule.constprop.0+0x10/0x10
[  201.762479][ T7771]  fib4_rule_configure+0x383/0x10c0
[  201.762503][ T7771]  fib_newrule+0x356/0x1ed0
[  201.762529][ T7771]  ? __pfx___raw_spin_lock_init+0x1/0x10
[  201.762556][ T7771]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  201.762575][ T7771]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  201.762595][ T7771]  ? __pfx_fib_newrule+0x10/0x10
[  201.762619][ T7771]  ? avc_has_perm_noaudit+0x110/0x3b0
[  201.762659][ T7771]  ? find_held_lock+0x2b/0x80
[  201.762676][ T7771]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  201.762697][ T7771]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  201.762720][ T7771]  ? __pfx_fib_nl_newrule+0x10/0x10
[  201.762744][ T7771]  rtnetlink_rcv_msg+0x95e/0xe90
[  201.762768][ T7771]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  201.762801][ T7771]  ? __lock_acquire+0x4a5/0x2630
[  201.762829][ T7771]  netlink_rcv_skb+0x159/0x420
[  201.762855][ T7771]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  201.762878][ T7771]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.762913][ T7771]  ? netlink_deliver_tap+0x1ae/0xcc0
[  201.762943][ T7771]  netlink_unicast+0x585/0x850
[  201.762972][ T7771]  ? __pfx_netlink_unicast+0x10/0x10
[  201.763005][ T7771]  netlink_sendmsg+0x8b0/0xda0
[  201.763035][ T7771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.763059][ T7771]  ? __might_fault+0xc0/0x140
[  201.763094][ T7771]  ____sys_sendmsg+0x9e1/0xb70
[  201.763116][ T7771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.763142][ T7771]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.763179][ T7771]  ___sys_sendmsg+0x190/0x1e0
[  201.763206][ T7771]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.763263][ T7771]  __sys_sendmsg+0x170/0x220
[  201.763284][ T7771]  ? __pfx___sys_sendmsg+0x10/0x10
[  201.763314][ T7771]  ? rcu_is_watching+0x12/0xc0
[  201.763346][ T7771]  do_syscall_64+0x10b/0x860
[  201.763376][ T7771]  ? clear_bhb_loop+0x40/0x90
[  201.763397][ T7771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.763416][ T7771] RIP: 0033:0x7f458d19ce59
[  201.763432][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.763449][ T7771] RSP: 002b:00007f458e058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.763466][ T7771] RAX: ffffffffffffffda RBX: 00007f458d415fa0 RCX: 00007f458d19ce59
[  201.763478][ T7771] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  201.763488][ T7771] RBP: 00007f458e058090 R08: 0000000000000000 R09: 0000000000000000
[  201.763499][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.763508][ T7771] R13: 00007f458d416038 R14: 00007f458d415fa0 R15: 00007ffce829c638
[  201.763533][ T7771]  </TASK>
[  201.826621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  202.728399][   T30] audit: type=1400 audit(2000000010.710:591): avc:  denied  { read } for  pid=7774 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  202.883449][   T30] audit: type=1400 audit(2000000010.880:592): avc:  denied  { bind } for  pid=7781 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.981553][ T5718] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  203.262354][ T5718] usb 4-1: config 0 has an invalid interface number: 148 but max is 0
[  203.279022][   T30] audit: type=1400 audit(2000000011.280:593): avc:  denied  { create } for  pid=7793 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  203.300316][ T5718] usb 4-1: config 0 has no interface number 0
[  203.313236][ T5718] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  203.341037][ T5718] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  203.369656][ T5718] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  203.387935][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.404298][ T5718] usb 4-1: Product: syz
[  203.413281][ T5718] usb 4-1: Manufacturer: syz
[  203.427000][ T5718] usb 4-1: SerialNumber: syz
[  203.443362][ T5718] usb 4-1: config 0 descriptor??
[  203.454940][ T5718] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected
[  203.465545][ T5718] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  203.610175][   T30] audit: type=1326 audit(2000000011.610:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.2.489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458d19ce59 code=0x7fc00000
[  203.723386][   T30] audit: type=1400 audit(2000000011.720:595): avc:  denied  { read } for  pid=7798 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  204.017989][    T9] usb 4-1: USB disconnect, device number 8
[  204.084107][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  204.121677][    T9] kobil_sct 4-1:0.148: device disconnected
[  204.160745][   T30] audit: type=1400 audit(2000000012.160:596): avc:  denied  { read } for  pid=7812 comm="syz.1.495" path="socket:[19143]" dev="sockfs" ino=19143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  204.244616][ T7817] comedi comedi3: comedi_parport: I/O base address not correctly aligned
[  204.737077][ T7825] netlink: 'syz.3.498': attribute type 2 has an invalid length.
[  205.238761][   T30] audit: type=1400 audit(2000000013.220:597): avc:  denied  { mount } for  pid=7829 comm="syz.2.500" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  205.356057][   T30] audit: type=1400 audit(2000000013.230:598): avc:  denied  { mounton } for  pid=7829 comm="syz.2.500" path="/101/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  205.934646][   T30] audit: type=1400 audit(2000000013.930:599): avc:  denied  { unmount } for  pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  206.231255][ T7851] syz.2.503 (7851): drop_caches: 2
[  206.912917][ T7855] netlink: 144 bytes leftover after parsing attributes in process `syz.2.504'.
[  206.975591][ T7855] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[  207.046820][ T7857] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  207.096400][   T30] audit: type=1400 audit(2000000015.090:600): avc:  denied  { write } for  pid=7854 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  207.120557][ T7857] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  207.969168][ T7855] bond1: (slave gretap1): making interface the new active one
[  207.988190][ T7855] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  208.011373][ T7860] macvlan1: entered promiscuous mode
[  208.023961][ T7860] macvlan1: entered allmulticast mode
[  208.047088][ T7860] bond1: entered promiscuous mode
[  208.053061][ T7860] gretap1: entered promiscuous mode
[  208.069467][ T7860] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  208.096986][ T7860] bond1: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  208.155153][ T7874] FAULT_INJECTION: forcing a failure.
[  208.155153][ T7874] name failslab, interval 1, probability 0, space 0, times 0
[  208.167850][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.0.508 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  208.167868][ T7874] Tainted: [L]=SOFTLOCKUP
[  208.167872][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  208.167878][ T7874] Call Trace:
[  208.167882][ T7874]  <TASK>
[  208.167886][ T7874]  dump_stack_lvl+0x100/0x190
[  208.167903][ T7874]  should_fail_ex.cold+0x5/0xa
[  208.167918][ T7874]  ? tomoyo_encode2+0xfb/0x3c0
[  208.167934][ T7874]  should_failslab+0xc2/0x120
[  208.167946][ T7874]  __kmalloc_noprof+0xe0/0x850
[  208.167962][ T7874]  ? d_absolute_path+0x136/0x1b0
[  208.167976][ T7874]  tomoyo_encode2+0xfb/0x3c0
[  208.167993][ T7874]  tomoyo_encode+0x29/0x50
[  208.168007][ T7874]  tomoyo_realpath_from_path+0x18c/0x690
[  208.168026][ T7874]  tomoyo_path_number_perm+0x23c/0x580
[  208.168039][ T7874]  ? tomoyo_path_number_perm+0x22e/0x580
[  208.168054][ T7874]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  208.168080][ T7874]  ? find_held_lock+0x2b/0x80
[  208.168090][ T7874]  ? __fget_files+0x215/0x3d0
[  208.168103][ T7874]  ? hook_file_ioctl_common+0x149/0x410
[  208.168113][ T7874]  ? __fget_files+0x215/0x3d0
[  208.168128][ T7874]  ? __fget_files+0x21f/0x3d0
[  208.168144][ T7874]  security_file_ioctl+0xd3/0x230
[  208.168159][ T7874]  __x64_sys_ioctl+0xb7/0x210
[  208.168172][ T7874]  do_syscall_64+0x10b/0x860
[  208.168189][ T7874]  ? clear_bhb_loop+0x40/0x90
[  208.168202][ T7874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.168213][ T7874] RIP: 0033:0x7f19e839ce59
[  208.168222][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.168233][ T7874] RSP: 002b:00007f19e932a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.168243][ T7874] RAX: ffffffffffffffda RBX: 00007f19e8615fa0 RCX: 00007f19e839ce59
[  208.168252][ T7874] RDX: 0000200000000140 RSI: 0000000040103d0b RDI: 0000000000000003
[  208.168259][ T7874] RBP: 00007f19e932a090 R08: 0000000000000000 R09: 0000000000000000
[  208.168265][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.168271][ T7874] R13: 00007f19e8616038 R14: 00007f19e8615fa0 R15: 00007ffd4225a778
[  208.168284][ T7874]  </TASK>
[  208.168294][ T7874] ERROR: Out of memory at tomoyo_realpath_from_path.
[  208.394471][ T7860] bond1: left promiscuous mode
[  208.402404][ T7860] gretap1: left promiscuous mode
[  208.741008][   T30] audit: type=1400 audit(2000000016.730:601): avc:  denied  { connect } for  pid=7881 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  208.762345][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[  209.906308][ T7888] openvswitch: netlink: Key type 233 is out of range max 32
[  210.217505][   T30] audit: type=1400 audit(2000000018.211:602): avc:  denied  { sqpoll } for  pid=7893 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  211.059877][   T30] audit: type=1400 audit(2000000019.051:603): avc:  denied  { append } for  pid=7911 comm="syz.4.519" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  211.356421][ T7914] evm: overlay not supported
[  211.389941][  T821] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  211.560497][  T821] usb 4-1: Using ep0 maxpacket: 32
[  211.567317][  T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.599667][  T821] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  211.745966][  T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.754202][  T821] usb 4-1: Product: syz
[  211.758465][  T821] usb 4-1: Manufacturer: syz
[  211.763140][  T821] usb 4-1: SerialNumber: syz
[  211.852058][  T821] usb 4-1: config 0 descriptor??
[  211.872921][  T821] cdc_ether 4-1:0.0: Descriptor too short
[  211.882374][  T821] usb 4-1: unsupported MDLM descriptors
[  213.080723][  T804] usb 4-1: USB disconnect, device number 9
[  213.252933][   T30] audit: type=1400 audit(2000000021.195:604): avc:  denied  { name_connect } for  pid=7942 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  213.354625][  T821] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  213.572120][  T821] usb 5-1: Using ep0 maxpacket: 32
[  213.593285][  T821] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  213.638727][  T821] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  213.697287][  T821] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40
[  213.710617][  T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.721468][  T821] usb 5-1: Product: syz
[  213.729536][  T821] usb 5-1: Manufacturer: syz
[  213.734276][  T821] usb 5-1: SerialNumber: syz
[  213.914153][ T7959] Mount JFS Failure: -5
[  214.001618][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.068401][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.149602][  T821] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  214.192844][  T821] usb 5-1: unit 143 not found!
[  214.823015][  T821] usb 5-1: selecting invalid altsetting 1
[  214.873637][  T821] snd-usb-caiaq 5-1:1.2: can't set alt interface.
[  214.904109][  T821] usb 5-1: unable to init card! (ret=-5)
[  214.935317][  T821] snd-usb-caiaq 5-1:1.2: probe with driver snd-usb-caiaq failed with error -5
[  214.990933][  T821] usb 5-1: USB disconnect, device number 14
[  215.197122][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'.
[  215.523904][   T30] audit: type=1400 audit(2000000023.310:605): avc:  denied  { accept } for  pid=7973 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  216.328443][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  216.372367][ T7983] openvswitch: netlink: Key type 233 is out of range max 32
[  216.699000][    T9] usb 3-1: device descriptor read/64, error -71
[  216.933997][  T804] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  216.934669][  T821] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  216.966103][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  217.096075][  T804] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  217.106713][    T9] usb 3-1: device descriptor read/64, error -71
[  217.113471][  T804] usb 2-1: config 0 interface 0 has no altsetting 0
[  217.122744][  T804] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  217.132373][  T804] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  217.141743][  T804] usb 2-1: Product: syz
[  217.146098][  T804] usb 2-1: Manufacturer: syz
[  217.155068][   T30] audit: type=1400 audit(2000000024.854:606): avc:  denied  { create } for  pid=7990 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  217.174862][  T804] usb 2-1: SerialNumber: syz
[  217.186241][  T804] usb 2-1: config 0 descriptor??
[  217.197646][ T7985] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  217.207737][  T821] usb 5-1: config 27 has an invalid descriptor of length 205, skipping remainder of the config
[  217.211657][  T804] usb 2-1: selecting invalid altsetting 0
[  217.220722][   T30] audit: type=1400 audit(2000000024.854:607): avc:  denied  { ioctl } for  pid=7990 comm="syz.3.533" path="socket:[20791]" dev="sockfs" ino=20791 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  217.248752][  T821] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.255849][    T9] usb usb3-port1: attempt power cycle
[  217.261347][  T821] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.279290][  T821] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  217.290720][  T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.649031][  T821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  217.667958][ T5620] usb 2-1: USB disconnect, device number 6
[  217.692819][  T821] usb 5-1: invalid MIDI out EP 0
[  217.778258][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  217.800961][    T9] usb 3-1: device descriptor read/8, error -71
[  218.023078][  T821] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  218.041298][  T821] usb 5-1: USB disconnect, device number 15
[  218.153686][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'.
[  218.228128][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  218.261400][    T9] usb 3-1: device descriptor read/8, error -71
[  218.547711][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.590620][    T9] usb usb3-port1: unable to enumerate USB device
[  219.050009][ T5620] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  219.099513][ T8022] Scaler: =================  START STATUS  =================
[  219.116276][ T8022] Scaler: ==================  END STATUS  ==================
[  219.610528][ T5620] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  219.620213][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.636333][ T5620] usb 2-1: Product: syz
[  219.674365][ T5620] usb 2-1: Manufacturer: syz
[  219.679081][ T5620] usb 2-1: SerialNumber: syz
[  219.733878][ T5620] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.031683][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[  220.354066][  T821] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  220.639436][ T8037] openvswitch: netlink: Key type 233 is out of range max 32
[  221.248904][   T30] audit: type=1400 audit(2000000028.681:608): avc:  denied  { mount } for  pid=8043 comm="syz.2.556" name="/" dev="ramfs" ino=19779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  221.306349][   T30] audit: type=1400 audit(2000000028.728:609): avc:  denied  { map } for  pid=8043 comm="syz.2.556" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  221.422558][   T30] audit: type=1400 audit(2000000028.728:610): avc:  denied  { write execute } for  pid=8043 comm="syz.2.556" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  221.432986][    T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  221.529464][  T821] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  221.578266][   T30] audit: type=1400 audit(2000000028.971:611): avc:  denied  { read write } for  pid=8009 comm="syz.1.546" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  221.633030][  T821] ath9k_htc: Failed to initialize the device
[  221.913299][   T30] audit: type=1400 audit(2000000028.990:612): avc:  denied  { open } for  pid=8009 comm="syz.1.546" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  221.948934][   T30] audit: type=1400 audit(2000000029.121:613): avc:  denied  { write } for  pid=8009 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  222.114463][  T821] usb 2-1: ath9k_htc: USB layer deinitialized
[  222.166068][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  222.183028][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.209350][    T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  222.234008][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.281558][    T9] usb 1-1: config 0 descriptor??
[  222.768530][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  222.886850][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  222.909784][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  222.939111][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  223.173018][ T5620] usb 2-1: USB disconnect, device number 7
[  223.185637][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  223.319059][    T9] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  223.338379][    T9] elan 0003:04F3:0755.0003: failed to start in urb: -90
[  223.351321][    T9] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  223.371999][    T9] usb 1-1: USB disconnect, device number 12
[  223.405808][ T8062] syz.4.559 (8062): drop_caches: 2
[  223.686623][ T8065] fido_id[8065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  223.869329][ T5620] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  224.042003][ T5620] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  224.070724][ T5620] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  224.097900][ T5620] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  224.130671][ T5620] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  224.141787][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.244191][ T5620] usb 2-1: Product: syz
[  224.260327][ T5620] usb 2-1: Manufacturer: syz
[  224.268257][ T5620] usb 2-1: SerialNumber: syz
[  224.542660][ T8064] comedi comedi0: reset error (fatal)
[  224.740982][ T8066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  224.771413][ T8066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  225.076137][   T30] audit: type=1400 audit(2000000032.265:614): avc:  denied  { bind } for  pid=8083 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  225.293691][ T8089] xt_time: invalid argument - start or stop time greater than 23:59:59
[  225.410011][ T5620] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  225.501255][ T5620] cdc_ncm 2-1:1.0: bind() failure
[  225.811406][ T5620] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  225.862943][ T5620] cdc_ncm 2-1:1.1: bind() failure
[  226.611355][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'.
[  226.946651][ T5711] usb 2-1: USB disconnect, device number 8
[  227.162814][   T30] audit: type=1400 audit(2000000034.221:615): avc:  denied  { bind } for  pid=8113 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  227.184449][   T30] audit: type=1400 audit(2000000034.249:616): avc:  denied  { setopt } for  pid=8113 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  228.355896][ T8118] openvswitch: netlink: Key type 233 is out of range max 32
[  228.691520][ T8132] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  228.724462][ T8132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8132 comm=syz.2.577
[  229.456486][ T8138] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.767786][   T30] audit: type=1400 audit(2000000037.599:617): avc:  denied  { write } for  pid=8151 comm="syz.1.583" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  231.418321][   T30] audit: type=1400 audit(2000000038.208:618): avc:  denied  { map } for  pid=8156 comm="syz.2.585" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  231.466680][   T30] audit: type=1400 audit(2000000038.208:619): avc:  denied  { execute } for  pid=8156 comm="syz.2.585" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  231.869003][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'.
[  232.368326][ T8173] syz.0.587 (8173): drop_caches: 2
[  232.757024][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'.
[  233.453290][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'.
[  234.151917][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.589'.
[  234.221604][   T30] audit: type=1400 audit(2000000040.828:620): avc:  denied  { read write } for  pid=8190 comm="syz.1.589" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  234.327162][   T30] audit: type=1400 audit(2000000040.828:621): avc:  denied  { open } for  pid=8190 comm="syz.1.589" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  234.381414][ T8202] openvswitch: netlink: Key type 233 is out of range max 32
[  234.754589][ T8196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8196 comm=syz.1.589
[  235.388804][ T5725] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  235.575388][ T5725] usb 4-1: Using ep0 maxpacket: 16
[  235.807058][ T5620] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  235.860508][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short
[  235.882477][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.906410][ T5725] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  235.918018][ T5725] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  235.938065][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.955210][ T5725] usb 4-1: Product: syz
[  235.963074][ T5725] usb 4-1: Manufacturer: syz
[  235.973847][ T5725] usb 4-1: SerialNumber: syz
[  236.032128][ T5620] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.043532][ T5620] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  236.053850][ T5620] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.077605][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.105923][ T8215] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  236.182472][ T5620] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  236.327468][ T5725] usb 4-1: USB disconnect, device number 10
[  236.759175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  237.068292][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'.
[  237.488911][ T5346] usb 2-1: USB disconnect, device number 9
[  237.574246][   T30] audit: type=1400 audit(2000000043.963:622): avc:  denied  { map } for  pid=8254 comm="syz.4.605" path="socket:[20292]" dev="sockfs" ino=20292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  237.598983][   T30] audit: type=1400 audit(2000000043.963:623): avc:  denied  { read accept } for  pid=8254 comm="syz.4.605" path="socket:[20292]" dev="sockfs" ino=20292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  237.845822][   T30] audit: type=1400 audit(2000000044.215:624): avc:  denied  { create } for  pid=8254 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  238.466398][ T5718] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  238.498439][ T5620] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  238.627269][ T5718] usb 4-1: Using ep0 maxpacket: 32
[  238.656143][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short
[  238.666104][ T5620] usb 3-1: device descriptor read/64, error -71
[  239.053748][ T5718] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  239.072241][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.083925][ T5718] usb 4-1: Product: syz
[  239.109860][ T5718] usb 4-1: Manufacturer: syz
[  239.116473][ T5718] usb 4-1: SerialNumber: syz
[  239.171917][ T5620] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  239.572084][ T5620] usb 3-1: device descriptor read/64, error -71
[  239.639516][ T5718] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  239.660107][   T30] audit: type=1400 audit(2000000045.919:625): avc:  denied  { read } for  pid=8284 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  239.684308][ T5718] usb 4-1: unit 37 not found!
[  239.690411][ T5718] usb 4-1: unit 0 not found!
[  239.731410][ T5620] usb usb3-port1: attempt power cycle
[  239.880984][ T5718] usb 4-1: USB disconnect, device number 11
[  239.909637][  T821] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  240.112789][  T821] usb 1-1: Using ep0 maxpacket: 8
[  240.125121][ T5620] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  240.166953][  T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.200167][ T5620] usb 3-1: device descriptor read/8, error -71
[  240.212613][  T821] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68
[  240.232640][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.386455][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'.
[  240.702624][  T821] usb 1-1: Product: syz
[  240.712120][  T821] usb 1-1: Manufacturer: syz
[  240.716793][  T821] usb 1-1: SerialNumber: syz
[  240.726200][  T821] usb 1-1: config 0 descriptor??
[  240.739669][  T821] kalmia 1-1:0.0: probe with driver kalmia failed with error -22
[  240.824564][ T8301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  240.838914][ T5620] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  240.861625][ T8301] syzkaller0: entered promiscuous mode
[  240.871397][ T5620] usb 3-1: device descriptor read/8, error -71
[  240.871662][ T8301] syzkaller0: entered allmulticast mode
[  240.962934][ T5718] usb 1-1: USB disconnect, device number 13
[  240.999518][ T5620] usb usb3-port1: unable to enumerate USB device
[  241.137238][ T8309] openvswitch: netlink: Key type 233 is out of range max 32
[  241.650542][ T8319] openvswitch: netlink: Key type 233 is out of range max 32
[  241.843210][ T5718] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  242.028450][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  242.125678][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  242.247081][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'.
[  242.554557][ T5718] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.569848][ T5718] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  242.578935][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  242.598736][ T5718] usb 2-1: Product: syz
[  242.618479][ T5718] usb 2-1: Manufacturer: syz
[  242.638999][ T5718] usb 2-1: SerialNumber: syz
[  242.716146][   T30] audit: type=1400 audit(2000000048.773:626): avc:  denied  { ioctl } for  pid=8316 comm="syz.3.624" path="socket:[20411]" dev="sockfs" ino=20411 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  242.810317][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  243.355650][   T30] audit: type=1400 audit(2000000049.372:627): avc:  denied  { create } for  pid=8334 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  243.401763][ T5718] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  243.431749][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  243.443543][   T30] audit: type=1326 audit(2000000049.447:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  243.444286][ T5718] usb 2-1: USB disconnect, device number 10
[  243.732007][   T30] audit: type=1326 audit(2000000049.447:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  243.954791][ T8349] openvswitch: netlink: Key type 233 is out of range max 32
[  244.299786][ T8350] openvswitch: netlink: Key type 233 is out of range max 32
[  244.329278][ T5718] usblp0: removed
[  244.339701][   T30] audit: type=1326 audit(2000000049.484:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  244.774853][   T30] audit: type=1326 audit(2000000049.484:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  244.810047][   T30] audit: type=1326 audit(2000000049.493:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  244.839989][   T30] audit: type=1326 audit(2000000049.493:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  244.872791][   T30] audit: type=1326 audit(2000000049.493:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  244.907261][ T8359] FAULT_INJECTION: forcing a failure.
[  244.907261][ T8359] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.975859][ T8359] CPU: 1 UID: 0 PID: 8359 Comm: syz.0.638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.975889][ T8359] Tainted: [L]=SOFTLOCKUP
[  244.975895][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  244.975905][ T8359] Call Trace:
[  244.975911][ T8359]  <TASK>
[  244.975918][ T8359]  dump_stack_lvl+0x100/0x190
[  244.975946][ T8359]  should_fail_ex.cold+0x5/0xa
[  244.975972][ T8359]  _copy_from_user+0x2e/0xd0
[  244.976001][ T8359]  __sys_bpf+0x243/0x4b90
[  244.976023][ T8359]  ? __pfx___sys_bpf+0x10/0x10
[  244.976038][ T8359]  ? proc_fail_nth_write+0x9f/0x220
[  244.976059][ T8359]  ? find_held_lock+0x2b/0x80
[  244.976082][ T8359]  ? find_held_lock+0x2b/0x80
[  244.976098][ T8359]  ? ksys_write+0x190/0x250
[  244.976118][ T8359]  ? ksys_write+0x190/0x250
[  244.976142][ T8359]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  244.976170][ T8359]  ? kernel_write+0x613/0x6c0
[  244.976190][ T8359]  ? __fget_files+0x215/0x3d0
[  244.976226][ T8359]  ? fput+0x79/0x100
[  244.976251][ T8359]  ? ksys_write+0x1ac/0x250
[  244.976270][ T8359]  ? __pfx_ksys_write+0x10/0x10
[  244.976293][ T8359]  __x64_sys_bpf+0x7b/0xc0
[  244.976309][ T8359]  ? lockdep_hardirqs_on+0x78/0x100
[  244.976336][ T8359]  do_syscall_64+0x10b/0x860
[  244.976369][ T8359]  ? clear_bhb_loop+0x40/0x90
[  244.976390][ T8359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.976408][ T8359] RIP: 0033:0x7f19e839ce59
[  244.976424][ T8359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.976440][ T8359] RSP: 002b:00007f19e932a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  244.976460][ T8359] RAX: ffffffffffffffda RBX: 00007f19e8615fa0 RCX: 00007f19e839ce59
[  244.976472][ T8359] RDX: 000000000000000c RSI: 0000200000000880 RDI: 0000000000000023
[  244.976482][ T8359] RBP: 00007f19e932a090 R08: 0000000000000000 R09: 0000000000000000
[  244.976492][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.976503][ T8359] R13: 00007f19e8616038 R14: 00007f19e8615fa0 R15: 00007ffd4225a778
[  244.976527][ T8359]  </TASK>
[  245.212408][ T8365] syzkaller0: entered promiscuous mode
[  245.217912][ T8365] syzkaller0: entered allmulticast mode
[  245.227186][ T8365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=70 sclass=netlink_route_socket pid=8365 comm=syz.2.640
[  247.720538][   T30] audit: type=1326 audit(2000000049.493:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  247.747355][   T30] audit: type=1326 audit(2000000049.493:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  247.776143][   T30] audit: type=1326 audit(2000000049.493:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  247.802709][   T30] audit: type=1326 audit(2000000049.493:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  247.918571][   T30] audit: type=1326 audit(2000000049.493:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  248.078813][ T8366] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  248.110595][   T30] audit: type=1326 audit(2000000049.493:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  248.156504][   T30] audit: type=1326 audit(2000000049.493:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  248.228915][   T30] audit: type=1326 audit(2000000049.493:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  248.304819][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'.
[  248.394373][   T30] audit: type=1326 audit(2000000049.493:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  248.394426][   T30] audit: type=1326 audit(2000000049.493:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.632" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e839ce59 code=0x7ffc0000
[  249.629264][ T8401] openvswitch: netlink: Key type 233 is out of range max 32
[  251.427496][ T8423] gfs2: error -5 reading superblock
[  251.650558][ T8426] FAULT_INJECTION: forcing a failure.
[  251.650558][ T8426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.664390][ T8426] CPU: 0 UID: 0 PID: 8426 Comm: syz.3.657 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.664407][ T8426] Tainted: [L]=SOFTLOCKUP
[  251.664411][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  251.664417][ T8426] Call Trace:
[  251.664420][ T8426]  <TASK>
[  251.664424][ T8426]  dump_stack_lvl+0x100/0x190
[  251.664442][ T8426]  should_fail_ex.cold+0x5/0xa
[  251.664457][ T8426]  _copy_to_user+0x32/0xd0
[  251.664474][ T8426]  simple_read_from_buffer+0xcb/0x170
[  251.664490][ T8426]  proc_fail_nth_read+0x1af/0x230
[  251.664503][ T8426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  251.664515][ T8426]  ? rw_verify_area+0xce/0x6d0
[  251.664526][ T8426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  251.664537][ T8426]  vfs_read+0x1e4/0xb30
[  251.664550][ T8426]  ? __pfx_vfs_read+0x10/0x10
[  251.664562][ T8426]  ? __fget_files+0x215/0x3d0
[  251.664579][ T8426]  ? __fget_files+0x21f/0x3d0
[  251.664596][ T8426]  ksys_read+0x12a/0x250
[  251.664608][ T8426]  ? __pfx_ksys_read+0x10/0x10
[  251.664620][ T8426]  ? rcu_is_watching+0x12/0xc0
[  251.664639][ T8426]  do_syscall_64+0x10b/0x860
[  251.664654][ T8426]  ? clear_bhb_loop+0x40/0x90
[  251.664668][ T8426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.664678][ T8426] RIP: 0033:0x7f7b8055d68e
[  251.664687][ T8426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  251.664697][ T8426] RSP: 002b:00007f7b814cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  251.664708][ T8426] RAX: ffffffffffffffda RBX: 00007f7b814ce6c0 RCX: 00007f7b8055d68e
[  251.664714][ T8426] RDX: 000000000000000f RSI: 00007f7b814ce0a0 RDI: 0000000000000005
[  251.664720][ T8426] RBP: 00007f7b814ce090 R08: 0000000000000000 R09: 0000000000000000
[  251.664726][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.664732][ T8426] R13: 00007f7b80816038 R14: 00007f7b80815fa0 R15: 00007fff2656f1a8
[  251.664745][ T8426]  </TASK>
[  252.302469][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  252.740134][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  252.741085][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  252.757766][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  253.063616][ T5711] usb 1-1: Using ep0 maxpacket: 32
[  253.068949][ T8446] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  253.096409][ T8442] openvswitch: netlink: Key type 233 is out of range max 32
[  253.104930][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short
[  253.121172][ T5711] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  253.144839][ T5711] usb 1-1: config 128 has an invalid descriptor of length 192, skipping remainder of the config
[  253.176756][ T5711] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  253.202543][ T5711] usb 1-1: config 128 has no interface number 0
[  253.208874][ T5711] usb 1-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  253.237352][ T5711] usb 1-1: config 128 interface 127 has no altsetting 0
[  253.258774][ T5711] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  253.268313][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.308978][ T5711] usb 1-1: Product: syz
[  253.330454][ T5711] usb 1-1: Manufacturer: syz
[  254.343241][ T5711] usb 1-1: SerialNumber: syz
[  255.384074][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  255.384085][   T30] audit: type=1400 audit(2000000060.639:663): avc:  denied  { read } for  pid=8461 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  255.453263][ T8464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.668'.
[  255.485467][   T30] audit: type=1400 audit(2000000060.714:664): avc:  denied  { write } for  pid=8461 comm="syz.3.669" path="socket:[22013]" dev="sockfs" ino=22013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  255.523578][ T5711] usb 1-1: USB disconnect, device number 14
[  255.659126][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.521299][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[  257.335357][ T8491] FAULT_INJECTION: forcing a failure.
[  257.335357][ T8491] name failslab, interval 1, probability 0, space 0, times 0
[  257.349414][ T8491] CPU: 0 UID: 0 PID: 8491 Comm: syz.2.675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  257.349445][ T8491] Tainted: [L]=SOFTLOCKUP
[  257.349451][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  257.349462][ T8491] Call Trace:
[  257.349468][ T8491]  <TASK>
[  257.349475][ T8491]  dump_stack_lvl+0x100/0x190
[  257.349503][ T8491]  should_fail_ex.cold+0x5/0xa
[  257.349528][ T8491]  should_failslab+0xc2/0x120
[  257.349548][ T8491]  __kvmalloc_node_noprof+0xfa/0xa00
[  257.349565][ T8491]  ? __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  257.349594][ T8491]  __kvm_mmu_topup_memory_cache+0x455/0x5f0
[  257.349618][ T8491]  ? find_held_lock+0x2b/0x80
[  257.349637][ T8491]  mmu_topup_memory_caches+0x25/0x170
[  257.349665][ T8491]  kvm_mmu_load+0xd6/0x23e0
[  257.349688][ T8491]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  257.349707][ T8491]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  257.349728][ T8491]  ? __pfx_kvm_mmu_load+0x10/0x10
[  257.349751][ T8491]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  257.349772][ T8491]  ? kvm_check_and_inject_events+0x961/0x1070
[  257.349803][ T8491]  vcpu_run+0x39f4/0x5ca0
[  257.349838][ T8491]  ? __pfx_vcpu_run+0x10/0x10
[  257.349871][ T8491]  ? rcu_is_watching+0x12/0xc0
[  257.349901][ T8491]  ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  257.349928][ T8491]  kvm_arch_vcpu_ioctl_run+0x5b6/0x1890
[  257.349960][ T8491]  kvm_vcpu_ioctl+0x730/0x1720
[  257.349981][ T8491]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  257.350001][ T8491]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  257.350024][ T8491]  ? do_vfs_ioctl+0x226/0x13e0
[  257.350043][ T8491]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  257.350063][ T8491]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  257.350097][ T8491]  ? __fget_files+0x215/0x3d0
[  257.350118][ T8491]  ? hook_file_ioctl_common+0x149/0x410
[  257.350148][ T8491]  ? selinux_file_ioctl+0x13b/0x290
[  257.350171][ T8491]  ? selinux_file_ioctl+0xb6/0x290
[  257.350197][ T8491]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  257.350218][ T8491]  __x64_sys_ioctl+0x18e/0x210
[  257.350239][ T8491]  do_syscall_64+0x10b/0x860
[  257.350265][ T8491]  ? clear_bhb_loop+0x40/0x90
[  257.350286][ T8491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.350304][ T8491] RIP: 0033:0x7f458d19ce59
[  257.350320][ T8491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.350337][ T8491] RSP: 002b:00007f458e058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  257.350355][ T8491] RAX: ffffffffffffffda RBX: 00007f458d415fa0 RCX: 00007f458d19ce59
[  257.350366][ T8491] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  257.350376][ T8491] RBP: 00007f458e058090 R08: 0000000000000000 R09: 0000000000000000
[  257.350387][ T8491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.350397][ T8491] R13: 00007f458d416038 R14: 00007f458d415fa0 R15: 00007ffce829c638
[  257.350422][ T8491]  </TASK>
[  257.647680][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  257.853045][   T30] audit: type=1400 audit(2000000062.950:665): avc:  denied  { wake_alarm } for  pid=8496 comm="syz.0.677" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  258.303653][ T8504] syz.3.678 (8504): drop_caches: 2
[  258.318281][   T30] audit: type=1400 audit(2000000063.371:666): avc:  denied  { write } for  pid=8507 comm="syz.1.680" path="socket:[22216]" dev="sockfs" ino=22216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  258.364873][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.680'.
[  258.862980][   T30] audit: type=1400 audit(2000000063.877:667): avc:  denied  { bind } for  pid=8513 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  258.870997][ T8500] Scaler: =================  START STATUS  =================
[  258.891235][ T8500] Scaler: ==================  END STATUS  ==================
[  258.908889][  T804] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  258.922592][   T30] audit: type=1400 audit(2000000063.877:668): avc:  denied  { listen } for  pid=8513 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  259.009973][   T30] audit: type=1400 audit(2000000063.886:669): avc:  denied  { read } for  pid=8513 comm="syz.4.682" path="socket:[22267]" dev="sockfs" ino=22267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  259.081754][  T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.092929][  T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.133448][  T804] usb 1-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00
[  259.158845][  T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.196977][  T804] usb 1-1: config 0 descriptor??
[  259.496537][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.521561][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.816140][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.859937][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.880078][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.903044][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.927086][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.947575][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.967893][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  259.988254][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  260.010177][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  260.031603][  T804] wacom 0003:056A:00B9.0004: unknown main item tag 0x0
[  260.063708][  T804] usb 1-1: USB disconnect, device number 15
[  260.661565][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  260.717286][ T8535] openvswitch: netlink: Key type 233 is out of range max 32
[  261.035354][   T24] usb 2-1: Using ep0 maxpacket: 16
[  261.059898][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  261.082118][   T24] usb 2-1: config 3 has an invalid interface number: 16 but max is 0
[  261.150155][   T24] usb 2-1: config 3 has no interface number 0
[  261.189527][   T24] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=e2.df
[  261.213067][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.371269][   T24] usb 2-1: Product: syz
[  261.390768][   T24] usb 2-1: SerialNumber: syz
[  261.476643][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'.
[  261.952742][  T821] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  262.194124][  T821] usb 1-1: unable to get BOS descriptor or descriptor too short
[  262.223302][  T821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  262.243178][ T5718] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  262.252585][  T821] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  262.262885][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.272643][  T821] usb 1-1: Product: syz
[  262.284778][  T821] usb 1-1: Manufacturer: syz
[  262.290352][  T821] usb 1-1: SerialNumber: syz
[  262.358949][   T50] Bluetooth: hci1: SCO packet for unknown connection handle 2249
[  262.373343][ T8555] ALSA: mixer_oss: invalid OSS volume ''
[  262.620648][ T5718] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.690020][ T5718] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  262.713039][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.729674][ T5718] usb 3-1: Product: syz
[  262.734399][ T5718] usb 3-1: Manufacturer: syz
[  262.740335][ T5718] usb 3-1: SerialNumber: syz
[  262.761574][   T24] usb 2-1: No union descriptors
[  262.774084][   T24] usb 2-1: unsupported MDLM descriptors
[  262.841864][   T24] usb 2-1: USB disconnect, device number 11
[  262.956316][   T30] audit: type=1400 audit(2000000067.713:670): avc:  denied  { write } for  pid=8559 comm="syz.1.693" path="socket:[22404]" dev="sockfs" ino=22404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  263.120536][   T30] audit: type=1400 audit(2000000067.872:671): avc:  denied  { accept } for  pid=8563 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  263.265937][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'.
[  263.341822][ T8567] can0: slcan on ttyS3.
[  263.804666][   T30] audit: type=1400 audit(2000000068.509:672): avc:  denied  { read } for  pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  263.863526][ T8565] can0 (unregistered): slcan off ttyS3.
[  263.865029][   T50] Bluetooth: hci2: unexpected event for opcode 0x4889
[  263.990150][   T30] audit: type=1400 audit(2000000068.687:673): avc:  denied  { remount } for  pid=8576 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  264.018759][ T5718] cdc_ncm 3-1:1.0: bind() failure
[  264.057195][ T5718] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  264.068803][ T5718] cdc_ncm 3-1:1.1: bind() failure
[  264.099771][ T5718] usb 3-1: USB disconnect, device number 21
[  264.261779][ T8582] openvswitch: netlink: Key type 233 is out of range max 32
[  264.538755][  T821] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 4
[  264.603389][  T821] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  264.626599][  T821] usb 1-1: failed to enable PITCH for EP 0x1
[  264.633316][  T821] usb 1-1: unit 2 not found!
[  264.648670][  T821] usb 1-1: unit 0 not found!
[  264.846805][ T8587] openvswitch: netlink: Key type 233 is out of range max 32
[  265.185039][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'.
[  266.087864][  T821] usb 1-1: USB disconnect, device number 16
[  266.615041][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[  266.646849][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  266.795324][    T9] usb 2-1: device descriptor read/64, error -71
[  266.906887][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.710'.
[  266.972425][   T30] audit: type=1400 audit(2000000071.475:674): avc:  denied  { read } for  pid=8621 comm="syz.4.710" path="socket:[23601]" dev="sockfs" ino=23601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  267.039786][ T8627] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  267.083816][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  267.233312][    T9] usb 2-1: device descriptor read/64, error -71
[  267.361706][    T9] usb usb2-port1: attempt power cycle
[  267.537262][ T8638] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.819640][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  267.853624][    T9] usb 2-1: device descriptor read/8, error -71
[  268.027729][   T30] audit: type=1400 audit(2000000072.467:675): avc:  denied  { map } for  pid=8636 comm="syz.3.715" path="socket:[23543]" dev="sockfs" ino=23543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  268.053856][   T30] audit: type=1400 audit(2000000072.467:676): avc:  denied  { read } for  pid=8636 comm="syz.3.715" path="socket:[23543]" dev="sockfs" ino=23543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  268.110752][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  268.142049][    T9] usb 2-1: device descriptor read/8, error -71
[  268.194555][ T8646] binder: 8645:8646 ioctl c018620c 200000000180 returned -1
[  268.215863][  T821] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  268.262409][    T9] usb usb2-port1: unable to enumerate USB device
[  268.331610][ T8650] tipc: Failed to obtain node identity
[  268.342728][ T8650] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[  268.376978][  T821] usb 3-1: Using ep0 maxpacket: 16
[  268.390363][  T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.401740][  T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.415258][  T821] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  268.424824][  T821] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  268.434166][  T821] usb 3-1: Manufacturer: syz
[  268.527612][  T821] usb 3-1: config 0 descriptor??
[  268.597003][   T30] audit: type=1400 audit(2000000072.991:677): avc:  denied  { read } for  pid=8657 comm="syz.3.721" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  268.628102][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'.
[  268.835605][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  269.043029][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  269.057716][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.068363][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  269.077699][   T24] usb 1-1: config 1 has no interface number 1
[  269.080986][ T8642] netlink: 'syz.2.717': attribute type 1 has an invalid length.
[  269.084387][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  269.104817][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  269.112482][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2
[  269.122825][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  269.140291][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.160472][   T24] usb 1-1: Product: syz
[  269.164794][   T24] usb 1-1: Manufacturer: syz
[  269.180923][   T24] usb 1-1: SerialNumber: syz
[  269.686219][   T30] audit: type=1400 audit(2000000074.011:678): avc:  denied  { ioctl } for  pid=8670 comm="syz.1.723" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  270.339977][ T8683] xt_hashlimit: size too large, truncated to 1048576
[  270.439577][   T30] audit: type=1400 audit(2000000074.610:679): avc:  denied  { ioctl } for  pid=8676 comm="syz.1.725" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  270.654581][ T8686] FAULT_INJECTION: forcing a failure.
[  270.654581][ T8686] name failslab, interval 1, probability 0, space 0, times 0
[  270.667269][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.4.727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  270.667299][ T8686] Tainted: [L]=SOFTLOCKUP
[  270.667304][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  270.667315][ T8686] Call Trace:
[  270.667321][ T8686]  <TASK>
[  270.667328][ T8686]  dump_stack_lvl+0x100/0x190
[  270.667355][ T8686]  should_fail_ex.cold+0x5/0xa
[  270.667380][ T8686]  ? tomoyo_realpath_from_path+0xb6/0x690
[  270.667405][ T8686]  should_failslab+0xc2/0x120
[  270.667426][ T8686]  __kmalloc_noprof+0xe0/0x850
[  270.667451][ T8686]  ? kfree+0x1dd/0x6c0
[  270.667479][ T8686]  tomoyo_realpath_from_path+0xb6/0x690
[  270.667512][ T8686]  tomoyo_path_number_perm+0x23c/0x580
[  270.667533][ T8686]  ? tomoyo_path_number_perm+0x22e/0x580
[  270.667557][ T8686]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  270.667604][ T8686]  ? find_held_lock+0x2b/0x80
[  270.667622][ T8686]  ? __fget_files+0x215/0x3d0
[  270.667644][ T8686]  ? hook_file_ioctl_common+0x149/0x410
[  270.667661][ T8686]  ? __fget_files+0x215/0x3d0
[  270.667686][ T8686]  ? __fget_files+0x21f/0x3d0
[  270.667719][ T8686]  security_file_ioctl+0xd3/0x230
[  270.667744][ T8686]  __x64_sys_ioctl+0xb7/0x210
[  270.667766][ T8686]  do_syscall_64+0x10b/0x860
[  270.667792][ T8686]  ? clear_bhb_loop+0x40/0x90
[  270.667815][ T8686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.667832][ T8686] RIP: 0033:0x7fa42819ce59
[  270.667847][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.667864][ T8686] RSP: 002b:00007fa42908d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.667881][ T8686] RAX: ffffffffffffffda RBX: 00007fa428416090 RCX: 00007fa42819ce59
[  270.667893][ T8686] RDX: 00002000000000c0 RSI: 000000004020565a RDI: 0000000000000005
[  270.667909][ T8686] RBP: 00007fa42908d090 R08: 0000000000000000 R09: 0000000000000000
[  270.667920][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.667930][ T8686] R13: 00007fa428416128 R14: 00007fa428416090 R15: 00007ffc49773168
[  270.667955][ T8686]  </TASK>
[  270.667963][ T8686] ERROR: Out of memory at tomoyo_realpath_from_path.
[  270.988342][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  270.999737][ T8679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.726'.
[  271.180885][   T30] audit: type=1326 audit(2000000075.415:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e9b9ce59 code=0x7ffc0000
[  271.260475][   T30] audit: type=1326 audit(2000000075.415:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  271.287202][   T30] audit: type=1326 audit(2000000075.415:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  271.313756][   T30] audit: type=1326 audit(2000000075.415:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  271.343672][   T30] audit: type=1326 audit(2000000075.415:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  271.373537][   T30] audit: type=1326 audit(2000000075.415:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  271.373703][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'.
[  271.409424][ T5711] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  271.417678][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'.
[  271.427352][   T30] audit: type=1326 audit(2000000075.415:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  271.573230][ T5711] usb 4-1: config 0 has an invalid descriptor of length 249, skipping remainder of the config
[  271.578708][   T24] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc
[  271.583753][ T5711] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  271.583783][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0
[  271.583812][ T5711] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  271.583834][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.646652][ T5711] usb 4-1: config 0 descriptor??
[  271.705138][  T821] usbhid 3-1:0.0: can't add hid device: -71
[  271.711840][  T821] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  271.768107][  T821] usb 3-1: USB disconnect, device number 22
[  271.815640][   T24] usb 1-1: USB disconnect, device number 17
[  272.016908][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'.
[  272.370285][ T5711] usb 4-1: string descriptor 0 read error: -71
[  272.447537][ T5711] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  272.548629][ T5711] usb 4-1: USB disconnect, device number 12
[  272.980832][ T8715] Scaler: =================  START STATUS  =================
[  273.014429][ T8715] Scaler: ==================  END STATUS  ==================
[  273.057287][   T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  273.421940][   T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  273.451326][   T24] usb 4-1: config 0 has no interface number 0
[  273.476580][   T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12291, setting to 64
[  273.596079][   T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  273.605631][   T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  273.660991][   T24] usb 4-1: Product: syz
[  273.685161][   T24] usb 4-1: SerialNumber: syz
[  273.714662][   T24] usb 4-1: config 0 descriptor??
[  273.726740][ T8734] netlink: 'syz.2.741': attribute type 4 has an invalid length.
[  273.738460][   T24] cm109 4-1:0.8: invalid payload size 64, expected 4
[  273.762322][ T8734] netlink: 'syz.2.741': attribute type 4 has an invalid length.
[  273.771357][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9
[  273.944885][   T30] kauditd_printk_skb: 5943 callbacks suppressed
[  273.944900][   T30] audit: type=1326 audit(2000000077.998:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  273.982758][   T30] audit: type=1326 audit(2000000077.998:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  274.011279][   T30] audit: type=1326 audit(2000000077.998:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  274.040259][   T30] audit: type=1326 audit(2000000077.998:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  274.066924][   T30] audit: type=1326 audit(2000000078.007:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  274.094674][   T30] audit: type=1326 audit(2000000078.007:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  274.172462][   T30] audit: type=1326 audit(2000000078.007:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  274.204305][   T30] audit: type=1326 audit(2000000078.007:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  274.238496][ T8741] xt_hashlimit: size too large, truncated to 1048576
[  274.318782][   T30] audit: type=1326 audit(2000000078.007:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5e9b96bd7 code=0x7ffc0000
[  274.422941][   T30] audit: type=1326 audit(2000000078.007:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5e9b3e1d9 code=0x7ffc0000
[  274.542910][  T804] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  274.714809][  T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.729598][  T804] usb 1-1: config 0 has no interfaces?
[  274.744353][  T804] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  274.763560][  T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.806566][  T804] usb 1-1: Product: syz
[  274.812397][  T804] usb 1-1: Manufacturer: syz
[  274.817098][  T804] usb 1-1: SerialNumber: syz
[  274.826722][  T804] usb 1-1: config 0 descriptor??
[  275.282532][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.327528][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.353346][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  275.360344][    C1] ------------[ cut here ]------------
[  275.365981][    C1] URB ffff888073bc9b00 submitted while active
[  275.372035][    C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: syz.0.743/8741
[  275.382175][    C1] Modules linked in:
[  275.386183][    C1] CPU: 1 UID: 0 PID: 8741 Comm: syz.0.743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  275.396934][    C1] Tainted: [L]=SOFTLOCKUP
[  275.401252][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  275.411396][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  275.417032][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 3e b2 fa 48 8d 3d 16 57 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  275.436636][    C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010083
[  275.442695][    C1] RAX: 0000000000004220 RBX: ffff888073bc9b00 RCX: ffffc900022b2000
[  275.450740][    C1] RDX: 0000000000040000 RSI: ffff888073bc9b00 RDI: ffffffff90e4ca30
[  275.458709][    C1] RBP: ffff88807dc31740 R08: 0000000000000001 R09: 0000000000000000
[  275.466665][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000083
[  275.474629][    C1] R13: ffff8880551b4858 R14: 000000000000000f R15: 0000000000000000
[  275.482578][    C1] FS:  00007f19e932a6c0(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000
[  275.491501][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  275.498068][    C1] CR2: 00007f19e825e600 CR3: 0000000073fc9000 CR4: 00000000003526f0
[  275.506027][    C1] Call Trace:
[  275.509315][    C1]  <IRQ>
[  275.512155][    C1]  cm109_urb_irq_callback+0x473/0xa70
[  275.517529][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  275.522892][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  275.528088][    C1]  dummy_timer+0xda1/0x36c0
[  275.532625][    C1]  ? find_held_lock+0x2b/0x80
[  275.537309][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  275.543099][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  275.548713][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  275.554696][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  275.559631][    C1]  ? mark_held_locks+0x40/0x70
[  275.564376][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  275.570253][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  275.575181][    C1]  __hrtimer_run_queues+0x470/0xa00
[  275.580374][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  275.585480][    C1]  handle_softirqs+0x1ea/0xa00
[  275.590242][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  275.595518][    C1]  ? _raw_spin_unlock+0x28/0x50
[  275.600367][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  275.605991][    C1]  __irq_exit_rcu+0x162/0x210
[  275.610673][    C1]  irq_exit_rcu+0x9/0x30
[  275.614901][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  275.620524][    C1]  </IRQ>
[  275.623434][    C1]  <TASK>
[  275.626358][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  275.632326][    C1] RIP: 0010:__rcu_read_lock+0x0/0x70
[  275.637609][    C1] Code: fd ff ff 48 89 ef e8 af 85 89 00 e9 c0 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 51 6d 1e
[  275.657194][    C1] RSP: 0018:ffffc90004d2f340 EFLAGS: 00000246
[  275.663239][    C1] RAX: ffffc90004d2f708 RBX: 0000000000000001 RCX: ffffc90004d2f30c
[  275.671201][    C1] RDX: 1ffff920009a5e7e RSI: ffffffff827649c4 RDI: ffffc90004d2f3b8
[  275.679146][    C1] RBP: ffffc90004d2f400 R08: 0000000000000001 R09: 0000000000000007
[  275.687106][    C1] R10: 0000000000000200 R11: 0000000000017649 R12: ffffffff81f2f5f0
[  275.695063][    C1] R13: ffffc90004d2f3b8 R14: 0000000000000000 R15: ffff88802f532500
[  275.703026][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  275.709185][    C1]  ? kasan_save_track+0x14/0x30
[  275.714014][    C1]  unwind_next_frame+0xae/0x2090
[  275.719019][    C1]  ? kasan_save_track+0x14/0x30
[  275.723848][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  275.729976][    C1]  arch_stack_walk+0x94/0xf0
[  275.734552][    C1]  ? kasan_save_track+0x14/0x30
[  275.739380][    C1]  ? genl_family_rcv_msg_doit+0x269/0x300
[  275.745085][    C1]  stack_trace_save+0x8e/0xc0
[  275.749738][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  275.755093][    C1]  ? __lock_acquire+0x4a5/0x2630
[  275.760027][    C1]  kasan_save_stack+0x30/0x50
[  275.764692][    C1]  ? kasan_save_stack+0x30/0x50
[  275.769515][    C1]  ? kasan_save_track+0x14/0x30
[  275.774360][    C1]  kasan_save_track+0x14/0x30
[  275.779021][    C1]  kasan_save_free_info+0x3b/0x70
[  275.784052][    C1]  __kasan_slab_free+0x5f/0x80
[  275.788803][    C1]  ? genl_family_rcv_msg_doit+0x250/0x300
[  275.794508][    C1]  kfree+0x223/0x6c0
[  275.798394][    C1]  genl_family_rcv_msg_doit+0x269/0x300
[  275.804009][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  275.810056][    C1]  ? genl_get_cmd+0x3e7/0x760
[  275.814714][    C1]  ? __alloc_skb+0x185/0x710
[  275.819276][    C1]  ? netlink_alloc_large_skb+0x69/0x150
[  275.824803][    C1]  ? __radix_tree_lookup+0x217/0x2b0
[  275.830083][    C1]  genl_rcv_msg+0x560/0x800
[  275.834570][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  275.839567][    C1]  ? __pfx_ctrl_getfamily+0x10/0x10
[  275.844741][    C1]  ? __lock_acquire+0x4a5/0x2630
[  275.849658][    C1]  netlink_rcv_skb+0x159/0x420
[  275.854400][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  275.859395][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  275.864663][    C1]  ? netlink_deliver_tap+0x1ae/0xcc0
[  275.869928][    C1]  genl_rcv+0x28/0x40
[  275.873907][    C1]  netlink_unicast+0x585/0x850
[  275.878655][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  275.883921][    C1]  netlink_sendmsg+0x8b0/0xda0
[  275.888672][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.893942][    C1]  __sys_sendto+0x468/0x4b0
[  275.898418][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.903683][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  275.908708][    C1]  ? fd_install+0x223/0x580
[  275.913295][    C1]  ? __pfx___sys_socket+0x10/0x10
[  275.918313][    C1]  __x64_sys_sendto+0xe0/0x1c0
[  275.923322][    C1]  ? do_syscall_64+0x90/0x860
[  275.927987][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  275.933174][    C1]  do_syscall_64+0x10b/0x860
[  275.937753][    C1]  ? clear_bhb_loop+0x40/0x90
[  275.942508][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.948469][    C1] RIP: 0033:0x7f19e835d68e
[  275.952875][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  275.972465][    C1] RSP: 002b:00007f19e9328e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  275.980862][    C1] RAX: ffffffffffffffda RBX: 00007f19e932a6c0 RCX: 00007f19e835d68e
[  275.988814][    C1] RDX: 0000000000000020 RSI: 00007f19e9329000 RDI: 0000000000000007
[  275.996765][    C1] RBP: 0000000000000000 R08: 00007f19e9328f04 R09: 000000000000000c
[  276.004717][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  276.012669][    C1] R13: 00007f19e9328f58 R14: 00007f19e9329000 R15: 0000000000000000
[  276.020634][    C1]  </TASK>
[  276.023639][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  276.030902][    C1] CPU: 1 UID: 0 PID: 8741 Comm: syz.0.743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  276.041660][    C1] Tainted: [L]=SOFTLOCKUP
[  276.045971][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  276.056004][    C1] Call Trace:
[  276.059270][    C1]  <IRQ>
[  276.062095][    C1]  dump_stack_lvl+0x100/0x190
[  276.066764][    C1]  vpanic+0x552/0x970
[  276.070732][    C1]  ? __pfx_vpanic+0x10/0x10
[  276.075221][    C1]  panic+0xd1/0xe0
[  276.078935][    C1]  ? __pfx_panic+0x10/0x10
[  276.083343][    C1]  check_panic_on_warn.cold+0x19/0x34
[  276.088703][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  276.093714][    C1]  __warn.cold+0x191/0x328
[  276.098112][    C1]  __report_bug+0x296/0x3d0
[  276.102608][    C1]  ? usb_submit_urb+0x15fa/0x1910
[  276.107621][    C1]  ? __pfx___report_bug+0x10/0x10
[  276.112635][    C1]  ? __pfx_dev_printk_emit+0x10/0x10
[  276.117911][    C1]  ? kasan_save_stack+0x30/0x50
[  276.122751][    C1]  report_bug_entry+0xe1/0x290
[  276.127501][    C1]  ? usb_submit_urb+0x15fd/0x1910
[  276.132517][    C1]  handle_bug+0x1cd/0x2a0
[  276.136827][    C1]  exc_invalid_op+0x17/0x50
[  276.141310][    C1]  asm_exc_invalid_op+0x1a/0x20
[  276.146316][    C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  276.151937][    C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 3e b2 fa 48 8d 3d 16 57 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  276.171525][    C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010083
[  276.177578][    C1] RAX: 0000000000004220 RBX: ffff888073bc9b00 RCX: ffffc900022b2000
[  276.185538][    C1] RDX: 0000000000040000 RSI: ffff888073bc9b00 RDI: ffffffff90e4ca30
[  276.193503][    C1] RBP: ffff88807dc31740 R08: 0000000000000001 R09: 0000000000000000
[  276.201456][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000083
[  276.209407][    C1] R13: ffff8880551b4858 R14: 000000000000000f R15: 0000000000000000
[  276.217379][    C1]  cm109_urb_irq_callback+0x473/0xa70
[  276.222747][    C1]  __usb_hcd_giveback_urb+0x38d/0x610
[  276.228103][    C1]  usb_hcd_giveback_urb+0x3ca/0x4a0
[  276.233285][    C1]  dummy_timer+0xda1/0x36c0
[  276.237866][    C1]  ? find_held_lock+0x2b/0x80
[  276.242531][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  276.248324][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  276.253948][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  276.259920][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  276.264847][    C1]  ? mark_held_locks+0x40/0x70
[  276.269605][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  276.275397][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  276.280323][    C1]  __hrtimer_run_queues+0x470/0xa00
[  276.285525][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  276.290636][    C1]  handle_softirqs+0x1ea/0xa00
[  276.295394][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  276.300674][    C1]  ? _raw_spin_unlock+0x28/0x50
[  276.305512][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  276.311153][    C1]  __irq_exit_rcu+0x162/0x210
[  276.315819][    C1]  irq_exit_rcu+0x9/0x30
[  276.320050][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  276.325675][    C1]  </IRQ>
[  276.328594][    C1]  <TASK>
[  276.331508][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.337473][    C1] RIP: 0010:__rcu_read_lock+0x0/0x70
[  276.342758][    C1] Code: fd ff ff 48 89 ef e8 af 85 89 00 e9 c0 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 51 6d 1e
[  276.362350][    C1] RSP: 0018:ffffc90004d2f340 EFLAGS: 00000246
[  276.368406][    C1] RAX: ffffc90004d2f708 RBX: 0000000000000001 RCX: ffffc90004d2f30c
[  276.376446][    C1] RDX: 1ffff920009a5e7e RSI: ffffffff827649c4 RDI: ffffc90004d2f3b8
[  276.384410][    C1] RBP: ffffc90004d2f400 R08: 0000000000000001 R09: 0000000000000007
[  276.392363][    C1] R10: 0000000000000200 R11: 0000000000017649 R12: ffffffff81f2f5f0
[  276.400316][    C1] R13: ffffc90004d2f3b8 R14: 0000000000000000 R15: ffff88802f532500
[  276.408275][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  276.414423][    C1]  ? kasan_save_track+0x14/0x30
[  276.419268][    C1]  unwind_next_frame+0xae/0x2090
[  276.424198][    C1]  ? kasan_save_track+0x14/0x30
[  276.429041][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  276.435179][    C1]  arch_stack_walk+0x94/0xf0
[  276.439761][    C1]  ? kasan_save_track+0x14/0x30
[  276.444595][    C1]  ? genl_family_rcv_msg_doit+0x269/0x300
[  276.450318][    C1]  stack_trace_save+0x8e/0xc0
[  276.454978][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  276.460349][    C1]  ? __lock_acquire+0x4a5/0x2630
[  276.465279][    C1]  kasan_save_stack+0x30/0x50
[  276.469941][    C1]  ? kasan_save_stack+0x30/0x50
[  276.474790][    C1]  ? kasan_save_track+0x14/0x30
[  276.479651][    C1]  kasan_save_track+0x14/0x30
[  276.484326][    C1]  kasan_save_free_info+0x3b/0x70
[  276.489341][    C1]  __kasan_slab_free+0x5f/0x80
[  276.494091][    C1]  ? genl_family_rcv_msg_doit+0x250/0x300
[  276.499806][    C1]  kfree+0x223/0x6c0
[  276.503704][    C1]  genl_family_rcv_msg_doit+0x269/0x300
[  276.509261][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  276.515328][    C1]  ? genl_get_cmd+0x3e7/0x760
[  276.520008][    C1]  ? __alloc_skb+0x185/0x710
[  276.524590][    C1]  ? netlink_alloc_large_skb+0x69/0x150
[  276.530124][    C1]  ? __radix_tree_lookup+0x217/0x2b0
[  276.535401][    C1]  genl_rcv_msg+0x560/0x800
[  276.539891][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.544904][    C1]  ? __pfx_ctrl_getfamily+0x10/0x10
[  276.550106][    C1]  ? __lock_acquire+0x4a5/0x2630
[  276.555083][    C1]  netlink_rcv_skb+0x159/0x420
[  276.559861][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.564873][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.570159][    C1]  ? netlink_deliver_tap+0x1ae/0xcc0
[  276.575438][    C1]  genl_rcv+0x28/0x40
[  276.579428][    C1]  netlink_unicast+0x585/0x850
[  276.584189][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  276.589483][    C1]  netlink_sendmsg+0x8b0/0xda0
[  276.594252][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.599535][    C1]  __sys_sendto+0x468/0x4b0
[  276.604026][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.609317][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  276.614358][    C1]  ? fd_install+0x223/0x580
[  276.618896][    C1]  ? __pfx___sys_socket+0x10/0x10
[  276.623931][    C1]  __x64_sys_sendto+0xe0/0x1c0
[  276.628683][    C1]  ? do_syscall_64+0x90/0x860
[  276.633353][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  276.638648][    C1]  do_syscall_64+0x10b/0x860
[  276.643329][    C1]  ? clear_bhb_loop+0x40/0x90
[  276.647997][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.653876][    C1] RIP: 0033:0x7f19e835d68e
[  276.658289][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  276.677881][    C1] RSP: 002b:00007f19e9328e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  276.686368][    C1] RAX: ffffffffffffffda RBX: 00007f19e932a6c0 RCX: 00007f19e835d68e
[  276.694335][    C1] RDX: 0000000000000020 RSI: 00007f19e9329000 RDI: 0000000000000007
[  276.702289][    C1] RBP: 0000000000000000 R08: 00007f19e9328f04 R09: 000000000000000c
[  276.710242][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  276.718196][    C1] R13: 00007f19e9328f58 R14: 00007f19e9329000 R15: 0000000000000000
[  276.726249][    C1]  </TASK>
[  276.729637][    C1] Kernel Offset: disabled
[  276.733940][    C1] Rebooting in 86400 seconds..